PRIVACY POLICY
INFORMATION ABOUT THE PROCESSING OF PERSONAL DATA.

This page provides full information about the processing of personal data:

• on the website https://www.prolongo.it/;
• during any in-person events that may be organised

The purpose of this page is to maintain up-to-date and easily accessible information on all the data subjects whose personal data is processed by Prosciuttificio Prolongo, as the entity managing the activities indicated above and which therefore assumes the role of data controller, whose contact details are provided in the website’s footer.

The purpose of the disclosure is to ensure fair and transparent use and management of such personal data and the rights of the persons to whom it refers (so-called data subjects). The information to be provided includes the aims of the processing, which indicate the purpose for which the personal data is collected and processed, as well as the legal basis, i.e. what makes the processing legal.

For any questions related to the processing of personal data, please send an email to: prosciutti@prolongo.it.

Data subject’s rights.

Data subjects may ask the data controller to exercise the following rights:

• access, to obtain confirmation as to whether or not their personal data is being processed and, where appropriate, to access such data and the information relating thereto;
• rectification, to obtain the modification of inaccurate personal data or the integration of incomplete data;
• erasure, in certain cases (e.g. when your personal data is no longer necessary in relation to the purposes for which it was collected), subject to the exceptions provided for by applicable law (e.g. when retention of your data is necessary to comply with legal obligations applicable to the data controller);
• portability, which in some circumstances allows the data subject to receive the personal data provided or request the transmission of such data to a different data controller;
• restriction of processing, in certain circumstances whereby the data controller will cease all other processing activities other than storage;
• objection to processing, in certain circumstances whereby the legitimate interest of the data controller is no longer deemed to prevail;
• withdrawal of consent, without affecting the processing carried out up to that point:

with an undertaking by the data controller to respond within one month of the request.

Data subjects also have the right to lodge a complaint with a supervisory authority (which in Italy is the General Data Protection Authority, or Privacy Watchdog:

https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524) to report a breach of the regulations on the protection of personal data.

Transfer of data outside the European Union.

Personal data will not be transferred abroad, to third countries outside the European Union or to international organisations which do not guarantee an adequate, recognised, level of protection, pursuant to Article 45 GDPR, based on an EU Commission adequacy decision. In the absence of such a decision, the data controller intends to transfer the data only when necessary (e.g. for the website’s services, or otherwise for certain software and computer applications) using the appropriate safeguards as mentioned in Article 46 GDPR (e.g. standard contractual clauses).

Recipients of the data.

The data may be accessible to appropriately trained employees and/or collaborators of the data controller.

Some personal data may be processed by companies or consultants who are entrusted with tasks relating to the processing carried out by the data controller and to parties that carry out outsourcing activities on behalf of the data controller as data processors.

The data may also be analysed in cases of internal, second or third party audits by auditors bound by appropriate confidentiality obligations.

The information may also be disclosed whenever such disclosure is necessary to comply with requests from judicial authorities or law enforcement agencies.

Website personal data processing activities.

Website browsing.

Personal data generated by browsing activities (e.g. IP addresses, terminal names) is processed to ensure the functionality and security of the website and enable navigation, with data collected in anonymous and aggregate form according to Article 122 paragraph 1 of the Privacy Code.

Data is shared with the entities providing management and maintenance services for the website of the data controller and the ISP, and will be kept for a maximum of 7 days.

The user’s browsing activity on the website involves the installation of cookies, as better detailed in the cookie policy.

Interaction with website functions.

Contact form.

Interaction with the website’s contact form may enable users to contact the data controller to send a request for information.

• Legal basis: legitimate interest (response to requests).
• Purpose: provide the requested information.
• Retention: up to 12 months after the last email exchange.

Curriculum management.

If you submit your CV to one of the contacts on the website, it will be handled by the data controller.

• Legal basis: implement pre-contractual measures.
• Purpose: contact candidates again and job interview.
• Retention: until a job interview takes place, otherwise up to 12 months after receipt of the curriculum.
• Submission: mandatory, otherwise the candidate will not be able to take part in the interview.

Shop – Order form

Interaction with the shop allows an order form to be filled out to receive a quote.

• Legal basis: implement pre-contractual measures.
• Purpose: quote management.
• Retention: until order confirmation, or 30 days after quote issuance
• Submission: mandatory, otherwise the quote cannot be processed.

Shop – Order management

Order management takes place after the user confirms it, as per the conditions of sale.

• Legal basis: contract implementation.
• Purpose: enter into the contract and shipping.
• Retention: 10 years(Article 2220 Italian Civil Code)
• Submission: mandatory, otherwise the order cannot be despatched.

Administrative and tax requirements.

The exchange of payment data will take place in order to fulfil administrative and accounting requirements, as well as with the selected payment service provider.

• Legal basis: compliance with legal obligations (Article 2220 of the Italian Civil Code, tax and fiscal legislation).
• Purpose: compliance with administrative and accounting obligations, including reporting and retention.
• Retention: up to 10 years.
• Submission: mandatory, otherwise it will not be possible to access the requested service.

Information regarding the processing of personal data for events organised by Prosciuttificio Prolongo.

Data collection may take place directly from the data controller, or otherwise through third party services. In this latter case, these entities act as autonomous data controllers and are the source from which personal data originates.

Processing activities carried out.

In-person event/activity management.

A reservation must be made to attend in-person events or activities, and use of data will be limited to sending updates and for organisational purposes.

• Legal basis: implementation of a contract or pre-contractual measures.
• Purpose: manage attendance at an event and send certificates of attendance (if any).
• Retention: event reporting and  year-end closure.
• Submission: mandatory, it is a condition in order to attend the event.

Feedback management.

Feedback is managed by sending out event assessment questionnaires in order to assess satisfaction and improve quality.

• Legal basis: legitimate interest (acquire assessments and suggestions for improvement).
• Purpose: request feedback.
• Duration: by the end of the year.

Use of images and audiovisual content.

The use of images and audiovisual content takes place after signing a release form, unless specifically indicated otherwise.

• Legal basis: data subjects’ consent with transfer of image rights (Article 96 l.d.a.-Italian copyright law).
• Purpose: publication, including online and via social media, to promote the activity carried out.
• Retention: until consent is withdrawn, or the promotion activity continues.

©2025 All rights reserved  Prosciuttificio Prolongo  –   P.IVA 00254260300