Privacy Policy

Dear User,

this document is delivered to you in compliance with Article 13 of the EU Regulation 2016/679 (so-called GDPR), which, with regard to the management of personal data, stipulates the obligation for the data controller who collects data from the data subject to give the data subject, as a natural person, at the time such data are obtained, a set of specific information regarding their management.

For these purposes, therefore, we are handing you this information policy containing information regarding the processing of personal data that will be provided by you when browsing our site and, specifically, the use of the “Request More Information” service, which consists of filling out an online form by entering your first name, last name, phone number, email address, subject and message in order to be contacted to receive more information about our services and the request for the “Newsletter” service, which consists of receiving from us a series of informative emails having as subject our products/services.

ART.1 – IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

(cf. art.13, c.1, lett.a, GDPR) The data controller of the personal data you provide will be CREATIVE FLAVOURS & FRAGRANCES S.P.A., tax code and VAT Number 12546920153, with registered office in Via Borgogna, 7 – 20122 Milano (MI) – Italy, whose contact details are as follows:

Telephone number: (+39) 02.57603551
E-mail address: privacy@cff.it.

ART.2 – CONTACT DETAILS OF THE DATA PROTECTION OFFICER (DPO) (see art.13, c.1, lett.b, GDPR)
The specific type of data processing, as well as of the professional activity performed, do not require the mandatory appointment of a data protection officer.

ART.3 – PURPOSE AND LEGAL BASIS OF DATA PROCESSING (cf. art.13, c.1, lett.c, GDPR)
The purpose of the data processing will be to follow up on your request to be contacted to receive more information about our services and to follow up on the sending by us of a series of informative emails concerning our products/services. The processing will be based on the consent of the data subject, which must be given by signing the statements at the bottom of this privacy policy to which the consent will expressly refer.

ART.4 – LEGITIMATE INTERESTS SUSTAINED BY THE DATA CONTROLLER (see Art.13, c.1, lett.d, GDPR)
The processing is not necessary for the pursuit of the legitimate interest of the data controller or third parties.

ART.5 – RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA (see art.13, c.1, lett.e, GDPR)
The processing does not provide for recipients or categories of recipients of personal data.

ART.6 – DATA TRANSFER TO NON-EU COUNTRIES OR INTERNATIONAL ORGANIZATIONS (see art.13, c.1, lett.f, GDPR)
The processing does not involve the transfer of data to non-EU countries or international organizations.

ART.7 – PERIOD OF DATA STORAGE OR RELATED CRITERIA FOR DETERMINATION (see art.13, c.2, lett.a, GDPR)
The user’s data will be kept only for the time necessary to ensure the proper provision of the services offered.

ART.8 – RIGHTS OF THE DATA SUBJECT (see art.13, c.2, lett.b, GDPR)
The data subject has the right to request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning him or her or to object to its processing, as well as the right to data portability.

ART.9 – WITHDRAWAL OF CONSENT (see art.13, c.2, lett.c, GDPR)
The data subject has the right to revoke consent to the processing at any time; pursuant to Art.13, c.2, lett.c, GDPR, revocation of consent will not affect the lawfulness of the processing based on the consent given before revocation.

ART.10 – COMPLAINT (see art.13, c.2, lett.d, GDPR)
The data subject has the right to lodge a complaint with a supervisory authority.

ART.11 – OBLIGATION OR REQUIREMENT FOR THE SUBMISSION OF DATA (see art.13, c.2, lett.e, GDPR)
The communication of personal data is a necessary requirement to enable the user to be contacted to receive more information about our services. The data subject is under no legal obligation to provide such data, but this will make it impossible to follow up on his or her request to be contacted to receive more information about our services. The communication of personal data is a necessary requirement for the user to receive our newsletter. The data subject is under no legal obligation to provide such data, but this will make it impossible to follow up on our sending the requested informational emails.

ART.12 – AUTOMATED DECISION MAKING PROCESSES (see art.13, c.2, lett.f, GDPR)
The processing will not be subject to an automated decision-making process.

ART.13 – DIFFERENT PURPOSES OF THE PROCESSING (see art.13, c.3, GDPR)
Processing will not take place for purposes other than those set forth in Article 3.

In witness whereof, CREATIVE FLAVOURS & FRAGRANCES S.P.A