Online account registration policy

Data Controller

The Data Controller is Menù SRL Via Statale 12, 102, 41036 Medolla MO, which can also be reached by calling +39 0535 49711 or emailing privacy@menu.it

Processing purpose

Any personal identification data collected from the data subject, user of the website, is subject to processing and used directly for the following purposes:
(a) Personal data collected from data subjects must be processing to meet users’ account registration requests. Any incorrect or insufficient data may result in the total or partial impossibility of fulfilling the data subject’s requests. In particular, personal data will be processed to provide services and send special content to users/visitors/customers enrolled in the Menu Club.
(b) Personal data collected from data subjects will be used to send communications relating to upcoming commercial and promotional initiatives, announcements of the Data Controller’s services and deals, and informative or promotional messages relating to its business activities, as well as for related and instrumental purposes inherent to food products, recipes and innovations in the field of food. You may subscribe to the newsletter either via the website footer or by subscribing to each individual form.

Providing and consenting to the use of data

The provision of data in relation to point A is essential in order for the Data Controller to fulfil your requests. Instead, your consent for processing data in relation to point B is necessary since this concerns communications of a commercial and promotion nature relating to the activities and services of the Data Controller. Consent is considered freely given upon ticking the “I consent” box.

Processing methods

The processing of your personal data will be based on principles of fairness, lawfulness and transparency, protecting both your privacy and your rights. Such data will be processed electronically or using hard copies by specially authorised personnel trained in confidentiality matters and fully aware of the fact that processing may only be carried out for the purposes identified by the Data Controller. The Data Controller will implement technical and organisational measures appropriate to the level of risk.

Transferring personal data outside the EU

The data of the data subject will not be transferred to non-European countries. Should said data be transferred to non-European countries or international organisations in the future, all the provisions of Chapter V (EU Regulation 2016/679) will be observed in order to ensure an adequate level of protection.

Rights of data subjects

You are entitled to ask the Data Controller to permit you to access your personal data, correct or delete same, or request limitation of data processing. You may request a complete breakdown of any processing conducted and of your rights at any time by writing to the contacts made available by the Data Controller and indicated at the beginning of the policy.

Withdrawing consent

You may interrupt the processing covered by this policy at any time by writing your intentions to the Data Controller, without however affecting the operations carried out lawfully up to that moment.

Right to lodge a complaint

If you believe that the processing of your data violates Regulation (EU) 2016/679 (GDPR), you have the right to lodge a complaint with the Italian Data Protection Supervisor. For contact details, see: https://www.garanteprivacy.it/

Communication and dissemination

The data collected will not be disseminated, sold or exchanged with third parties without the express consent of the data subject, except for communications required to provide the requested service. The data may also be communicated to the competent authorities, in accordance with the law.

Retention period

The data will be stored for the time strictly necessary for the aforementioned purposes and in accordance with the terms of law, and in any case for a period not exceeding 2 years, provided that in the meantime the data subject does not exercise his or her right to object; this limit is extended to 10 years for data necessary for administrative and accounting purposes. In any case, the data is stored until such a time as the data subject objects to the sending of the newsletter or waives reception of same.