{"id":2041,"date":"2023-03-22T15:01:02","date_gmt":"2023-03-22T14:01:02","guid":{"rendered":"https:\/\/www.alfaternanature.com\/privacy-policy\/"},"modified":"2026-07-14T16:24:19","modified_gmt":"2026-07-14T14:24:19","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.alfaternanature.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

[vc_row full_width=”stretch_row_content_no_spaces” el_class=”intestazione intestazione_dark” css=”.vc_custom_1640773525843{background-image: url(https:\/\/lenuslab.com\/alfaterna\/wp-content\/uploads\/sites\/20\/2021\/12\/aromi-naturali.jpg?id=410) !important;background-position: center !important;background-repeat: no-repeat !important;background-size: cover !important;}”][vc_column][vc_empty_space height=”350px”][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text css=””]<\/p>\n

Privacy Notice \u2014 Website and Business Relationships<\/strong><\/h2>\n

Privacy Notice pursuant to Articles 13 and 14 of Regulation (EU) 2016\/679 (“GDPR”)<\/strong><\/h3>\n

This Privacy Notice describes how the personal data of individuals who visit the website www.alfaternanature.com<\/a><\/strong>, complete the contact forms, and of customers and suppliers who maintain a business relationship with Alfaterna S.r.l.<\/strong>, are processed.<\/p>\n

1. Data Controller<\/h3>\n

The Data Controller is Alfaterna S.r.l.<\/strong>, with its registered and operational office at Via Maestri del Lavoro snc, Zona Industriale Area P.I.P., 84025 Eboli (SA), Italy<\/strong>, VAT and Tax Code 05176930658<\/strong>, Certified Email (PEC): alfaterna@legalmail.it<\/a><\/strong>, Email: info@alfaternanature.com<\/a><\/strong>.<\/p>\n

2. Data Protection Officer (DPO)<\/h3>\n

As of the date of this Privacy Notice, Alfaterna S.r.l.<\/strong> has not appointed a Data Protection Officer (DPO), as the conditions requiring such appointment under Article 37 of the GDPR do not apply.<\/p>\n

To exercise the rights provided for under Articles 15\u201322 of the GDPR or to request any information regarding the processing of personal data, data subjects may contact the Data Controller using the contact details provided in Section 1.<\/p>\n

3. Purposes of Processing and Legal Basis<\/h3>\n

Personal data collected through the website or during the course of a business relationship are processed for the following purposes:<\/p>\n\n\n\n\n\n\n\n\n\n
Purpose<\/strong><\/th>\nLegal Basis<\/strong><\/th>\n<\/tr>\n<\/thead>\n
Responding to requests for information or contact submitted through the website<\/td>\nPre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR)<\/td>\n<\/tr>\n
Managing contractual relationships with customers and suppliers, including orders, deliveries, and invoicing<\/td>\nPerformance of a contract (Art. 6(1)(b) GDPR)<\/td>\n<\/tr>\n
Compliance with accounting, tax, and administrative obligations<\/td>\nCompliance with a legal obligation (Art. 6(1)(c) GDPR)<\/td>\n<\/tr>\n
Management of potential legal disputes<\/td>\nLegitimate interest of the Data Controller (Art. 6(1)(f) GDPR)<\/td>\n<\/tr>\n
Business-to-business (B2B) marketing communications<\/td>\nLegitimate interest (soft spam, where applicable) or the data subject’s consent, depending on the circumstances<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

The personal data processed are adequate, relevant, and limited to what is necessary for the purposes described above.<\/p>\n

4. Nature of the Provision of Data<\/h3>\n

Providing personal data is optional when submitting contact requests through the website; however, it is necessary in order to process and respond to such requests.<\/p>\n

For contractual relationships with customers and suppliers, the provision of personal data is necessary for the performance of the contract and for compliance with legal obligations. Failure to provide such data may make it impossible to establish or continue the business relationship.<\/p>\n

5. Methods of Processing<\/h3>\n

Personal data are processed using manual, electronic, and telematic means, according to procedures strictly related to the purposes set out above and in any event in a manner that ensures the security and confidentiality of the data.<\/p>\n

6. Disclosure of Personal Data<\/h3>\n

Personal data may be disclosed to third parties that provide outsourced services on behalf of the Data Controller (such as consultants, IT service providers, and shipping companies), which are appointed as Data Processors pursuant to Article 28 of the GDPR.<\/p>\n

Personal data may also be disclosed to public authorities where required by law.<\/p>\n

Personal data will not be disseminated to the public.<\/p>\n

7. Transfers of Personal Data Outside the European Union<\/h3>\n

Where customers or suppliers are established outside the European Economic Area (EEA), personal data may be transferred outside the EEA where necessary, on the basis of the appropriate safeguards provided for under Chapter V of the GDPR (such as the European Commission’s Standard Contractual Clauses), as further specified in the relevant contractual documentation.<\/p>\n

8. Data Retention Period<\/h3>\n

Personal data collected through the website that do not result in a contractual relationship are retained only for the time necessary to respond to the request and are subsequently deleted or anonymized.<\/p>\n

Personal data relating to customers and suppliers are retained for the duration of the contractual relationship and thereafter for the period required by applicable tax and civil law (generally 10 years<\/strong>).<\/p>\n

9. Rights of the Data Subject<\/h3>\n

Data subjects have the right to request from the Data Controller:<\/p>\n