Privacy Policy

WEBSITE PRIVACY NOTICE – Information notice pursuant to Article 13 of Regulation (EU) 2016/679.

bioviafood.de

Pursuant to Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR”), this page describes how personal data are processed. This privacy notice is provided pursuant to Article 13 GDPR. This notice does not apply to other third-party websites that may be accessed through links available on this website, for which no responsibility is assumed.

Personal data that may be processed

Personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity (Recitals 26, 27 and 30 GDPR).

Data relating to contracting parties/users

Browsing data

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and devices used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.

Data provided voluntarily

The optional, explicit and voluntary sending of messages to the contact addresses indicated on this website and/or the completion of data collection forms entails the subsequent acquisition of the sender’s address, which is necessary in order to respond to requests, as well as any other personal data entered.

Information concerning the processing of personal data carried out through Social Media platforms

Specific privacy notices: Specific privacy notices may be provided on pages of the Website in relation to particular services or data processing activities.

COOKIES

For information on cookies and other tracking systems, please refer to the cookie policy available in the footer of the website and at the following link.

PARTIES INVOLVED IN THE PROCESSING

Data Controller pursuant to Articles 4 and 24 of Regulation (EU) 2016/679 is ATLANTE SRL, with registered office at Via 2 Giugno 1946 n.8, 40033 Casalecchio di Reno (BO), represented by its legal representative pro tempore.

PURPOSE | LEGAL BASIS | RETENTION PERIOD | NATURE OF DATA PROVISION

PURPOSE OF PROCESSING		LEGAL BASIS	DATA RETENTION PERIOD	NATURE OF DATA PROVISION
A)	Browsing this website Activities strictly necessary for the operation of the website and the provision of the browsing service on the platform. The data necessary for the use of web services will also be processed for the purpose of: • obtaining statistical information on the use of the services (most visited pages, number of visitors by time slot or day, geographical areas of origin, etc.); • checking the proper operation of the services provided.	Legitimate interest \| rights of the data subject Article 6(f) and Recital 47 GDPR: processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.	For the duration of the browsing session and for a maximum of a further 7 days (without prejudice to any need for the Judicial Authority to investigate criminal offences).	Necessary to ensure browsing.
B)	Browsing analysis through the use of cookies and comparable technologies. Further information is available in the cookie policy.	For cookies and comparable technologies that are not technically necessary, processing is based on consent to the processing of personal data (Article 6(1)(a) and Recitals 42 and 43 GDPR). Consent is provided through the website banner and cookie policy.	Further information is available in the cookie policy.	Further information is available in the cookie policy.
C)	Contact request or request for information by telephone or through dedicated forms.	Contract – Pre-contractual measures Article 6(b) and Recital 44 GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take pre-contractual measures at the request of the data subject.	1 year	Necessary. Failure to provide the data will make it impossible to respond to the requests received.
D)	Direct marketing for sending advertising or direct sales material or for carrying out market research, satisfaction surveys, commercial and promotional communications and newsletters through automated means (email). Personal data will not be disclosed to third parties. For a complete list of group companies and partners, you may write to privacy@atlantesrl.it. In order to compare and, where appropriate, improve the results of automated communications, the Data Controller uses reporting systems. Through these reports, the Data Controller may learn, for example: the number of readers, openings and “clicks”; the devices and operating systems used to read the communication; details of individual users’ activities; details of emails sent, delivered or not delivered, and forwarded. All such data are used to compare and, where appropriate, improve the results of communications.	Consent of the data subject Article 6(a) and Recitals 42 and 43 GDPR: the data subject has given consent to the processing of their personal data for one or more specific purposes.	Until consent is withdrawn (opt-out).	Optional, but necessary in order to receive the newsletter service. Failure to provide the data will prevent the Data Controller from sending direct marketing communications.

F)	Non-automated profiling Personal data will be entered into company databases/CRM systems/platforms in order to carry out analyses and assessments and to divide data subjects into homogeneous groups based on specific characteristics relating to business activities, with the aim of improving service management and sending targeted promotional communications.	Consent of the data subject Article 6(a) and Recitals 42 and 43 GDPR: the data subject has given consent to the processing of their personal data for one or more specific purposes.	Until consent is withdrawn (opt-out) and in any event for no longer than 12 months.	Optional. Failure to provide the necessary data will make it impossible to carry out analyses and send targeted communications.

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

Personal data will be disclosed, also depending on the purposes set out in specific areas, to entities that will process the data as independent Data Controllers or Data Processors (Article 28 GDPR) and will be processed by natural persons (Article 29 GDPR) acting under the authority of the Data Controller and the Data Processors on the basis of specific instructions regarding the purposes and methods of processing, for specific purposes depending on the relevant area.

The data will be disclosed to recipients belonging to the following categories:

Entities based in Italy that provide services for the website and communication networks, including email, hosting and platform management;
Entities based in Italy with which the Data Controller has entered into agreements and, where required, subject to prior consent;
for direct marketing purposes, subject to prior consent, entities responsible for managing direct marketing activities;
for third-party marketing purposes, subject to prior consent, the categories of third parties listed above under the relevant specific purpose (list available upon request);
for the “Work with us” section, entities responsible for managing recruitment activities;
competent authorities for compliance with legal obligations and/or provisions issued by public authorities, upon request.

The list of Data Processors is available by writing to: privacy@atlantesrl.it

TRANSFER OF DATA TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANISATION

Personal data will not be transferred to countries outside the EEA. In particular, the data will be stored in Europe for website hosting, management, development and maintenance services. All third parties to whom the data may be disclosed are based in Europe.

AUTOMATED PROCESSING

Personal data will be processed using traditional manual, electronic and automated methods. No fully automated decision-making processes are carried out.

With regard to any profiling activities carried out on the basis of the data subject’s express consent, as indicated under the purposes above, such activities will involve the intervention of an operator who will create the data subject’s profile and analyse their habits and consumer choices, with the aim of improving the Data Controller’s commercial offering and services (non-automated profiling).

RIGHTS OF THE DATA SUBJECT

You may exercise the rights provided for under Articles 15 et seq. GDPR by contacting the Data Controller at the email address indicated above. You have the right, at any time, to request access to your personal data (Article 15), their rectification (Article 16), their erasure (Article 17), and the restriction of processing (Article 18). Pursuant to Article 19, the Data Controller shall communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed. The Data Controller shall inform the data subject about those recipients if the data subject so requests.

Where applicable, you have the right to data portability (Article 20), in which case your data will be provided to you in a structured, commonly used and machine-readable format. You have the right to object (Article 21), at any time, to processing based on legitimate interest. Where the legal basis for processing is consent, you have the right to withdraw the consent previously given at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To stop receiving automated direct marketing communications (email, instant messaging) or to withdraw consent to profiling (non-automated), please contact the Data Controller at: privacy@atlantesrl.it

If you believe that the processing of personal data carried out by the Data Controller is in breach of Regulation (EU) 2016/679, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place where the alleged infringement of the Regulation occurred (Garante Privacy https://www.garanteprivacy.it/), or to seek an appropriate judicial remedy.

Last updated: 28 July 2022

The Data Controller reserves the right to amend, update, add or remove parts of this privacy notice.

ATLANTE SRL