PRIVACY POLICY PURSUANT TO GDPR 679/2016

This Privacy policy governs the personal data processing carried out by our company on this website in compliance with the legislation in force on data protection, in particular EU Regulation 2016/679 (hereinafter “GDPR”)

Data controller: Consorzio del Formaggio Parmigiano Reggiano

Headquarters: Via John Fitzgerald Kennedy, 18 - 42124 Reggio Emilia - ITALY

Contact details: Tel. 39-0522-307741 – Email: [email protected]

The data controller is liable to you for the lawful and proper use of your personal data and may be contacted for any information or request with regards to such processing.

Privacy policy statement

This page describes how the aforementioned website is managed with regards to the personal data of the users consulting it.

This Privacy Policy is given also pursuant to the new GDPR 679/2016 on personal data protection to users interacting with web services that are accessible electronically from: https://www.parmigianoreggiano.com.

This Privacy Policy relates only to this website and not to other websites that may be visited through links. The information given herein concerns especially the collection of personal data on the Internet in order to identify the minimum measures that shall be implemented to assure data subjects that these practices are fair and lawful.

Data processing location

Any processing of data connected to the web services of this site is carried out at the above mentioned offices and is only overseen by employees, company staff or staff in charge of occasional maintenance work. No data obtained through the web service is communicated or disclosed. The personal data provided by the users sending requests for information materials can be used with the exclusive purpose of following up the request or providing the service requested and are communicated to third parties if necessary for such purpose.

Data, purposes and legal basis

The IT systems and IT programmes used to run the websites collect some personal data whose sending is implicit in the use of Internet communication protocols (e.g. IP addresses or domain name of the computers used by the users that connect to the site, URI-Uniform Resource Identifier addresses of the resources requested, request time, method used to submit the request to the server, size of the response file, numeric code indicating the status of the response given by the server - successful, error, etc. - and other parameters regarding the operating system and the user’s IT environment). Even if this information is not collected to be associated to identified data subjects, because of its nature, through processing and association to data held by third parties, such information may enable the identification of users.

These data are used only to obtain anonymous statistical information not associated to any identification details of the user on website use and to make sure that the site is functioning properly, and data are immediately deleted after processing. The data may be used to ascertain liability for any cybercrime offence committed the detriment of the website.

The optional, explicit and voluntary sending of your personal data (name, surname, e-mail address, personal data, bank details) to the address given on this website or provided by filling out the form to request a quotation or clarification on our activity implies the subsequent acquisition of the sender’s address that is necessary to answer the requests, as well as any other personal data contained in the request.

“Work with us” Section

The provision of data by the user through the form “Work with us” implies the knowledge and acceptance of what is established in this Privacy Policy.

It is the user’s responsibility to read the Privacy Policy before providing data.

The user guarantees the authenticity and correctness of the data provided.

When collecting data in the section “Work with us”, the asterisk indicates the mandatory or voluntary character of the information requested. Mandatory information is strictly necessary to receive the candidature and failure to provide it prevents submission of the application.

The personal data requested in the form “Work with us” are processed by the CONSORZIO DEL FORMAGGIO PARMIGIANO REGGIANO with the only purpose of receiving applications for possible vacant work positions in the company.

The personal data provided by you may be communicated to third parties, who will process the data acting as Data Processors (Art. 28 of EU Reg. No. 679/2016) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (Art. 29 of EU Reg. No. 679/2016), for the purposes listed above:

• subjects that provide services for the management of the website, information system and communication networks;
• Professional firms, firms for consultancy or assistance purposes to the Data Controller;
• Authorities responsible for enforcement of compliance with the law and/or provisions of public bodies, upon request.

Restricted area

The provision of data by the user through the relevant registration in the Restricted Area implies the knowledge and acceptance of what is established in this Privacy Policy and the consent to process data.

It is the user’s responsibility to read the Privacy Policy before providing data.

Users confirm to belong to the categories authorised to access the Restricted Area when providing data, and they confirm also the authenticity and correctness of the data provided.

They therefore commit to keeping data updated so that they are always correct.

When collecting data in the Restricted Area, the asterisk indicates the mandatory or voluntary character of the information requested. Mandatory information is strictly necessary to carry out the services offered in the Restricted Area and failure to provide such information prevents access to the same.

This company reserves the right not to accept the registration request especially if the applicant does not belong to the categories authorised to access the Restricted Area.

The data collected in the Restricted Area shall be used exclusively to enable access to users with the aim of granting consultation of the contents available therein, and improving the services offered by this company in carrying out its tasks.

At the same time, these data may be used to produce statistics and send newsletters informing about the contents of the Restricted Area.

**Newsletter and personal data processing **

If you gave your consent via a flag to receive commercial information or by filling out the registration form in the Restricted Area, your data processing may be carried out to send direct marketing communications, newsletters, advertising materials, market research materials via traditional contact systems and automated IT systems including commercial or promotional communications via e-mails or text messages; this is the consent of the data subject given in compliance with this Privacy Policy. In this case the consent to personal data processing is not a contract obligation. The data subjects have the right to provide personal data; should such data not be provided, no marketing activity can be carried out.

The Data Controller informs that with regards to the right to object to processing personal data for marketing purposes data subjects shall have the right to exercise such right partly, i.e. objecting for example only to promotional communications sent via automated and/or digital tools or, alternatively via traditional ones.

Users may withdraw consent at any time by clicking on the button present in every e-mail received at their email address or by sending an email to the address [email protected].

Data processing and storage procedures

The personal data are handled using automated instruments, and for the amount of time strictly necessary to attain the purposes for which the data were collected, unless the same information is subject to other types of processing by the same Data Controllers. Specific security measures are observed in order to prevent the loss of, unlawful or unfair use of, or unauthorised access to the data in compliance with the obligations to adopt minimum security measures.

In any case, upon withdrawal of consent, data shall no longer be processed.

We would also like to inform you about the following rights you may exercise towards the Data Controller:

Right to request access to your personal data (art. 15).

Right to request rectification (art. 16) or erasure of personal data (art. 17).

Right of restriction of processing (art. 18) or right to object to processing (art. 21).

Right to data portability (art. 20).

Right to withdraw the consent given for one or more specific purposes at any time, without prejudice to the processing carried out prior to withdrawal (of which you may request erasure).

Right to lodge a complaint with the Data Protection Authority (art. 77).

The requests to exercise the rights specified in this Privacy Policy, including in particular the right to erasure and the right to withdraw the consent given shall be addressed directly to the Data Controller to email address: [email protected]