Privacy & Cookie Policy

Pursuant to Articles 13–14 of EU Regulation No. 679/2016 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018

Version v1.0 — 13/07/2026

Table of Contents

Part A — Privacy Policy

Part B — Cookie Policy

Part A — Privacy Policy

1. Data Controller

This website (gruppofood.com) is operated by Food S.r.l., with registered office at Via Mazzini n. 6, 43121 Parma (PR), Italy, VAT number 01756990345 (hereinafter the “Controller”), which can be contacted at amministrazione@gruppofood.com.

The site is purely institutional and informational in nature: it does not involve account registration, the purchase of subscriptions, newsletter sign-up, or other features that entail the systematic collection of personal data. The data processed is therefore limited to what is strictly necessary for browsing and for any direct contact initiated by the user.

2. Categories of Personal Data Processed

2.1 Browsing data

In the course of their normal operation, the site’s IT systems and software procedures acquire certain personal data whose transmission is implicit in the use of Internet communication protocols. This category includes IP addresses, browser type, operating system, the domain and addresses of the sites from which the user came, as well as information on the pages visited and the time of access. This data is processed in anonymous or pseudonymised form and is used solely to derive statistical information on the use of the site and to ensure it functions correctly.

2.2 Data voluntarily provided by the user

The optional, explicit and voluntary sending of messages through the contact details indicated in the site’s “Contact” section involves the collection of the sender’s contact data — first name, surname, email address, and any other information included in the message — necessary to respond to the request.

3. Purposes of Processing and Legal Bases

3.a) Browsing and operation of the site

Browsing data is processed to ensure the site functions correctly, to maintain system security, and to produce anonymous statistics on usage.

Legal basis: Art. 6(1)(f) GDPR — the Controller’s legitimate interest in the proper management and security of the site.

3.b) Responding to contact requests

Data provided through the contact channels available on the site is processed solely to respond to the user’s request.

Legal basis: Art. 6(1)(b) GDPR — performance of pre-contractual measures or fulfilment of a request made by the data subject; or Art. 6(1)(f) GDPR — the Controller’s legitimate interest in responding to communications received.

3.c) Legal obligations

The Controller processes personal data to fulfil obligations under applicable tax, accounting and sector-specific regulations.

Legal basis: Art. 6(1)(c) GDPR — legal obligation.

4. Recipients of Data

Personal data collected through the site is not disclosed to unspecified parties. It may be shared, to the extent strictly necessary, with:

5. Retention Periods

Browsing data is retained for the time strictly necessary for security and statistical purposes, in aggregate or anonymised form, as set out in the Records of Processing Activities. Data voluntarily provided through the contact channels is retained for the time necessary to handle the request and, where applicable, for the period required by law.

6. Transfer of Data Outside the European Union

Personal data is processed predominantly within the territory of the European Union. Where, for technical or operational reasons, it becomes necessary to use suppliers located outside the European Union, the transfer will comply with the safeguards set out in Chapter V GDPR, in particular through adequacy decisions adopted by the European Commission or standard contractual clauses.

7. Data Subjects’ Rights

Pursuant to Arts. 15–22 of EU Regulation 2016/679, the data subject has the right to:

Requests should be sent to: amministrazione@gruppofood.com or by post to Food S.r.l. — Via Mazzini n. 6, 43121 Parma (PR), Italy — Attn: Privacy Office. The Controller responds within 30 days of receipt.

8. Security Measures

The Controller adopts technical and organisational measures appropriate to ensure a level of security proportionate to the risk, in compliance with Art. 32 of EU Regulation 2016/679.

9. Updates to This Notice

The Controller reserves the right to amend this Notice to reflect regulatory changes or changes in how the site is managed. Changes are published on the site with an indication of the update date. The version in force is always the one available on the site at the time of consultation.

10. Contacts

Food S.r.l. — Via Mazzini n. 6, 43121 Parma (PR), Italy — VAT number 01756990345

Email: amministrazione@gruppofood.com

Italian Data Protection Authority (Garante per la Protezione dei Dati Personali): Piazza di Monte Citorio 121, 00186 Rome, Italy — www.garanteprivacy.it

Part B — Cookie Policy

11. What Cookies Are

A cookie is a small text file that a website sends to the user’s browser and which is stored on the device used to browse the Internet. Cookies make it possible to uniquely identify the browser or to save information or settings in the browser in order to personalise the browsing experience.

The gruppofood.com website uses cookies in compliance with Art. 122 of Legislative Decree 196/2003, ePrivacy Directive 2002/58/EC, and the Italian Data Protection Authority’s Guidelines on cookies of 10 June 2021.

12. Types of Cookies Used

12.1 Technical cookies

Technical cookies are necessary for the site to function correctly. This category includes cookies necessary for navigation, session management and storing the preferences expressed by the user. These cookies do not require the user’s prior consent, without prejudice to the obligation to provide notice.

12.2 Analytics cookies

The site may use analytics cookies or tools to collect statistical information on usage, measure performance and improve structure and content. Such tools are configured to reduce their identifying capability and are used in compliance with applicable law. Where an analytics tool cannot be treated as a technical cookie, it will only be used with the user’s prior consent.

12.3 Marketing cookies

The site may use marketing cookies to display more relevant advertising content to the user, both on and off the site. The use of such cookies requires the user’s prior consent.

12.4 Cookies related to embedded videos

Some pages of the site may contain videos embedded from third-party services (such as YouTube or Vimeo). These services may install cookies on the user’s device. The installation of such cookies is subject to the user’s consent.

12.5 List of cookies used

Detailed information on the cookies and other tools actually used on the site, including name, provider, purpose, duration and category, is set out in the dedicated cookie table made available through the banner or the preference management panel.

13. Third-Party Cookies

Some pages of the site may contain content or components provided by third parties. Whether cookies are actually installed by these third parties depends on the content present on individual pages and on the preferences expressed by the user through the banner or the consent management panel. For further information on the processing carried out by third parties, the user may consult their respective notices, accessible through the links provided in the cookie table.

14. Managing and Withdrawing Cookie Consent

The user may manage, change or withdraw their cookie preferences at any time through the banner or the preference management panel available on the site. Preferences are recorded through a dedicated Consent Management Platform. The user may change or withdraw previously given consent via the “Cookie Settings” link in the site footer.

The user may also intervene through their browser settings, it being understood that disabling certain technical cookies may affect the correct functioning of certain features of the site.

Gruppo Food — Privacy & Cookie Policy Notice — Showcase Sites — v1.0 — 13/07/2026