Privacy-policy
Ibellani srl
With this notice, Ibellani srl, acting as the Data Controller, wishes to inform its clients (including potential ones) and third parties who come into contact with the company (“data subjects”) that any personal data relating to them will be processed lawfully, for the purposes indicated below, and in compliance with EU Regulation 2016/679.
Ibellani srl, the owner of the domain ibellanisrl.com, promotes the associated brands and acts as the Data Controller for personal data collected via the website “www.ibellanisrl.com.it”.
This privacy notice outlines and describes the processing activities that will be carried out by Ibellani srl.
Section 1 – Data Controller.
The Data Controller is Ibellani srl (VAT No. 02023660471, REA PT-604533), with its registered and operational office at Via Giuseppe Mazzini 11, Massa e Cozzile, specializing in professional kitchens and large-scale catering systems.
Ibellani srl can be contacted via the following details:
phone: +39. 0572.771550, mail info@ibellanisrl.com PEC Ibellanisrl@pec.it
Section 2 – Categories and sources of processed data.
The data concerning you that may be collected fall into the following categories:
• ordinary personal data provided voluntarily by you or obtained from public sources (e.g., the Chamber of Commerce): contact and identification details, including first name, surname, address, telephone number, email, and the like;
• other information you provide to us;
• data regarding contracts or pre-contractual negotiations;
• browsing data related to the operation of the website;
• information regarding purchases (sales and support, complaints, warranties, etc.);
• personal data linked to social network registration.
The personal data processed by the Data Controller are those provided directly by you or collected from third parties. Therefore, some data may be provided voluntarily by you or acquired from other data controllers; other data may derive from user browsing activity, while others may come from public sources (e.g., official records, directories, databases, and the like), always in compliance with lawful data transfer practices.
Section 3 – Purposes and legal basis of the processing.
Ibellani S.r.l. will process your personal data for the purposes indicated below, in compliance with applicable regulations and provided that the appropriate legal grounds exist.
a) Purpose: Execution of requests and purchase orders, provision of services, contracts, and/or pre-contractual measures taken at the data subject’s request; support for the sale of machinery/equipment/systems and/or related services.
Your personal data will be processed for purposes related to:
• the execution of purchase orders, the provision of requested services, and the fulfillment of requests made by the data subject (e.g., requests for quotes or contact, including via the website, domains, or e-commerce), as well as for pre-contractual, contractual, and relationship management purposes;
• your requests to participate in events, courses, or videoconferences organized by ibellani srl at its own premises or at the premises of partner companies..
Legal basis for processing:
Processing is not mandatory by law but is necessary for the fulfillment and execution of the contracts/services requested by the data subject, as well as for the implementation of pre-contractual measures to which the data subject is a party.
Your personal data will be processed for the time required to conclude or manage the contract and subsequently retained for 10 years following the contract’s conclusion, in accordance with the applicable statutory limitation period.
b) Purpose: Compliance with obligations established by law, whether national or European (e.g., tax regulations).
Your data will also be processed for internal administrative, tax, and accounting purposes in order to comply with obligations established by laws, regulations, EU legislation, supervisory and control bodies, and other authorities, including those incidental to or arising from the performance of contracts.
Legal basis for processing:
The processing of such data is necessary to comply with a legal obligation to which the Data Controller is subject, and obtaining your consent is not required.
Your data are processed only upon your express consent, for the following purposes:
c) Purpose: Direct and indirect marketing.
Your personal data will be processed to send you commercial offers and periodic commercial communications, invite you to promotional events, and conduct market research to gauge your satisfaction with the quality of services. You may be contacted or receive the aforementioned communications via traditional means (telephone or mail) or automated channels (e.g., messaging, social networks).
Legal basis for processing:
The processing is optional; therefore, your express consent is required and constitutes the legal basis for the processing.
The data subject has the right to withhold consent and to object to the processing operations, as well as to withdraw previously given consent at any time, by notifying the Consortium. The sole consequence of such a refusal is the data subject’s inability to access the relevant services.
Personal data processed for marketing purposes may be retained for 10 years from the date consent was given, subject to withdrawal or objection.
Section 4 – Data processing methods.
Your data will be processed using paper-based methods or with the aid of electronic/digital tools, and compliance with the provisions of the GDPR will be guaranteed in any case.
Section 5 – Categories of recipients to whom your personal data may be disclosed.
In accordance with the purposes set out in Section 3, your personal data may be disclosed to and/or accessed by employees and collaborators of Ibellani S.r.l. (acting as authorized data processors).
The Data Controller may also need to disclose your personal data to third parties for one of the established purposes. These parties include, by way of example: affiliated suppliers, Assogi consortium members and commercial partners, employees, agents, technicians, and collaborators; providers of IT and mailing list services; providers of professional consulting and assistance services; supervisory and regulatory authorities and bodies; and credit information systems.
Parties belonging to the aforementioned categories sometimes operate with complete autonomy—that is, as independent Data Controllers—in compliance with GDPR provisions; a complete and up-to-date list is available at the company’s headquarters.
Section – Transfer of personal data outside the European Union.
Currently, your personal data are processed by Ibellani srl within the European Union and are not transferred to countries outside the EU.
If necessary—for technical or operational reasons and within the scope of the purposes set out in section 3—your data may be transferred abroad to countries outside the European Union or to international organizations; in such cases, the transfer will take place only in full compliance with the conditions laid down by the GDPR (e.g., subject to adequate safeguards provided by the destination country), and you will be duly informed.
You may request a copy of any data transferred abroad, as well as a list of the non-EU countries or organizations to which the data have been transferred, by contacting the Data Controller using the details provided in section 1.
Section 7 – Rights of the data subject.
With regard to the processing activities described in this Notice, as a data subject, you may—subject to the conditions set forth in the GDPR—exercise the rights enshrined in Articles 15 to 21 of the GDPR by submitting a written request to the Data Controller, Ibellani srl, via email at info@ibellanisrl.com or via certified email (PEC) at Ibellanisrl@pec.it. You may also contact Ibellani srl by telephone at 0572.771550 or submit a request via the Ibellani srl website at www.ibellanisrl.com.
You may also withdraw the consents given in this Notice at any time using the same methods. In particular:
• Right of access: it is the right to obtain from the Data Controller confirmation as to whether or not personal data concerning you are being processed and, where that is the case, to obtain access to your personal data—including the provision of a copy thereof—and to be informed of, among other things, the following:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipients to whom the data have been or will be disclosed;
d) the data retention period or the criteria used to determine that period;
e) the data subject’s rights to request from the Data Controller the rectification or erasure of personal data, the restriction of processing, and to object to such processing;
f) the right to lodge a complaint with a supervisory authority;
g) the right to receive information regarding the source of the personal data where they have not been collected from the data subject;
h) the existence of automated decision-making, including profiling;
i) the appropriate safeguards in the event of a transfer of personal data to a third country or an international organization;
• Right to rectification: It is the right to obtain from the Data Controller the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data.
• Right to erasure: is the right to obtain from the Data Controller the erasure of personal data concerning you, for the following reasons:
a) the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) you have withdrawn your consent and there is no other legal ground for the processing;
c) you have successfully objected to the processing of personal data and there are no longer any legitimate grounds for proceeding with the processing itself;
d) the data have been processed unlawfully;
e) the data must be erased to comply with a legal obligation;
f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1, of the GDPR.
The right to erasure does not apply where processing is necessary for compliance with a legal obligation, for the performance of a task carried out in the public interest, or for the establishment, exercise, or defense of legal claims.
• Right to restriction of processing: it is the right to obtain from the Data Controller the restriction of processing in any of the following cases:
a) the data subject contests the accuracy of the personal data, and processing must be restricted for the period necessary for the Data Controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that their use be restricted;
c) although the Data Controller no longer needs the data for the purposes of processing, the personal data are required by the data subject for the establishment, exercise, or defense of legal claims;
d) the data subject has objected to the processing pending verification as to whether the legitimate grounds of the Data Controller override those of the data subject.
• Right to object: It is the right to object at any time to the processing of personal data concerning you, including profiling, unless the Data Controller has legitimate grounds to continue the processing, or the processing is necessary for the conclusion or performance of a contract or is authorized by Italian or European law.
• Right to data portability: consists of the right to (a) receive the personal data concerning you that you have provided to the Data Controller in a structured, commonly used, and machine-readable format, and the right to transmit those data to another Data Controller without hindrance, where the processing is based on consent and is carried out by automated means; (b) have your personal data transmitted directly by Ibellani srl to another Data Controller, where technically feasible.
• Lodge a complaint with the Italian Data Protection Authority (Autorità Garante per la protezione dei dati personali), Piazza di Montecitorio no. 121, 00186, Rome (RM). The aforementioned rights may be exercised against the Data Controller by using the contact details indicated in point 1 above. Exercising your rights as a data subject is free of charge pursuant to Article 12 of the GDPR. However, in the event of requests that are manifestly unfounded or excessive—including due to their repetitive nature—the Data Controller may charge you a reasonable fee based on the administrative costs incurred in handling your request, or may refuse to fulfill your request.
Section 8 – Retention and deletion of personal data.
Personal data will be stored in a form that allows for the identification of the data subject for a period no longer than strictly necessary to achieve the purposes for which they are processed, including those summarized in Section 3.
Upon the expiry of this period, the data will be deleted or rendered anonymous, unless retention is required to comply with legal obligations or to fulfill orders issued by public authorities or supervisory bodies.
Modifications.
In compliance with EU Regulation 2016/679, the Data Controller reserves the right to modify this privacy policy at any time; users are therefore encouraged to consult this policy regularly, noting that it always indicates the date of the last update.
Last updated: December 17, 2025.