Privacy Notice — Website and Business Relationships
Privacy Notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)
This Privacy Notice describes how the personal data of individuals who visit the website www.alfaternanature.com, complete the contact forms, and of customers and suppliers who maintain a business relationship with Alfaterna S.r.l., are processed.
1. Data Controller
The Data Controller is Alfaterna S.r.l., with its registered and operational office at Via Maestri del Lavoro snc, Zona Industriale Area P.I.P., 84025 Eboli (SA), Italy, VAT and Tax Code 05176930658, Certified Email (PEC): alfaterna@legalmail.it, Email: info@alfaternanature.com.
2. Data Protection Officer (DPO)
As of the date of this Privacy Notice, Alfaterna S.r.l. has not appointed a Data Protection Officer (DPO), as the conditions requiring such appointment under Article 37 of the GDPR do not apply.
To exercise the rights provided for under Articles 15–22 of the GDPR or to request any information regarding the processing of personal data, data subjects may contact the Data Controller using the contact details provided in Section 1.
3. Purposes of Processing and Legal Basis
Personal data collected through the website or during the course of a business relationship are processed for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Responding to requests for information or contact submitted through the website | Pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR) |
| Managing contractual relationships with customers and suppliers, including orders, deliveries, and invoicing | Performance of a contract (Art. 6(1)(b) GDPR) |
| Compliance with accounting, tax, and administrative obligations | Compliance with a legal obligation (Art. 6(1)(c) GDPR) |
| Management of potential legal disputes | Legitimate interest of the Data Controller (Art. 6(1)(f) GDPR) |
| Business-to-business (B2B) marketing communications | Legitimate interest (soft spam, where applicable) or the data subject’s consent, depending on the circumstances |
The personal data processed are adequate, relevant, and limited to what is necessary for the purposes described above.
4. Nature of the Provision of Data
Providing personal data is optional when submitting contact requests through the website; however, it is necessary in order to process and respond to such requests.
For contractual relationships with customers and suppliers, the provision of personal data is necessary for the performance of the contract and for compliance with legal obligations. Failure to provide such data may make it impossible to establish or continue the business relationship.
5. Methods of Processing
Personal data are processed using manual, electronic, and telematic means, according to procedures strictly related to the purposes set out above and in any event in a manner that ensures the security and confidentiality of the data.
6. Disclosure of Personal Data
Personal data may be disclosed to third parties that provide outsourced services on behalf of the Data Controller (such as consultants, IT service providers, and shipping companies), which are appointed as Data Processors pursuant to Article 28 of the GDPR.
Personal data may also be disclosed to public authorities where required by law.
Personal data will not be disseminated to the public.
7. Transfers of Personal Data Outside the European Union
Where customers or suppliers are established outside the European Economic Area (EEA), personal data may be transferred outside the EEA where necessary, on the basis of the appropriate safeguards provided for under Chapter V of the GDPR (such as the European Commission’s Standard Contractual Clauses), as further specified in the relevant contractual documentation.
8. Data Retention Period
Personal data collected through the website that do not result in a contractual relationship are retained only for the time necessary to respond to the request and are subsequently deleted or anonymized.
Personal data relating to customers and suppliers are retained for the duration of the contractual relationship and thereafter for the period required by applicable tax and civil law (generally 10 years).
9. Rights of the Data Subject
Data subjects have the right to request from the Data Controller:
- access to their personal data;
- rectification of inaccurate personal data;
- erasure of personal data (within the limits permitted by applicable legal retention obligations);
- restriction of processing;
- data portability;
- objection to the processing of their personal data.
Data subjects also have the right to lodge a complaint with the competent Supervisory Authority for data protection.
10. How to Exercise Your Rights
Requests concerning the exercise of the rights described above may be sent to:
Email: info@alfaternanature.com
Certified Email (PEC): alfaterna@legalmail.it
Last updated: 01/07/2026