PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

L’INSALATA DELL’ORTO S.r.l.

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)

Version: 1.0
Last updated: July 2026

1. Introduction

L’Insalata dell’Orto S.r.l. attaches great importance to the protection of personal data and is committed to ensuring that all processing activities are carried out in compliance with the principles of lawfulness, fairness, transparency, data minimisation and security established by Regulation (EU) 2016/679 (“GDPR”) and the applicable national legislation.

This Privacy Notice describes how the personal data of users visiting the Company’s website are collected, used, stored and protected.

The website is intended exclusively for informational and corporate purposes and provides information about L’Insalata dell’Orto S.r.l., its brands, products, certifications and business activities.

The website does not allow users to purchase products online, register an account or create a restricted area.

The use of the website involves the processing of certain personal data necessary for its operation, security and the statistical analysis of visits, as described in this Privacy Notice and in the Cookie Policy.

2. Data Controller

The Data Controller responsible for the processing of personal data is:

L’Insalata dell’Orto S.r.l.

Via Giare 144/A
30034 Mira (VE)
Italy

VAT No. 03161760271 – Tax Code 02771540248

Email: info@linsalatadellorto.it

Certified email address (PEC): linsalatadellorto@legalmail.it

For any information regarding the processing of personal data or to exercise the rights provided for under the GDPR, users may contact the Data Controller using the contact details indicated above.

As at the date on which this Privacy Notice was last updated, the Company has not appointed a Data Protection Officer (“DPO”), as the conditions set out in Article 37 of the GDPR do not apply.

3. Scope

This Privacy Notice applies exclusively to the corporate website of L’Insalata dell’Orto S.r.l.

It does not apply to third-party websites that may be accessed through hyperlinks available on the Company’s website. Users are advised to consult the relevant privacy notices provided by such third parties.

4. Categories of Personal Data Processed

The following categories of personal data may be processed while users browse the website.

4.1 Browsing Data

The IT systems and software procedures used to operate the website automatically acquire certain information, the transmission of which is inherent in the use of Internet communication protocols.

Such information may include, by way of example:

  • IP address;
  • device identifiers;
  • browser type;
  • operating system;
  • date and time of the visit;
  • pages visited;
  • time spent on the website;
  • technical information necessary for the proper provision of the services.

These data are used exclusively to ensure the proper operation of the website, protect its security, produce aggregated statistics and improve the browsing experience.

4.2 Data Voluntarily Provided by Users

The voluntary sending of communications to the email addresses published on the website entails the acquisition of the personal data contained in the communication, as well as any other data necessary to respond to the request received.

The provision of such data is optional but necessary to allow the Data Controller to process and respond to the data subject’s request.

4.3 Cookies and Similar Technologies

The website uses technical cookies necessary for its operation, analytics cookies and marketing cookies.

Cookies requiring consent are installed only after the user has expressly made their choice through the relevant Consent Management Platform.

Detailed information on the categories of cookies used, their purposes, retention periods and the methods available for managing preferences can be found in the Cookie Policy available on the website.

5. Purposes of the Processing

Personal data are processed exclusively for specified, explicit and legitimate purposes.

In particular, the Data Controller processes personal data in order to:

  • enable users to browse the website correctly;
  • ensure the operation of IT services;
  • protect the security of digital infrastructures;
  • conduct anonymous or aggregated statistical analyses of website traffic;
  • improve the website’s performance and content;
  • manage communications received by email;
  • comply with obligations arising from applicable legislation;
  • establish, exercise or defend legal claims in judicial or extrajudicial proceedings.

The website does not carry out e-commerce activities, direct commercial profiling or the systematic collection of personal data through online forms.

6. Legal Basis for the Processing

L’Insalata dell’Orto S.r.l. processes personal data only where one of the lawful bases provided for under Article 6 of Regulation (EU) 2016/679 applies.

Purpose of the processing Legal basis
Enabling users to browse the website and ensuring its proper operation Legitimate interests pursued by the Data Controller pursuant to Article 6(1)(f) of the GDPR
Ensuring the security of IT systems Legitimate interests pursued by the Data Controller
Responding to communications received by email Taking steps at the request of the data subject prior to entering into a contract pursuant to Article 6(1)(b) of the GDPR
Complying with legal obligations Compliance with a legal obligation pursuant to Article 6(1)(c) of the GDPR
Conducting statistical analyses through analytics cookies and equivalent tools The data subject’s consent, where required by the applicable legislation
Using marketing cookies The data subject’s consent
Establishing, exercising or defending legal claims Legitimate interests pursued by the Data Controller

7. Nature of the Provision of Personal Data

The website may be accessed freely and does not require user registration.

The provision of personal data through the voluntary sending of communications to the Company’s email addresses is optional.

However, failure to provide the information necessary to process the communication may prevent the Data Controller from responding to the request received.

8. Methods of Processing

Personal data are processed using electronic, digital and, where necessary, paper-based tools, in accordance with the principles of fairness, lawfulness, transparency and confidentiality.

L’Insalata dell’Orto S.r.l. implements appropriate technical and organisational measures to prevent unauthorised access to, loss, disclosure, alteration or unlawful use of personal data.

Personal data are processed exclusively by authorised personnel or by parties acting on behalf of the Data Controller on the basis of specific appointments and subject to confidentiality obligations.

9. Recipients of Personal Data

For the purposes described in this Privacy Notice, personal data may be disclosed exclusively to parties whose knowledge of the data is necessary to perform activities connected with the management of the website or to comply with legal obligations.

By way of example, personal data may be processed by:

  • providers of IT, hosting and website maintenance services;
  • companies providing cloud services and digital infrastructure;
  • IT consultants;
  • legal, tax and administrative advisers;
  • parties responsible for the technical management of the website;
  • public authorities or competent bodies, where required by law or by an order of a judicial authority.

Parties processing personal data on behalf of the Data Controller are appointed, where required, as Data Processors pursuant to Article 28 of the GDPR.

Personal data are not disseminated to the public.

10. Transfers of Personal Data Outside the EEA

Some technological services used for the operation of the website may involve the transfer of personal data to countries located outside the European Economic Area (“EEA”).

Where such transfers are necessary, they will be carried out in compliance with Articles 44 et seq. of Regulation (EU) 2016/679 and subject to the safeguards required by the applicable legislation, including, by way of example:

  • adequacy decisions adopted by the European Commission;
  • Standard Contractual Clauses (“SCCs”);
  • any additional security measures required by the applicable legislation.

11. Data Retention Period

Personal data are retained for no longer than is necessary to achieve the purposes for which they were collected, in accordance with the principles of storage limitation and data minimisation.

In particular:

Category of data Retention period
Browsing data For the time strictly necessary for the operation of the website and in accordance with the periods indicated in the Cookie Policy
Communications sent to the Company’s email addresses For the time necessary to process the request and, subsequently, for any period required by law or necessary to protect the rights of the Data Controller
Data processed to comply with legal obligations For the period established by the applicable legislation
Data necessary for the defence of legal claims For the entire duration of any dispute and for the subsequent applicable statutory limitation periods

12. Rights of Data Subjects

In the circumstances provided for under Regulation (EU) 2016/679, data subjects may exercise the following rights:

Right Description
Access To obtain confirmation as to whether personal data concerning them are being processed and to receive a copy of such data.
Rectification To request the updating or correction of inaccurate or incomplete personal data.
Erasure To obtain the deletion of personal data where the conditions established by the applicable legislation are met.
Restriction of processing To request the restriction of processing in the circumstances provided for under the GDPR.
Data portability To receive personal data in a structured format and transmit them to another data controller, where technically feasible and in the circumstances provided for by law.
Objection To object to the processing of personal data based on the legitimate interests of the Data Controller, where permitted by the applicable legislation.
Withdrawal of consent To withdraw consent at any time, without affecting the lawfulness of processing carried out before consent was withdrawn.

The exercise of data subject rights is free of charge, except in the circumstances provided for under Article 12 of the GDPR.

13. Complaint to the Supervisory Authority

Where a data subject considers that their personal data are being processed in breach of the applicable legislation, they have the right to lodge a complaint with the Italian Data Protection Authority — Garante per la protezione dei dati personali — or to bring proceedings before the competent courts, in accordance with Articles 77 et seq. of Regulation (EU) 2016/679.

14. How to Exercise Your Rights

For any request concerning the processing of personal data or to exercise the rights provided for under Regulation (EU) 2016/679, data subjects may contact the Data Controller using the following contact details:

L’Insalata dell’Orto S.r.l.

Via Giare 144/A
30034 Mira (VE)
Italy

Email: info@linsalatadellorto.it

Certified email address (PEC): linsalatadellorto@legalmail.it

The Data Controller will respond to requests without undue delay and, in any event, within the time limits established by the applicable legislation.

15. Information Security

L’Insalata dell’Orto S.r.l. implements appropriate technical and organisational measures to ensure a level of security proportionate to the risks arising from the processing of personal data.

These measures are intended to prevent data loss, unauthorised access, unlawful disclosure, alteration or any other form of processing that does not comply with the applicable legislation.

Security measures are periodically reviewed and updated, taking into account technological developments and the risks associated with the processing.

16. Changes to This Privacy Notice

This Privacy Notice may be updated or amended over time, including as a result of changes in legislation, technological developments or modifications to the services offered through the website.

The updated version will be published on this page together with the date of the latest update.

Users are encouraged to review this Privacy Notice periodically to check for any changes.

17. Document Information

Document information Details
Document Website Privacy Policy
Data Controller L’Insalata dell’Orto S.r.l.
Version 1.0
Revision 00
Issue date July 2026
Status Approved
Next review Upon changes to the applicable legislation or updates to the services provided through the website