Information note pursuant Art. 13 of Regulation (EU) 2016/679 (“GDPR”)

At CarbonLab S.r.l. we consider your data (“Data”) privacy a serious matter. We want to inform you as a user (“User” or “Data Subject”) of the website food-chain.it (“Website”) that all activities of processing of the Data that we collect and/or you wish to provide to us through the use of the Website, will be processed in a fair, lawful and transparent way and exclusively for the purposes clearly explained in this document (“Privacy Policy”). We would like you to read this Privacy Policy carefully as it provides essential information to help you understand the purposes of the processing of your Data and the possible ways you may exercise your rights according to the GDPR.

1. Identification Details

The owner of the data processing is CarbonLab S.r.l. (Registration 12108930012), registered office in (10138) Torino (TO), Via Castellamonte 1 (in this document referred to as “CarbonLab” or “Proprietor”). You may contact us to exercise your rights as listed and explained in section (6) of this document, by sending a request via email to the following address support@food-chain.it with attached the necessary documents (i.e. a copy of the ID document) enable us to identify the user.

2. Categories of Data Processed

The Data that we collect and process through the Website concerns:

• (a) Navigation Data

  The informative systems and the software procedures aim to the correct functioning of the Website and acquire Data over the course of their normal functioning. The transmission of Data is implicit in the use of internet communication protocols. Included in this category of Data are IP addresses or domain names of computers and devices used by the User, URI/URL addresses of the resources requested, time of the request, method used in submitting the request to the server, dimension of the file obtained in response, numeric code that indicates the state of the response provided by the server (i.e. successful, error, etc.) and other parameters concerning the operative system and the web environment of the user.

• (b) Data provided by the User

  CarbonLab acquires via Website all Data that is provided deliberately, explicitly and genuinely by the User by completing and submitting the forms found on the Website. The Data collected in this way may include, for example, full name, email address, telephone number, company or organization and position covered.

3. Purposes and legal basis of the Processing

The Data collected will be processed physically (paper submissions) and/or electronically for the following purposes.

• (a) Navigation cookies are necessary to provide the User with optimal experience or to enable the authentication on the Website. The navigation cookies are normally session cookies and once the browser is closed they will be erased immediately;

• (b) Control over the navigation of the Website and obtaining relative statistic information (i.e. pages visited, number of visitors per time slot or per day, geographical area of visitors, etc.)

  The legal basis of Data processing for such purposes is the legitimate interests of the Proprietor, according to Art. 6 (1) (f) of the GDPR.

• (c) Responding to contact requests sent directly by the User via Website.

  The legal basis of the Data processing for such purposes is the necessity of executing pre-contract measures adopted upon request by the Data subject, according to Art.6 (1) (b) of the GDPR.
  Failing to supply the required Data in the contact section of the Website imply the impossibility of CarbonLab to perform the pre-contract measures and the contact request made by the Data subject.

• (d) provide the User with offers, informative and/or marketing material, newsletters and in general commercial communications and/or informative concerning products or services offered by CarbonLab and/or events of which CarbonLab is the organizer or participant.

  The legal basis of the Data processing for such purposes is the consent given by the User to such purposes, according to Art.6 (1) (a) of the GDPR.
  Consent is voluntary however, failing to give consent and/or supply the Data requested in the contact section of the Website imply the impossibility of CarbonLab to provide the User with offers, informative and/or marketing material, newsletters and in general commercial communications and/or informative concerning products or services offered by CarbonLab and/or events of which CarbonLab is the organizer or participant.

• (e) Fulfilling legal obligations CarbonLab is held accountable for, including those of administrative, insurance, accounting and fiscal nature.

  In relation to such purposes CarbonLab collects further Data, where expressively requested by the applicable law.
  The legal basis of the Data processing for such purposes is the compliance with a legal obligation to which Foodhcain is subject, according to Art.6 (1) (c) of the GDPR.

4. Recipients of Data

Data might be supplied to our services providers (for example to accounting services, Website hosting and maintenance services, system management services, etc.), as well as to our consultants (for example to lawyers, auditors, etc.). Data might be also supplied to third parties where we believe in good faith that the access, use, storage and communication of Data is necessary to (i) be in compliance with the applicable law or fulfill a court order issued by the legal or administrative authority or by a public organism, (ii) preserve and protect CarbonLab’s rights and (iii) identify, prevent or counter frauds and/or security or technical problems. The Data will not be transferred to Countries that are not members of the European Union and will not be disseminated.

5. Duration of the Storage of Data

According to the purposes outlined in (c) in section 3, the Data might be stored until the withdrawal of the consent of the User. Furthermore, CarbonLab is committed to provide the Users on yearly basis with a communication to verify promotional activities, containing a link for the withdrawal of the consent. With reference to the Navigation Data, for the purposes outlined in (a) section 3, the Data will be stored for 24 months and then destroyed. For the remaining purposes outlined in section 3, the Data will be stored for the duration required to fulfill such purposes and according to:

• (a) the limits of the applicable requirements. In the case actions are interrupted, the period of storage will be extended accordingly.

• (b) the limits of the regulations on data storage (i.e. tax declaration) to be compliant with law obligations

• (c) the period required to protect CarbonLab’s rights should legal disputes occur.

6. Rights of the Data Subject

We inform that you as Data Subject may exercise your rights according to Art. 15 – 22 of the GDPR. In particular, you may:

• (a) Access Data and obtain from CarbonLab information on: (i) the purposes of the processing, (ii) the categories of the Data processed, (iii) the recipients or the categories of recipients to which the Data is or will be communicated to, in particular if the Data are supplied to third party countries or international organizations, (iv) the duration of the storage of the Data (v) the Data Subject’s right to request the Proprietor to rectify or erase the Data or limit or reject the processing of the Data, (vi) the right to complaint to the controlling authority and (vii) if the Data is not collected from the Data Subject, all the information regarding its origin.

• (b) make changes or corrections to the Data.

• (c) Richiedere in qualsiasi momento la cancellazione dei Dati.

• (d) oppose at any time the processing of Data or obtain the restriction of the processing of the Data.

• (e) Receive the Data in a structured, commonly used and machine-readable format and have the right to transmit the Data to another proprietor.

• (f) withdraw at any time the consent to the Data processing for the purposes based on the consent of the Data Subject

• (g) report possible claim, complaints, or appeals to the Data Protection Authority

7. Amendments

This Privacy Policy may be subject to amendments. In this case, we will announce the changes made to this Privacy Policy using appropriate communication via Website or vie-mail sent to the recipients provided, specifying the date they will take into effect.
The updated Privacy Policy will replace the previous one and it will also be applied to the processing of the Data collected prior to the changes. In case you decide not to accept the terms of the updated Privacy Policy, you shall immediately cease any use of the Website.
If you access and continue to use the Website after the update Privacy Policy takes effect, you agree to the content of the updated Privacy Policy.