Alifood S.r.l., with registered offices at Genoa, Salita Santa Caterina 4/6A, registered with the Companies’ Register (Registro delle Imprese) of Genoa, REA (Economic and Administrative Register) No. GE-480015, VAT No. 02357440995 (the Company or Alifood), is committed to continually safeguarding the privacy of its users.
This document was prepared in accordance with Article 13 of EU Regulation 2016/679 and subsequent domestic compliance regulations (the Regulation) in order to provide you with knowledge on how your personal information will be handled when you use the website (www.e-alifood.com) (the Website) and, if necessary, on how to provide express and informed consent to the processing of your personal data.
Alifood recalls that the Services offered by it through the Website are only intended for persons over the age of 18. If the Company becomes aware of Personal Data relating to persons under the age of 18 it will immediately delete that data.
1. Data controller
The Controller of Personal Data is the Company. For any information on the processing of Personal Data by the Company, including a list of data processors, please send written notice to Alifood S.r.l., Salita Santa Caterina 4/6A, 16123, Genoa or an e-mail message to the following e-mail address firstname.lastname@example.org.
2. What personal data we process
Following the use by you of our Website, the Company will process your personal data.
Specifically we process: name and surname, e-mail address, payment data and any other additional data and/or information that enables us to identify you (the Personal Data).
Alifood does not normally process Personal Data relating to personal beliefs, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data concerning health or a person’s sex life or sexual orientation (the Special Categories of Personal Data). If it is necessary to process Special Categories of Personal Data, Alifood undertakes to process that data in accordance with applicable regulations. The normal lawful basis for that processing is compliance with statutory requirements, it being understood that Alifood will always ask for your express consent if there is no statutory requirement to process that Personal Data.
We also inform you that
a) Browsing data and cookies
During normal use the IT systems and software procedures used to work the Website acquire certain data, the transmission of which is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects. However, due to its nature it could lead to the identification of users, through processing and association with data held by third-parties. This category of data includes the IP addresses or domain names for computers operated by users who connect to the Website, URI (Uniform Resource Identifier) notation addresses for requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, a numerical code indicating the completion status of the request (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is only used to obtain anonymous statistical information on the use of the Website and to control that it is working correctly, to identify any irregularities and/or misuse, and is deleted immediately after processing. The abovementioned data could also be used to verify liability in case of hypothetical cybercrimes to the detriment of the Website or third-parties.
b) Personal Data provided voluntarily
c) Third-party Personal Data provided voluntarily
Third-party Personal Data communicated by you to the Company may be processed when you use specific Services. In such event, you will be an independent data controller and you will undertake all connected legal duties and responsibilities. In this regard, you will keep the Company harmless from any dispute, claim or petition for damages arising out of processing etc. that should be received by the Company from third-parties, whose Personal Data was processed as a result of your use of the Services on the Website in breach of applicable rules for the protection of personal data. In any event, if you provide or process third-party Personal Data during use of the Website, you hereby guarantee – undertaking any connected responsibility – that this type of processing is based upon prior acquisition by you of consent from the third-party to the processing of any information concerning them.
d) Information sharing on Social Networks.
The Website could include plugins and/or buttons enabling the sharing of content on Social Networks (e.g. Facebook, Twitter, LinkedIn, YouTube, Instagram) used by you.
3. Purpose of data-processing
Personal Data will be processed by Alifood, with your consent where necessary, for the following purposes:
a) to create a personal profile – through the allocation of a username and password – in order to provide the Services offered by Alifood through the Website at the terms under the “General Terms and Conditions of Use of the Website“;
b) to reply to specific requests made to the Company;
c) to manage payments for the sale and purchase of goods through the Website, by way of an external provider appointed as a Data processor in accordance with the provisions of Article 28 of the Regulation;
d) to manage the shipping of goods purchased and sold through the Website and any insurance-related matters, through one or more third-parties appointed as Data Processors in accordance with the provisions of Article 28 of the Regulation;
e) to perform duties required by applicable laws, regulations or EU regulations or to satisfy requests from authorities and to defend its own rights or to act or make claims against you or third-parties;
f) to engage in direct marketing by e-mail for services analogous/complementary to those provided by the Website;
g) to conduct studies, research, market statistics;
h) to send information and promotional material relating to the business of and services and products sold by the Company;
i) to send information and promotional material relating to the business of and services and products of business partners of the Company (without any transfer of Personal Data to the Company’s business partners);
j) to send surveys intended to improve the Services or to launch new services; and
k) to analyse your interests, habits and consumer choices, also so as to send personalised information and promotional material on services offered by our business partners and our Company.
4. Lawful basis for processing
The lawful basis for the processing of Personal Data for the purposes specified under Article 3(a), b), c) and d) is Article 6(1)(b) of the Regulation ([…] processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract), since processing is required to provide the Services. If you fail to provide the Data the Company will not be able to deliver the Services.
The purposes under Article 3(e) represent lawful processing of Personal Data in accordance with Article 6(1)(c) of the Regulation ([…] processing is necessary for compliance with a legal obligation to which the controller is subject). Once you have provided the Personal Data in fact, processing is necessary in order to comply with legal requirements for the Company.
The processing of Personal Data mainly for marketing purposes under Article 3 (f), g), h), i) and j) is based upon your consent pursuant to Article 6(1)(a) ([…] the data subject has given consent to the processing of his or her personal data for one or more specific purposes). The provision of Personal Data for the abovementioned purposes is therefore entirely optional and without prejudice to the use of the Services. In order to oppose the processing of Personal Data for the abovementioned purpose, you may at any time contact the Company at the following email address email@example.com.
Processing for marketing and profiling purposes under Article 3 (k) is based upon the giving of consent in accordance with Article 6(1)(a) ([…] the data subject has given consent to the processing of his or her personal data for one or more specific purposes) and Article 22(2)(c) of the Regulation.
5. Recipients of Personal Data
Personal Data may be shared, for the purposes under Article 3, with:
a) persons typically acting as data processors or i) persons, companies or professional firms who provide accounting, administrative, legal, tax and financial assistance and advice to the Company in relation to the provision of the Services; ii) persons with whom it is strictly necessary to interact in order to provide the Service (for example hosting providers, payment managers, sellers, …) iii) or persons appointed to carry out technical maintenance (including the maintenance of network equipment and electronic communication networks);
b) persons, entities or authorities with whom the Company is mandatorily required to share the Personal Data pursuant to provisions of law or to orders issued by those authorities; and
c) persons authorised by the Company to process Personal Data in order to carry out activities strictly related to the provision of the Services, who are bound by confidentiality commitments or who have an adequate lawful confidentiality requirement (e.g. Company employees) (collectively the “Recipients”).
6. Transfers of Personal Data
Personal Data is stored on servers and processed by the Company within the European Economic Area.
Some Personal Data is shared with Recipients who may be located outside the European Economic Area. The Company guarantees that Personal Data is processed by those Recipients in accordance with the Regulation. In fact, transfers can be based upon an adequacy decision, Standard Contractual Clauses approved by the European Commission or on any other suitable lawful basis.
Further information on the above can be requested at the following email address firstname.lastname@example.org.
7. Procedures for processing Data and how long we keep Personal Data for
Your Personal Data will be processed using electronic, automated, computerised or telematic devices, or manually using logic strictly connected to the purposes for which the Personal Data is collected and so as to guarantee the security of that data. Personal Data processed for the purposes of Article 3 (a), b) c) and d)) is stored strictly for the period of time necessary to achieve those purposes. In any event, since data is processed to provide Services, the Company will store your Personal Data for the period of time provided and admitted by Italian regulations for the protection of its interests (Section 2946 and ff. Italian Civil Code).
Personal Data processed for the purposes under Article 3 (e) will be stored for the period of time provided by the specific applicable obligation or legal rule.
For the purposes under Article 3 (f), g), h), i), j) and k), the Personal Data will, as a general rule, be processed until revocation of consent. In any event the Company applies rules that prevent the storage of Personal Data for an indefinite period and therefore limits the storage time in accordance with the principle of minimisation of Personal Data processing.
Further information on procedures for the processing of Personal Data, the storage times for Personal Data and criteria used to determine that time, can be requested at the following email address email@example.com.
8. Data-subject’s rights
In accordance with Articles 15 and following articles of the Regulation, you are entitled at any time to ask the Company to access your Personal Data, to rectify and erase that data (where possible) or to object to its processing. You will be entitled to request a restriction of processing in the events provided by Article 18 of the Regulation and, where possible and in the events provided by Article 20 of the Regulation, to receive personal data that concerns you in a structured, commonly used and machine-readable format.
Requests should be made in writing to the following e-mail address firstname.lastname@example.org.
In any event, if you believe that the processing of your Personal Data is in breach of applicable laws you will always be entitled to make a claim to the competent Supervisory Authority (Data Protection Authority), pursuant to Article 77 of the Regulation.
In case of changes that have a material impact on the rights of users registered on the Website, you will receive reasonable notice of those changes in an e-mail message.