Privacy Policy
Last Updated On 10-Jul-2025
Effective Date 02-Feb-2025

ViviCosì places the utmost importance on the confidentiality, protection, and security of the personal data of those with whom it comes into contact.
Please carefully read our Privacy Policy, which applies whenever you access the website and decide to browse it and use its services.
This document also serves as information, pursuant to EU Regulation 2016/679 (hereinafter “Regulation”) and the applicable national legislation on the processing of personal data, Legislative Decree 196/2003 and subsequent amendments, for all those who interact with ViviCosì web services.
This information is provided and applies only to this website (as identified above) and not to other websites that may be accessed via links on the site. ViviCosì has no control over these sites or their data privacy practices. Therefore, ViviCosì recommends reviewing the privacy policies of all parties you interact with before providing personal information.

DATA CONTROLLER

The Data Controller for the data collected through this website is International Food Srl, with registered office at

COMPANY DETAILS

Regional Register of Forlì-Cesena and Rimini: IT04278510401
REA: RN-333713
Share Capital: €60,714.29 fully paid-up

TYPES OF DATA PROCESSED AND PURPOSE OF PROCESSING

Data provided voluntarily by the user
The user is asked to provide personal data (e.g., name, surname, email, etc.) only if he or she wishes to contact us or use the services offered on this site. In such cases, the user is provided with appropriate information and, where necessary, is asked to provide consent. The data provided by the user will be processed in accordance with the purposes and methods indicated in this policy and any specific information made available from time to time.

CONTACTS

Data provided directly by the data subject through the submission of contact/communication forms.
The explicit and voluntary sending of messages to the contact addresses or the completion and submission of forms in the dedicated section entails the acquisition of the sender’s contact details, as well as all personal data included in the communications. This data is processed for the following purposes and in compliance with the relevant legal bases for processing, for a retention period no longer than necessary for the purposes for which it was collected and processed.
Type of data processed: first name and last name, email address, subject, and message.
Purpose of processing: Management of the request sent by the user;
Provision of the requested service (e.g., quotes, information requests, etc.);
Legal basis: Article 6, paragraph 1, letter b) of the GDPR – Processing is necessary to respond to requests; for the implementation of pre-contractual and contractual measures adopted at the data subject’s request.

ADDITIONAL PURPOSES

Contractual purposes, related and instrumental to the establishment and management of customer and/or supply relationships, such as the acquisition of information prior to the possible conclusion of a contract;
Comply with obligations under state laws, regulations, and EU legislation, or provisions issued by authorities authorized by law and by control or supervisory bodies (e.g., tax, accounting, administrative, etc.);
Exercising the Data Controller’s rights in court and managing any disputes.
Statistics
Collection of data and information in an exclusively aggregated and anonymous form for the purpose of verifying the proper functioning of the site, with a view to continuous improvement. None of this information is related to the individual user of the site, and does not allow for their identification in any way.
Security
Data and information are collected to protect the security of the site and its users (spam filters, firewalls, virus detection) and to prevent or detect fraud or abuse of the website.

The data, including the domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment, are recorded automatically and may also include personal data (IP address), which could be used, in accordance with applicable laws, to block attempts to damage the site or other users, or otherwise engage in harmful or criminal activities. This data is never used to identify or profile the user and is deleted periodically.

Cookies

Cookies are small text files that websites visited by a user send to their terminal (usually the browser), where they are stored before being re-sent to the same websites the next time the same user visits them. While browsing a website, a user may also receive cookies sent by other websites or web servers (so-called “third parties”), which may contain certain elements of the website they are visiting (such as images, maps, sounds, specific links to pages on other domains). Cookies, which are typically present in large numbers in users’ browsers and sometimes persist for a long time, are used for various purposes: performing computer authentication, monitoring sessions, storing information on specific configurations regarding users accessing the server, etc. For further information, please refer to the website’s Cookie Policy.

MANDATORY OR OPTIONAL NATURE OF DATA PROVISION

The user is free to decide whether or not to provide their personal data through this website and/or its associated services. Failure to provide data, as indicated on a case-by-case basis in the information provided to the user, may make it impossible to provide the requested service. The mandatory nature of any information requested is indicated by an (*).
Any refusal to provide certain data marked as mandatory makes it impossible to achieve the primary purpose of the specific data collection. Such refusal could, for example, make it impossible for ViviCosì to provide the user with answers or other services available on this website.
Providing ViviCosì with additional data, other than that marked as mandatory, is optional and will not have any consequences in terms of achieving the primary purpose of the data collection.

SHARING WEBSITE CONTENT THROUGH SOCIAL NETWORKS
We maintain a presence on social media platforms to communicate with interested parties and inform them about our activities. Personal data may also be processed outside the European Economic Area (EEA). The terms and conditions of use, as well as the data protection declarations and other provisions of the individual operators of these online platforms, apply in any case. These provisions provide information, in particular, on the rights of data subjects, including, in particular, the right to access information.
In fact, through the ViviCosì website, it is possible to share content via social networks. Users are free to decide whether and which content to share on one or more social networks (Facebook, Instagram, etc.). In this case, we inform you that no personal data of the user is acquired by ViviCosì, and users are encouraged to check their social network account settings to identify any data collected by external platforms. For information on the purposes, type, and methods of collection, processing, use, and storage of personal data by the Social Network platform, as well as how to exercise your rights, please consult the specific Privacy Policy of the Social Network (Facebook Privacy Policy, Instagram Privacy Policy, etc.).

RECIPIENTS AND DATA TRANSFER
Personal data will be processed by personnel responsible for developing and managing the website who are authorized to process it for the purposes indicated above and who have undertaken a commitment to confidentiality or have received an appropriate legal obligation of confidentiality.
Personal data will be processed by parties appointed as data processors as they process data on behalf of the Data Controller (e.g., parties with whom it is necessary to interact for the provision of services, such as hosting providers, email platform providers, or parties delegated to perform technical maintenance activities, including maintenance of network equipment and electronic communications networks, etc.).
Personal data may be shared with third parties with whom the Data Controller has ongoing contractual relationships regarding services functional to the performance of the business (such as, for example, companies responsible for managing and fulfilling sales orders, carriers for product delivery, individuals, companies, or professional firms that provide assistance and consultancy in accounting, administrative, legal, tax, financial, and debt collection matters relating to the provision of services, etc.).

The data may be disclosed, even without consent, to all inspection bodies responsible for audits and controls, such as the Revenue Agency, ministerial bodies and competent authorities, local authorities, and tax commissions of all levels, upon their express request. These bodies will process the data as independent data controllers for institutional purposes and/or by law during investigations and audits.
Personal data is not intended for publication or dissemination.
The complete list of appointed data processors is available from the Data Controller.
The data will be processed by the Data Controller in Italy and within the European Union and the European Economic Area. If, for technical, organizational, and/or operational reasons, it becomes necessary to use entities (among those indicated in the previous list) located outside the European Union or the European Economic Area, ViviCosì will ensure that the data is processed by these entities in compliance with applicable legislation. Therefore, transfers will be carried out in compliance with appropriate safeguards, such as adequacy decisions, standard contractual clauses approved by the European Commission, or other safeguards deemed appropriate. The interested party may request further information by writing to the email address listed at the beginning of this policy.

DATA PROCESSING AND STORAGE METHODS

Personal data processing will always be based on the principles of fairness, lawfulness, transparency, and confidentiality protection through technical and organizational security measures to ensure an adequate level of protection.
Personal data processed for the purpose of Providing Services/Products and Contractual Obligations will be retained by the Data Controller for the time strictly necessary to perform the requested service and to properly execute the contractual relationship with the user. In any case, since such personal data is processed to provide the services and enable the execution of the contractual relationship, the Data Controller may retain it for a longer period, in particular as may be necessary to protect the Data Controller’s interests from potential product-related liability. At the end of this period, the data will be deleted.
User requests, and the data contained therein, will be retained only for the time necessary to allow the Data Controller to determine whether the request has been properly closed, and in any case for as long as necessary to protect the Data Controller’s interests from potential liability. After this period, any data that allows the identification, even indirectly, of a natural person (such as name, email address) will be anonymized and retained, in aggregate form, for statistical purposes.

Personal data processed for the purposes of legal obligations will be retained by the Data Controller for the period required by specific legal obligations or applicable regulations.
Unless otherwise specified, personal data will be processed for the entire period in which the user uses this website and the services provided through it. In the event of withdrawal of consent, personal data will be retained by the Data Controller in order to demonstrate compliance with its obligations, until their statute of limitations has expired.

DATA SUBJECT RIGHTS
Articles 15 et seq. of EU GDPR 2016/679 grant data subjects specific rights.
Specifically, the right to obtain confirmation as to whether or not personal data concerning them exists, access to, rectification or erasure of personal data, restriction of processing concerning them, or to object to their processing. Furthermore, data subjects have the right to withdraw their consent at any time, without prejudice to the lawfulness of processing based on consent before its withdrawal, the anonymization or blocking of data processed in violation of the law, and the updating or, where there is an interest in the matter, and/or integration of the data. Data subjects have the right to object, for legitimate reasons, to the processing itself.
The exercise of these rights is not subject to any time constraints and can be done free of charge by contacting the Data Controller using the contact details provided at the beginning of this notice by regular mail and/or email.

Data subjects who believe that the processing of their personal data through this site violates the Regulation have the right to lodge a complaint with a supervisory authority (for Italy: the Italian Data Protection Authority www.garanteprivacy.it), pursuant to Article 77 of the Regulation, or to take appropriate legal action (Article 79 of the Regulation).