Personal Data Processing and Cookie Notice

Personal data processing notice (art. 13 of Italian Legislative Decree 196/2003)

Data Subjects: Website Browsers.

Pursuant to Italian Legislative Decree no. 196 of 30 June 2003 (the “Italian Personal Data Protection Code”, hereinafter referred to as the “Data Protection Code”), as the Data Controller responsible for processing your personal data, Nutriplus srl hereby informs you that the Data Protection Code provides protection for natural and other persons during personal data processing and requires the processing to be carried out in accordance with the principles of integrity, lawfulness, transparency and protection of your confidentiality and rights.

Your personal data will be processed in accordance with the legislative provisions and the confidentiality requirements of the Data Protection Code.

Processing aims – your data will be processed for purposes associated with the following procedures, in order to meet legislative and contractual requirements:

• Practical and technical access to the website (no data are stored after the browser has been closed).
• Advanced navigation and customized content management.
• Browsing and user analysis and statistics.

The following technical and functional cookies are installed by isodrops.com during use of the website: YouTube; Cookie Notice; Wordfence; WooCommerce; WordPress.

The data processing carried out in order to meet these requirements is a necessary part of a properly managed relationship. The data must be provided in order for the abovementioned aims to be met. Please note that failure to provide the required information or the provision of incorrect information may prevent the Data Controller from processing the data in a suitable manner.

With your consent, your personal data may also be used for the following purposes:

Marketing and Advertising purposes.

Provision of data for the abovementioned purposes is optional. If you choose not to give your consent for data processing, it will not affect our relationship or the congruity of the processing itself.

Processing methods – your personal data may be processed in the following ways:

• With computers using software systems run by third parties.
• With computers using software systems run or programmed by the Data Controller.
• Temporary processing in anonymous form.

All processing is carried out in accordance with the methods described in article 11 and article 31 et seq. of the Data Protection Code, while complying with the technical regulations in Annex B for the minimum security measures.

Communication: your data will be stored at our head office and they will only be disclosed to the relevant parties in order to carry out the services required for proper management of our relationship with you, with guaranteed protection of your rights.

Your data will only be processed by staff who are expressly authorized to do so by the Data Controller. More specifically, the data will be processed by the following types of figures:

• Members of the Marketing Department.
• Programmers and Analysts.

Your data may be disclosed to third parties, and in particular to:

• Website maintenance companies.
• Google Analytics (Google Privacy Policy) – to disable these cookies, it is necessary to download and install a browser add-on that prevents the Google Analytics JavaScript from working https://tools.google.com/dlpage/gaoptout/?hl=en.
• Facebook (including the Pixel service) – to find out more and disable tracking cookies, go to https://www.facebook.com/ads/settings.
• Google, which provides the following cookies that are used by isodrops.com: Google AdWords; Google Display Network; Google Tag Manager. To see the Personal Data Processing Notice and disable Google cookies, go to https://www.google.com/settings/ads.

Circulation: Your personal data will not be circulated in any way.

If you accept the installation of the abovementioned third-party cookies, your personal data may also be transferred (solely for the abovementioned purposes) to the following countries:

• EU member states.
• United States.

Cookie management: if you are unsure or concerned about the use of cookies, you can always take action to prevent them from being set and read. For example, you can alter the privacy settings of your browser to block certain types of cookies.

There can be big differences between browsers and sometimes even between different versions of the same browser. Therefore, if you want to adjust your browser settings independently to match your individual preferences, it is best to consult the guide to your browser and look for detailed information about the necessary procedure. For an overview of the measures to take with the most popular browsers, visit www.cookiepedia.co.uk.

In addition, advertising companies allow you to opt out of customized advertisements if you choose to do so. Rather than blocking cookies, it stops advertising companies from collecting and using certain data.

To find out more and opt out, go to www.youronlinechoices.eu/.

Data Controller: for all legal purposes, the Data Controller is Nutriplus srl (Via Don Luigi Sturzo 4b 42013 Casalgrande(RE), Italy; email: info@nutriplus.it; telephone: +39 3471217596), represented by its legal representative pro tempore.

You have the right to ask the Data Controller to delete, disclose, update, correct and supplement personal data about you. More generally speaking, you can exercise all of the rights provided for by art. 7 of the Data Protection Code, a copy of which can be found below.

Furthermore, at any time you can find the latest version of this notice at http://www.privacylab.it/informativa.php?09570307666.

Italian Legislative Decree no.196/2003: Art. 7 – Right to Access Personal Data and Other Rights

1. Data subjects have the right to obtain confirmation as to whether or not personal data concerning them exist (regardless of whether they have been recorded yet) and to be provided with such data in intelligible form.

2. Data subjects have the right to be informed:

a) of the source of the personal data.

b) of the purposes and methods of the processing.

c) of the logic applied if the processing is carried out with the aid of electronic instruments.

d) of the identities of the Data Controller, the data processors and the representative designated as per article 5, section 2.

e) of the persons or categories of persons to whom the personal data may be disclosed or who may learn about the data in their capacities as designated representatives in the national territory, data processors or persons in charge of the processing.

3. Data subjects have the right to ask:

a) for data to be updated, corrected or, if they wish, supplemented.

b) for data that have been processed unlawfully (including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed) to be deleted, anonymized or blocked.

c) for certification to the effect that the persons to whom the data were provided or disclosed have been notified of the operations as per sections a) and b), unless this proves impossible or involves manifestly disproportionate effort compared with the right that is to be protected.

4. Data subjects have the right to object, in whole or in part:

a) on legitimate grounds, to the processing of personal data about them, even when the data are relevant to the purpose of the collection.

b) to the processing of personal data about them that are used for sending advertising materials, direct selling or carrying out commercial communication or market research.