Notice on the processing of personal data (issued pursuant to Art. 13 of EU Regulation 2016/679, last updated 01/2019)

Dear User, Codyfarm S.r.l. pays particular attention to the privacy of its customers/users. Through this page we describe how our website (https://www.menudioggi.it) is managed with regard to the processing and protection of the personal data of the customers/users who access it. This is a general notice, provided in compliance with EU Regulation 2016/679 ("Regulation on the protection of natural persons with regard to the processing of personal data and on the free movement of such data"), to anyone browsing the Menù di Oggi website (www.menudioggi.it), a product of Codyfarm S.r.l.

Data Controller

The Data Controller is Codyfarm S.r.l., registered office in Corso Novara 10, 80143 Naples (NA), Italy, email: info@codyfarm.it.

Types of data collected

"Processing" means any operation or set of operations performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art. 4, EU Regulation 2016/679).

Normal browsing and/or registration on this website involves the processing of the following categories of data:

— Browsing data (e.g. IP addresses, domain names of the computer, smartphone or tablet used by the user, and other information about the operating system and the user's IT environment, etc.), whose transmission is implicit in the use of Internet communication protocols by the IT systems and software that make our site work during its normal operation.

— Data needed to register for the service: for anyone who wants to register for Menù di Oggi, processing is limited exclusively to the data strictly necessary for that purpose, namely: company name, type of business, email address and password (the latter stored in encrypted form, never in plain text). If an additional user is invited by a company already registered, the data collected are: first name, last name, email address and, if optionally provided, a phone number.

— Data needed for the contact form: for anyone who fills in the "Contact" form to request information, processing is limited to: company name, name and surname of the contact person, email address, message text and the sending IP address. This data is not stored in a searchable archive: the form sends it by email to the staff responsible for replying to the request.

Purpose, legal basis and nature of the data provided

The Personal Data provided through the site will be processed by Codyfarm for the following purposes:

1. Subscribing to the Menù di Oggi service, or handling a request sent through the contact form;

2. Fulfilling a legal obligation to which the Data Controller is subject;

3. Establishing, exercising or defending a legal claim, or whenever judicial authorities exercise their judicial functions.

Providing Personal Data for the purpose in point 1) is optional, but failing to provide it may make it impossible to respond to your request or to fulfil a legal obligation to which the Data Controller may be subject.

How data is processed, communicated and stored

Regarding how data is collected and processed, we inform you that the data we hold will be processed in written form and/or on paper, magnetic, electronic or telematic media, using tools suitable for ensuring their confidentiality and security in accordance with EU Regulation 679/2016 (in particular Articles 24, 32 and 35).

Data will be processed lawfully, fairly and transparently, and in a manner that protects the confidentiality and rights of the user, only by staff directly authorised by the Data Controller, or by Data Processors specifically appointed pursuant to Art. 28 of EU Regulation 679/2016 (a list is available from the Data Controller). Data will not be disseminated, meaning made known to an indeterminate number of persons in any way, including by making it available or open to consultation.

Categories of recipients

To provide the Menù di Oggi service, Codyfarm uses the hosting service of Contabo, operating within the European Union, registered office: Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany, https://www.contabo.com.

Data may also be communicated — meaning made known to one or more specific parties (a list is available from the Data Controller) — to parties who may access the data by virtue of a legal, regulatory or EU provision, within the limits set by such provisions.

Retention period

Data will be kept for no longer than necessary for the purposes for which it was collected or subsequently processed, also in accordance with applicable legal provisions.

Rights of data subjects

Data subjects have the right, at any time, to obtain confirmation of whether or not their personal data exists, to know its content and origin, to verify its accuracy or request its completion or updating, or its rectification, erasure or restriction, or to object to its processing, and to lodge a complaint with the supervisory authority pursuant to Art. 15 of EU Regulation 2016/679.

Furthermore, pursuant to Articles 16, 17, 18, 19, 20, 21 and 22 of the same EU Regulation 679/2016, data subjects have the right to request rectification, erasure ("the right to be forgotten"), restriction of processing, notification in the event of rectification or erasure of personal data or restriction of processing, data portability, anonymisation, or the blocking of data processed in violation of the law, as well as the right to object, on legitimate grounds, to its processing at any time.

To exercise these rights, you may contact the Data Controller directly at the email address indicated above: info@codyfarm.it.

This Privacy Policy may be updated or amended, in particular following the entry into force of new directives issued by the competent authority.

Notice on the use of cookies

The following sections are a further specification of the Privacy Policy with regard to the use of Cookies, and describe the various types of cookies and technologies used on this website, as well as the terms and conditions of their use.

What cookies are

Cookies are small text files that the sites visited by the user send to the device (usually to the browser); they are stored in the corresponding browser folder while the user is visiting a website, to be sent back to those same sites on subsequent visits. They are used to improve browsing, track user preferences, allow the presence (or absence) of targeted marketing initiatives to be managed, or to provide services related to the Data Controller's activity, such as newsletters, demos, etc.

If restrictions are placed on their use, this affects the user's status while browsing. Blocking or removing them from the browser cache may result in incomplete use of the services offered by the web application.

For the purposes at hand, cookies can be divided into two categories: technical cookies and profiling cookies.

Profiling cookies

Profiling cookies — as provided for by measure 229/2014 of the Italian Data Protection Authority (Garante) — are designed to build profiles of the user and are used to send advertising messages in line with the preferences shown by the user while browsing the web.

This website does not use profiling cookies. They are therefore not covered by this notice.

Technical cookies

Technical cookies are those used solely for "transmitting a communication over an electronic communications network, or to the extent strictly necessary for a provider of an information society service explicitly requested by the subscriber or user to provide that service" (see Art. 122, paragraph 1, of the Italian Data Protection Code). This category includes both persistent cookies and session cookies.

Persistent cookies help sites remember user data and settings for future visits. This allows faster and more convenient access, since it is not necessary to log in again. Persistent cookies remain active even after the browser is closed.

Session cookies are temporary cookies whose operation on the device is limited to the duration of the user's browsing session. When the browser is closed, session cookies expire. They are generally used to identify users when they access a site, to remember the user's preferences while moving between pages on the site, and to provide specific information collected previously, etc.

Third-party cookies

So-called third-party cookies are cookies set by a site other than the one the user is browsing. They are used, for example, by the site the visitor first chose, which contains ads from another server or third-party website. In practice, the browser gathers information from different sources so that all elements are displayed on the same page, creating several cookies in the corresponding browser folder.

All these cookies can be removed directly from the browser settings, or using dedicated (including free) programs, or their creation can be blocked. In the latter case, some services on the site may not work as intended, and it may not be possible to access certain features or — no longer having the associated cookie — the user's preferences may be lost, so information may be displayed in the wrong local format or may not be available.

Cookie-based threats

Because cookies are transmitted between the browser and the website, a malicious or unauthorised person could intercept the data transmission and the related information. Although relatively rare, this can happen if the browser connects to the site using, for example, an unsecured Wi-Fi network. Other cookie-based attacks involve server settings. If a website does not require the browser to use encrypted connections only (e.g. https), malicious actors can exploit this vulnerability to deceive visitors by sending their personal information over insecure channels. Attackers can then hijack personal data for unauthorised processing purposes.

How can I control the installation of cookies

Most browsers accept cookies automatically, but it is possible to choose not to accept them. We nonetheless recommend not disabling them, as this could prevent moving from one page to another.

If you do not want your computer to receive and store cookies, you can change your browser's security settings (Internet Explorer, Google Chrome, Safari, etc.). In any case, please note that certain parts of this site can only be used to their full extent if the browser accepts cookies. Consequently, choosing to remove and not accept cookies may negatively affect your use of the site.

Browser manufacturers provide help pages on managing cookies in their products; please refer to their official documentation for more information (Google Chrome, Internet Explorer, Mozilla Firefox, Safari desktop/mobile, Android browsers, Opera).

Use of cookies on this site

Most browsers have built-in privacy settings that provide different levels of cookie acceptance, expiry and deletion after a user has visited a given site.

This site uses the cookies listed in the table below:

Other external resources (not cookies)

This site loads typefaces (fonts) from Google Fonts, a service of Google Ireland Limited. This involves a technical connection to Google's servers, which receive the requesting device's IP address when the page is loaded; Google Fonts does not install profiling cookies. For more information: policies.google.com/privacy.

Since the installation of cookies and other tracking systems by third parties through the services used within this website cannot be technically controlled by the Data Controller, any specific reference to cookies and tracking systems installed by third parties is to be considered indicative. For complete information, please refer to the privacy policy of any third-party services listed in this document.

For services provided by third parties, the user may also exercise their right to object to tracking by referring to the third party's privacy policy, using the opt-out link explicitly provided in the table above, or by contacting the third party directly.

For further clarification, you may contact the Data Controller directly, as indicated above, by writing to: info@codyfarm.it.