Pursuant to Legislative Decree no. 196 dated 30.06.2003 (“Code on the protection of personal data”) which contains provisions aimed at the protection of persons with regard to the processing of personal data, the Company Ovidia Food Srl provides hereinafter, to the persons that during the course of navigation of this Website communicate their personal data, the information concerning, in addition to the data and the relevant processing, the purposes and methods of processing for which the data are intended; the mandatory or optional nature of providing data; the consequences of refusal to consent to the processing; the persons or categories of persons to whom the data may be disclosed and the scope of dissemination of said data; the rights of the data subject; the data controller and the person in charge of processing.
Such information is furnished to the data subject so that he/she can also provide his/her written consent to the processing with regard to the personal data furnished by him/her to Ovidia Food Srl or by others who perform operations that regard or that furnish commercial, financial, professional information to Ovidia Food Srl.
According to law, such processing will be based on the principles of correctness, lawfulness and transparency and the protection of the privacy and the rights of the data subject.
Pursuant to article 13 of Legislative Decree no. 196/2003, it is hereby stated that:
a) the intended data processing that will be carried out with regard to the personal data of the data subject will consist in the collection, recording, organization, storage, consulting, development, modification, selection, extraction, comparison, use, interconnection, blocking, communication, diffusion, cancellation and destruction of data as well as a combination of two or more of these operations;
b) the personal data of the data subject processed by Ovidia Food Srl are exclusively non-sensitive data voluntarily provided by the data subject, leading to the conclusion of sale contracts and optionally aimed at marketing initiatives;
– The data controller is Ovidia Food Srl with registered office in Via Medici 42/b – 36100 Vicenza, ITALY – the person in charge of processing designated for the detection of the requests in case of exercise of the rights under Article 7 of Legislative Decree no. 196/03 is the legal representative of the company domiciled c/o the Company. The requests must be sent to firstname.lastname@example.org.
Any subsequent changes in the person of the data controller and the persons in charge may also be acquired easily and free of charge by the data subject by writing to the above mentioned person in charge at the address of the data controller or by consulting the website www.lowcarbfood.it.
c) the processing by Ovidia Food Srl of the personal data of the data subject are related to the corporate object of our Company such as the execution of contracts concluded by the data subject with Ovidia Food Srl, the fulfillment of the related obligations such as tax, processing of information prior to conclusion of contracts and the preparation of research studies and market statistics; sales activities and placement of products and services, including initiatives for developing contacts for the acquisition of new customers and thus of sending information, advertising and marketing materials in general also through the use of automated calling systems without the intervention of an operator, by means of electronic mail, facsimile or other;
d) the personal data of the interested party may be disclosed:
to the employees of the Company, as well as agents, brokers or distributors appointed to market the Products and/or services of the Company;
to companies, even operating abroad;
and to persons in charge of the processing as identified in this statement;
to business information companies;
to subjects, also operating abroad, who perform tasks, duties or activities of a technical, organizational or management nature or relevance, of whom the Company avails itself or with whom it is in relation in the exercise of the company organized to furnish services that fall under those contracts which relate to the data subject. It may for example be associations or consortiums of the sector in which the Company operates, subjects carrying out private risks or recovery of debts; and entities that provide services in the management of the Company or auditing services or certification of financial statements; subjects who carry out stable management of complex payment systems or payment services; subjects in charge of mass processing regarding payments, cheques, other securities or effects and documents, or transmission activities, mailing, transport and sorting of communications, computer services providers or storage, for example, documents relating to relations undertaken with customers; subjects who on behalf of the Company engage in activity of detection of service quality or of the needs of the customers or marketing;
to subjects to whom the data of the data subject must be transmitted by the Company in fulfillment of a regulatory requirement.
With respect to the data processing of the data subject, such subjects may act as agents or managers of the data processing of the data subject by the Company or operate independently as separate data controllers of the data subject. To the extent that they consist in the communication, the processing of personal data of the data subject may imply the transmission of the data and its transfer abroad to EU countries and to countries outside the European Union.
The list of the parties to whom the Company will disclose the data of the data subject will be constantly updated and the data subject will have easy and free access thereto by asking the person in charge of the processing designated for the detection of the requests in case of exercise of the rights referred to in Article 7 of Legislative Decree no. 196/03;
The processing of the data will in no way consist in the dissemination of data of the data subject without the express consent of the latter.
The data will not be communicated or disclosed to third parties, without the prior express consent of the data subject except in the cases – in addition to those mentioned above – in which the data communication does not require the consent of the data subject according to article 24 of Legislative Decree no. 196/03;
f) the processing mentioned above will be performed by using either paper, computer or telematic supports, generally automated, even using instruments that connect third parties to our databases able to store, manage, transmit and process – on the basis of quantity, quality, timing and so on – the data of the data subject also interrelating them with data of other subjects;
g) each data processing is effected through the use of appropriate instruments able to guarantee security and confidentiality, and to further prevent unauthorized access and to exclude the collection of personal data about the person. From the point of view of access to services on line, in particular, primary security systems are among others constituted by passwords and IDs.
The provision of data is optional, except for that necessary to fulfill the contractual relationship obligations undertaken with Ovidia Food Srl: the non provision of such data will result in the non-performance of the contracts by Ovidia Food Srl with the data subject as well as the interruption and dissolution of the contractual relationship of Ovidia Food Srl with the same.
The data subject may consult the data controller in the manner laid down in articles 8 and 9 of Legislative Decree no. 196/03 in order to assert his/her rights as provided by article 7, the text whereof is hereinafter fully transcribed:
Article 7. Right of access to personal data and other rights
1. The data subject shall have the right to obtain confirmation as to the existence or not of his/her personal data, even if not yet recorded, and the communication of such data in an intelligible form.
2. The data subject shall have the right to be informed of:
a) the source of the personal data;
b) of the purposes and methods of the processing;
c) the logic applied to the processing, if the processing is carried out with the help of electronic means;
d) the identification data concerning the data controller, data processors and the representative designated as per article 5, paragraph 2;
e) the entities or categories of entities to whom the personal data may be communicated or who may become aware of said data in the capacity as designated representative in the State’s territory, data processors or persons in charge of the processing.
3. The data subject shall have the right to obtain:
a) updating, ratification or, where interested therein, integration of the data;
b) cancellation, transformation in anonymous form or the blocking of personal data that have been processed unlawfully, including data whose retention is unnecessary to the purposes for which they have been collected or subsequently processed;
c) certification to the effect that the operations stated in letters a) and b) have been notified, as also related to their content, to those to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
4. The data subject will have the right to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purposes of the collection;
b) to the processing of personal data concerning him/her for the purpose of sending advertising materials or direct selling or conducting market or commercial communication surveys.