Legal document
Information on the processing of personal data
Provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
Last updated: July 1, 2026
1. Data Controller
Contact email: info@procibaria.com.
2. Data we collect
Through the contact form on the site, we collect the data you voluntarily provide, including:
- personal and contact data: name, surname, email, phone, role;
- data relating to your business: company name/business, business type, province/area, number of locations, purchasing categories, spending range (for HORECA businesses); product category, served area, logistics capacity, catalog availability (for suppliers);
- free-text message content;
- technical data collected automatically: IP address, browser user-agent, referring page and any campaign parameters (UTM), submission date and time.
3. Purposes and legal bases of processing
| Purpose | Legal basis |
|---|---|
| Responding to requests for information/demo and managing commercial contact (lead). | Pre-contractual measures requested by the data subject — Art. 6.1(b) GDPR; consent — Art. 6.1(a) GDPR. |
| Compliance with legal obligations (e.g. accounting, tax) if the relationship continues. | Legal obligation — Art. 6.1(c) GDPR. |
| Site security and abuse/spam prevention (honeypot, technical logs). | Legitimate interest of the Controller — Art. 6.1(f) GDPR. |
| Any commercial/marketing communications about Procibaria products and services. | Consent — Art. 6.1(a) GDPR (optional and revocable). |
4. Nature of provision
Providing the data marked as mandatory in the form (e.g. email, name) is necessary to follow up on your request: failure to provide it makes it impossible to contact you. Providing other data is optional.
5. Processing methods
Data is processed using IT and telematic tools, adopting appropriate technical and organizational measures to ensure security, confidentiality, and integrity, for the time strictly necessary for the stated purposes.
6. Retention period
Data collected through the form is retained for the time necessary to manage the request and, if no relationship is started, for a maximum of 24 months from collection. If a contractual relationship is established, statutory terms apply (e.g. 10 years for accounting records). Data processed on the basis of consent is retained until consent is withdrawn.
7. Data recipients
Data may be processed by authorized personnel of the Controller and communicated to parties that perform instrumental activities on behalf of the Controller, appointed as Processors pursuant to Art. 28 GDPR, including:
- hosting and site infrastructure service providers: DigitalOcean;
- email/SMTP service providers for sending notifications: Google;
- consultants and professionals (legal, tax) where necessary.
Data is not disseminated or transferred to third parties for their own purposes without your consent.
8. Transfers outside the EU
The site is configured to load fonts and front-end libraries from local theme resources. If third-party resources are introduced in the future, loading them may involve communicating your IP address to servers located outside the European Economic Area. Any such transfers will take place in compliance with Articles 44 et seq. GDPR.
9. Data subject rights
As a data subject, you may exercise at any time, pursuant to Articles 15-22 GDPR, the rights of access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection to processing, and the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
To exercise your rights, write to: info@procibaria.com.
10. Complaint to the supervisory authority
You have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if you believe your data is processed in violation of applicable law.
11. Changes to this notice
The Controller reserves the right to update this notice. The current version is the one published on this page, with the date of last update indicated.
This document is a template and must be completed with the Controller’s details and validated by a legal professional before publication.