Privacy Policy

Data controller

The data controller is Daya Food S.R.L., Via Aldo Moro 10/12, 41030 Bomporto (MO), Italia — VAT No. 04209100363 — REA MO - 451909 — info@dayafood.it — Certified email (PEC) daya@pec.dayafood.it — +39 333 613 7151.

For any request concerning your personal data, you can write to info@dayafood.it.

Data we process

Browsing data: the systems hosting this website record, for technical and security purposes, data whose transmission is implicit in internet protocols (IP address, date and time of access, requested pages, browser type).

Data you provide voluntarily: by filling in the contact form you share your full name, email, phone number, company, VAT number, any products and quantities you are interested in, and the content of your message. Together with the request we record the date, time and IP address of submission.

Requests sent through the form reach us by email and are also recorded automatically in the internal management system of Daya Food S.R.L. (the same data controller), together with the language and the page they were sent from, so that we can review them and turn them into a quote or an order. Your IP address is not passed on to the management system.

Please do not include special categories of data (such as health data) or third-party data that is not needed for your request.

Purposes and legal basis

Answering your enquiry and preparing any quotes: Art. 6(1)(b) GDPR (pre-contractual measures taken at the data subject’s request).

Ensuring the operation and security of the website and preventing misuse of the contact form: Art. 6(1)(f) GDPR (legitimate interest of the controller).

Meeting administrative, accounting and tax obligations where a business relationship follows the enquiry: Art. 6(1)(c) GDPR (legal obligation).

Understanding in aggregate form how the website is used, through our own cookie-free statistics: Art. 6(1)(f) GDPR (legitimate interest), see “Cookie-free statistics”.

We do not use your data to send promotional communications unless you have asked for them or given specific consent.

Cookie-free statistics

To understand how the website is used, we measure visits with our own tool, without cookies and without third-party services. For each page viewed we collect: the page address, language, referring site and any campaign parameters (utm), device type, browser and operating system (derived from the browser and the screen width), time spent on the page, and a few actions (form submission, clicks on phone, email or WhatsApp links, opening of product pages, language change).

To count unique visitors we compute a non-reversible fingerprint (SHA-256 hash) of the IP address and browser combined with a random value that changes every day and is deleted after two days: it is not possible to trace it back to the IP address or to recognise you from one day to the next. The IP address is not stored and nothing is saved in your browser.

Legal basis: the controller’s legitimate interest in knowing, in aggregate form, how its website is used (Art. 6(1)(f) GDPR). The data is processed in the company’s management system, is not shared with third parties and is kept for 26 months, then deleted. If your browser sends a Do Not Track or Global Privacy Control signal, the script sends no data at all; you can also object at any time by writing to info@dayafood.it.

Whether providing data is mandatory

The form fields marked as required are necessary for us to reply: without them we cannot handle your request. All other fields are optional.

Retention

Contact request data is kept for the time needed to handle the enquiry and in any case for no longer than 24 months from the last contact, if no business relationship follows.

Where a business relationship follows, data is kept for its duration and afterwards for the periods required by law (as a rule, 10 years for accounting and tax records).

Browsing data is kept only for as long as strictly necessary for technical and security purposes.

Cookie-free statistics data is kept for 26 months.

Recipients

Data is processed by authorised staff of Daya Food S.R.L. and by the providers that assist us in running the website and email (hosting, technical maintenance), appointed as data processors under Art. 28 GDPR.

Data is neither disclosed nor sold to third parties for marketing purposes. It may be communicated to public authorities where required by law.

Transfers outside the European Union

We do not transfer your personal data outside the European Economic Area.

Automated decision-making

Your data is not subject to automated decision-making or profiling.

Your rights

You may at any time exercise the rights set out in Arts. 15-22 GDPR (access, rectification, erasure, restriction, portability, objection) and withdraw any consent already given by writing to info@dayafood.it. We will reply within one month.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

Cookies and updates

The storage technologies used by this website are described in the Cookie Policy.

This notice may be updated: the version in force is always the one published on this page, with its date.