Privacy policy

Dear User,
First of all, thank you very much for visiting us.
We attach great importance to your confidence in us and so we want to share with you here our reasons and procedures for processing the personal data that we collect while you browse our website (hereinafter, the “Website”).
Your personal data is always processed in a lawful and proper manner, in compliance with all the applicable regulations in force.
Full details about the processing of your personal data are presented below.
Please do not hesitate to contact us if you have any questions. Follow this link for all the ways to contact us: Contact us

Last updated on 22.07.2021

PRIVACY POLICY

Even before visiting the various sections of the Website, this policy enables you to understand how Barilla will process your personal data, which is described in the section entitled “Personal Data processed and how we collect it” (hereinafter, together, the “Personal Data”). You must read this policy before providing your Personal Data.

Identity and contact details of the Controller 

The Controller is Barilla G. e R. Fratelli Società per Azioni (hereinafter, “Barilla” or “Controller”), with registered office at Via Mantova 166, 43122, Parma, and the contact details found in the Contact us section.
Barilla will process your Personal Data in compliance with Regulation (EU) 2016/679 and the domestic legislation governing the protection of personal data (hereinafter, the “Privacy Regulations”).

Personal Data processed and how we collect it

Your browsing of the Website may involve the collection and subsequent further processing of your Personal Data by Barilla. Indeed, when accessing the Website, the IT systems and the software procedures that ensure its functioning automatically and indirectly send and/or acquire certain information (such as, but without limitation, the cookies specified in the Cookie Policy, IP addresses, domain names of the computers used by visitors to the Website, the URL (web address) of the resources requested, the time of the request made to the server etc.).
In particular, your Personal Data may even be collected:

– via your publication of Contributions (as defined below), the contents of which may include Personal Data provided directly by you, on social media networks managed independently by third parties, such as, but without limitation, Facebook, Twitter etc. (hereinafter “Social Media”). The term “Contributions” means images, comments, catch phrases associated with the Website, content and other information devised by you and published on Social Media pages dedicated to the branded products of the Barilla group, including any personal image that you provide. 

Purposes of processing your Personal Data and their legal basis

Barilla may process your Personal Data for the following purposes:

I. administer activities related to your use of the Website, including your publication of Contributions on Social Media pages dedicated to the branded products of the Barilla group (being processing necessary to execute a contract or perform pre-contractual activities);
II. administer and comply with legal obligations (of an accounting, administrative, tax or other nature);
III. manage any complaints or disputes (being in the legitimate interests of the Controller). 

How we process your Personal Data

The processing of your Personal Data may include any type of operation, including its collection, registration, organisation, retention, consultation, analysis, amendment, selection, extraction, comparison, use, interconnection, blockage, communication, deletion and erasure.
Your Personal Data will mostly be processed in an automated manner, using databases, electronic platforms administered by Barilla or by third parties specifically appointed as external processors, and/or integrated IT systems operated by Barilla and the above processors and/or websites owned or used by Barilla.
The Controller considers the level of security provided to be adequate, having regard for the risks that might derive from the loss, erasure, amendment, unauthorised disclosure, accidental or illegal access, abuse or alteration of your Personal Data. In particular, Barilla: 

– has adopted security measures commensurate with the risks;
– stores your Personal Data in servers located in Europe that benefit from an advanced system of daily back-ups.

Where we process your Personal Data 

Your Personal Data is mostly processed on the premises of the Controller and/or the appointed processors. For further information, please contact the Controller at the addresses indicated in the section entitled “Identity and contact details of the Controller”. 

How long we retain your Personal Data

To ensure compliance with the principles governing the need for and proportionality of processing, the Controller has identified different retention times for your Personal Data, depending on the specific purposes pursued:

(i) in order to administer activities related to your use of the Website, including your publication of Contributions on Social Media pages dedicated to the branded products of the Barilla group, your Personal Data will be retained for the time strictly necessary to provide the service requested by you;
(ii) in order to administer and comply with legal obligations (of an accounting, administrative, tax or other nature), your Personal Data will be retained for the time strictly necessary to satisfy the related requirements;
(iii) in order to manage any objections and disputes, your Personal Data will be retained for the time strictly necessary for that purpose and, in any case, not after the applicable time-expiry dates.

Recipients of your Personal Data 

Your Personal Data may be communicated to and processed by:

(i) legal or natural persons, operating as processors on an outsourcing basis, that are appointed by Barilla or by other third-party processors (including parties entrusted to provide support, perform communication, marketing, advertising and promotional activities, sell products and/or services and place advertisements, as well as advertising concessionaires, providers of IT services, Website administrators, administrators of e-platforms, partners, banks and professional firms);
(ii) those employees and/or collaborators of the Controller (including system administrators) who, working under the direct authority of the Controller, are authorised to process your Personal Data; and
(iii) those employees and/or collaborators of external processors (including system administrators) who, working under the direct authority of such external processors, are authorised to process your Personal Data.

Your Personal Data will not be communicated to third parties, or otherwise disseminated, unless Barilla has to provide it to consultants in order to protect its rights.

Minors

Minors below the age of 16 must not provide information or Personal Data to Barilla without consent from their parent or guardian. Barilla invites all parents and guardians of minors to inform them about the safe and responsible use of the Internet and the Web.

Identity and contact details of the processors

A complete list of processors is available from the Controller at the addresses indicated in the section entitled “Identity and contact details of the Controller”.

Contact details of the Data Protection Officer (DPO)

The Data Protection Officer appointed by the Controller can be contacted at: [email protected]

Your rights in relation to the processing of your Personal Data

As the Data Subject, the Privacy Regulations grant you numerous rights. In particular, you are entitled to:

  1. obtain confirmation from the Controller about the existence or otherwise of your Personal Data, even if not yet recorded, and its communication in an intelligible form, as well as to access such Personal Data (obtaining a copy of it) and the related information (including the purposes of processing, the categories and origins of the Personal Data, the categories of recipient to which it has been or may be communicated, the retention period (if possible) and the rights that can be exercised);
  2. obtain from the Controller the rectification of your Personal Data and the completion of any incomplete Personal Data;
  3. obtain from the Controller the erasure of their Personal Data without undue delay when, for example, it is no longer needed for the purposes for which it was processed or there is no further legal basis for its processing;
  4. obtain from the Controller the anonymisation or blockage of your Personal Data processed in violation of the law, including Data whose retention is not necessary in relation to the purposes for which it was collected or subsequently processed;
  5. obtain from the Controller the restricted processing of your Personal Data, including when you dispute its accuracy or object to its processing, for the time needed to complete the respective checks;
  6. receive your Personal Data in a structured, commonly-used and machine-readable format, as well as to transmit or, if technically feasible, obtain the direct transmission of your Personal Data to another controller without impediments, in cases in which processing is carried out using automated means and is based on your consent, or is necessary for the execution of a contract to which you are a party;
  7. revoke consent to process your Personal Data for any of the purposes for which it was given;

You may exercise your rights in relation to Barilla by visiting the “Contact us” section of the Website, by writing to the e-mail address: [email protected], or by posting a letter to Barilla at the address indicated in the section entitled “Identity and contact details of the Controller”.

In addition, in cases in which you believe that the processing of your Personal Data infringes the Privacy Regulations, you may file a complaint with the Data Protection Authority of your country of residence, place of work or place in which the alleged infringement occurred, or request that Authority for information about exercising your rights under the Privacy Regulations.

Right to object to the processing of your Personal Data

You are entitled at any time, for reasons related to your specific circumstances, to object to the processing of your Personal Data that is otherwise needed to pursue a legitimate interest of the Controller or a third party. In that case, the Controller must cease any further processing of your Personal Data, unless it can show the existence of legitimate overriding reasons that prevail over your interests, rights or freedoms, or unless such processing is necessary in order to determine, exercise or defend a right in court.
You are entitled to object to the processing of your Personal Data by visiting the “Contact us” section of the Website or by writing to the e-mail address: [email protected]

If you object to the processing of your Personal Data for the above purposes, the Controller can no longer carry out that processing.