PERSONAL DATA PROCESSING NOTICE
in accordance with Article 13 of Regulation (EU) 2016/679 ("Privacy Policy")
This notice is provided in accordance with Regulation (EU) 2016/679 (hereinafter "Regulation" or "GDPR") and describes the methods of processing personal data of users who consult and use this website, accessible at https://www.salami.it/ (hereinafter also referred to as the "Site") or make use of the services offered through the Site. In accordance with the current European Regulation on the protection of personal data No. 679/2016 ("GDPR"), the collection and processing will always follow principles of lawfulness, fairness, and transparency.
Following the consultation of the Site, data related to the user accessing the site (referred to as the "data subject" as an identified or identifiable natural person) may be processed.
A. DATA CONTROLLER
The data controller is Salami s.p.a., represented by the Legal Representative pro tempore, VAT ID: 03236400366, with registered office at Via Emilia Ovest 1006, 41123 Modena, email: personale@salami.it (hereinafter the "Controller").
B. TYPES OF DATA COLLECTED, PURPOSES, LEGAL BASIS, AND STORAGE PERIOD.
1. Navigation Data
Personal Data may be collected autonomously by the Controller or through third parties. In this case, the computer systems and software procedures responsible for the operation of this Site acquire some technical-informational Personal Data from Users (e.g., IP address, type of browser used, operating system, domain name, and addresses of websites accessed or exited, etc.), the transmission of which is inherent to the normal functioning of the internet.
Purpose: such Data may be processed solely to obtain anonymous statistical information about the use of the site and/or to check its correct functioning.
Storage: This Data will be deleted immediately after processing.
Legal Basis: the processing is carried out based on the legitimate interest of the Controller in making the Site usable and ensuring secure navigation (Art. 6, para. 1, letter f). Express consent of the data subject is required solely for specific profiling activities (Art. 6, para. 1, letter a).
2. User Contacts via Email, Phone, Form Submission.
The optional, explicit, and voluntary sending of communications via email to the addresses indicated on this site involves the subsequent acquisition of the data communicated by the user (name, surname, email, and phone number), including consent to receive any responses to their requests.
In this case, providing the email address and other contact details is essential to use the service and receive a response to your request, and without them, we cannot proceed with the processing.
Purpose: the personal data provided is used solely to meet or respond to the transmitted requests and is communicated to third parties only if necessary for this purpose.
Storage: Data is stored for the period necessary for the completion of the request and in compliance with current regulations.
Legal Basis: the processing is carried out for the fulfillment of a contractual and pre-contractual obligation assumed by the Controller with the service (Art. 6, para. 1, letter b).
This site uses technical, tracking, and profiling cookies. For details, please refer to the specific cookie policy [insert link].
C. RECIPIENTS OF DATA
The personal data collected is processed by the personnel of the Controller, who act with proper authorization, based on specific instructions provided regarding the purposes and methods of the processing. Additionally, individuals designated as data processors under Art. 28 of the GDPR or sub-processors, whom the Controller uses to provide services and carry out activities within their competence, may be recipients of the data collected following the consultation of the Site or the use of services within the limits of their respective assignments. The relevant list can be requested from the Controller using the contact details in section A. If, through the services offered by the site, a data processor under Art. 28 of the GDPR or sub-processor is designated, the data will be communicated to their Data Controller and/or their data processor.
D. DATA TRANSFER
No transfer of personal data provided is foreseen abroad.
E. RIGHTS OF DATA SUBJECTS
Data subjects – natural persons identified or identifiable by the data – can exercise specific rights regarding data protection, listed below:
a) Right of access: the right to obtain confirmation from the Controller as to whether or not personal data is being processed and, if so, access to personal data and detailed information regarding the origin, purposes, categories of data processed, recipients of communication and/or transfer of data, and more;
b) Right to rectification: the right to obtain from the Controller the rectification of inaccurate personal data without undue delay, and the right to have incomplete personal data supplemented by providing a supplementary statement;
c) Right to erasure ("right to be forgotten"): the right to obtain from the Controller the erasure of personal data without undue delay in cases where: i. the necessary data is no longer required for the purposes of processing; ii. the consent on which the processing is based is revoked, and there is no other legal basis for processing; iii. personal data has been unlawfully processed; iv. personal data must be erased to comply with a legal obligation;
d) Right to object to processing: the right to object at any time to the processing of personal data based on the legitimate interest of the Controller;
e) Right to restriction: the right to obtain from the Controller the restriction of processing, in case the accuracy of personal data is contested (for the period necessary for the Controller to verify the accuracy of such personal data), if the processing is unlawful, and/or the data subject has objected to the processing;
f) Right to data portability: the right to receive personal data in a structured, commonly used, and machine-readable format and to transmit this data to another data controller, if technically feasible, only in cases where the processing is based on consent or a contract and only for data processed electronically;
g) Right to lodge a complaint with the supervisory authority: without prejudice to any other administrative or judicial remedy, the data subject who believes that the processing concerning them violates the Regulation has the right to lodge a complaint with the supervisory authority of the Member State where they reside or work habitually, or where the alleged violation occurred.
Rights can be exercised by contacting the Controller using the contact details indicated in section A, which are repeated: Controller of the Processing personale@salami.it
This information is updated as of 13/09/2023.