Information on the processing of personal data

Dear Customer,

In accordance with Article 13 of Regulation (EU) No. 679/2016 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, Regulation (EU) 2016/679), we provide you with the following information on the processing of your personal data:

Contact details of the data controller of your personal data:

The data controller of your personal data is Wellness Food Srl , with registered office in via Foro Buonaparte 59 20121 Milano MI and contactable at the e-mail address ' wellnessfood@libero.it '.

Decision to appoint a Data Protection Officer:

The data controller has decided not to appoint a data protection officer, as Wellness Food Srl , in addition to not being required to do so pursuant to Article 37, paragraphs 1 and 4 of the EU Regulation, has deemed such appointment to be currently unnecessary.

Purposes and related legal bases for the processing of your personal data:

Your personal data, adequate, relevant, and limited to what is necessary, will be processed by Wellness Food Srl lawfully, fairly, and transparently towards you and in a manner that guarantees adequate security for the following purposes:

Managing your request to purchase Wellness Food Srl services, following your completion of the specific form in the "Complete Order" section of the website: the legal basis is the consent given by the interested party for one or more specific purposes, pursuant to art. 6, paragraph 1, letter a) of the EU Regulation;
the execution of the contract stipulated between you and Wellness Food Srl by the latter: the condition of lawfulness is the necessity to execute a contract to which the interested party is a party, pursuant to art. 6, p. 1, l. b) of the regulation (EU);
the fulfillment of a civil or tax obligation by the data controller: the condition for lawfulness is the need to fulfill a legal obligation to which the data controller is subject, pursuant to art. 6, paragraph 1, paragraph 1, of Law No. 101(c) of the EU Regulation;
fulfillment of a personal data protection obligation and any other obligation established by a regulatory provision to which the data controller is subject: the condition of lawfulness is the necessity to fulfill a legal obligation to which the data controller is subject, pursuant to art. 6, paragraph 1, paragraph 1, of Article 6(1)(c) of the Regulation (EU);
the possible exercise of the right of defense against you by the data controller: the condition of lawfulness is the necessity to pursue the legitimate interest (legal protection) of the data controller, pursuant to art. 6, paragraph 1, law (f) of the EU Regulation;
The data controller's protection of company assets, including hardware maintenance, software maintenance, and email maintenance: the requirement for lawfulness is the need to pursue the data controller's legitimate interest (protection of company assets), pursuant to Article 6, paragraph 1, of Law No. 196/2003 (EU);
Management of the Wellness Food Srl website, including its ordinary and extraordinary maintenance: the legal basis is the pursuit of the data controller's legitimate interest, pursuant to art. 6, paragraph 1, of Law no. 196/2003 (f) of the EU Regulation.

Possible categories of recipients of your personal data:

With regard to the processing of your personal data carried out by Wellness Food Srl for the purposes listed above, the possible categories of recipients of your personal data may be:

employees, collaborators, interns, and administrators of the data controller, as those responsible for processing your personal data, in order to perform preliminary activities prior to entering into a contract and the possible execution of the latter stipulated between you and the data controller, fulfill a civil and tax obligation, fulfill a personal data protection obligation and any other obligation established by a regulatory provision to which the data controller is subject, possibly protect themselves legally against you, and carry out promotional and/or advertising activities: it is specified that all such individuals are duly trained on the appropriate measures to be adopted to protect your personal data, pursuant to art. 29 of the Regulation (EU);
parties external to our organizational structure, acting as data controllers of your personal data, for the purpose of executing the contract stipulated between you and the data controller (e.g., banking intermediaries, technical consultants);
parties external to our organizational structure, acting as data controllers of your personal data, in order to fulfill a civil and tax obligation (e.g., accountants, accounting experts, data processing centers);
subjects external to our organizational structure acting as data controllers of your personal data, in order to fulfill an obligation regarding the protection of personal data and any other obligation established by a regulatory provision to which the data controller is subject (e.g.: companies and sector consultants);
subjects external to our organizational structure, in order to possibly protect themselves legally against you (lawyers and law firms);
subjects external to our organizational structure acting as data controllers of your personal data, in order to protect company assets (e.g.: hardware, software, network and email technicians);
parties external to our organizational structure, acting as data controllers of your personal data, for the purpose of carrying out promotional and/or advertising activities related to the economic activity carried out by the data controller.

Please note that all the above-mentioned entities are bound to the data controller by a specific contract that provides for adequate measures to be adopted to ensure the protection of your personal data, pursuant to Article 28 of the Regulation (EU).

Decision to transfer your personal data to a third country or an international organization:

The data controller has decided not to transfer your personal data to a third country or an international organization, as this has been deemed not currently necessary.

Period of retention of your personal data:

Wellness Food Srl will retain your personal data processed by it for the purposes of executing the contract entered into between you and it, protecting company assets, fulfilling a civil and tax obligation, fulfilling a personal data protection obligation, and any other obligation established by a regulatory provision to which the data controller is subject. This data will be retained in a form that allows your identification for a period equal to the execution of the contract between you and it, and for a further period of 10 years for the purpose of any further processing within the ordinary limitation period, and will then proceed to destroy or delete the data.

Wellness Food Srl will retain your personal data processed by it for the purpose of exercising its right of defense in your regard, in a form that allows your identification only for a period of time equal to the legal protection it may have, and will then proceed to destroy or delete them.

Your rights:

You, as the interested party, can exercise the following rights by sending an email to ' wellnessfood@libero.it ':

Access your personal data, pursuant to art. 15 of the EU Regulation, in order to verify whether your personal data is being processed and, if so:

obtain information on the purposes of such processing;
obtain information on the categories of your personal data processed;
obtain information on any categories of recipients of your personal data;
obtain information on the retention period of your personal data;
obtain information on the existence of your right to rectify or erase your personal data or on your right to limit the processing of your personal data;
obtain information on the existence of your right to lodge a complaint with the Data Protection Authority;
obtain information on whether automated decision-making is used in the processing of your personal data, including the logic involved and the expected consequences for you of such processing;

rectify your personal data, pursuant to art. 16 of the EU Regulation, in the event that the accuracy of the same is subsequently contested;
integrate your personal data, pursuant to art. 16 of the EU Regulation, in the event of a subsequent dispute regarding their completeness;
delete your personal data, pursuant to art. 17 of the Regulation (EU), unless necessary to comply with a contrary legal obligation or to ascertain, exercise, or defend a right in court, in the event of:

subsequent lack of need to process such personal data for the declared purposes;
subsequent exercise of your right to object to the processing, excluding the prevalence of the legitimate interest of the data controller over your interests or fundamental rights and freedoms;
subsequent ascertainment of the unlawfulness of the processing of your personal data;

the existence of a legal obligation requiring the deletion of such personal data;
limit the processing of your personal data, pursuant to art. 18 of the Regulation (EU), in the event of:

the accuracy of such personal data is subsequently contested, even if limited to the time period necessary for the subsequent verification by the data controller;
subsequent ascertainment of the unlawfulness of the processing of your personal data, supplemented by the subsequent opposition to the deletion of the same;
subsequent lack of need to process such personal data for the declared purposes, supplemented by the simultaneous need to process them to ascertain, exercise or defend a right in court;
subsequent exercise of your right to object to the processing, even if limited to the time period necessary for the subsequent verification by the data controller;

receive your personal data processed by the data controller by automated means in a structured, commonly used, and machine-readable format and, where applicable, have it transmitted to another data controller, pursuant to art. 20 of the EU Regulation;
Object to the processing of your personal data, pursuant to art. 21 of the EU Regulation, if the prevailing legitimate interest of the data controller is contested over your interests or fundamental rights and freedoms.

Wellness Food Srl is required to comply with any exercise of your rights listed above without undue delay.

Your right to lodge a complaint:

As a data subject, you may exercise the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you subsequently challenge the data controller's compliance with EU Regulation 2016/679 (GDPR), pursuant to Article 77 of the same EU Regulation, by submitting the appropriate form to the email address protocollo@pec.gpdp.it .

Nature of the communication of your personal data:

Your communication of your personal data to the data controller is contractually obligatory with regard to the completion of preliminary activities for the stipulation of a contract and the possible execution of the latter stipulated between you and the same, to fulfill a civil and tax obligation, to fulfill an obligation regarding the protection of personal data and to any other obligation established by a regulatory provision to which the data controller is subject.

In fact, please remember that your refusal to provide such personal data would make it impossible for the data controller to fulfill the aforementioned purposes.

Decision to use an automated decision-making system in the processing of your personal data:

The data controller has decided not to use an automated decision-making system in the processing of your personal data, as it is currently not necessary.