The purpose of this document is to inform the natural person (hereinafter the "Data Subject") regarding the processing of their personal data (hereinafter the "Personal Data") collected by the data controller, Generazione Gastronomica S.r.l., Via Maria Vittoria 58H, 1013, Turin, (hereinafter the "Controller"), via the website www.rabare.it (hereinafter the "Application"). Changes and updates will be binding as soon as they are published on the Application. If the Data Subject does not accept the changes made to the Privacy Policy, he or she must cease using this Application and may request the Controller to delete his or her Personal Data.

1 Categories of Personal Data Processed
The Data Controller processes the following types of Personal Data voluntarily provided by the Data Subject:
Contact details: name, surname, address, email, telephone number, images, authentication credentials, any additional information sent by the Data Subject, etc.

Technical Data: Personal Data generated by the devices, applications, tools, and protocols used, such as information about the device used, IP addresses, browser type, and Internet Service Provider (ISP). This Personal Data may leave traces that, particularly when combined with unique identifiers and other information received from servers, can be used to create profiles of natural persons.

Browsing and Application usage data: such as pages visited, number of clicks, actions performed, session duration, etc. Failure by the Data Subject to provide Personal Data required by law or contract, or if such data is necessary for the conclusion of a contract with the Data Controller, will make it impossible for the Data Controller to establish or continue the relationship with the Data Subject.

2 Cookies and similar technologies
The Application uses cookies, web beacons, unique identifiers, and other similar technologies to collect Personal Data from the Data Subject on the pages, links visited, and other actions performed when the Data Subject uses the Application. This data is stored and then transmitted upon the Data Subject's next visit. The complete Cookie Policy can be viewed at the following address: rabare.it/cookie-policy

​

3 Legal Basis and Purpose of Processing
The processing of Personal Data is necessary:

• for the performance of the contract with the Data Subject, and specifically:

  • fulfillment of any obligation arising from the pre-contractual or contractual relationship with the Data Subject

  • registration and authentication of the Data Subject: to allow the Data Subject to register on the Application, access, and be identified, including via external platforms

  • support and contact with the Data Subject: to respond to the Data Subject's requests

• for legal obligations, and specifically:

  • fulfillment of any obligation under applicable laws, regulations, and regulations, in particular, tax and fiscal matters

• based on the legitimate interest of the Data Controller, for:

  • email marketing purposes for the Data Controller's products and/or services, to directly sell the Data Controller's products or services using the email address provided by the Data Subject in the context of the sale of a product or service similar to the one being sold

  • management, optimization, and monitoring of the technical infrastructure: to identify and resolve Any technical problems, to improve the performance of the Application, to manage and organize information in an IT system (e.g., server, database, etc.)

  • Statistics with anonymous data: to perform statistical analyses on aggregated and anonymous data to analyze the behavior of the Data Subject, to improve the products and/or services provided by the Data Controller, and to better meet the Data Subject's expectations.

• Based on the Data Subject's consent, for:

  • Profiling of the Data Subject for marketing purposes: to provide the Data Subject with information on the Data Controller's products and/or services through automated processing aimed at collecting personal information with the purpose of predicting or evaluating their preferences or behavior.

  • Retargeting and remarketing: to reach, with personalized advertising, the Data Subject who has already visited or shown interest in the products and/or services offered by the Application using their Personal Data. The interested party may opt out by visiting the Network Advertising Initiative page.

  • Marketing purposes for the Data Controller's products and/or services: to send information or commercial and/or promotional materials, to carry out direct sales of the Data Controller's products and/or services, or to conduct market research using automated and traditional methods.

​

4. Processing Methods and Recipients of Personal Data
Personal Data is processed using paper and electronic means, using organizational methods and procedures strictly related to the purposes indicated, and adopting appropriate security measures.
Personal Data is processed exclusively by:

• persons authorized by the Data Controller who have undertaken to maintain confidentiality or have an appropriate legal obligation of confidentiality;

• parties who operate independently as separate data controllers or by persons designated as data processors by the Data Controller to carry out all processing activities necessary to achieve the purposes set out in this privacy policy (e.g., business partners, consultants, IT companies, service providers, hosting providers);

• persons or entities to whom Personal Data must be disclosed by law or by order of the authorities.

​

5. Location
Personal Data will not be transferred outside the European Economic Area (EEA).

​

6. Personal Data Retention Period
Personal Data will be retained for the period of time necessary to fulfill the purposes for which it was collected, in particular:

• for purposes related to the performance of the contract between the Data Controller and the Data Subject, it will be retained for the entire duration of the contractual relationship and, after its termination, for the ordinary limitation period of 10 years. In the event of legal disputes, it will be retained for the entire duration of the same, until the time limit for filing appeals has expired.

• for purposes related to the Data Controller's legitimate interest, it will be retained until such interest is fulfilled.

• for the fulfillment of a legal obligation, by order of an authority, and for legal protection, it will be retained in compliance with the time limits set by such obligations, regulations, and in any case until the expiration of the limitation period established by applicable laws.

• for purposes based on the Data Subject's consent, it will be retained until consent is revoked.

​

7 Rights of the Data Subject
Data Subjects may exercise certain rights with respect to the Personal Data processed by the Data Controller. In particular, the Data Subject has the right to:

• be informed about the processing of their Personal Data

• withdraw consent at any time

• restrict the processing of their Personal Data

• object to the processing of their Personal Data

• access their Personal Data

• verify and request rectification of their Personal Data

• obtain restriction of the processing of their Personal Data

• obtain erasure of their Personal Data

• transfer their Personal Data to another controller

• file a complaint with the supervisory authority for the protection of their Personal Data and/or take legal action.

To exercise their rights, Data Subjects may send a request to the following email address: info@rabare.it. Requests will be processed by the Data Controller immediately and processed as quickly as possible, in any case within 30 days.

Last updated: October 22, 2024