INFORMATION EX ART. 13 OF EU REGULATION 2016/679

1 – DATA CONTROLLER

The Data Controller of the personal data voluntarily provided by you is Dea Società Benefit S.r.l., represented by its pro tempore legal representative, with registered office in Gallese (VT), 01035, Loc. La Valle, snc, Tax Code/VAT No. 01817240565, certified email info@pec.deanocciola.com, regular email info@deanocciola.com, telephone: +39 0761 090926, fax: +39 0761 090929.

The Data Controller, as the legal conditions do not apply, has not appointed a Data Protection Officer pursuant to Article 37 of EU Regulation 2016/679.

Common and sensitive personal data are collected by the Data Controller through registration and storage in our paper and electronic databases.

Processing is carried out in accordance with the principles of fairness, lawfulness, transparency, purpose and storage limitation, accuracy, updating, integrity, confidentiality, and accountability.

Personal data will be processed in a manner that is adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

Personal data will be processed in such a way as to ensure adequate security, including protection — through appropriate technical and organizational measures — against unauthorized or unlawful processing, and against accidental loss, destruction, or damage.

2 – PURPOSES OF DATA PROCESSING, LEGAL BASIS, AND TYPES OF DATA PROCESSED

2.1 – PURPOSES OF DATA PROCESSING

The business activity carried out by the Data Controller concerns the processing, transformation, and marketing of agricultural products from both organic and traditional crops — including hazelnuts, chestnuts, walnuts, olives, cereals, grapes, and their derived products.
Production, processing, and marketing activities include food and beverage products, in particular preserves, spreads, jams, raw materials and semi-finished products for the food, confectionery, and bakery industries; base products for food and catering companies; sweets, chocolate, biscuits, snacks, and both fresh and preserved pastry items; fresh, dried, or candied fruit; wine, spirits, and other grape-based beverages; fruit juices, extracts, concentrates, cider, and other fruit-based drinks; oils, fats, and substitutes; natural flavorings, enhancers, and preservatives; natural and organic food products; cereals and flours; herbal products; and items intended for special dietary purposes.

Personal data are collected through a specific form available on the company’s website and processed, subject to the data subject’s consent, to allow the Data Controller to provide the following services, including through the use of technical cookies:

Contact form: by filling in the contact form with their personal data, the User consents to their use for responding to requests for information, quotes, the sending of commercial information and/or advertising material, or any other type of request indicated in the form header (personal data collected: first name, last name, company name, position, email, phone number, address).
Online sale of goods and/or services: the personal data collected are used to provide services to the User or to sell products, including payment and possible delivery. The personal data collected to complete payment may include credit card details, bank account information used for wire transfers, or other accepted payment methods. The payment data collected by www.deanocciola.com depend on the payment system used.
Google Analytics (Google Inc.): this is a web analytics service provided by Google Inc. (“Google”). Google uses the personal data collected to track and analyze the use of www.deanocciola.com, to compile reports, and to share them with other services developed by Google. Google may use personal data to contextualize and personalize the ads of its advertising network.
Google Tag Manager: this is a service provided by Google Inc. (“Google”) that allows the creation and updating of tags for websites and mobile applications.
CAPTCHA code: this is a service that protects against spam.

2.2 – LEGAL BASIS AND LAWFULNESS OF PROCESSING

The legal basis for data processing consists of the necessity:

to perform a contract to which the data subject is a party, or to take pre-contractual measures at the request of the data subject;
to comply with a legal and/or regulatory obligation to which the Data Controller is subject;
to respond to an order or request for information and documents issued by a public authority;
to pursue the legitimate interest of the Data Controller in its relationships with customers and/or employees.

2.3 – TYPES OF DATA PROCESSED AND PROCESSING OPERATIONS

On the website www.deanocciola.com the following common personal data are collected, either automatically or through third parties: first name, last name, company name, position, email, phone number, address, etc.

The Data Controller may also process the following categories of users’ personal data: technical browsing data relating to the IP address, identification codes of the devices used by the user to access the website or services, browser characteristics, and access times.

Personal data, freely provided by the User or, in the case of Usage Data, collected automatically while using the site, are considered mandatory unless otherwise specified.

Usage Data refers to information automatically collected by the website’s IT systems and software procedures during their normal operation, and whose transmission is implicit in the use of Internet communication protocols.

If the user refuses to provide the required mandatory data, it may not be possible to provide the requested service.

The user may freely choose whether or not to provide optional data, without affecting the availability or functionality of the service.

Any use of cookies or other tracking tools by www.deanocciola.com or by third-party service providers used by the site, unless otherwise stated, is aimed at providing the service requested by the user, in addition to the other purposes described in this Privacy Policy.

The user, assuming responsibility for any personal data of third parties obtained, published, or shared through www.deanocciola.com, guarantees that they have the right to communicate or disclose such data, releasing the Data Controller from any liability toward third parties.

For the purposes described in section 2.1, the Data Controller will use only common and special/sensitive personal data.

Personal data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

Common personal data include, by way of example: first name, last name, date of birth, residence and/or domicile, email address, telephone numbers, workplace, etc.

Special/sensitive personal data are those revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, or data concerning health, sex life, or sexual orientation.

Processing of personal data means any operation or set of operations performed, whether or not by automated means, on personal data or sets of personal data — such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

3 – CATEGORIES OF RECIPIENTS OF PERSONAL DATA

For the purposes described in section 2.1, the Data Controller may disclose personal data to the following categories of recipients: public authorities, labor consultants, accountants, and lawyers, as well as other external collaborators providing consultancy services related to the execution of employment and/or sales contracts.

The updated list of recipient categories and appointed professionals may be requested from the Data Controller at any time.

Personal data will be disclosed to external data processors who provide sufficient guarantees of implementing appropriate technical and organizational measures to ensure the protection of the rights of data subjects.

4 – PLACE OF DATA PROCESSING

Personal data are processed at the Data Controller’s registered office or at the offices of external data processors. Further information may be obtained by contacting the Data Controller.

The Data Controller will not transfer personal data to third countries or international organizations, except for personal data relating to employees and/or sales agents during their stay abroad for any reason connected to the contractual relationship with the Data Controller.

The Data Controller reserves the right to use cloud services; in such cases, service providers will be selected from those offering adequate guarantees, as provided for by Article 46 of EU Regulation 2016/679.

5 – PERIOD OF PERSONAL DATA RETENTION

Personal data will be retained for the period of time necessary to fulfill the purposes for which they were collected and processed, in compliance with the time limits established by applicable laws and regulations. In any case, the Data Controller, for reasons related to the protection of its own rights, reserves the right to retain employees’ personal data for a period longer than that prescribed by specific regulations.

It is also understood that the Data Controller may be required to retain personal data for a longer period in order to comply with a legal obligation or by order of an authority (in such cases, the only criterion used to determine the retention period will be the legal one).

At the end of the retention period, personal data will be deleted, and the rights of access, erasure, rectification, and data portability will no longer be exercisable.

6 – METHODS OF DATA PROCESSING

The Data Controller declares that it has adopted appropriate security measures to prevent unauthorized access, disclosure, alteration, or destruction of personal data.

Processing is carried out using manual, electronic, and/or telematic methods, organized and structured in a manner strictly related to the purposes indicated.

Personal data are processed using paper/analog and/or digital media.

The Data Controller has not implemented any automated decision-making processes, nor does it carry out profiling activities pursuant to Article 22 of EU Regulation 2016/679.

7 – RIGHTS OF THE DATA SUBJECT

The data subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed and, if so, to access such personal data.
The data subject also has the right to obtain from the Data Controller:

the rectification, without undue delay, of inaccurate personal data;
the completion of incomplete personal data;
the erasure of personal data concerning them without undue delay;
the restriction of processing in the cases provided for by Article 18 of EU Regulation 2016/679;
the receipt of their personal data in a structured, commonly used, and machine-readable format for exercising the right to data portability.

The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them pursuant to Article 6(1)(e) or (f), including profiling based on those provisions. The Data Controller shall refrain from further processing of the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

When a personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the Data Controller shall communicate the breach to the data subject without undue delay, using clear and plain language.

The data subject may exercise their rights by submitting a specific request to the Data Controller using the contact details provided in section 1 of this notice. The Data Controller shall respond to the request without undue delay and, in any case, no later than one month after its receipt.

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), based in Rome (RM), 00186, Piazza di Monte Citorio no. 121, following the procedures and instructions available on the Authority’s website www.garanteprivacy.it.

Last update: 20 Luglio 2025