en

 privacy policy

(pursuant to Article 13 of EU Regulation 2016/679 – GDPR)

1. Data Controller

The Data Controller of personal data is:

FINALMENTE SENZA GLUTINE S.R.L.
Registered office: Via Tondello 59 – 37063 Isola della Scala (VR) – Italy
VAT No.: 05115340233
REA: VR – 471586
Certified Email (PEC): finalmentesenzaglutine@planetpec.it

Hereinafter referred to as the "Controller".

2. Types of Data Processed

a) Browsing Data

The IT systems and software procedures used to operate the website collect certain personal data during their normal operation. The transmission of such data is inherent in the use of Internet communication protocols.

Such data may include:

  • IP addresses

  • Domain names of the devices used

  • Browser and operating system information

  • Time of request

  • Technical parameters relating to the user's IT environment

This information is used exclusively to obtain anonymous statistical data on website usage and to ensure proper functioning.

b) Data Voluntarily Provided by the User

Through the contact form or email communications, the following data may be collected:

  • First and last name

  • Email address

  • Phone number (if provided)

  • Message content

Providing such data is optional but necessary in order to respond to requests.

c) Cookies and Tracking Tools

The website uses:

  • Technical cookies necessary for proper website functioning

  • Third-party analytical cookies (Google Analytics 4), subject to user consent

For further details, please refer to the Cookie Policy.

3. Purpose of Data Processing

Personal data are processed for the following purposes:

  • Responding to information requests;

  • Managing commercial communications;

  • Ensuring proper website operation;

  • Complying with legal obligations;

  • Performing aggregated statistical analysis to improve website content and user experience.

4. Legal Basis for Processing

Data processing is based on:

  • Performance of pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR);

  • Consent of the data subject for analytical cookies (Art. 6.1.a GDPR);

  • Compliance with legal obligations (Art. 6.1.c GDPR);

  • Legitimate interest of the Controller in ensuring website security and functionality (Art. 6.1.f GDPR).

5. Methods of Processing

Data processing is carried out using electronic and telematic tools, in compliance with the principles of:

  • Lawfulness

  • Fairness

  • Transparency

  • Data minimization

The Controller adopts appropriate technical and organizational measures to ensure data security and prevent unauthorized access, loss, or destruction.

6. Use of Google Analytics 4

The website uses Google Analytics 4 (GA4), a web analytics service provided by:

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland

Google Analytics collects information about website usage in aggregated form.

Data Collected

The following data may be processed:

  • IP address (managed according to anonymization settings provided by the service);

  • Device information;

  • Browsing data;

  • Website interaction data (events, pages visited, session duration).

Purpose

Statistical analysis and improvement of user experience.

Legal Basis

Processing takes place only after the user has given explicit consent through the cookie banner.

Data Transfers Outside the EU

Personal data may be transferred to countries outside the European Union (e.g., the United States).

Such transfers are carried out in compliance with GDPR safeguards, including the adoption of Standard Contractual Clauses and/or adherence to the EU–US Data Privacy Framework, where applicable.

Withdrawal of Consent

Users may withdraw or modify their consent at any time through the cookie management panel.

7. Data Retention

Personal data are retained for the time strictly necessary to fulfill the purposes for which they were collected and, in any case:

  • For the time necessary to manage contact requests;

  • For the period required by law, where applicable.

Data collected through analytical cookies are retained according to Google Analytics service settings.

8. Disclosure of Data to Third Parties

Personal data may be disclosed to:

  • IT service and hosting providers;

  • Analytics service providers (e.g., Google);

  • Professional advisors;

  • Competent authorities where required by law.

Third parties process data as Data Processors or independent Data Controllers, depending on the case.

9. Rights of the Data Subject

Data subjects may exercise the rights provided under Articles 15–22 of the GDPR, including:

  • Right of access;

  • Right to rectification;

  • Right to erasure;

  • Right to restriction of processing;

  • Right to object to processing;

  • Right to data portability;

  • Right to withdraw consent at any time.

Requests may be sent to the Controller using the contact details provided above.

10. Complaint to the Supervisory Authority

Data subjects have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) if they believe that the processing of their personal data violates applicable law.

11. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time.

Any changes will be published on this page.