Privacy Notice – Article 13 GDPR 679/2016
Information regarding the processing of personal data collected from the data subject
TYPE OF DATA PROCESSED / TO BE PROCESSED
Processed/tobeprocessed data: personal data.
Under Article 4 of GDPR 2016/679, “personal data” means any information relating to an identified or identifiable natural person (“data subject”).
User Data
Browsing data
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified individuals, but could, through processing and association with data held by third parties, allow users to be identified.
This category includes IP addresses or domain names of the devices used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained, the numerical code indicating the status of the server response, and other parameters relating to the user’s operating system and digital environment.
Data voluntarily provided by the user
The optional, explicit and voluntary sending of messages to the contact addresses indicated on the site and/or the completion of data collection forms involves the acquisition of the data necessary to respond to requests.
COOKIES
For cookies and similar technologies, please refer to the cookie policy available in the website footer.
For nontechnical cookies and equivalent technologies, the legal basis is consent pursuant to Article 6(1)(a) GDPR.
DATA CONTROLLER
Pursuant to Article 4 of Regulation (EU) 2016/679, the Data Controller is BERBERE’ SRL, with registered office in Via Baldassarre Carrati 1, 40137 Bologna (BO), Italy.
Tel. +39 051 4842826 – Email: privacy@berbere.it
acting through its legal representative pro tempore.
DATA PROTECTION OFFICER (DPO)
A Data Protection Officer has not been appointed, as the processing activities do not fall within the mandatory cases listed in Article 37 GDPR.
PURPOSES OF THE PROCESSING
A) Browsing on this website
Legal basis: Legitimate interest (Article 6(1)(f) GDPR): the processing is necessary for the technical functioning of the site and for providing the navigation service.
Retention period: Duration of the browsing session (except where required for judicial investigations).
Nature of provision: Necessary for browsing.
B) Sending commercial, promotional and advertising communications
Following the user’s subscription to the mailing list, and with explicit consent, the company will collect contact details to send marketing communications, including newsletters and market research.
Such activities may be carried out using automated tools (email, SMS) or traditional means (telephone calls with an operator, postal mail).
The form is not intended for individuals under 14 years old or not of legal age in their jurisdiction.
Legal basis: Consent (Article 6(1)(a) GDPR).
Retention period: Until consent is withdrawn (opt-out).
Nature of provision: Optional. The absence of consent only prevents the sending of promotional material.
C) Online Orders Area
Data provided via form will be processed to register the user on the website and enable online ordering.
The form is not intended for individuals under 14 years old or not of legal age.
Legal basis: Execution of pre-contractual measures requested by the data subject (Article 6(1)(b) GDPR).
Retention period: For the time necessary to participate in the event, after which the data will be deleted.
Nature of provision: Optional, but failure to provide necessary data prevents the order.
D) Work With Us Area
Data submitted through the application form will be processed to assess the candidate. The form is not intended for minors under 14 or for nonofage applicants.
Legal basis: Execution of pre-contractual measures (Article 6(1)(b) GDPR).
Retention period: 1 year.
Nature of provision: Optional, but failure to provide required data prevents the assessment of the application.
RECIPIENTS OR CATEGORIES OF RECIPIENTS
Personal data may be communicated to recipients acting as processors (Article 28 GDPR), persons acting under the authority of the Controller or Processor (Article 29 GDPR), or independent controllers, for the purposes listed above.
DATA TRANSFER TO A THIRD COUNTRY
Personal data may be transferred outside the EU.
The transfer complies with the guarantees set out in Regulation (EU) 2016/679, as it is legitimised by an adequacy decision issued by the European Commission (Article 45 GDPR).
RIGHTS OF THE DATA SUBJECT
The data subject may exercise the rights set out in Articles 15 et seq. GDPR by contacting the Data Controller.
These include the right of access, rectification, erasure, and data portability.
The data subject may withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.
If they believe the processing violates GDPR, they may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
CHANGES TO THIS PRIVACY NOTICE
The Controller reserves the right to amend this Privacy Notice at any time. The notice will include the date of its latest update.
Last updated: 29/01/2026
Data Controller: BERBERE’ S.R.L