Privacy Policy

1. Data controller

The data controller is Nova Food SRL, registered office at Via Combattenti 4, 96015 Francofonte (SR), Italy, VAT/tax code 02020970899, REA SR 428617, SDI code G9HZJRW. Email: info@nova-food.it · PEC: nova-food@pec.it.

2. Data we collect

• Quotation request form: contact name, company name, business email, phone number and whatever you write in the message (products and quantities of interest).
• Newsletter subscription: email address and country.
• Analytics data collected by Google Analytics 4 only with your consent: pages viewed, time on page, approximate geographic origin, device type. The IP address is processed in anonymised form.
• Browsing data collected automatically by the hosting provider’s systems (IP address, technical logs) solely for the operation and security of the site.

3. Why we process it and on what legal basis

• Responding to trade enquiries (quotations, price lists, information on volumes and order scheduling): performance of pre-contractual measures taken at the data subject’s request — Art. 6(1)(b) GDPR.
• Sending the B2B newsletter covering availability, seasons and new products: consent, which you may withdraw at any time — Art. 6(1)(a) GDPR.
• Measuring site visits to understand which content is useful and how to improve it: consent, which you may withdraw at any time through the Analytics preferences link at the foot of every page — Art. 6(1)(a) GDPR.
• Running the site securely: legitimate interest of the controller — Art. 6(1)(f) GDPR.

Providing the fields marked as required in the form is necessary for us to reply; without them we cannot act on your request.

4. Providers processing data on our behalf

To run the contact form and the newsletter we use external providers, appointed as data processors under Art. 28 GDPR.

• Web3Forms (Web3Creative, India) — receives the data submitted through the quotation request form and delivers it to us by email. It relies on Amazon Web Services, Cloudflare and Hetzner infrastructure, and on anti-spam services (CleanTalk, Akismet) to which the sender’s IP address and email may be disclosed. Submission data is retained by the provider for a maximum of three years. Privacy notice: web3forms.com/privacy.
• Klaviyo, Inc. (United States) — manages the newsletter list and sends the messages. Privacy notice: klaviyo.com/legal/privacy-notice.
• Google Ireland Limited (Ireland) — provides Google Analytics 4, which measures visits to the site. Active only after your consent: without it, the script is not even loaded. Notice: policies.google.com/privacy.
• OVH — website hosting, with servers in the European Union.

Data is neither disseminated nor transferred to third parties for their own purposes.

5. Transfers outside the European Union

Some providers operate outside the European Economic Area. Specifically:

• Web3Forms operates from India: transfers take place on the basis of the Standard Contractual Clauses approved by the European Commission, as set out in the provider’s data processing agreement.
• Klaviyo is based in the United States and adheres to the EU-U.S. Data Privacy Framework; the Standard Contractual Clauses apply on a subsidiary basis.
• Google may transfer data to the United States: Google LLC adheres to the EU-U.S. Data Privacy Framework; the Standard Contractual Clauses apply on a subsidiary basis.

6. How long we keep the data

• Commercial enquiries: for as long as needed to handle the request and any business relationship arising from it, and thereafter for the period required by law (generally ten years for tax and accounting records).
• Newsletter: until you withdraw consent or unsubscribe, which you can do using the link at the bottom of every message.
• Analytics data: retained by Google for the period set in the Analytics property, typically fourteen months.
• Technical logs: for the time strictly necessary for the security of the site.

7. How we protect the data

Processing is carried out by electronic means with appropriate security measures. Communication between your browser and the site is encrypted (HTTPS). Access to the data is limited to authorised staff.

8. Your rights

You may exercise the rights set out in Articles 15-22 GDPR — access, rectification, erasure, restriction, portability, objection — and withdraw your newsletter consent at any time by writing to info@nova-food.it. We reply within one month.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Cookies

For the use of cookies, please see our Cookie Policy.

10. Changes

The controller reserves the right to update this notice. Last updated: August 2026.