Thank you for coming to visit us.
We believe it is extremely important for you to have confidence in us and we would therefore like to share with you on this page the purposes and methods of processing the personal data we collect when you browse on the website (hereinafter “Website”) and when you use the services we offer, as specified in greater detail below.
Processing of your personal data is always based on principles of lawfulness and fairness and complies with all applicable current regulations.
You can find all details on processing of your personal data below.
We will be happy to respond to any questions you may have. Please contact us using the contact detail listed in the Website section Contact us
Last review May 22th 2018
This policy will allow you to discover, before accessing the various sections of the Website, how Barilla processes your personal data, including both data you provide directly (such as your first name, surname, postal and e-mail address, age, date of birth, gender, etc.) and the data which Barilla collects in the manner described in the section “The personal data we collect and how we collect it” (hereinafter, collectively, the “Personal Data”). Please read the policy before providing your Personal Data.
Identity and contact details of the Controller
The Controller is Barilla G. e R. Fratelli Società per Azioni (hereinafter “Barilla” or “Controller”), with registered office in Parma, Via Mantova, 166 – 43122 The contact details are listed in the Website section Contact us: Tel + 39 0521 2621 - Fax + 39 0521 270621 - Numero Verde 800 862323.
Barilla will process your Personal Data in accordance with Regulation EU no. 2016/679 and national personal data protection regulations (hereinafter the “Privacy Regulation”).
The Personal Data we collect and how we collect it
Any requests for information or services you submit could lead to collection and subsequent processing of your Personal Data (such as first name, surname, postal and e-mail address, age, date of birth, gender, etc.).
In particular, your Personal Data may be collected:
- - when you fill out on-line forms; and
- - through your publication of Contributions (as defined below), the content of which could include Personal Data which you have provided directly on social networks managed independently by third parties, including, but not limited to, Facebook, Twitter, etc. (hereinafter “Social Networks”). By “Contributions”, we mean images, comments, catchphrases associated with the subject of the Website, contents and any other information you have conceived and published on the pages of Social Networks dedicated to the products of the various Barilla group brands, including any image you provide.
If you choose to send a request through the “Contact us” section of the Website, you have to provide certain Personal Data to allow Barilla to satisfy your needs, so the relative boxes of the registration form are marked with an asterisk or otherwise indicated as obligatory. Providing Personal Data which is not marked with an asterisk or otherwise indicated as obligatory is entirely optional and there will be no consequences if this Personal Data is not provided, or is incomplete or imprecise. However, if you do not provide the Personal Data marked with an asterisk or otherwise indicated as obligatory, or said data is incomplete or imprecise, the service you request cannot be supplied. If you fail to provide any of the obligatory Personal Data, a Barilla error message will appear listing the missing obligatory Personal Data.
The purposes of processing your Personal Data and the legal basis for processing
Based on the needs you indicate each time on accessing the various sections of the Website (and excluding individual initiatives which require specific Personal Data to be provided, for which specific information will be published each time on the Website), the purposes of processing your Personal Data and the legal basis for processing are indicated below.
Your Personal Data will be processed for the following purposes only with your consent to processing, which may be withdrawn at any moment, by sending a request to the Controller via the “Contact us” section of the Website:
- a) Management of your requests and response to them
You may decide to consent to processing of your Personal Data to allow Barilla to manage and respond to your requests relating to products and the various initiatives relating to the various If you decide not to consent to processing of your Personal Data for said purposes, you will be unable to send the request.
Furthermore, even without your consent, Barilla may process your Personal Data for the following purposes:
- I. management of activities linked to your use of the Website, including publication of your Contributions on the pages of Social Networks dedicated to the products of the various Barilla group brands (since processing is necessary for execution of a contract or pre-contractual measures);
- II. management and fulfilment of legal obligations (accounting, administrative, tax obligations, etc.);
- III. management of complaints and any disputes (as this is a legitimate interest of the Controller).
How we process your Personal Data
Processing of your Personal Data may include any type of operation, such as collection, recording, organisation, storage, consultation, processing, rectification, selection, extraction, comparison, use, interconnection, blocking, disclosure, erasure and destruction.
Your Personal Data will be processed mainly with automated tools, but also on paper, adopting logic strictly linked to the related purposes, through the use of databases and electronic platforms managed by Barilla or by third parties appointed as external processors for this purpose and/or through the integrated IT systems of Barilla and of said third parties and/or websites owned or used by Barilla.
The Controller has assessed the level of security to be sufficient, taking account of the risks which could derive from loss, destruction, rectification, unauthorised disclosure, accidental or illegal access, abuse or alteration of your Personal Data. In particular:
- - it has adopted security measures appropriate to the risks;
- - it stores your Personal Data on servers located within Europe, which have an advanced and daily back-up system.
Where we process your Personal Data
Your Personal Data will be processed primarily at the Controller's offices and in places where the processors are located. For further information, contact the Controller at the addresses indicated in the section “Identity and contact details of the Controller”.
How long we keep your Personal Data
In order to ensure compliance with the principles of necessity and proportionality of processing, the Controller keeps the Personal Data for different periods, depending on the individual purposes being pursued:
- (i) in order to manage and respond to your requests relating to products and initiatives of the various Barilla Group brands, advertising or the Website (“Contact us” section of the Website), your Personal Data will be kept for the time strictly necessary to fulfil your request;
- (ii) for management of activities linked to your use of the Website, including publication of your Contributions on the pages of Social Networks dedicated to the products of the various Barilla group brands, your Personal Data will be kept for the time strictly necessary to supply the service you have requested;
- (iii) for management and fulfilment of legal obligations (accounting, administrative, tax obligations, etc.), your Personal Data will be kept for the time strictly necessary for said purpose;
- (iv) for management of any complaints and disputes, the Personal Data will be kept for the period strictly necessary for this purpose and, in any case, not beyond the applicable time limits.
The recipients of your Personal Data
Your Personal Data may be communicated to and processed by:
(i) legal or natural persons who act as external processors, performing activity in outsourcing, appointed by Barilla or by the external processors of Barilla (including parties assigned to perform assistance, communication, marketing, advertising, promotion and sale activities relating to products and/or services and also advertisers, advertising agencies, suppliers of IT services, the Website operators, electronic platform operators, partners, credit institutions, professional consultancy firms);
(ii) employees and/or collaborators of the Controller (including system administrators), who operate under its direct authority, who will be authorised to process your Personal Data; and
(iii) employees and/or collaborators of the external processors (including system administrators), who operate under the direct authority of the external processors and will be authorised to process your Personal Data.
Your Personal Data will not be communicated to third parties, except when communicated by Barilla to consultants in order to protect its rights, nor disclosed.
Minors under 16 years of age must not provide information or Personal Data to Barilla without parental consent. If this consent is not provided, minors cannot send requests via the Website. Barilla invites anyone with parental responsibility on minors to inform them on secure and responsible use of the Internet and the Web.
Identity and contact details of the processors
A complete list of the Personal Data processors may be consulted by contacting the Controller at the address indicated in the section “Identity and contact details of the Controller”.
Contact details of the Data Protection Officer (or “DPO”)
The contact detail of the Data Protection Officer appointed by the Controller is: [email protected]
Your rights in relation to processing of your Personal Data
As the data subject, you are granted numerous rights by the Privacy Regulation. In detail, you are entitled to:
- 1. obtain from the Controller confirmation of whether or not your Personal Data exists, even if not registered, and its disclosure in intelligible form, and also access to your Personal Data (by obtaining a copy) and the related information (including the purposes of processing, the categories and origin of the Personal Data, the categories of recipients to whom it has been or could be disclosed, the retention period (when possible), the rights which may be exercised);
- 2. obtain from the Controller the rectification of your Personal Data and supplementing of any incomplete Personal Data;
- 3. obtain from the Controller the erasure of your Personal Data without undue delay, including when the Personal Data is no longer necessary for the purposes for which it has been processed or the legal basis for processing no longer exists;
- 4. obtain from the Controller the conversion into anonymous form or blocking of your Personal Data if it is processed illegally, including data which it is not necessary to store, in relation to the purposes for which the Personal Data was collected or subsequently processed;
- 5. obtain from the Controller the limitation of processing of your Personal Data, also when you dispute its accuracy or object to processing, for the period necessary for the respective checks to be performed;
- 6. receive your Personal Data in a structured, commonly used, machine-readable format, and also transmit or, if technically feasible, obtain transmission of your Personal Data to another controller without impediments, in cases in which processing is carried out by automated means and is based on your consent or when necessary for execution of a contract to which you are a party;
- 7. withdraw consent to processing of your Personal Data for any of the purposes for which it has been provided.
You may exercise your rights with Barilla by accessing the “Contact us” section of the Website or by sending a letter by ordinary mail [email protected], to the address indicated in the section “Identity and contact details of the Controller”.
Furthermore, if you believe that processing of your Personal Data breaches the Privacy Regulation, you may lodge a complaint with the Data Protection Supervisory Authority in the State in which you reside, where your workplace is located or in which the presumed breach has occurred, or contact said Authority to request information on exercising of your rights under the Privacy Regulation.
The right to object to processing of your Personal Data
At any moment and for reasons linked to your own specific situation, you are entitled to object to processing of your Personal Data which is based on a legitimate interest pursued by the Controller or by third parties. In this case, the Controller abstains from further processing of your Personal Data unless it demonstrates the existence of legitimate and binding reasons which prevail over your interests, rights or freedoms or processing is necessary to ascertain, exercise or protect a legal right.
You are entitled to object to processing of your Personal Data, by accessing the “Contact us” section of the Website or sending an e-mail to [email protected]
If you object to processing of your Personal Data for this purpose, the Controller will be unable to carry out the related processing.