Dear Data Subject, Dreamfarm S.r.l. SB protects the privacy of its Users. Any data that may be provided by the User through the Website will be processed with the utmost care and using all tools necessary to guarantee its security, in full compliance with the applicable legislation.
We wish to inform you that Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the “GDPR”) establishes the protection of natural persons with regard to the processing of personal data as a fundamental right. Pursuant to Article 13 of the GDPR, we therefore inform you that:
DATA CONTROLLER
The Data Controller is Dreamfarm S.r.l. SB, with registered office in Via Galeotti 2, Sala Baganza (Parma) 43038, VAT no. 11944080966.
DATA PROTECTION OFFICER (DPO)
Dreamfarm S.r.l. SB has appointed a Data Protection Officer (DPO), who the Data Subject may contact by writing to the following address: help@dream-farm.it.
CATEGORIES OF DATA
The following may be subject to processing:
Data collected automatically.
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain data (the transmission of which is implicit in the use of Internet communication protocols) which are potentially associated with identifiable users. Among the data collected are IP addresses and domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the operating system, the browser and the IT environment used by the user, the name of the internet service provider (ISP), the date and time of the visit, the web page from which the visitor arrived (referral) and the exit page.
Data provided voluntarily by the user.
The voluntary and explicit sending of e-mails to the addresses indicated in the various access channels of this site does not require consent and entails the acquisition of the sender’s address and data, necessary in order to respond to requests, as well as any other personal data included in the message. Such data are understood to be voluntarily provided by the user at the time the service is requested. By entering a comment or other information, the user expressly accepts this privacy notice. Conversely, specific summary information notices will be reported or displayed on the pages of the site prepared for particular services on request (forms). The user must therefore explicitly consent to the use of the data entered in these forms in order to submit the request.
Cookies.
The site uses cookies. The data collected through cookies may be used to access certain parts of the site, for statistical purposes, or to make the browsing experience more pleasant and efficient in the future, by seeking to evaluate user behavior and adapt the content offer accordingly. For more information, a specific cookie policy is available.
PURPOSES OF DATA PROCESSING AND LEGAL BASIS
The processing of your data has the following purposes and legal bases:
-
For data collected automatically, the legal basis is the legitimate interest of the Controller and the purpose is to ensure and improve the web browsing experience.
-
For data provided voluntarily by the user, the legal basis is specified in the individual information notices provided, depending on the various services requested and provided through the site.
-
For cookies: please refer to the specific cookie policy.
DATA RECIPIENTS
Within the limits relevant to the purposes of processing indicated, your data may be communicated to partners, consulting firms, private companies, third-party technical service providers, hosting providers, IT companies, communication agencies. These recipients are appointed as Data Processors.
TRANSFER OF DATA TO THIRD COUNTRIES
The transfer of your data to a third country is not envisaged.
In the event that personal data are processed outside the European Union, such processing will take place only after the adoption of appropriate safeguards, as required by the applicable legislation.
RETENTION PERIOD
In accordance with the principle of storage limitation (Art. 5 GDPR), the obsolescence of stored data in relation to the purposes for which they were collected is periodically checked. In particular:
-
Data collected automatically are processed, for the time strictly necessary, solely for the purpose of obtaining statistical information on the use of the site and to verify its correct functioning, including for security purposes, or based on deadlines established by law.
-
Data provided voluntarily by the user will be retained for a period not exceeding the achievement of the purposes for which they are processed or in accordance with the deadlines laid down by law.
-
Data collected through cookies: please refer to the specific cookie policy.
RIGHTS OF THE DATA SUBJECT
As a Data Subject, the user has the right to:
-
Access, rectify, erase, restrict and object to the processing of their data;
-
Obtain from the Data Controller, without hindrance, the data in a structured, commonly used and machine-readable format, in order to transmit them to another Data Controller;
-
Withdraw consent to processing at any time, without prejudice to the lawfulness of processing based on consent before its withdrawal;
-
Lodge a complaint with the Supervisory Authority for the protection of personal data.
If it is not possible to request the erasure of the data, you may still object to the processing where this is justified by reasons related to your particular situation.
The exercise of the above rights may be carried out by written communication to be sent via PEC (certified e-mail) to the address smilefood@legalmail.it or by registered letter with return receipt to the address: Via Galeotti 2, Sala Baganza (Parma) 43038.
METHODS OF DATA PROCESSING
The personal data you provide will be subject to processing operations in compliance with the above-mentioned legislation and with the confidentiality obligations which inspire the activity of the Controller. Data will be processed using IT tools, paper supports and any other suitable medium (e.g. cloud systems, digital storage and substitute digital archiving systems, etc.), in compliance with adequate technical and organizational security measures as required by the GDPR.
FINAL PROVISIONS
This information notice is provided only for this website and not for any other websites that may be consulted by the user via links contained on this site. This notice may be subject to changes due to the introduction of new legislation; users are therefore invited to periodically check this page in order to stay up to date.
AUTOMATED DECISION-MAKING PROCESSES
No automated decision-making processes are envisaged.