Notice pursuant to Art. 13 of Regulation (EU) 2016/679 – COOKIES

On this site, we use technologies to collect information useful for improving your online experience. This policy concerns the use of cookies and the methods for managing them.

We reserve the right to modify this policy at any time. Any changes to this policy will take effect from the date of publication on the Website.

The Data Controller pays significant attention to the protection of your personal data and, in this document (“Cookie Policy”), provides information on the processing of your personal data carried out through cookies. Furthermore, the Data Controller may also process other personal data of yours and therefore invites you to also consult the complete information accessible from the website.

Data Controller

Caseificio Maldera s.r.l. with registered office at Via Gen. Carlo Alberto Dalla Chiesa 4, 70124 Bari (BA), Italy; Telephone: +39 080 3580565; Email: info@caseificiomaldera.it; VAT/Tax Code: 06408730726

Types of data processed

Cookies are text files that a website sends to users’ terminals (browsers) allowing the website manager to recognize individual visits made by users.

Cookies, usually present in users’ browsers in a very high number and sometimes also with characteristics of wide temporal persistence, are used for different purposes: execution of computer authentications, session monitoring, storage of information on specific configurations regarding users accessing the server, etc.

During navigation on a website, the user may also receive cookies on their terminal sent by different sites or web servers (so-called “third parties”), on which some elements (such as, for example, images, maps, sounds, specific links to pages of other domains) present on the website being visited may reside.

Cookies: Technical Cookies, Third-party Analytical Cookies with anonymized IP, Third-party Analytical Cookies with non-anonymized IP, Third-party Profiling Cookies.

Categories of data subjects

The processing activities carried out are aimed at the following categories of data subjects: Users of websites/applications.

Purposes of processing and condition that makes the processing lawful

CKS – Use of cookies necessary for the processing of statistical and technical analyses for the use of the website We use, without your consent, cookies necessary for the processing of statistical and technical analyses for the use of the website.

Lawfulness of Processing Condition: Performance of Contract – Art. 6, para. 1, lett. b. GDPR

Purposes of processing: 1) Use of Technical Cookies and Session Technical Cookies to ensure the correct functioning of the website/application, as well as to ensure the provision of services offered by the Data Controller, requested by the contractor or the user (cf. Art. 122, para. 1 of the Code); 2) Use of Statistical Technical Cookies with anonymized IP in order to produce aggregate statistics regarding the use of the website/application by the user.

Nature of provision:

Mandatory – Technical cookies are necessary for the functioning of the website. Blocking cookies by the user will result in the impossibility of using the services of the website/application.

Period of retention of personal data:

See the type of each cookie used.

Processing Methods:

The processing is carried out, mainly, using computer tools.

CKS – Cookies used after obtaining consent With Your consent, the Data Controller may use categories of cookies for profiling and/or remarketing purposes. In the absence of your consent, the Data Controller cannot propose advertising messages in line with your interests and/or preferences.

Lawfulness of Processing Condition: Consent – Art. 6, para. 1, lett. a. GDPR

Purposes of processing: 1) Use of profiling/advertising cookies for the configuration and management of advertising campaigns carried out on the Facebook platform and Google display network; 2) Use of Statistical Technical Cookies with Non-anonymized IP in order to produce statistics regarding the use of the website/application by the user.

Nature of provision:

Optional – Failure to give consent will result in the Data Controller’s inability to promote its products/services on third-party sites other than those of the Data Controller.

Period of retention of personal data:

The period of use of remarketing cookies, used by this site, is 30 days for google adwords and 30 days for the Facebook social network.

Processing Methods:

The processing is carried out, mainly, using computer tools.

Cookie management methods

In any case, the Data Controller informs you that you can prevent the installation of any type of cookie through the settings of your browser.

However, if you choose to delete or refuse session and security cookies, the Data Controller will not be able, for technical, security, and/or fraud prevention reasons, to provide the services available on the website.

Furthermore, please note that you can always delete the cookies installed on your device through your browser settings.

In order to verify how to prevent the installation of cookies or delete cookies already present on your device, the Data Controller invites you to view the following instructions depending on the browser you use.

[Instructions for Chrome, Mozilla Firefox, Internet Explorer, Safari, Safari iOS (mobile devices), Opera]

For further information, visit the page [relevant support page for each browser].

For further information on how to manage or disable third-party cookies, you can visit the website www.youronlinechoices.com

The user may, at any time, revoke consent using the tools provided by the Data Controller.

Rights of the data subject – complaint to the supervisory authority

In relation to the processing described in this Notice, as a data subject you may, under the conditions provided by the GDPR, exercise the rights enshrined in Articles 15 to 22 of the GDPR and, in particular, the following rights:

Right of access – Article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, access to your personal data; Right to rectification – Article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data; Right to erasure (right to be forgotten) – Article 17 GDPR: right to obtain, without undue delay, the erasure of personal data concerning you. The right to erasure does not apply to the extent that processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller. Right to restriction of processing – Article 18 GDPR: right to obtain restriction of processing where: a) the accuracy of the personal data is contested by the data subject; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use; c) the data subject needs the personal data for the establishment, exercise or defense of legal claims; d) the data subject has objected to processing pending the verification of whether the legitimate grounds of the Data Controller override those of the data subject. Right to data portability – Article 20 GDPR: right to receive the personal data concerning you, which you have provided to the Data Controller, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from the Data Controller, where the processing is based on consent and is carried out by automated means. Furthermore, the right to have your personal data transmitted directly from this controller to another controller where technically feasible; Right to object – Article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the legitimate interest, including profiling, unless there are legitimate grounds for the Data Controller to continue the processing that override the interests, rights, and freedoms of the data subject or for the establishment, exercise or defense of legal claims. Right not to be subject to a decision based solely on automated processing – Article 22 GDPR: the data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, unless it is necessary for the conclusion or performance of a contract or the data subject has given his or her explicit consent. In any case, automated decision-making shall not concern your personal data, and you may at any time obtain human intervention on the part of the Data Controller, express your own opinion and contest the decision. Right to lodge a complaint with the supervisory authority for the protection of personal data: [relevant authority’s website]. Revoke consent given on any occasion and with the same ease with which it was provided without prejudice to the lawfulness of processing based on consent given prior to revocation.

The above rights may be exercised, against the Data Controller, by contacting the references indicated above. The exercise of your rights as a data subject is free of charge under Article 12 GDPR. However, in the case of requests that are manifestly unfounded or excessive, also due to their repetitiveness, the Data Controller may charge a reasonable fee, taking into account the administrative costs incurred to manage your request, or refuse to satisfy your request. Finally, please note that the Data Controller may request further information necessary to confirm the identity of the data subject.