Who we are
This Privacy Policy explains how FerMenti collects, uses, stores and protects personal data when you visit the website https://fermenti.net (the “Website”), contact us, or interact with content and services made available through the Website.
Data controller:
FerMenti
Piazzale delle Belle Arti, 8
00196 Roma (RM)VAT 16263911006
Email: [email protected]
What personal data we may collect
Depending on how you use the Website, we may collect the following categories of personal data:
• Identification and contact data, such as your name, company name, email address, telephone number and any other details you voluntarily provide when contacting us by email or, where available, through website forms.
• Communication data, including the content of your messages, attachments, requests, feedback and our related correspondence.
• Technical and usage data, such as IP address, browser type, device information, operating system, referring pages, date and time of access, pages viewed, approximate location inferred from IP, and other event or analytics data generated by your interaction with the Website.
• Cookie and preference data, including consent choices and settings saved through the cookie banner or preference tools.
• Data generated through third-party embedded or support services used on the Website, such as analytics tools, spam-prevention tools, map services, video services or externally hosted fonts, where those services are enabled and applicable.
Why we process personal data and our legal bases
We process personal data only where there is an appropriate legal basis under applicable data protection law. In particular, we may process personal data for the following purposes:
• To respond to information requests, meeting requests or other pre-contractual communications – legal basis: performance of pre-contractual steps at your request and, where appropriate, our legitimate interest in managing business communications.
• To manage and secure the Website, prevent abuse, detect bots or malicious traffic, troubleshoot incidents and protect our systems – legal basis: our legitimate interest in operating a secure and reliable website.
• To analyse Website traffic and improve content, performance and user experience – legal basis: your consent where analytics cookies or similar technologies require consent, and otherwise our legitimate interest where permitted by law.
• To display external content or functionality, such as maps, videos, fonts or anti-spam services – legal basis: your consent where required for non-essential technologies, or our legitimate interest for strictly necessary security functionality where permitted.
• To comply with legal, regulatory, tax, accounting or evidentiary obligations – legal basis: compliance with a legal obligation.
• To establish, exercise or defend legal claims – legal basis: our legitimate interest in protecting our rights and business interests.
How we collect personal data
We collect personal data:
• directly from you, when you contact us or otherwise submit information;
• automatically, through cookies, server logs and similar technologies when you browse the Website; and
• from third-party service providers involved in analytics, embedded content, security or communication tools used on the Website.
Cookies and similar technologies
The Website uses cookies and similar technologies for technical functionality, preference management, statistics and, where enabled, marketing or tracking purposes.
You can review more detail in the Website’s Cookie Policy and manage your preferences through the cookie banner or consent settings made available on the Website. Non-essential cookies and similar technologies should be activated only on the basis of valid consent where required by applicable law.
Third-party services currently referenced on the Website
Based on the Website configuration and cookie disclosures currently visible, the Website may use or reference the following categories of third-party services. These must be verified against the final live configuration before publication:
| Service | Typical purpose | Likely category | Main data involved |
|---|---|---|---|
| Google Analytics | Website statistics and traffic measurement | Statistics | Cookie identifiers, IP-related data, usage events and page interaction data |
| Google Fonts | Display of web fonts | Third-party content | IP address and browser request data |
| Google reCAPTCHA | Spam and bot prevention | Security / anti-abuse | IP address, device/browser signals and interaction data used for risk analysis |
| Google Maps | Map display | Third-party content | IP address and request data; possible location-related signals |
| YouTube | Video display | Third-party content | IP address, cookie identifiers and viewing / interaction data |
| Consent manager / cookie preference tool | Recording consent choices and preferences | Functional / preferences | Consent records and preference selections |
Who may receive personal data
Personal data may be accessed by authorised personnel and shared, where necessary, with carefully selected service providers acting as processors or independent controllers, such as:
• website hosting, maintenance and technical support providers;
• email, productivity or communication service providers;
• analytics, consent-management, anti-spam, mapping, video or font delivery providers;
• professional advisers, including legal, tax or compliance advisers; and
• competent authorities, courts or regulators where disclosure is required by law or necessary to protect our rights.
International data transfers
Some service providers used through the Website may process personal data outside the European Economic Area. Where this occurs, we will ensure that transfers are subject to an adequate legal mechanism under applicable law, such as an adequacy decision, Standard Contractual Clauses, or another lawful safeguard, and that supplementary measures are implemented where appropriate.
Where external services from Google or YouTube are enabled, related personal data may be processed in accordance with those providers’ global infrastructure and applicable transfer mechanisms. The controller should verify the exact current transfer documentation used by each provider before publication.
How long we keep personal data
We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. As a working baseline, the following periods may apply:
• contact requests and business correspondence: for the time needed to handle the request and, unless a further relationship arises, normally no longer than 24 months from the last relevant interaction;
• security and technical logs: for the period reasonably necessary to ensure network and information security and to investigate incidents;
• analytics and consent records: according to the relevant cookie settings, tool configuration and legal requirements;
• contractual, invoicing and accounting records, where applicable: for the period required by tax, accounting and civil law obligations.
Your rights
Subject to applicable law and the conditions set by that law, you may have the right to:
• obtain confirmation as to whether we process your personal data and request access to it;
• request rectification of inaccurate or incomplete data;
• request erasure of your personal data in certain circumstances;
• request restriction of processing in certain circumstances;
• object to processing carried out on the basis of legitimate interests;
• receive personal data you have provided to us in a structured, commonly used and machine-readable format, where the right to data portability applies;
• withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal; and
• lodge a complaint with the competent data protection supervisory authority.
How to exercise your rights
You may exercise your rights by contacting us at [email protected]. We may need to verify your identity before processing your request. We will respond within the time limits required by applicable law.
If the processing is carried out by a controller established in Italy, the competent supervisory authority is the Italian Personal Data Protection Agency. If the controller is established in another EU Member State, the competent supervisory authority may differ and should be stated accordingly.
Children’s data
The Website is not intentionally directed to children, and we do not knowingly collect personal data from children through the Website without a valid legal basis and, where required, appropriate parental authorisation. If you believe that a child has provided personal data through the Website, please contact us so that we can review and, where appropriate, delete the data.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical or operational changes. The latest version will be published on this page together with the effective date.
Contact details
For questions about this Privacy Policy or the processing of personal data, please contact:
FerMenti
Piazzale delle Belle Arti, 8
00196 Roma (RM)
Email: [email protected]