Privacy notice

Who processes the data

The data controller is Investfood S.r.l., registered office at Via Riva di Trento 11/A, 20139 Milan, Italy, VAT number IT12925600962, company register number REA MI 2692864, share capital 250,000 euro.

For any matter concerning personal data, write to info@investfood.it. No data protection officer has been appointed, because the conditions of article 37 of the General Data Protection Regulation do not apply.

Data collected by browsing alone

The systems serving this site record, as any web server does, some technical information sent by the browser. It is not used to identify a person and it is not cross referenced with other sources.

• The IP address the request comes from
• Date, time and time zone of the request
• The address of the requested page and the response code
• The browser and operating system declared by the client

Data you send yourself

If you write to the mail address shown on the site, the message contains whatever you chose to put in it: your address, your name, the venue, the number of stations and any other information you add.

That data is used to answer your request and for the negotiation that may follow. It is not used for bulk commercial mailings and it is not passed to third parties.

Why we process this data

Technical browsing data is processed on the legitimate interest of serving the site, keeping it secure and diagnosing faults, under article 6, paragraph 1, letter f of the Regulation.

The data you send is processed to follow up on your request and for the steps preceding a contract, under article 6, paragraph 1, letter b of the Regulation.

How long it is kept

Technical server logs are kept for the time needed to diagnose faults and preserve security, and in any case no longer than twelve months.

Mail correspondence is kept for the duration of the negotiation and, if a contract follows, for the period required by civil and tax obligations.

Who receives it

The data is never disseminated. It is accessible to the staff of Investfood S.r.l. who need to handle it and to the suppliers providing the infrastructure, appointed as processors.

The site and the service run on Google Cloud, in the europe-west1 region, located in Belgium. Mail is served by the same supplier. The data therefore stays inside the European Economic Area.

Transfers outside the European Economic Area

No systematic transfer to third countries is foreseen. Should a supplier process data outside the European Economic Area for support activities, the transfer would rely on the standard contractual clauses adopted by the European Commission.

Your rights

You may at any time ask to access your data, to correct it, to erase it, to restrict its processing, to receive it in a machine readable format and to object to processing based on legitimate interest.

Requests go to info@investfood.it and are answered within one month. If the answer does not satisfy you, you may lodge a complaint with the Italian data protection authority, Piazza Venezia 11, Rome.

The console and the till are a separate matter

This notice covers the public site. When a venue uses K-POS for its own service, the data of its customers and of its staff is processed by the venue, which is the controller, while Investfood S.r.l. acts as a processor under a written agreement.

A customer of a venue that uses K-POS should therefore address the venue in order to exercise their rights.

Changes

This notice can change when the way the site works changes. The date at the top always marks the latest revision, and earlier versions are not kept online.