Privacy Policy
Privacy Policy
Privacy Policy
pursuant to Article 13 of Regulation (EU) 2016/679
This notice is provided to Users of the website https://nutriveo.com/ and is intended to describe how the Website is operated with regard to the processing of personal data, as well as to inform Users of the purposes and methods of processing of personal data carried out by the Data Controller (Article 13 of Regulation (EU) 2016/679 – GDPR).
Data controller
Data controller
The Data Controller is Millbo S.r.l., with registered office at Via Bellaria s.n., 28069 Trecate (NO), Italy, VAT number and tax code 06941560960, e-mail: info@millbo.it, website: https://nutriveo.com/
Nutriveo is the brand under which the company operates and under which the Website is published. Personal data collected through the Website are processed by Millbo S.r.l. as Data Controller.
The Data Controller is Millbo S.r.l., with registered office at Via Bellaria s.n., 28069 Trecate (NO), Italy, VAT number and tax code 06941560960, e-mail: info@millbo.it, website: https://nutriveo.com/
Nutriveo is the brand under which the company operates and under which the Website is published. Personal data collected through the Website are processed by Millbo S.r.l. as Data Controller.
Data protection officer
Data protection officer
The Data Controller has appointed a Data Protection Officer, who may be contacted at the e-mail address marchetti@avvocatomartinamarchetti.it.
The Data Controller has appointed a Data Protection Officer, who may be contacted at the e-mail address marchetti@avvocatomartinamarchetti.it.
Categories of personal data, purposes and legal bases of the processing
Categories of personal data, purposes and legal bases of the processing
PROCESSING
PROCESSING
PURPOSES
PURPOSES
LEGAL BASES
LEGAL BASES
Browsing data
In the course of their normal operation, the IT systems responsible for running the Website acquire certain data whose transmission is inherent in the use of Internet communication protocols (IP addresses, time of the request, parameters relating to the User's operating system and IT environment). Such data are processed for the sole purpose of enabling use of the Website and of monitoring its correct functioning and security. Further details are set out in the Cookie Policy.
Necessity to provide the service requested by the User and legitimate interest of the Data Controller in ensuring the correct functioning and the security of the Website (Article 6(1)(b) and (f) GDPR; Article 122 of the Italian Data Protection Code).
Contact form
The personal data (name, company, e-mail address and content of the message) voluntarily entered by the User through the contact form available on the Website are necessary in order to handle and respond to requests for information concerning the products and services offered. Providing the data is optional, but failure to provide it makes it impossible to respond to the request.
Pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR) and legitimate interest of the Data Controller in handling the requests received and in maintaining business relationships (Article 6(1)(f) GDPR).
Technical tools and usage statistics
The Website uses exclusively technical tools necessary for its operation, as well as an aggregated statistics system which, according to the documentation of the platform provider, uses neither cookies nor persistent identifiers. Further details are set out in the specific notice on cookies and tracking tools (Cookie Policy).
Necessity to provide the service requested by the User (Article 122 of the Italian Data Protection Code and Article 6(1)(b) GDPR) and legitimate interest of the Data Controller in obtaining aggregated information on the use of the Website (Article 6(1)(f) GDPR).
PROCESSING:
Browsing data
PURPOSES:
In the course of their normal operation, the IT systems responsible for running the Website acquire certain data whose transmission is inherent in the use of Internet communication protocols (IP addresses, time of the request, parameters relating to the User's operating system and IT environment). Such data are processed for the sole purpose of enabling use of the Website and of monitoring its correct functioning and security. Further details are set out in the Cookie Policy.
LEGAL BASES:
Necessity to provide the service requested by the User and legitimate interest of the Data Controller in ensuring the correct functioning and the security of the Website (Article 6(1)(b) and (f) GDPR; Article 122 of the Italian Data Protection Code).
PROCESSING:
Technical tools and
usage statistics
PURPOSES:
The Website uses exclusively technical tools necessary for its operation, as well as an aggregated statistics system which, according to the documentation of the platform provider, uses neither cookies nor persistent identifiers. Further details are set out in the specific notice on cookies and tracking tools (Cookie Policy).
LEGAL BASES:
Necessity to provide the service requested by the User (Article 122 of the Italian Data Protection Code and Article 6(1)(b) GDPR) and legitimate interest of the Data Controller in obtaining aggregated information on the use of the Website (Article 6(1)(f) GDPR).
PROCESSING:
Contact form
PURPOSES:
The personal data (name, company, e-mail address and content of the message) voluntarily entered by the User through the contact form available on the Website are necessary in order to handle and respond to requests for information concerning the products and services offered. Providing the data is optional, but failure to provide it makes it impossible to respond to the request.
LEGAL BASES:
Pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR) and legitimate interest of the Data Controller in handling the requests received and in maintaining business relationships (Article 6(1)(f) GDPR).
Retention period
Retention period
Personal data collected through the contact form available on the Website are retained for the time necessary to handle the User's request and, as a guideline, for a maximum period of 12 to 24 months from the date of collection. Should a contractual relationship be established with the data subject, the data will be retained for the duration of that relationship and for the subsequent period provided for by applicable tax, civil and contractual law. The determination of the actual retention periods remains the responsibility of the Data Controller, on the basis of its organisational requirements and legal obligations.
Personal data collected through the contact form available on the Website are retained for the time necessary to handle the User's request and, as a guideline, for a maximum period of 12 to 24 months from the date of collection. Should a contractual relationship be established with the data subject, the data will be retained for the duration of that relationship and for the subsequent period provided for by applicable tax, civil and contractual law. The determination of the actual retention periods remains the responsibility of the Data Controller, on the basis of its organisational requirements and legal obligations.
Links to social media profiles (Linkedin)
Links to social media profiles (Linkedin)
The Website contains a link to the Data Controller's LinkedIn profile. The link does not involve the installation of third-party cookies on the User's device. By clicking on the link, the User is directed to the LinkedIn platform, operated by LinkedIn Ireland Unlimited Company, which acts as an independent data controller in respect of the data collected on its own platform. Further information is available in the LinkedIn privacy policy (https://www.linkedin.com/legal/privacy-policy).
The Website contains a link to the Data Controller's LinkedIn profile. The link does not involve the installation of third-party cookies on the User's device. By clicking on the link, the User is directed to the LinkedIn platform, operated by LinkedIn Ireland Unlimited Company, which acts as an independent data controller in respect of the data collected on its own platform. Further information is available in the LinkedIn privacy policy (https://www.linkedin.com/legal/privacy-policy).
Recipients of the data
Recipients of the data
Personal data provided through the form available on the Website are accessible to the Data Controller's authorised personnel for the purpose of handling the data subject's request. Such data may be disclosed to external data processors (by way of example: the provider of the platform on which the Website is built and hosted, e-mail service providers, system administrators, the web agency responsible for the development and maintenance of the Website, consultants) solely for purposes connected with responding to the communication sent by the User. The obligation to disclose data to public authorities in the context of legal proceedings remains unaffected.
Personal data provided through the form available on the Website are accessible to the Data Controller's authorised personnel for the purpose of handling the data subject's request. Such data may be disclosed to external data processors (by way of example: the provider of the platform on which the Website is built and hosted, e-mail service providers, system administrators, the web agency responsible for the development and maintenance of the Website, consultants) solely for purposes connected with responding to the communication sent by the User. The obligation to disclose data to public authorities in the context of legal proceedings remains unaffected.
Transfers of personal data
Transfers of personal data
The Website is built and hosted on the Framer platform, provided by Framer B.V., a company established in the Netherlands. The provider acts as data processor on behalf of the Data Controller. Where, for the purpose of providing the service, data are stored or processed also in countries outside the European Economic Area, such transfers take place in compliance with Chapter V of Regulation (EU) 2016/679 and on the basis of the safeguards adopted by the provider.
The Data Controller is also part of a group of companies which includes entities established in the United States of America and in the People's Republic of China. Where a request submitted through the contact form concerns markets served by those entities, the data contained in the request may be disclosed to them for the sole purpose of responding to the data subject's request, pursuant to Article 49(1)(b) of Regulation (EU) 2016/679, as necessary for the implementation of pre-contractual measures taken at the data subject's own request. Should such disclosures become systematic, the corresponding transfers will be governed by the standard contractual clauses adopted by the European Commission pursuant to Article 46 of Regulation (EU) 2016/679.
The Website is built and hosted on the Framer platform, provided by Framer B.V., a company established in the Netherlands. The provider acts as data processor on behalf of the Data Controller. Where, for the purpose of providing the service, data are stored or processed also in countries outside the European Economic Area, such transfers take place in compliance with Chapter V of Regulation (EU) 2016/679 and on the basis of the safeguards adopted by the provider.
The Data Controller is also part of a group of companies which includes entities established in the United States of America and in the People's Republic of China. Where a request submitted through the contact form concerns markets served by those entities, the data contained in the request may be disclosed to them for the sole purpose of responding to the data subject's request, pursuant to Article 49(1)(b) of Regulation (EU) 2016/679, as necessary for the implementation of pre-contractual measures taken at the data subject's own request. Should such disclosures become systematic, the corresponding transfers will be governed by the standard contractual clauses adopted by the European Commission pursuant to Article 46 of Regulation (EU) 2016/679.
Rights of the data subject
Rights of the data subject
The data subject has the right to request that the Data Controller grant:
- access to his or her personal data (Article 15 GDPR);
- rectification of inaccurate data or completion of incomplete data (Article 16 GDPR);
- erasure of the data (Article 17 GDPR), in the cases provided for by law;
- restriction of processing (Article 18 GDPR);
- data portability (Article 20 GDPR);
- the right to object to the processing on legitimate grounds (Article 21 GDPR).
Requests may be addressed to the Data Controller's e-mail address indicated above. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) pursuant to Article 77 GDPR.
The data subject has the right to request that the Data Controller grant:
- access to his or her personal data (Article 15 GDPR);
- rectification of inaccurate data or completion of incomplete data (Article 16 GDPR);
- erasure of the data (Article 17 GDPR), in the cases provided for by law;
- restriction of processing (Article 18 GDPR);
- data portability (Article 20 GDPR);
- the right to object to the processing on legitimate grounds (Article 21 GDPR).
Requests may be addressed to the Data Controller's e-mail address indicated above. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) pursuant to Article 77 GDPR.
Last updated: September 2026
Last updated: September 2026