Privacy policy

This Privacy Policy applies in all cases where you access the website and choose to browse within it, regardless of the purchase of products. This Policy provides all useful information to understand how the data of users of the website https://germinalbio.it/it
 and all related Germinalbio sites is collected and used (users, for the purposes of data protection law, are referred to as “data subjects”).

INFORMATION NOTICE PURSUANT TO ART. 13 OF EU REG. 2016/679
This notice is provided only for the website www.germinalbio.it
and not for any third-party websites not directly connected to Germinalbio that may be consulted by the user through links.

DATA CONTROLLERS
The data collected through this site will be processed, under the joint controllership agreement pursuant to Art. 26 of EU REG. 2016/679 (link to the joint controllership agreement), by IL MANGIAR SANO S.P.A. – Benefit Company (Tax Code and VAT no. 00802860262) jointly with GERMINAL ITALIA S.R.L. (Tax Code and VAT no. 00901850172), both with registered office at Via Staizza no. 50, 31033, Castelfranco Veneto (TV), hereinafter also referred to as the “Joint Controllers.”

They independently decide on the purposes and methods of processing, as well as on the security procedures to be applied in order to ensure the confidentiality, integrity, and availability of the data.

PURPOSES OF PROCESSING AND LEGAL BASIS
The data collected may be processed for the following purposes:

Website section “Contacts”
Handling of requests from the data subject (e.g. commercial inquiries, etc.).
Legal basis: consent provided by completing the form in the “Contacts” section.

Website section “Newsletter” and marketing activities in general
Sending newsletters.
Sending marketing and/or commercial communications via various channels, both electronic and telematic (e.g. e-mail, phone, SMS) and traditional (e.g. paper mail).
Use of purchase data to improve commercial offers and carry out targeted promotions of products and/or services.
Legal basis:
Consent to receive newsletters and promotional communications provided by entering the email address in the dedicated form.
In cases where data subjects have provided their contact details in the context of a previous contractual relationship (purchase of products) with GERMINAL/MANGIAR SANO, the latter may use their data to send communications about their own products, similar to those already purchased, even without specific consent, unless such use is refused (“soft spam” – Art. 130, paragraph 4 of Legislative Decree 196/2003; Art. 6, paragraph 1, letter f) of EU Reg. 2016/679). In this case, the legal basis is the legitimate interest of the Controller (Recital (47) of EU Reg. 2016/679).
For some commercial communications within digital campaigns, data may be collected via tracking solutions, for which reference should be made to the Cookie Policy.

METHODS OF PROCESSING AND DATA RETENTION
Personal data will be processed mainly by electronic and telematic means. Processing operations will be carried out in such a way as to ensure logical and physical security and confidentiality of the personal data acquired through this website.
Data provided will be retained for the time strictly necessary to achieve the purposes for which it was collected, namely:
Registered user data and account: until deletion is requested. After 5 years of inactivity, the registered user will be contacted to confirm the registration, and if no confirmation is given, the account will be automatically deactivated and data deleted.
Purchase order data: for the time necessary to manage the order and, in any case, for 10 years from the order date.
Requests from data subjects: for the time necessary to fulfill the request.
Newsletter and promotional communication data: until consent is revoked by requesting unsubscription. After 5 years of inactivity, test emails will be sent; if inactivity persists, the data will be permanently deleted.
Direct marketing communications based on legitimate interest: until the right to object is exercised by requesting unsubscription. After 5 years of inactivity, test emails will be sent; if inactivity persists, the data will be permanently deleted. Purchase data used to personalize communications will be retained for a maximum of 24 months.

MANDATORY OR OPTIONAL NATURE OF DATA PROVISION
Providing personal data requested on different occasions may be mandatory or optional.
Where provision is mandatory (all purposes except newsletter subscription and marketing activities), failure to provide data will result in the impossibility of carrying out the requested services.

MARKETING CAMPAIGNS AND PROFILING
The Joint Controllers also process personal data in the context of digital marketing campaigns. Legal basis: consent provided by accepting cookies on the site (revocable via cookie settings as per Cookie Policy).
They may also collect personal data when the user interacts with Social Media Pages (e.g. sharing Germinal posts, commenting, etc.). The extent of information depends on the user’s social media settings and content chosen to be made public. Users are invited to review the privacy policies of each social media platform and check their privacy settings.

DATA COMMUNICATION AND DISCLOSURE
Collected data may be communicated to:
Authorities legally entitled to access such data.
Tax administrations and other public bodies in compliance with legal obligations.
Our collaborators and employees, authorized to process data as part of their duties.
Third parties, properly selected for their experience and reliability, appointed as “processors,” who provide adequate guarantees of compliance with data protection provisions.

TYPES OF DATA PROCESSED
Navigation data
During normal operation, IT systems and software procedures used for this website acquire some personal data, the transmission of which is implicit in Internet communication protocols. These could, through association with third-party data, identify users (e.g. IP addresses, domain names, operating system parameters). Such data may also be used to establish responsibility in case of hypothetical cybercrimes.

Personal data
Phase / Purpose – Personal data:
E-commerce registration and order execution: personal details, contact details (shipping address, email, phone), purchase data, tax data, payment data.
Account management: user (email), password.
Contact form requests: name, surname, email, phone, company, city, and any personal data included in the request.
Newsletter subscription and commercial communications: email address, purchased products.
For the purchase of certain products (e.g. gluten-free food for celiacs), the company may process “SPECIAL CATEGORIES OF DATA” (formerly “sensitive data”), as defined in Art. 9 of EU Reg. 2016/679. This processing requires the explicit consent of the purchaser and is mandatory to complete the purchase.

SECURITY MEASURES
The Joint Controllers have adopted appropriate security measures to minimize risks of destruction or loss (even accidental), unauthorized access, or processing not permitted or not compliant with the stated purposes.

COOKIES
The use of cookies by the Joint Controllers falls within the Data Controller’s privacy policy and complies with the Guidelines on the use of cookies and other tracking tools issued on 10.06.2021 and effective as of 9.01.2022. See the Cookie Policy for more details.

DATA SUBJECTS’ RIGHTS (Articles 7, 15–22 of EU REG. 2016/679)
As a data subject, you have the following rights (in addition to lodging a complaint with a supervisory authority):
Art. 15 – Right of access
Art. 16 – Right to rectification
Art. 17 – Right to erasure (“right to be forgotten”)
Art. 18 – Right to restriction of processing
Art. 20 – Right to data portability
Art. 21 – Right to object
Art. 22 – Right not to be subject to automated decision-making, including profiling
Art. 7 – Right to withdraw consent (in which case personal data will be removed as soon as possible).

For more information on the processing of your personal data or to exercise your rights, you may write to: privacy@germinalbio.it

Before providing or modifying any information, it may be necessary to verify your identity by answering some questions. A reply will be provided as soon as possible, within a maximum of 30 days.
Requests may also be addressed, pursuant to Art. 26, paragraph 3 of EU REG. 2016/679, to one of the Joint Controllers by writing to:

IL MANGIAR SANO S.P.A. – Benefit Company
Via Staizza, 50
31033 Castelfranco Veneto (TV)
ITALY

GERMINAL ITALIA S.R.L.
Via Staizza, 50
31033 Castelfranco Veneto (TV)
ITALY

Last update: 22 July 2025