Privacy Policy

Art. 13 et seq. General Data Protection Regulation no. 2016/679 (“GDPR”)

Introduction

Personal data will be processed, through this Web Site (“Site”) in compliance with applicable legislation and the obligations of protection, confidentiality and security that inspire the activity of each Data Controller.

Data controllers

Personal data processing operations carried out as a result of accessing and interacting with the Site will be carried out by two entities, acting as autonomous Data Controllers, each for its own sphere of activity.
The Data Controller for the activities related to the production, delivery and management of the online magazine in all its aspects is Clorofilla S.r.l., based in Milan (MI), via Podgora 12/A, who can be contacted at the following addresses:

  • by e-mail at privacy@nutrapet.vet;
  • by regular mail to the address of the indicated location.

The Data Controller for the communication and marketing activities related to the NutraPet.vet portal is N.b.f. Lanes srl with headquarters in Milan (MI), Corso di Porta Vittoria, 14, 20122, who can be contacted at the following addresses:

  • By regular mail to the address of the indicated location.

N.b.f. Lanes srl has appointed, pursuant to Art. 37 GDPR, a Data Protection Officer or Data Protection Officer (“DPO”) as follows:

  • in the person of Dr. Alessandro Mappelli Mozzi, who can be contacted by regular mail at the address of the indicated office.

Categories of data processed

The categories of data processed are as follows:

  • Personal identification and contact information such as first name, last name, place and date of birth, social security number, residence or other;
  • information related to the user’s navigation on the Site, including so-called online identifiers and data related to the devices used;
  • information related to the user’s operations within and/or through the Site, if the relevant consent is given;
  • information about interactions with each Owner and/or third parties, if features on the Site made available through social networks are employed (e.g., “like,” “tweet” buttons).

Purpose, legal basis, and retention time

Purpose Legal basis Retention time
Data controller: Clorofilla S.r.l.
Functionality of navigating the Site, including accessing its pages and using related features Processing is necessary for the performance of pre-contractual and contractual activities For only as long as necessary to remain on the Site and/or deliver the magazine, and in any case for a maximum of 12 months
Registration to restricted user area and/or specific areas, with use of related services Processing is necessary for the performance of pre-contractual and contractual activities For up to 10 years after the end of the contractual relationship or interaction with the data subject.
Processing and storage of personal data to fulfill accounting, tax, and administrative obligations Processing is necessary to fulfill legal obligations to which each Data Controller is subject For a maximum of 10 years from the end of the contractual relationship or interaction with the data subject, unless otherwise provided for by applicable law.
Responding to requests made by administrative, jurisdictional, or public safety authorities Processing is necessary to fulfill legal obligations to which each Data Controller is subject For a maximum of 10 years from the interaction with the data subject, unless otherwise provided for in current regulations.
Response to user-submitted contact or information requests Exercise of the legitimate interest of each Owner, aimed at maintaining relationships with users of the Site For up to 10 years after interaction with the data subject.
Improving the operation of the Site and introducing new features Exercise of the legitimate interest of the Owner, aimed at improving the supply of goods and services 12 months from last action on the data, unless request for deletion and/or anonymization activities
Owner: N.b.f. Lanes Ltd.
Communication, marketing and contact activities, including for commercial purposes and/or for surveys and market research The processing is based on the consent of the data subject, and in some cases (unless denied) for the exercise of the legitimate interest of the Controller under Art. 130 of Legislative Decree. 196/2003 24 months after consent, or within the technical timeframe of the data subject’s notice of withdrawal of consent
Data subject profiling activities aimed at providing better products and services more in line with the data subject’s interests and needs Processing is based on the consent of the data subject 12 months after consent, or within the technical timeframe of the data subject’s notice of withdrawal of consent

Legitimate interest of the Holder

Should the data subject wish to receive more information about the balance between the legitimate interests pursued by each Controller and the fundamental rights and freedoms of the natural person, he or she may contact them at the contact details indicated, having the right to receive feedback as soon as possible and in any case within the timeframe prescribed by law.

Maximum shelf life

In the event of litigation with the user or third parties, or inspection by the relevant authorities, storage may be extended until the expiration of the last applicable prescriptive period.

Consequences of not providing data

The provision of personal data indicated as mandatory is necessary to pursue the relevant purposes: not providing such data will result in the impossibility of the relevant processing.
The provision of other personal data is optional: failure to provide such additional data may result in the total or partial inability to access certain functions or features of the Site.

Automated decision-making processes

There are no plans to process personal data by automated decision-making processes in accordance with current legislation, and in particular under Art. 22(1) and (4) of the GDPR.
In any case, any automated processing will not have a legal effect on the data subject or significantly affect him or her, unless specific informed consent is given.

Methods of data processing

The processing of personal data will be based on principles of correctness, lawfulness and transparency, protecting the confidentiality and rights of the person concerned, and will be carried out by means of technological and material tools suitable to guarantee their protection and security until their cancellation or anonymization.

Categories of entities that process personal data; scope of dissemination and transfer outside the European Economic Area

Within the limits of the above obligations, tasks or purposes, personal data will be processed, made available and/or communicated to:

  • employees and/or contractors of each Owner;
  • third parties appointed as Data Processors (in particular, suppliers of goods or services), in compliance with the provisions of the law also with regard to security measures to protect and safeguard personal data;
  • Jurisdictional, administrative and/or public security authorities, in accordance with regulatory provisions.

The full list of Responsible Parties and third parties can be obtained from each Owner at any time.


The data will not be disseminated in any way, except with the express and prior consent of the person concerned.


Personal data may be transferred to countries outside the European Economic Area exclusively for technical needs, in any case to entities based in countries recognized as “adequate” by the European Commission, i.e. adhering to the “EU-US Privacy Shield”, or even by virtue of the stipulation of special Conditions of Contract Type in the text approved by the European Commission.

For more information you can always contact each Holder

Rights of the data subject

The interested party may, at any time, exercise the rights provided for in European Regulation no. 2016/679. In particular, he is entitled to:

  • to access your personal data;
  • to obtain the rectification or cancellation of the same or the limitation of the processing concerning her;
  • To object to the processing;
  • To data portability;
  • to revoke consent, where provided: revocation of consent does not affect the lawfulness of processing based on consent given before revocation;
  • To file a complaint with the supervisory authority.

For Italy, the supervisory authority is the Italian Data Protection Authority, based in Rome.

The exercise of the above rights may be done by sending a request to the references of one or both of the Owners, as indicated above.

Cookie policy

Cookies are small text files that are transmitted from the Site to the devices of users who visit it, and which are then relayed back to the Site on subsequent visits; they may have different characteristics and be used for different purposes, either by the Site Owner, or by third parties who provide technical services to the Owner or directly to the user.

This site uses cookies, which can be of different types:

  • “technical” cookies, which do not require the user to provide consent, and therefore are installed automatically upon opening the Site; they can be
    • session, if they are deleted from your device when the browser and/or browsing tab is closed;
    • persistent, if they remain in the memory of your device even after you close the Site when you first access it, and can be read again the next time you open the Site;
  • first-party (session and/or persistent) cookies, which are necessary to evaluate – for example – how the Site responds to user usage and interactions with offered features, with the main purpose of improving the browsing experience; in some cases, through the cookies the Site is able to remember your browsing preferences and the sections you visit, helping to personalize and improve the user experience;
  • Third-party cookies , which are installed or activated by the Site, following user consent, to allow access to features and services offered by third parties other than the Owner; these cookies are usually persistent in nature.

The Owner has prepared a specific and comprehensive list of cookies used by the Site, both first- and third-party: it is available upon request.

In particular, the Owner informs the user that the services of the following third parties are used within the Site:

  • Google Inc. and/or Google Ireland Ltd. with regard to the “Google Analytics” service
  • VOXmail: newsletter management service – Void Labs Snc – VAT no. 02137700395
  • Facebook Inc. regarding the “Facebook Pixel” service for tracking web traffic
  • LinkedIn Corporation, regarding the “Linkedin Insight Tag” service for monitoring web traffic
  • WordPress, as far as the website CMS is concerned.

If the user wishes to prevent by default and/or from time to time the receipt of cookies through the settings available from the browser used, thereby denying consent to cookies that are not technically necessary, the settings can generally be changed according to the following procedure:

  • select the “Options” or “Preferences” item in the “Tools” or ” View” or “Edit” menus;
  • select “Privacy” or “Security ” or “Cookies” and choose your preferred settings.

In general, the Owner invites users interested in gathering more information about the use of cookies to visit www.aboutcookies.org.