This Privacy Policy explains how FerMenti collects, uses, stores and protects personal data when you visit the website https:\/\/fermenti.net (the “Website”), contact us, or interact with content and services made available through the Website.<\/p>\n\n\n\n
Data controller:<\/p>\n\n\n\n
FerMenti
Piazzale delle Belle Arti, 8
00196 Roma (RM)VAT 16263911006
Email: info@fermenti.net<\/p>\n\n\n\n
Depending on how you use the Website, we may collect the following categories of personal data:<\/p>\n\n\n\n
\u2022 Identification and contact data, such as your name, company name, email address, telephone number and any other details you voluntarily provide when contacting us by email or, where available, through website forms.<\/p>\n\n\n\n
\u2022 Communication data, including the content of your messages, attachments, requests, feedback and our related correspondence.<\/p>\n\n\n\n
\u2022 Technical and usage data, such as IP address, browser type, device information, operating system, referring pages, date and time of access, pages viewed, approximate location inferred from IP, and other event or analytics data generated by your interaction with the Website.<\/p>\n\n\n\n
\u2022 Cookie and preference data, including consent choices and settings saved through the cookie banner or preference tools.<\/p>\n\n\n\n
\u2022 Data generated through third-party embedded or support services used on the Website, such as analytics tools, spam-prevention tools, map services, video services or externally hosted fonts, where those services are enabled and applicable.<\/p>\n\n\n\n
We process personal data only where there is an appropriate legal basis under applicable data protection law. In particular, we may process personal data for the following purposes:<\/p>\n\n\n\n
\u2022 To respond to information requests, meeting requests or other pre-contractual communications – legal basis: performance of pre-contractual steps at your request and, where appropriate, our legitimate interest in managing business communications.<\/p>\n\n\n\n
\u2022 To manage and secure the Website, prevent abuse, detect bots or malicious traffic, troubleshoot incidents and protect our systems – legal basis: our legitimate interest in operating a secure and reliable website.<\/p>\n\n\n\n
\u2022 To analyse Website traffic and improve content, performance and user experience – legal basis: your consent where analytics cookies or similar technologies require consent, and otherwise our legitimate interest where permitted by law.<\/p>\n\n\n\n
\u2022 To display external content or functionality, such as maps, videos, fonts or anti-spam services – legal basis: your consent where required for non-essential technologies, or our legitimate interest for strictly necessary security functionality where permitted.<\/p>\n\n\n\n
\u2022 To comply with legal, regulatory, tax, accounting or evidentiary obligations – legal basis: compliance with a legal obligation.<\/p>\n\n\n\n
\u2022 To establish, exercise or defend legal claims – legal basis: our legitimate interest in protecting our rights and business interests.<\/p>\n\n\n\n
We collect personal data:<\/p>\n\n\n\n
\u2022 directly from you, when you contact us or otherwise submit information;<\/p>\n\n\n\n
\u2022 automatically, through cookies, server logs and similar technologies when you browse the Website; and<\/p>\n\n\n\n
\u2022 from third-party service providers involved in analytics, embedded content, security or communication tools used on the Website.<\/p>\n\n\n\n
The Website uses cookies and similar technologies for technical functionality, preference management, statistics and, where enabled, marketing or tracking purposes.<\/p>\n\n\n\n
You can review more detail in the Website’s Cookie Policy and manage your preferences through the cookie banner or consent settings made available on the Website. Non-essential cookies and similar technologies should be activated only on the basis of valid consent where required by applicable law.<\/p>\n\n\n\n
Based on the Website configuration and cookie disclosures currently visible, the Website may use or reference the following categories of third-party services. These must be verified against the final live configuration before publication:<\/p>\n\n\n\n Personal data may be accessed by authorised personnel and shared, where necessary, with carefully selected service providers acting as processors or independent controllers, such as:<\/p>\n\n\n\n \u2022 website hosting, maintenance and technical support providers;<\/p>\n\n\n\n \u2022 email, productivity or communication service providers;<\/p>\n\n\n\n \u2022 analytics, consent-management, anti-spam, mapping, video or font delivery providers;<\/p>\n\n\n\n \u2022 professional advisers, including legal, tax or compliance advisers; and<\/p>\n\n\n\n \u2022 competent authorities, courts or regulators where disclosure is required by law or necessary to protect our rights.<\/p>\n\n\n\n Some service providers used through the Website may process personal data outside the European Economic Area. Where this occurs, we will ensure that transfers are subject to an adequate legal mechanism under applicable law, such as an adequacy decision, Standard Contractual Clauses, or another lawful safeguard, and that supplementary measures are implemented where appropriate.<\/p>\n\n\n\n Where external services from Google or YouTube are enabled, related personal data may be processed in accordance with those providers’ global infrastructure and applicable transfer mechanisms. The controller should verify the exact current transfer documentation used by each provider before publication.<\/p>\n\n\n\n We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. As a working baseline, the following periods may apply:<\/p>\n\n\n\n \u2022 contact requests and business correspondence: for the time needed to handle the request and, unless a further relationship arises, normally no longer than 24 months from the last relevant interaction;<\/p>\n\n\n\n \u2022 security and technical logs: for the period reasonably necessary to ensure network and information security and to investigate incidents;<\/p>\n\n\n\n \u2022 analytics and consent records: according to the relevant cookie settings, tool configuration and legal requirements;<\/p>\n\n\n\n \u2022 contractual, invoicing and accounting records, where applicable: for the period required by tax, accounting and civil law obligations.<\/p>\n\n\n\n Subject to applicable law and the conditions set by that law, you may have the right to:<\/p>\n\n\n\n \u2022 obtain confirmation as to whether we process your personal data and request access to it;<\/p>\n\n\n\n \u2022 request rectification of inaccurate or incomplete data;<\/p>\n\n\n\n \u2022 request erasure of your personal data in certain circumstances;<\/p>\n\n\n\n \u2022 request restriction of processing in certain circumstances;<\/p>\n\n\n\n \u2022 object to processing carried out on the basis of legitimate interests;<\/p>\n\n\n\n \u2022 receive personal data you have provided to us in a structured, commonly used and machine-readable format, where the right to data portability applies;<\/p>\n\n\n\n \u2022 withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal; and<\/p>\n\n\n\n \u2022 lodge a complaint with the competent data protection supervisory authority.<\/p>\n\n\n\n You may exercise your rights by contacting us at info@fermenti.net. We may need to verify your identity before processing your request. We will respond within the time limits required by applicable law.<\/p>\n\n\n\n If the processing is carried out by a controller established in Italy, the competent supervisory authority is the Italian Personal Data Protection Agency. If the controller is established in another EU Member State, the competent supervisory authority may differ and should be stated accordingly.<\/p>\n\n\n\n The Website is not intentionally directed to children, and we do not knowingly collect personal data from children through the Website without a valid legal basis and, where required, appropriate parental authorisation. If you believe that a child has provided personal data through the Website, please contact us so that we can review and, where appropriate, delete the data.<\/p>\n\n\n\n We may update this Privacy Policy from time to time to reflect legal, technical or operational changes. The latest version will be published on this page together with the effective date.<\/p>\n\n\n\n For questions about this Privacy Policy or the processing of personal data, please contact:<\/p>\n\n\n\nService<\/strong><\/th> Typical purpose<\/strong><\/th> Likely category<\/strong><\/th> Main data involved<\/strong><\/th><\/tr><\/thead> Google Analytics<\/td> Website statistics and traffic measurement<\/td> Statistics<\/td> Cookie identifiers, IP-related data, usage events and page interaction data<\/td><\/tr> Google Fonts<\/td> Display of web fonts<\/td> Third-party content<\/td> IP address and browser request data<\/td><\/tr> Google reCAPTCHA<\/td> Spam and bot prevention<\/td> Security \/ anti-abuse<\/td> IP address, device\/browser signals and interaction data used for risk analysis<\/td><\/tr> Google Maps<\/td> Map display<\/td> Third-party content<\/td> IP address and request data; possible location-related signals<\/td><\/tr> YouTube<\/td> Video display<\/td> Third-party content<\/td> IP address, cookie identifiers and viewing \/ interaction data<\/td><\/tr> Consent manager \/ cookie preference tool<\/td> Recording consent choices and preferences<\/td> Functional \/ preferences<\/td> Consent records and preference selections<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n Who may receive personal data<\/h2>\n\n\n\n
International data transfers<\/h2>\n\n\n\n
How long we keep personal data<\/h2>\n\n\n\n
Your rights<\/h2>\n\n\n\n
How to exercise your rights<\/h2>\n\n\n\n
Children’s data<\/h2>\n\n\n\n
Changes to this Privacy Policy<\/h2>\n\n\n\n
Contact details<\/h2>\n\n\n\n