Privacy Notice
Last updated: November 2023
We know that you care about your personal data and how it is used, and we want you to trust that G-Free Alimentare Srl uses your personal data carefully. When you interact with us, for example when you visit our website, or submit an enquiry, you also share information relating to you, that is personal data, with us. This Privacy Notice will help you understand what personal data we collect, why we collect it and what we do with it.
Please take a moment to familiarise yourself with the Privacy Notice and let us know if you have any questions by sending us an email or submitting a request through info@gfreealimentare.it.
Key terms
We have tried to keep this Privacy Notice as simple as possible, but to help your understanding please familiarise yourself with the following privacy terms:
References to “our”, “us” or “we” within this Privacy Notice include G-Free Alimentare Srl and its brands.
G-Free Alimentare Srl is the data controller of your personal data. This means that we decide how and why your personal data is processed, either alone or jointly with others.
If the structure of our business changes, for example if we merge, combine or divest a part of our business, we may need to transfer your personal data to the relevant third party or re-organised organisation. This would be done, for instance, as part of any due diligence process or for the same purposes as set out in this Privacy Notice.
If you have any questions about this Privacy Notice or how we use your personal data please contact info@gfreealimentare.it.
The type(s) of personal data we may collect directly from you, as well as the way in which we collect it, depends on how you interact with us.
How we collect your personal data
Types of personal data we might collect
| Type of Personal Data | Purpose for Processing | Description of Processing | Legal Basis |
|---|---|---|---|
| Name, (email) address, interests/preferences (if provided by you) | Sending you a G-Free Alimentare newsletter | Collecting, storing, using and analysing your personal data | Consent: We will only send you G-Free Alimentare newsletters if you agree for us to do so. |
| Name, (email) address, country, social media or email account details (if provided by you) | Responding to queries, requests or complaints, providing feedback to stakeholders and improving our business processes | Collecting, storing, using, analysing and sharing your personal data | Legitimate Interest: Where you have contacted us, we will process the information you have shared with us to respond to and deal with your query. We may also provide, if appropriate, anonymised feedback to relevant internal stakeholders, such as our production sites, based on the information provided by you in order to improve our overall business processes. In such a case we would balance your rights and freedoms against our interests, or those of any third parties, and proceed only if your rights are not infringed. |
| Name, (email) address, purchase history | Maintaining the safety of our products, informing you of safety/health issues, and recalling the product where needed | Storing, validating, using and sharing your personal data | Legal obligation: We are required by law to process your personal data for this purpose |
We will not keep your personal data longer than necessary to meet the purposes for which it was gathered. Once this purpose has been fulfilled, we will either securely remove your personal data from our systems or anonymise it, that is, we will remove those aspects of your personal data that link it to you so that you can no longer be identified.
Please note that in some cases we may have legal obligations to keep your data for some time after the initial purpose for collection has been met. For example, where we must keep your data for accounting, litigation, or regulatory reasons.
We may disclose your personal data to certain third-parties, vendors and service providers or affiliated employees, contractors and entities as described below.
Where we share your personal data, we do so for the following purposes:
| Type of Third-Party | Purpose for Disclosure |
|---|---|
| Third party service providers | We use third parties to help us process your personal data in order to provide some of our services. For example, to fulfil your orders, enable you to participate in competitions, honour vouchers. These third parties cannot do anything with your personal data unless we have instructed them to do it. |
| Regulator(s) or Government Authorities | We may transfer and disclose your personal data to comply with a legal obligation and when we believe that an applicable law requires it. For example, at the request of a regulatory authority conducting an investigation. |
| Acquiring company | If the structure of our business changes, for example if we merge, combine or divest a part of our business, we may need to transfer your personal data to the relevant third party or re-organised organisation. |
Where we have a lawful basis to do so, we will also use your personal data to build profiles. We create profiles by analysing information about your online activity, including how you browse and interact with our websites and third party websites, your interactions with our brand communications, and your searching and buying behaviour. We use these profiles to personalise our website content displayed to you as well as our communications with you. Profiling allows us, for instance, to show you more information and products that we believe you would be interested in during your visits to our websites.
Depending on your location and the services you use, we may transfer your personal data to entities within G-Free Alimentare or to third parties based outside of the Economic European Area (“EEA”). If you are based in the EEA, we are required by law to ensure that your personal data enjoys a level of protection essentially equivalent to that within the EEA.
Transfers to countries with an EU Data Adequacy Decision
Some of the countries we may transfer personal data to have been recognised by the European Commission as offering an adequate level of protection to personal data (“Adequacy Decision”). You can find the complete list of Adequacy Decisions taken by the European Commission here. Consequently, personal data can flow from the EEA to that third country without any further safeguard being necessary.
Transfer to non-adequate non-EEA countries
We may also transfer data from the EEA to countries that do not have an Adequacy Decision. In those cases we will only transfer personal data where we have added safeguards to our contracts with the receiving entities, so called EU Standard Data Protection Clauses, in order to ensure that your personal data is afforded the same level of protection as it is in the EEA.
To protect your personal data from unauthorised access, disclosure or loss, we have put appropriate technical and organisational measures in place. These include encrypting connections and equipment, creating back-ups, and limiting and controlling those who can access the data.
You have rights relating to your personal data. You can exercise these rights (as explained below) by sending an email with your contact details and your request to info@gfreealimentare.it
We will handle your request carefully and respond to you without undue delay and at the latest within one month after receiving your request, unless there is a lawful reason to extend this period in which case we will let you know as soon as possible.
Please note that the extent to which you can exercise your rights may be limited by the rights and interests of other parties. For example, we may not be able to delete all of your personal data upon request where we have to keep it for regulatory reasons. If we are unable to exercise your request then we will let you know and explain why without undue delay.
a) Access
You can ask us whether we process your personal data and, if so, request a copy of that personal data.
b) Correction
You can request that we correct any personal data that we process about you that is inaccurate or incomplete.
c) Processing restriction
You can request that we limit or stop the processing of your personal data in some circumstances, such as when you contest the accuracy of the personal data.
d) Deletion
You can request that we delete your personal data in some circumstances.
e) Move, copy or transfer
You can request, in certain circumstances, that we transfer the personal data that you have shared with us to you or a third party of your choice. In such a case we are under an obligation to send the data in a structured, commonly used, and machine-readable format.
f) Objection to data processing
You can object to our processing of your personal data in some circumstances and request that we stop such processing at any time, including where we process your personal data for direct marketing purposes.
g) Withdraw consent
Where you have agreed to your data being collected, you will always have the right to withdraw that consent at any time. You can do this by either following the information provided at the time you provided your consent.
h) Exclusion from automated decision making
You have the right not to be subject to a decision based solely on automatic processing of your personal data, including profiling, if that decision would impact your legal rights or affect you in an otherwise significant manner. We do not use such automated decision-making in relation to our processing of your personal data described in this Privacy Notice.
i) Complaint to a supervisory authority
If you have a concern about the way we have handled your personal data, and you are located within the EU, and/or your rights were infringed within an EU country, you can lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available here.
We also use cookies to collect and process personal data. To find out more about how we use cookies, and similar tracking technologies online, and how to exercise your choices about these, please see our Cookie Policy.
We keep this Privacy Notice under regular review and will update it when necessary. You are encouraged to undertake your own reviews of this Privacy Notice from time to time. We will notify you of any changes, including when they will take effect, if we are required to do so by data protection laws and we will always include at the top of the Privacy Notice the date on which it was last updated
EN 
IT