Privacy policy

Last updated: 3 September 2026

This policy explains what personal data we collect when you visit the Food Finance website, why we process it, how long we keep it and what rights you can exercise. It is provided under Articles 13 and 14 of the General Data Protection Regulation, Regulation (EU) 2016/679.

Who processes your data

The data controller is the company that publishes this website and develops the Food Finance platform.

What this policy covers

This policy covers the public Food Finance website, the one you are reading now. It does not cover the platform reserved for authenticated users, which has a different scope, processes company and employment data, and is governed by the agreements in place between Investfood SRL and the group companies that use it.

The public website does not require registration, has no contact forms, does not sell anything online and does not profile visitors.

What data we collect

Browsing data

Like any website reachable from the internet, the infrastructure hosting these pages automatically records some technical information with every request. This is data we do not use to identify you and do not cross reference with other sources.

• The IP address the request comes from.
• The date and time of the request, the page requested and the outcome of the response.
• The type and version of the browser and operating system declared by the device.
• The volume of data transferred and the referring page, when the browser communicates it.

Information stored in your browser

The website does not use profiling cookies. It only stores two items in the browser local storage, described in detail in the cookie policy.

• The choice you make on the cookie banner, so you are not asked again on every page.
• The language you select, stored only if you consent to the preferences category.

Data you send us

If you write to us at the email address given in this policy, we process your address, the content of the message and any attachments, for the time needed to reply and follow up on the request.

Why we process this data and on what legal basis

Purpose	Data processed	Legal basis	Retention
Delivering the pages and keeping the website working and secure	Browsing data	Legitimate interest of the controller in the security and continuity of the service, Article 6.1.f	Normally no more than 30 days, unless needed to investigate an incident
Storing the choice you make on the cookie banner	The consent value saved in the browser	Obligation to demonstrate consent, Article 7.1, and necessary technical storage	12 months, after which the choice is requested again
Remembering the selected language	The language code saved in the browser	Consent, Article 6.1.a	Until consent is withdrawn or the browser data is cleared
Replying to requests sent by email	Email address, content of the message, attachments	Responding to a request from the data subject and legitimate interest in managing communications, Article 6.1.b and 6.1.f	The time needed to handle the request and in any case no more than 24 months

Who processes data on our behalf

To publish the website we rely on an infrastructure provider, appointed as data processor under Article 28 of the Regulation. We do not sell, rent or transfer personal data to third parties for commercial purposes.

Provider	Service	Role	Place of processing
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland	Hosting of the pages and technical logging of requests	Data processor	European Union, with possible processing in third countries by group companies

Fonts and all other graphic elements are served from the same domain as the website. No resources are loaded from external content delivery networks, so your visit does not generate requests to third party servers.

Transfers outside the European Economic Area

The hosting provider may also process data outside the European Economic Area through companies in its group. In that case the transfer takes place on the basis of the standard contractual clauses approved by the European Commission and the supplementary measures adopted by the provider, or on the basis of an adequacy decision applicable to the destination country.

You can ask us for a copy of the safeguards applied by writing to the address given in this policy.

How long we keep the data

We keep each category of data only for the time indicated in the purposes table. After that period the data is deleted or made anonymous, unless a legal provision requires longer retention or the data is needed to establish, exercise or defend a legal claim.

Your rights

Articles 15 to 22 of the Regulation give you the following rights. You can exercise them at any time by writing to info@investfood.it, without formalities and at no cost.

• Access, to find out whether we process data concerning you and obtain a copy of it.
• Rectification, to correct inaccurate data or complete incomplete data.
• Erasure, when the data is no longer necessary or you have withdrawn the consent it was based on.
• Restriction, to freeze processing while we check a challenge you have raised.
• Portability, to receive in a machine readable format the data you have provided to us on the basis of consent or a contract.
• Objection, to stop processing based on legitimate interest, unless we have compelling legitimate grounds to continue.
• Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

We reply within one month of receiving the request. If the request is complex the time limit can be extended by two months, and in that case we will tell you within the first month, explaining why.

Complaints to the supervisory authority

If you believe that the processing of your data breaches the Regulation, you can lodge a complaint with the supervisory authority of the country where you live or work. In Italy the competent authority is the Garante per la protezione dei dati personali (the Italian Data Protection Authority).

Minors

The website is aimed at professionals and businesses and is not intended for children under sixteen. We do not knowingly collect data from minors. If you believe a minor has sent us personal data, write to us and we will delete it.

Automated decisions and profiling

On this website we do not carry out automated decision making or profiling under Article 22 of the Regulation. Browsing the site produces no legal or otherwise significant effect on you.

Updates to this policy

We may update this policy when the processing activities, providers or applicable rules change. The date at the top of the page always shows the latest revision. If the change concerns purposes or legal bases, we ask for consent again wherever consent is required.

Contact

For any request relating to this policy or the exercise of your rights, write to info@investfood.it or to Investfood S.R.L., Via Riva di Trento 11/A, 20139 Milano, Italy.