INFORMATION NOTICE PURSUANT TO ARTICLES 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679
Eurofarm S.p.a., VAT No. 00753720879, as Data Controller, informs you that your data will be processed in the manner and for the purposes indicated below.
The Controller undertakes to protect the privacy and confidentiality of Personal Data in compliance with the principles of fairness, lawfulness, transparency and the protection of your rights.
1) TYPES OF DATA PROCESSED
We process personal data provided by you (name, email, company name, telephone, etc.) when you voluntarily send requests, and data collected automatically from the website.
- Data provided by you: personal, identifying and non-sensitive data you provide when making requests by email, through the contact form or by phone about our products/services.
- Data we collect automatically: anonymous data collected using cookies or similar technologies. For further details, please see the Cookie Policy below.
Note: Users under 16 years of age cannot provide any personal data without the consent of their parents or legal guardians.
2) PURPOSES AND LEGAL BASIS OF THE PROCESSING
Your personal data will be processed:
A) to fulfil our contractual obligations; to respond to your information requests; to provide a quote you requested; to execute contracts for the sale of products or provision of services; to ensure the necessary support regarding purchased products and services.
B) to carry out aggregate anonymous statistical analyses in order to improve our services;
C) for administrative purposes and to comply with legal obligations such as accounting, tax, or judicial authority requests.
D) in the case of curriculum vitae submissions, exclusively for recruitment purposes.
3) IS THE PROVISION OF DATA MANDATORY?
Providing your data is always optional, but failure to do so may make it impossible to carry out certain processes, such as those strictly necessary for fulfilling a contract or providing requested services.
4) LOCATION, PROCESSING METHODS AND DATA RETENTION PERIOD
Your personal data will be processed through the operations referred to in Art. 4 of the Privacy Code and Art. 4 No. 2 of the GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data.
Your data are stored at the Controller’s headquarters and processed both manually and electronically and/or automatically, in line with the purposes indicated, and in any case in such a way as to ensure their security and confidentiality. The data you send are not stored within our website.
The Controller will retain personal data for the time necessary to achieve the purposes stated above and, in any case, no longer than 10 years after the end of the relationship for purposes referred to in point C, and no longer than 38 months from data collection for purposes referred to in point B.
5) DATA ACCESS
Your data may be made accessible for the purposes indicated in point 2:
- to employees and collaborators of the Controller, in their capacity as persons in charge and/or internal data processors and/or system administrators;
- to third-party companies or other entities (website providers, cloud providers, e-payment service providers, suppliers, hardware and software support technicians, shippers and carriers, credit institutions, professional firms, etc.) that perform outsourced activities on behalf of the Controller, in their capacity as data processors.
6) DATA TRANSFER
The data will not be disclosed, sold or exchanged with subjects other than the Controller, data processors and persons in charge without your explicit consent.
7) YOUR RIGHTS
You have the right to know what personal data of yours are being processed. Specifically, you have the right of access, rectification, erasure, data portability, restriction of processing, and the right to object to processing where applicable.
Below is a brief description of your rights regarding the processing of your personal data:
- Right of access: allows you to obtain confirmation as to whether your personal data are being processed by the Controller, and, if so, to access those data and related information;
- Right of rectification: allows you to have inaccurate personal data corrected without undue delay and, taking into account the purposes of processing, to have incomplete data completed;
- Right to erasure: allows you to have your data deleted without undue delay (e.g., when your data are no longer necessary for the purposes for which they were collected), subject to applicable legal exceptions (e.g., where retention is required for legal obligations). Deletion will be carried out within the technical time limits;
- Right to data portability: allows you, in certain circumstances, to receive your personal data in a structured, commonly used and machine-readable format, and to transmit those data to another controller, provided that this does not infringe the rights and freedoms of others;
- Right to restriction of processing: allows you, in certain circumstances, to request restriction of the processing of your personal data. In such cases, the Controller may continue processing only in specific cases, e.g., to exercise the right of defense or protect another individual’s rights;
- Right to object: allows you, in certain cases, to object to the processing of your personal data unless there are overriding legitimate grounds for the Controller to continue the processing.
For more information or to exercise your rights, please contact us.
8) CHANGES TO THIS NOTICE
This Privacy Notice may be subject to changes. You are therefore advised to check this page regularly and refer to the most recent version.
Last update: November 2025