This website collects some Personal Data from its Users.
This document can be printed using the print command available in the settings of any browser.
Data Controller:
Cegua s.r.l.
VAT number: IT09500031217
Via Petraro 337, 80050 – S.M. la Carità (NA) – Italy
www.vicofoodbox.com
Email address of the Data Controller: info@vicofoodbox.com
Types of Data collected
Among the Personal Data collected by this Website, either independently or through third parties, there are: Tracking Tools; Usage Data; Videos; Data communicated during the use of the service; First Name; Last Name; Email; Session duration; Clicks; Country; Number of Users; Device Information; Session Statistics; Browser Information. Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific informative texts displayed prior to the Data collection itself. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Website. Unless specified otherwise, all Data requested by this Website is mandatory and failure to provide this Data may make it impossible for this Website to provide the Service. In cases where this Website specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or operation of the Service. Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller. Any use of Cookies – or of other tracking tools – by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service required by the User, in addition to any other purposes described in this document and in the Cookie Policy.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website.
Methods and place of processing the collected Data
Processing methods
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Data Controller. An updated list of these parties may be requested from the Data Controller at any time.
Location
The Data is processed at the Data Controller's operating offices and in any other places where the parties involved with the processing are located. For further information, please contact the Data Controller.
The Personal Data of the User may be transferred to a country other than their own. For more information regarding the processing location, Users can refer to the section detailing the Personal Data processing.
Deletion of data
Each user can request to view their stored data and request total deletion through the page dedicated to Personal Data, present within the Account page.
Within this page you can obtain and view, both in PDF and CSV format, the data that the system has stored on your account and proceed with the request for deletion of your data, as well as your account.
It is also possible, in full compliance with your rights to Privacy, to request the modification or deletion of your personal data also through our contact page or by sending an email to servizioclienti@vicofoodbox.com with the subject "Deletion of personal data", specifying your Name, Surname and the Email with which they are registered on our site, we will immediately delete all the stored information and communicate the cancellation.
Retention period
Unless otherwise specified within this document, Personal Data is stored and processed for the time required by the purposes for which it was collected. They may be kept for a longer period if required by law or upon User consent.
Purposes of processing the collected Data
User Data is collected to allow the Data Controller to provide its Service, comply with legal obligations, respond to enforcement requests, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activities, as well as for the following purposes: Analytics, Interaction with external social networks and platforms, Tag Management, Interaction with live chat platforms, Remarketing and behavioral targeting, Payment processing, Heat mapping and session recording, Advertising, Access to third-party accounts, Contacting the User, Managing contacts and sending messages, and Displaying content from external platforms.
For more detailed information on the purposes of processing and the Personal Data involved, Users may refer to the section titled "Details about the processing of Personal Data".
Permissions requested by Facebook from this Website
This Website may request certain permissions from Facebook allowing it to perform actions with the User's Facebook account and to collect information, including Personal Data, from it. This service allows this Website to connect with the User's account on the Facebook social network, provided by Facebook Inc.
For more information about the following permissions, please refer to Facebook's permission documentation and privacy policy.
The permissions requested are as follows:
Basic information
User's basic information registered on Facebook typically includes the following Data: id, name, profile picture, gender, and localization language, and in some cases, the User's Facebook "Friends". If the User has publicly made additional Data available, it will also be accessible.
Details on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
• Access to third-party accounts
This type of service allows this Website to access Data from your accounts on third-party services and perform actions with them.
These services are not activated automatically but require the explicit authorization of the User.
Access to Facebook account (Meta Platforms, Inc.)
This service allows this Website to connect with the User's account on the Facebook social network, provided by Facebook, Inc.
Permissions required: Business Management API.
Processing location: United States – Privacy Policy.
• Managing contacts and sending messages
This type of service allows the management of a database of email contacts, phone contacts, or any other type of contacts used to communicate with the User.
These services may also collect data concerning the date and time when the messages were viewed by the User, as well as User interaction with them, such as information on clicks on links included in messages.
Mailgun (Mailgun, Inc.)
Mailgun is an email address management and message sending service provided by Mailgun, Inc.
Personal Data processed: email.
Processing location: Germany – Privacy Policy.
• Tag Management
This type of service is functional to the centralized management of tags or scripts used on this Website.
The use of these services involves the flow of User Data through them and, if necessary, their retention.
Google Tag Manager (Google Ireland Limited)
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal Data processed: Usage Data; Tracking Tools.
Processing location: Ireland – Privacy Policy.
• Interaction with live chat platforms
This type of service allows interaction with live chat platforms managed by third parties directly from the pages of this Website, in order to contact and be contacted by the support service of this Website.
If a live chat interaction service is installed, it is possible that, even if Users do not use the service, it collects Usage Data related to the pages where it is installed. Additionally, live chat conversations may be recorded.
Smartsupp (Smartsupp.com, s.r.o.)
The Smartsupp Widget is a live chat interaction and session recording platform provided by Smartsupp.com, s.r.o.
Personal Data processed: Data communicated during the use of the service; Usage Data; Tracking Tools; various types of Data as specified in the service's privacy policy; Video.
Processing location: Czech Republic – Privacy Policy.
• Advertising
This type of service allows the use of User Data for the purpose of commercial communication. These communications are displayed on this Website in the form of banners and other advertising formats, possibly based on User interests.
This does not imply that all Personal Data is used for this purpose. Data and usage conditions are outlined below.
Some of the services listed below may use Tracking Tools to identify the User or employ behavioral retargeting techniques, i.e., display personalized advertisements based on the User’s interests and behavior, also detected outside of this Website. For more information, we recommend checking the privacy policies of the respective services.
Generally, these types of services offer the option to opt out of such tracking. In addition to any opt-out feature provided by any of the services listed in this document, Users can learn more about disabling interest-based advertising in the dedicated section "How to disable interest-based advertising" in this document.
Microsoft Advertising (Microsoft Corporation)
Microsoft Advertising is an advertising service provided by Microsoft Corporation.
Personal Data processed: Usage Data; Tracking Tools.
Processing location: United States – Privacy Policy – Opt Out.
• Analytics
The services in this section enable the Data Controller to monitor and analyze web traffic data and are used to track User behavior.
Google Analytics
Google Analytics is a web analytics service provided by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages Data processing ("Google"). Google uses Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other Google services.
Google may use Personal Data to contextualize and personalize the ads of its own advertising network.
Personal Data processed: Usage Data; Tracking Tools.
Processing location: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Google Analytics with anonymized IP (Google Ireland Limited)
Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other Google services.
Google may use Personal Data to contextualize and personalize the ads of its own advertising network.
This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening the IP address of Users within the member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to Google's servers and shortened within the United States.
Personal Data processed: Usage Data; Tracking Tools.
Processing location: Ireland – Privacy Policy – Opt Out.
Google Ads conversion tracking (Google Ireland Limited)
Google Ads conversion tracking is a statistics service provided by Google Ireland Limited that connects data from the Google Ads advertising network with actions performed on this Website.
Personal Data processed: Usage Data; Tracking Tools.
Processing location: Ireland – Privacy Policy.
Meta Events Manager (Meta Platforms Ireland Limited)
Meta Events Manager is a statistics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can provide the Data Controller with information about traffic and interactions on this Website.
Personal Data processed: Usage Data; Tracking Tools.
Processing location: Ireland – Privacy Policy.
Google Analytics 4 (Google Ireland Limited)
Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses Personal Data collected for the purpose of tracking and analyzing the use of this Website, compiling reports, and sharing them with other Google services.
Google may use Personal Data to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in any data center or server. For more information, please refer to Google's official documentation.
Personal Data processed: Usage Data; browser information; device information; number of Users; session statistics.
Processing location: Ireland – Privacy Policy – Opt Out.
Facebook Ads conversion tracking (Facebook pixel) (Meta Platforms Ireland Limited)
Facebook Ads conversion tracking (Facebook pixel) is a statistics service provided by Meta Platforms Ireland Limited that connects data from the Meta advertising network with actions performed on this Website. The Facebook pixel monitors conversions that can be attributed to Facebook, Instagram, and Audience Network ads.
Personal Data processed: Usage Data; Tracking Tools.
Processing location: Ireland – Privacy Policy.
• Contacting the User
Contact form (this Website)
By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other kind indicated by the form header.
Personal Data processed: last name; email; first name.
Mailing list or newsletter (this Website)
By registering for the mailing list or newsletter, the User's email address is automatically added to a list of contacts to whom email messages containing information, including commercial and promotional information, related to this Website may be transmitted. The User's email address may also be added to this list as a result of registering for this Website or after making a purchase.
Personal Data processed: name; last name; email; country; phone number;
• Payment management
Unless otherwise specified, this Website processes all payments via credit card, bank transfer, or other means through external payment service providers. In general, and unless otherwise stated, Users are requested to provide payment details and personal information directly to such payment service providers.
This Website is not involved in the collection and processing of such information: instead, it will only receive notification from the relevant payment service provider regarding the completion of the payment.
PayPal (PayPal)
PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments.
Personal Data processed: last name; email; first name.
Location of processing: Please refer to PayPal's privacy policy – Privacy Policy.
• Heat mapping and session recording
Heat mapping services are used to identify the areas of this Website that users interact with most frequently, in order to detect which areas attract the most interest. These services allow monitoring and analyzing traffic data to track user behavior.
Some of these services may record sessions and make them available for later viewing.
Microsoft Clarity (Microsoft Corporation)
Microsoft Clarity is a heat mapping and session recording service provided by Microsoft Corporation.
Microsoft processes or receives Personal Data through Microsoft Clarity, which in turn can be used for any purpose in accordance with Microsoft's Privacy Policy, including improving and providing Microsoft Advertising.
Personal Data processed: clicks; session duration.
Processing locations: United States – Privacy Policy; Germany – Privacy Policy; United Kingdom – Privacy Policy; France – Privacy Policy; Netherlands – Privacy Policy; Ireland – Privacy Policy.
Smartlook (Smartsupp.com, s.r.o.)
Smartlook is a heat mapping and session recording service provided by Smartsupp.com, s.r.o.
Personal Data processed: Usage Data; Tracking Tools; various types of Data as specified in the service's privacy policy.
Processing location: Czech Republic – Privacy Policy.
• Interaction with social networks and external platforms
This type of service allows interaction with social networks or other external platforms directly from the pages of this Website.
The interactions and information obtained by this Website are always subject to the User's privacy settings for each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out from the respective services to ensure that the data processed on this Website is not connected back to the User's profile.
Facebook Like button and social widgets (Meta Platforms Ireland Limited)
The Facebook Like button and social widgets are services for interacting with the Facebook social network, provided by Meta Platforms Ireland Limited.
Personal Data processed: Usage Data; Tracking Tools.
Processing location: Ireland – Privacy Policy.
• Remarketing and behavioral targeting
This type of service allows this Website and its partners to communicate, optimize, and serve advertisements based on the User's past usage of this Website.
This activity is facilitated by tracking Usage Data and using Tracking Tools to collect information that is then transferred to partners managing remarketing and behavioral targeting activities.
Some services offer an option for remarketing based on email address lists.
Generally, services of this kind offer the ability to opt out of such tracking.
In addition to any opt-out options provided by any of the services listed in this document, Users can find out more about disabling interest-based advertising in the dedicated section "How to disable interest-based advertising" in this document.
LinkedIn Website Retargeting (LinkedIn Corporation)
LinkedIn Website Retargeting is a remarketing and behavioral targeting service provided by LinkedIn Corporation that connects the activity of this Website with the LinkedIn advertising network.
Personal Data processed: Usage Data; Tracking Tools.
Processing Location: United States – Privacy Policy – Opt Out.
Displaying content from external platforms
This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
This type of service may still collect web traffic data for the pages where the service is installed, even when Users do not use it.
Google Fonts (Google Ireland Limited)
Google Fonts is a font style display service managed by Google Ireland Limited that allows this Website to integrate such content within its pages.
Personal Data processed: Usage Data; Tracking Tools.
Processing Location: Ireland – Privacy Policy.
Font Awesome (Fonticons, Inc.)
Font Awesome is a font style display service managed by Fonticons, Inc. that allows this Website to integrate such content within its pages.
Personal Data processed: Usage Data; Tracking Tools.
Processing Location: United States – Privacy Policy.
Information on how to disable interest-based advertising
In addition to any opt-out options provided by any of the services listed in this document, Users can find out more about disabling interest-based advertising in the dedicated section of the Cookie Policy.
Cookie Policy
This Website uses Tracking Tools. For more information, Users can refer to the Cookie Policy.
Additional information for Users
Legal basis of processing
The Data Controller processes Personal Data relating to the User in the event that one of the following conditions exists:
• The User has given consent for one or more specific purposes; Note: In some jurisdictions, the Data Controller may be allowed to process Personal Data without the User's consent or another legal basis specified below until the User objects ("opt-out") to such processing. This is not however applicable whenever the processing of Personal Data is subject to European data protection law;
• processing is necessary for the performance of a contract with the User and/or for pre-contractual measures;
• processing is necessary to comply with a legal obligation to which the Data Controller is subject;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
• processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
It is always possible to request the Data Controller to clarify the specific legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a contract.
Additional information on data retention
If not otherwise specified within this document, Personal Data is processed and stored for as long as required for the purpose they were collected for and may be stored for a longer period due to legal obligations or based on User consent.
Therefore:
• Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract is fully performed.
• Personal Data collected for purposes related to the legitimate interests of the Owner shall be retained until such interests are fulfilled. Users can obtain further information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.
When processing is based on the User's consent, the Owner may retain Personal Data longer until such consent is revoked. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for compliance with a legal obligation or upon order of an authority.
At the end of the retention period, Personal Data shall be deleted. Therefore, upon expiration of this period, the right to access, delete, rectify, and the right to data portability cannot be exercised anymore.
User's Rights
Users may exercise certain rights regarding their Data processed by the Owner.
In particular, Users have the right to:
• withdraw consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
• object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent.
• access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the Data undergoing processing.
• verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
• restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
• obtain the erasure or removal of their Personal Data. Users have the right to request the erasure of their Data by the Owner.
• receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance.
• lodge a complaint. Users have the right to bring a claim before their competent data protection authority or in court.
Users have the right to obtain information regarding the legal basis for Data transfers to countries outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, as well as regarding the security measures taken by the Owner to safeguard their Data.
Details about the right to object
When Personal Data is processed in the public interest, in the exercise of official authority vested in the Owner, or for the legitimate interests pursued by the Owner, Users have the right to object to the processing for reasons related to their particular situation.
Users are hereby informed that, if their Data is processed for direct marketing purposes, they can object to such processing at any time, free of charge and without providing any justification. If Users object to processing for direct marketing purposes, their Personal Data shall no longer be processed for such purposes. Users can refer to the respective sections of this document to ascertain whether the Owner processes Data for direct marketing purposes.
Exercising User Rights
To exercise their rights, Users may address a request to the contact details of the Owner provided in this document. The request can be made free of charge, and the Owner will respond within the shortest time possible, but in any case within one month, providing the User with all the information required by law. Any rectifications, erasures, or limitations of processing will also be communicated by the Owner to each of the recipients to whom the Personal Data has been disclosed, unless this proves impossible or involves a disproportionate effort. Upon request, the Owner will inform the User about these recipients.
Additional Information about Processing
Legal Defense
User's Personal Data may be used by the Owner in court or in the stages leading to possible legal action arising from improper use of this Website or the related Services by the User.
The User acknowledges that the Owner may be required to disclose the Data upon request of public authorities.
Specific Information
Upon User's request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.
System Logs and Maintenance
For operation and maintenance purposes, this Website and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.
Information Not Contained in this Policy
Additional information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact information.
Changes to this Privacy Policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if technically and legally feasible, by sending a notification to Users through one of the Owner's contact details. Therefore, please consult this page frequently, referring to the last modification date indicated at the bottom.
If changes affect processing activities based on consent, the Owner will collect consent from the User again, if necessary.
Definitions and Legal References
Personal Data (or Data)
Any information that, directly or indirectly, in connection with any other information, including a personal identification number, makes a natural person identified or identifiable constitutes Personal Data.
Usage Data
Information collected automatically through this Website (or third-party services employed in this Website), which can include: the IP addresses or domain names of the computers utilized by the Users who use this Website, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's response (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Application), and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.
User
The individual using this Website who, unless otherwise specified, coincides with the Data Subject.
Data Subject
The natural person to whom the Personal Data refers.
Data Controller (or Owner)
The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.
This Website (or this Application)
The hardware or software tool by which the Personal Data of Users is collected and processed.
Service
The service provided by this Website as described in the relative terms (if available) and on this site/application.
European Union (or EU)
Unless otherwise specified, any reference to the European Union contained in this document is extended to all current member states of the European Union and the European Economic Area.
Cookie
Cookies are Tracking Tools consisting of small pieces of data stored in the User's browser.
Tracking Tool
Tracking Tools are technologies such as cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting that enable tracking Users, for example by collecting or saving information on the User’s device.
Video
Provides access to the videos uploaded by the user and those in which the user has been tagged.
Legal References
Unless otherwise specified, this privacy policy applies exclusively to this Website.
Last updated: August 31, 2022
Personal Data processed for the following purposes and using the following services:
Access to third-party accounts
- Access to the Facebook account
Permissions: Business Management API or Contacting the User
- Contact form
Personal Data: last name; email; first name
- Mailing list or newsletter
Personal Data: last name; email; country; first name or Managing contacts and sending messages
- Mailgun
Personal Data: email or Payment processing
- PayPal
Personal Data: last name; email; first name or Tag management
- Google Tag Manager
Personal Data: Usage Data; Tracking Tools or Heat mapping and session recording
- Microsoft Clarity
Personal Data: clicks; session duration
- Smartlook
Personal Data: Usage Data; Tracking Tools; various types of Data as specified in the privacy policy of the service or Interaction with live chat platforms
- Smartsupp
Personal Data: Data communicated during use of the service; Usage Data; Tracking Tools; various types of Data as specified in the privacy policy of the service; Video or Interaction with social networks and external platforms
- Facebook Like button and social widgets
Personal Data: Usage Data; Tracking Tools or Advertising
- Microsoft Advertising
Personal Data: Usage Data; Tracking Tools or Remarketing and behavioral targeting
- LinkedIn Website Retargeting
Personal Data: Usage Data; Tracking Tools or Analytics
- Google Analytics, Google Analytics with anonymized IP, Google Ads conversion tracking, Meta Events Manager and Facebook Ads conversion tracking (Facebook pixel)
Personal Data: Usage Data; Tracking Tools
- Google Analytics 4
Personal Data: Usage Data; browser information; device information; number of Users; session statistics or Displaying content from external platforms
- Google Fonts and Font Awesome
Personal Data: Usage Data; Tracking Tools
Information on how to opt out of interest-based advertising
In addition to any opt-out feature offered by any of the services listed in this document, Users can learn more about opting out of interest-based advertising in the relevant section of the Cookie Policy.
Contact information or Data Controller
Cegua s.r.l.
VAT n° IT09500031217
Via Petraro 337, 80050 – S.M. la Carità (NA) – Italy
www.vicofoodbox.com
Data Controller's email address: info@vicofoodbox.com