Biofarma S.r.l.
Address: via Castelliere n. 2, 33036 - Mereto di Tomba (UD)
Tel. +39 0432 868711
PEC: [email protected]
Address: via Castelliere n. 2, 33036 - Mereto di Tomba (UD)
Email address: [email protected]
Navigation and technical data (e.g., IP addresses, access logs)
Purpose of processing: ensure proper functioning of the website
Legal basis: legitimate interest of the Controller (art. 6, par. 1, lett. f GDPR)
Credentials and identifying data for access
Purpose of processing: enable access to restricted area and investor area
Legal basis: legitimate interest of the Controller (art. 6, par. 1, lett. f GDPR)
Identifying and contact data provided by clients and suppliers
Purpose of processing: make content and informational materials available
Legal basis: legitimate interest of the Controller (art. 6, par. 1, lett. f GDPR)
Identifying and contact data (name, email)
Purpose of processing: sending periodic informational newsletters about Biofarma Group products
Legal basis: consent of the data subject (art. 6, par. 1, lett. a GDPR)
Data entered in contact forms
Purpose of processing: sending information requested through completion of forms present on the site
Legal basis: pre-contractual measures taken at the request of the data subject (art. 6, par. 1, lett. b GDPR)
Contact data (email, telephone) registered in company databases
Purpose of processing: management of contacts and sending of communications
Legal basis: pre-contractual measures taken at the request of the data subject (art. 6, par. 1, lett. b GDPR)
The computer systems and software procedures used for the operation of this website acquire, during their ordinary operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL notation addresses of requested resources, and other parameters relating to the operating system and computer environment of the user.
Such navigation data are necessary for the use and proper functioning of web services and do not persist for more than 180 days, except for any need to investigate crimes by the judicial authority.
The personal data indicated in the preceding table are processed by Biofarma personnel and by Beliven S.r.l., appointed as data processor.
The data may also be communicated to:
corporate and affiliated companies;
entities that provide services for the management of the Group's information system and telecommunications networks, including electronic mail;
firms or companies in the context of assistance and consultancy relationships and provision of services in any sector;
competent Authorities for compliance with legal obligations and/or provisions of public bodies, upon request.
The transfer of personal data outside the EU may occur to the USA and China only in exceptional cases, and in any event only if necessary for the performance of a contract concluded between the data subject and the Controller or for the performance of pre-contractual measures taken at the request of the data subject. In such cases, adequate safeguards as provided for by the GDPR shall be adopted.
Without prejudice to what has already been specified for navigation data, information necessary for access to restricted areas of the site is maintained until a request for deletion is made.
In case of contact requests, data are maintained for a maximum of 3 years from the date of the final response provided to the data subject.
Personal data relating to the email address voluntarily provided by the user at the time of newsletter subscription may be used until withdrawal of consent or objection to processing.
Data subjects have the right to obtain from Biofarma access to their personal data, rectification or erasure thereof, limitation of related processing, the right to object thereto, and the right to data portability, where the conditions are met and in compliance with legal obligations.
For all requests to exercise their rights, the data subject may contact Biofarma by contacting the data protection officer.
Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with the Data Protection Authority if they believe that the processing of their data violates the Regulation.
Date of update: September 2, 2025
