Privacy policy


This information (or "privacy policy") is made in compliance with the current legislation on the protection of personal data and, in particular, in accordance with Regulation (EU) No 2016/679 on the protection of individuals with regard to the processing of personal data , as well as the free circulation of such data (GDPR) and of Legislative Decree No. 196/2003 (Code regarding the protection of personal data, Privacy Code) with reference to the processing of personal data of users who access the site

This Privacy Policy aims to describe in a simple and transparent way to users, which personal data are processed, for what purpose, by whom and with which modalities and inform them about the measures that are applied to protect their rights and their freedoms. Therefore, this Privacy Policy concerns only this site and is not also made for other websites that may be consulted by the user through links.

Table of contents:

1. Data controller

2. Purpose of the processing

3. Provision of personal data

4. Which personal data are processed?

5. Personal data processing

6. To whom can the data be communicated?

7. What are the rights of data subjects?

8. Contact points

1. Data controller

The data controller is VIRO S.P.A. A SOCIO UNICO based in Via Garibaldi, 4 - 40069 - Zola Predosa (BO) VAT. 01833121203 tel: 051 6176511 e-mail:

2. Purpose of the processing

1. By accessing and consulting this site, as well as using services offered to users through the site, information relating to users as identified or identifiable (interested) individuals can be collected and processed. When the personal data are collected, these, in compliance with the current legislation on the protection of personal data, will be processed only to pursue the following purposes:

a) reasons closely associated with and instrumental to allow access and use of the site, its features and services requested by the user;

b) to fulfil any obligations provided for by law and European legislation;

c) for operative purposes and internal management of Data controller and for purposes related to the services offered through the site;

d) to create a personal account and make use of its features ("Your ideal product" and "Strange but Viro");

e) to assess the applications submitted by users in relation to job offers;

f) in a completely anonymous and aggregate form, for statistical purposes.

2. The data collected from users, who use the site for the purposes indicated in the previous point, could also be used for other purposes, but for each further processing will be required to each user an explicit consent. In this way, the data collected from users, only if the user freely and clearly consents to each further processing, may be used: (i) to execute the newsletter service;

(ii) for marketing activities carried out by the Data Controller, in particular for the sending of informative and commercial communications (also of a promotional nature), of advertising material and / or offers of goods and services, by any means (known or not), including, but not limited to, mail, Internet, telephone, e-mail, MMS, SMS from Viro S.p.A.

3. Provision of personal data

1. The provision of personal data is only necessary for the purposes referred to art. 2, paragraph 1, as the legal basis of the processing for these purposes is the execution of the services requested by the user, in other words, the use of the site and the various services made available through the site. A refusal to the processing of data in these cases may therefore prevent the execution of the requested services; as far as possible, the user will be able to consult the Website without providing any personal data, even if, in this case, certain characteristics or functionalities of the site could be disabled.

2. The provision of personal data for processing activities for the purposes referred to art. 2, paragraph 2, is optional, as the legal basis of the processing in this case is always the user's consent, informed, free and optional. In the absence of explicit consent, these activities will not be carried out and will not have further consequences, in particular, the user will also be able to use the Website and services for the purposes referred to art. 2, paragraph 1.

4. Which personal data are processed?

Depending on the service provided, different personal data may be processed, as specified in this article.

4.1 Navigation data

The computer systems and software procedures used for this site, collect some personal data during their normal operation. These personal data are implicit in the navigation of websites. The information is not collected to be associated with specific individuals, however, by their own very nature through elaborations and associations with data owned by third parties, they could allow the identification of the visitor users. These include the IP address or domain names of the computers used by users connected to the site, the URL address of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters related to the operating system and to the platform used by the user. The above data are only used for obtaining anonymous statistical information on the use of the site and to check its correct functioning; they are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this possibility, the data on web do not persist for more than 7 days. Regarding cookies please refer to par. 4.3 that follows.

4.2.1 Data supplied voluntarily by the user (communications)

The optional, explicit and voluntary sending of communications by means of contact forms on the site or by e-mail to the indicated address on this site, involves the subsequent acquisition of the data provided by the user, including his e-mail address, and consent to receive any reply messages to their requests.

The provided personal data are used only to satisfy or give feedback to the transmitted requests and are communicated to third parties only if this is necessary for this purpose.

4.2.2 Data provided voluntarily by the user (to receive communications for marketing and / or commercial promotion purposes)

In the case the personal data (in particular, e-mail address) are provided by the data subject interested in a service requested by him/her or interested in the purchase of a product, the data thus provided may be used to send communications via email related to services similar to those previously purchased or requested by the user, pursuant to art. 130, paragraph 4 of Legislative Decree 196/2003, without the need for express and prior consent (soft spam). In any communication, in any case, the user is reminded that he or she can revoke the consent at any time and without formalities. The data of the person concerned will be erased at his request.

In case of release by the user of consent expressed for the purposes referred to art. 2, paragraph 2, the user can always revoke the consent and oppose the related processing, as indicated in the art. 7 that follows.

4.2.3 Data provided voluntarily by the user (applications concerning job vacancies at Viro - section of the site "Collaborate with us")

Each interested subject may voluntarily provide his / her personal data to Viro in order to submit his / her application for open job positions at the Data Controller, by sending a specific communication to the e-mail address and authorizing Viro to process his / her personal data for the aforementioned purpose.

Consent: the provision of data is mandatory only for the purpose of submitting an application for a job position; therefore, the sending of the curriculum vitae is left to the individual candidate's will and any refusal will make it impossible to use the service, without further consequences. Consent to treatment is not necessary, pursuant to art. 9, paragraph 2, letter b) of the GDPR, when the treatment concerns data contained in the curricula spontaneously transmitted by the candidates for the purpose of the possible establishment of a working / collaboration relationship. Likewise, consent to treatment is not necessary, pursuant to art. 26, paragraph 3, letter b-bis) of Legislative Decree no. 196/2003 (c.d. Privacy Code) for any sensitive data transmitted spontaneously by the candidate. At the time of the interview, a specific consent will be collected for the processing of data by the interested subject that will be called.

Purpose: personal data, identifying and curricular, as well as possibly sensitive, conferred directly by the interested subject are processed and used to follow up the request of the interested subject and, more precisely, to proceed with the assessment of the prerequisites for the recruitment and/or collaboration of the applicant.

Data type: the collection will concern only the common personal data; therefore the candidate will not be required to indicate the data qualified as "particular" by art. 9 of EU Reg. 2016/679 or on the state of health. The hypothesis in which the data in question must be known by reason of establishing a working relationship, with particular reference to the candidate's membership in the protected categories and any medical examinations, is expressly made.

The data storage period: the data will be stored by the Data Controller for the time strictly necessary to achieve the purposes for which they were collected, except for the possible establishment of the employment and / or collaboration relationship.

Erasure of data: to request the deletion of data sent by the user by e-mail it is sufficient for the candidate to send a request to the Data Controller, at the address indicated above. The erasure of data could be managed in an automated way, so the candidate could receive further communication whose submission had been planned before the reception of his unsubscription request, for a period no longer than 72 hours.

4.2.4 Data provided voluntarily by the user (Site section "Your ideal product" and "Strange but Viro")

The registration by the user through the appropriate registration form on the pages and involves the optional, explicit and voluntary sending of personal requested data and their subsequent acquisition by the Data Controller exclusively to provide the services and functionalities of each section respectively (pursuant to Article 2, paragraph 1, letter b) and / or for commercial and promotional purposes (only in case of express consent by the user, pursuant to Article 2, paragraph 2).

4.3.1 Cookies

What are cookies? Cookies are information stored by the browser when a website is visited with any suitable device (such as a PC, tablet or smartphone). Each cookie contains different data (for example, the name of the server it comes from, a numerical identifier, etc.), it can remain in the system for the duration of a session (or until the browser is closed) or for long periods and can contain a unique identification code.

What is their function? Cookies are used for different purposes depending on their type: some are strictly necessary for the proper functionality of a website (technical cookies), while others optimize the performance to offer a better user experience or allow to draw up statistics on 'use of the site, such as cookies analytics or allow you to display personalized advertising, such as profiling cookies.

Consent: any provision of the user's consent can be memorized by the Data controllers, as far as they are concerned, by means of a technical cookie.

How to disable them? You can disable cookies either through the browser settings (section 4.3.3 "How to disable cookies? General information") or through the options made available by some third parties.

4.3.2 Type of cookies used on the site

Technical cookies (first part): this site uses only session technical cookies (duration: session), essential for the proper functioning, navigation and visualization of the site, the contact forms and the various sections on the site.

4.3.3 How to disable cookies? General information

Browser control: The commonly used browsers (e.g., Internet Explorer, Firefox, Chrome, Safari) accept cookies by default, but this setting can be changed by the user at any time. This applies to both PCs and mobile devices such as tablets and smartphones: it is generally and widely supported.

Therefore, cookies can easily be deactivated or disabled by accessing the options or preferences of the browser used and generally even only third-party cookies can be blocked; in general, these options will only take effect for that browser and on that device, unless there are no options to unify preferences on different devices. Specific instructions can be found in the options or help page of the browser. The disabling of technical cookies, however, may affect the full and / or proper functioning of different sites, including this site.

Normally, the browsers used today:

- offer the "Do not track" option, which is supported by some websites (but not all). In this way, some websites may no longer collect certain browsing data;

- offer the option of anonymous or incognito browsing: in this way no data will be collected in the browser and the browsing history will not be saved, but navigation data will still be collected by the operator of the website visited;

- allow you to delete cookies stored in whole or in part, but during the new visit to a website, they are usually installed where this possibility is not blocked.

Links to the support pages of the most popular browsers (with instructions on how to disable cookies on these browsers):


- Firefox (;

- Internet Explorer ( delete-manage-cookies);

- Safari (iOS) (;

- Chrome (


Third-party cookies: third-party cookies can be disabled both in the manner described above and referring to each third party (following the links indicated in the previous paragraph).

Online tools: please note that from the site it is possible not only to collect information on cookies, but also to verify the installation of numerous cookies on your browser / device and, where supported, also to disable them.

4.4 Newsletter

The newsletter is sent by e-mail to those who explicitly request it, by filling out the appropriate form on the Website and authorizing the processing of personal data for the aforementioned purpose.

Consent: The provision of data is required only for the purpose of receiving the newsletter and any refusal will make it impossible to use the service, without further consequences.

Purpose: the personal data provided by users will be used only to send the newsletter and will not be communicated to third parties.

Mode: The collected data will be processed with IT tools; in order to prevent loss, illicit or incorrect use or to prevent unauthorized access to the site, specific security measures are adopted.

Unsubscribe from receiving newsletters: in order to stop receiving the newsletter, simply select the link for unsubscribing at the end of each e-mail or send a specific request to the e-mail address

The cancellation is handled in an automated manner, so that further newsletters may be received for a period subsequent to such request, in any case no later than 72 hours from the unsubscription request , and the sending of which had been planned before the request was received.

5. Modality of data processing

1. Personal data are processed in a lawful and correct manner and used only for the purposes indicated in art. 2. The processing will be carried out using appropriate tools to ensure the security and confidentiality of personal data and with automated tools for storing, managing and transmitting the data. Specific security measures are adopted to prevent data loss and contain the risks of illicit or incorrect use and unauthorized access.

2. Personal data will be kept for the time prescribed by the law and, in any case, for the time strictly necessary to follow up the activities for which they were collected and / or until the revocation of the consent given, in case treatments are carried out for the purposes referred to in art. 2, paragraph 2.

6. To whom can the data be communicated?

1. The treatments connected to the web services of this site are only handled by technical personnel specifically appointed for processing, internal and / or external to the Data Controller. In particular, where necessary only with prior consent, the data may be communicated to third parties whose cooperation Viro may and / or must use for the performance of the services offered. The data acquired via the web, or in any case deriving from web services, may be communicated to the technological and instrumental partners of which the Data Controller makes use for the services requested by users, always in compliance with the purposes indicated in art. 2. To this end, the subjects who will have access to personal data will be specifically authorized for processing by the Data Controller and, if due, appointed as Data Processors, pursuant to Arts. 28 and 29 of the GDPR.

2. The data collected for the purposes set out above may also be communicated to parties authorized for this purpose by provisions of law and European legislation.

3. A list of the subjects to whom the Data Controller communicates the personal data collected for the aforementioned purposes is available and can be consulted at the Data Controller's office and can be requested at the addresses indicated.

7. What are the rights of data subjects?

1. The data subject is the natural person, identified or identifiable, to whom the personal data being processed refers and, therefore, the user who accesses the site and who uses the services made available through the site.

2. Each subject has the right to access at any time the data concerning him / her treated by the Data Controller (access right) in order to verify the correctness and to verify the lawfulness of the processing performed. The subject may also exercise all the rights recognized by the current national and European legislation on the protection of personal data (from Legislative Decree 196/2003 and from EU Regulation No. 2016/679 and subsequent amendments and additions): in particular, it may request at any time the correction and updating of incorrect or inaccurate data, the limitation of the processing performed and the cancellation of the same (right to be forgotten), as well as proposing a complaint to the Authority for the protection of personal data .

3. With reference to personal data processed by automated means, the data subject may also receive data relating to him in a structured and commonly used form and transmit them, if necessary, to another data controller (right to data portability).

4. Each subject is also entitled to revoke his consent at any time, without prejudice to the lawfulness of the processing performed by the Data Controller prior to such revocation, as well as the possibility of objecting to the processing of personal data if it is carried out for direct marketing by the Data controller; in this case, your data will no longer be processed for these purposes, depending on the specific consent previously issued, by the Data Controller or any third parties (right of opposition).

8. Contact Points

Any request regarding the processing of personal data and any communication relating to the exercise of your rights may be addressed to the Data Controller by sending a communication via e-mail, to the address or by mail to VIRO S.P.A. A SOCIO UNICO - Via Garibaldi, 4 - 40069 - Zola Predosa (BO).