Privacy Policy

This privacy notice regarding the processing of personal data is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018 (“Privacy Code”).
This notice explains how Rossi Ingegneria Alimentare Srl processes the personal data of individuals who visit the website and use the contact form.

1. When you use our website, we may collect two main categories of data.
When you complete the contact form (“Contact us” / “Contact”) or contact us using the details published on the website, you provide us with certain personal information, including your first name, surname, email address, telephone number, the content of your message and any information you choose to include in the free-text field.
Fields marked as mandatory are required in order for us to process your request and respond appropriately.
While browsing the website, certain technical data are collected automatically (for example IP address, browser type and device information). These data are used primarily to ensure the proper functioning of the pages and the security of the website.
The website also uses cookies. For further information regarding the cookies used (technical cookies and, where applicable, analytics or profiling cookies), please refer to the Cookie Policy available in the “Legal” section of the website.

2. We process your personal data for various purposes, always in compliance with applicable data protection legislation (GDPR and Privacy Code).
When you complete the contact form or contact us using the details provided, we use your data to process your request; contact you and provide the information you require; respond to queries concerning products, services, technologies, sectors served, filling and packaging lines, support services, offers and quotations, pursuant to Article 6 (1)(b) GDPR.
If you do not provide the mandatory data required in the form, we will not be able to process your request or respond to you.
In certain cases, your data may also be processed in order to comply with obligations imposed by laws, regulations or requests from public authorities (for example accounting, tax or administrative obligations connected with contractual relationships) pursuant to Article 6 (1)(c) GDPR.
If you wish, we may also use your contact details, in particular your email address, to provide information about products and services; updates relating to complete lines, systems and technologies, services and initiatives; invitations to trade fairs and industry events; and customer satisfaction surveys or market research concerning the use of our products and services.
For these direct marketing activities, we process your data only where you have given your explicit consent pursuant to Article 6 (1)(a) GDPR and Article 130 of the Privacy Code.
Consent is optional: if you choose not to provide it, you may still send us your request via the form and receive our response without any limitation.
You may withdraw your consent or object to the processing of your data for marketing purposes at any time by using the unsubscribe link that may be included in the email or by writing to privacy@ingarossi.com

3. We process your personal data using electronic means and, where necessary, in paper form.
In all cases, we adopt appropriate technical and organisational measures to protect data against unauthorised access, prevent the loss or unlawful use of data, and ensure that data are processed fairly, lawfully, transparently and only to the extent necessary for the stated purposes.
Your personal data may be processed only by authorised personnel who have received appropriate instructions and who belong to the following departments: sales and commercial; marketing and communications; administration; IT and information systems management.
For certain activities, we rely on external parties who assist us in providing services related to the website and our business activities.
These include, for example, companies responsible for hosting and technical maintenance of the website (including the Aronpak website); providers of platforms for sending newsletters and email communications; consultants or service providers (for example in the areas of IT, communications, marketing, legal, tax and administrative consultancy).
These parties process data solely on our behalf and in accordance with specific instructions: for this reason, we appoint them as Data Processors pursuant to Article 28 GDPR and enter into specific agreements with them.
An updated list of Data Processors is available upon request by contacting us using the details provided.
Your personal data are not disclosed to the public, published online or communicated to an indeterminate number of parties.

4. As a general rule, your data are processed within the European Economic Area.
If, for technical or organisational reasons (for example because an IT or email marketing service provider has servers located outside the European Union), it becomes necessary to transfer data to third countries, we will ensure that such transfer takes place in compliance with the rules laid down by the GDPR.
We do not retain your data for longer than necessary.
Data collected through the contact form are retained for the time necessary to process your request and, where such request gives rise to a commercial or contractual relationship, for the entire duration of that relationship and for the period required under civil and tax legislation (for example for a certain number of years following the termination of the relationship or the last significant interaction).
Data used for direct marketing purposes are processed until your consent remains valid and, in any event, for no longer than a maximum period defined internally (for example a number of years from the last significant interaction, such as the opening of one of our emails), after which the data will be deleted or anonymised.

5. At any time, you may exercise the rights granted to you by the GDPR as a data subject.
In particular, you have the right to:

• know whether we process data concerning you and, where this is the case, obtain access to such data and to certain information relating to the processing (right of access);
• request the rectification of your data if they are inaccurate or incomplete (right to rectification);
• request the erasure of your data in the cases provided for by law, for example where they are no longer necessary for the purposes for which they were collected (right to erasure);
• request the restriction of processing in the cases provided for under Article 18 GDPR;
• receive the personal data you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible, transmit them to another controller (right to data portability);
• object to the processing of your data where such processing is based on our legitimate interest, on grounds relating to your particular situation;
• object at any time to processing for direct marketing purposes: in such case, we will stop sending you promotional communications.

To exercise these rights, you may contact us:

• by email at privacy@ingarossi.com
• or by post at the address of our registered office.

You also have the right to lodge a complaint with the Italian Data Protection Authority if you believe that the processing of your data does not comply with applicable legislation.

6. The contact form contains certain mandatory fields (for example first name, surname, email address, telephone number and message). Without this information, we will not be able to process your request or respond to you.

7. You will also find:

• a mandatory checkbox confirming that you have read this privacy notice (required in order for us to process your request);
• an optional checkbox through which you may choose whether or not to consent to receiving marketing communications by email.

If you do not select this checkbox, you will still be able to submit the form and receive a response: we simply will not use your data to send you promotional communications.

8. This privacy notice may be amended over time, for example in the event of regulatory updates or changes to the services offered through the website. Any updates will be published on this page, indicating the most recent version. Where the changes concern processing activities based on consent (for example marketing activities), we may, where necessary, ask you to provide your consent again.