INFORMATIVE PRIVACY
In this section, you will find some information regarding the processing of personal data - that is, any information relating to an identified or identifiable natural person, directly or indirectly - that you may give by browsing the locomeal.co.uk website
DATA CONTROLLER
The Data Controller - that is, the person who determines the purposes and means of the processing of personal data collected through this site - is WAWA S.r.l., with registered office in Via Papa Luciani, 15, 36030 Villaverla (VI) c.f. - p.iva 04479420244, in the person of the pro-tempore legal representative Lorenzo Cogo(infra also "We" or the "Data Controller")
If something is not clear to you, or you would like to exercise your rights with respect to the processing of your personal data, please write to us at info@locomeal.it
TYPE OF DATA PROCESSED - PURPOSE - LEGAL BASIS FOR PROCESSING - NATURE OF CONFERMENT
Dati automatically collected.
By browsing locomeal.co.uk(infra the "Site") navigation data may be automatically collected. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
This data is collected automatically and for the sole purpose of enabling navigation on the Site, monitoring its proper functioning, and, in an anonymous form, may also be used for statistical surveys (e.g. to verify the number of users connected in a given period, monitor the number of users visiting a page and their time spent on the page). In addition, this data could be used to ascertain liability in the event of the commission of computer crimes to the detriment of the Site, attacks on the network infrastructure, or other unauthorized or abusive use of the Site. The provision of this data is mandatory in the case of browsing the Site and the legal basis for this type of processing consists of our legitimate interest under Article 6 para. 1(f) GDPR.
We also use cookies or similar technologies: cookies are small files that your web browser automatically saves to your device's hard drive when you visit the Site. By clicking here you can view the extended information notice. The legal basis for data processing carried out through the installation of technical cookies consists of our legitimate interest under Art. 6 par. 1 lett. f) GDPR to ensure the functionality of the Site, while in case of installation of cookies other than technical cookies the processing will be based on your consent, provided through the cookie-banner.
Dati provided voluntarily byThe user.
Inquiries
You can contact Us by writing to the e-mail addresses listed on the Site or in this policy. We will process the personal information you provide, such as your first and last name and e-mail address, to respond to your inquiries.
We recommend that you never send us or communicate to us special categories of data within the meaning of Article 9 GDPR (such as, for example, data revealing racial or ethnic origin, political opinions, religious and philosophical beliefs, health-related data, etc.) or in any case not to send us any data that is not essential for the purpose of the processing in question. The legal basis for the processing of such data is the execution of pre-contractual measures at the request of the data subject pursuant to Article 6 par.1(b) of the GDPR. The provision of this data is optional, but refusal to provide it, in whole or in part, may not allow us to answer your questions.
Marketing, including personalized
We may also process your data in order to send you communications of a commercial nature by e-mail and/or text message, including discounts, news and updates, or to participate in liking analyses. The legal basis for this processing consists of your consent pursuant to Article 6 par.1 lett. a) of the GDPR, expressly given by placing a flag within the form on the Site, or as provided from time to time.
Upon your specific consent, these communications may be sent based on your shopping habits expressed on the Site or collected through the technologies described in theCookie Policy.
The provision of this data is optional: failure to provide it will have no consequences.
Communication/transfer of personal data to third parties for direct marketing purposes
Only with your prior consent in accordance with Art. 6 par.1 lett. a) of the GDPR, expressly given by placing a flag within the form on the Site, we may also transfer your email address to third parties, such as business partners, for them to use for direct marketing purposes.
The provision of this data is optional: failure to provide it will have no consequences.
Discount codes
We may process your data to make discounts available to you, based on our legitimate interest, pursuant to Art. 6 para. 1(f) GDPR.
Purchase of Products and processing of payment data
When you purchase our products we process personal data such as first name, last name, e-mail address, telephone number (which may be communicated to the shipper), method of payment, shipping address, as well as any additional data specified within the general terms and conditions of sale, for the purpose of finalizing the contractual relationship and its execution, thus to follow up on the order, as well as for the fulfillment of any obligations provided for and arising from the contract.
The legal basis for this type of data processing lies in the performance of a contract to which the data subject is a party, in accordance with Art. 6(1)(b) of the GDPR. The provision of this data is mandatory, as any refusal to provide the data will not allow you to proceed with the purchase.
For payment processing, we offer common payment methods such as debit card, credit card, and PayPal, including through third-party providers such as Google Pay. Depending on the payment method chosen, we transmit the data needed to process the payment transaction to our technical service providers, contracted lenders, or the selected payment service provider.
The legal basis for this type of data processing lies in the performance of a contract to which the data subject is a party, pursuant to Article 6 Paragraph 1(b) of the GDPR.
Providing this data is mandatory, as any refusal to provide the data will not allow you to proceed with the purchase. In some cases, payment service providers collect the data required for payment processing themselves, e.g. on their website or through technical integration into the ordering process. In this regard, the privacy policy of the respective payment service provider applies.
Information on products similar to those purchased
We may use the data you provide to send you communications by e-mail regarding products similar to those you have already purchased, based on the legitimate interest of the Data Controller, pursuant to Article 6 par. 1 lett. f) GDPR and Recital 47 of the GDPR, as well as Article 130 paragraph 4 of the Privacy Code, it being understood that at any time, and without any consequences, you may exercise your right to object by clicking on the link affixed at the bottom of the communication or by writing to us by e-mail, regular mail or pec.
Assistance preceding the purchase of a product
If you have begun a purchase process without completing it, you may receive communications from us providing you with contact information to which you can turn for assistance.
We believe that in cases such as this the legal basis for processing consists of the execution of pre-contractual measures taken at the request of the data subject, in accordance with Article 6(1)(b) of the GDPR. In any case, if you do not wish to receive any more such communications from us, simply click on the appropriate button at the bottom of the emails.
Nominations
You can apply to work with us by writing to info@locomeal.it. In order to receive and process your application, we process personal data such as your full name, e-mail address, phone number, application documents (e.g. references, CV).
The legal basis for the processing of application data is Article 6 Paragraph 1 letter b of the GDPR, as it is necessary for the execution of pre-contractual measures taken at the request of the data subjects. The provision of this data is optional, but refusal to provide it will not allow us to screen your application.
Other purposes
We may also process the data provided for the prevention of abuse and fraud, for the establishment, exercise or defense of a right in court of the Data Controller, and for the transmission of data to public bodies and authorities in accordance with legal and regulatory provisions. In these cases, the legal basis for processing consists of the legitimate interest of the Data Controller and the fulfillment of legal obligations, respectively, pursuant to Art. 6(1)(c) and (f) GDPR.
ADDRESSEES
Your personal data will not be disclosed to third parties, except in those cases where it is indispensable, and only to the extent strictly necessary to achieve the purposes of processing.
Therefore, such data may be disclosed to authorized individuals who are part of our company, who will act as authorized persons to whom specific instructions will be given in this regard so that they process your data in an appropriate manner; to external personnel whose services we may use to provide you with our services (such as consultants, third party technical service providers, hosting providers, IT companies, email service providers). We will ensure that these are entities that provide the same or similar safeguards to those described in this privacy policy. These parties will be appointed as data controllers or will act as autonomous data controllers. You will always be able to request an updated list of data controllers from the Controller.
PERIOD OF RETENTION OF DATA
Browsing data: 1 year
Cookies: for more information, please read theCookies Policy.
Requests for information: for the time strictly necessary to process the request, unless a subsequent different purpose of processing intervenes, of which you may be informed in advance.
Marketing, including personalized: until consent is revoked. More specifically, you can unsubscribe from our newsletter by using the specific link in the newsletter itself or by writing to us at any time at info@locomeal.it
Disclosure/transfer of personal data to third parties for direct marketing purposes: until consent is revoked.
Discount codes: until the right to object is exercised.
Purchase of products: for the entire duration of the contractual relationship that may have been concluded and, after termination, for the ordinary limitation period of 10 years; in the case of judicial litigation, for the entire duration of the same, until the exhaustion of the time limits for the admissibility of legal challenges, subject in all cases to compliance with the regulations in force.
Information on products similar to those purchased: until the right to object is exercised.
Assistance preceding the purchase of a product: for as long as it takes to complete the same, unless we receive prior notice from you, as explained above under "Assistance preceding the purchase of a product".
Applications: for as long as it takes to evaluate the application, up to a maximum of 6 months after receipt of the cv.
Other purposes: storage will have a differentiated duration depending on the relevant regulations.
MODE OF TREATMENT
Personal data will be stored primarily in electronic form, with specific security measures in place to prevent any personal data breaches, such as data loss, unlawful or incorrect use and unauthorized access. However, such measures, due to the nature of the online transmission medium, cannot limit or exclude absolutely any risk of unauthorized access or dispersion of data. To this end, it is recommended that you periodically check that you are equipped with appropriate software devices to protect the network transmission of data, both incoming and outgoing (such as up-to-date antivirus systems) and that your Internet service provider has taken appropriate measures for the security of network data transmission (such as, for example, firewalls and spam filters). Employees and associates of the Data Controller who come into contact with your personal data have been duly authorized for this, obligating themselves to confidentiality as well as compliance with data protection regulations.
SOCIAL BUTTON
The Owner uses so-called "social buttons", i.e., direct linking links to Social Network platforms used by the Owner. By clicking on the relevant links on the Site, you can access the relevant pages. The managers of the Social Networks to which the buttons refer are autonomous data controllers. More information on the individual privacy policies of the Social Network platforms and on how to manage and deactivate the relevant cookies can therefore be found in the platforms of the individual Social Networks.
EXTRA SEE DATA TRANSFER
Personal data are stored on servers located within the European Union. Any transfer of data outside the European Union or to an international organization will take place in accordance with applicable legal provisions, in particular the provisions contained in Chapter V of the GDPR. In this case, the Data Controller will provide you with any further information regarding the conditions underlying the transfer. As of now, we specify that some IT service providers may carry out processing activities on behalf of the Controller in the United States of America. These providers operate in compliance with the Adequacy Decision for the EU-US Data Privacy Framework of July 10, 2023.
YOUR RIGHTS.
You will be able to exercise your rights under Articles 15 et seq. of the GDPR at any time. For better understanding, we recommend that you consult them in full, but for your convenience we provide an excerpt of these provisions below.
Right of access (Art. 15 GDPR): you can request confirmation that there is or is not a processing of data about you and, if so, obtain access to personal data and more information about the processing.
Right of rectification (Art. 16 GDPR): you can ask to rectify or supplement the data provided or otherwise held by the Data Controller, if inaccurate or incomplete.
Right to erasure ("right to be forgotten") (Art. 17 GDPR): you can request that data acquired or processed by the Data Controller be erased without undue delay, if (i) it is no longer necessary for the purposes for which it was collected, (ii) consent has been withdrawn and there is no other legal basis for processing, (iii) the data subject has objected to the processing, (iv) the data has been processed unlawfully, or (v) there is a legal obligation to erase.
Right to limitation of processing (Art. 18 GDPR): you can request the restriction of the processing of personal data, when one of the following cases occurs: (i) the data subject disputes the accuracy of his or her data, for the period necessary for the Data Controller to verify the accuracy of such data; (ii) the processing is unlawful and the data subject objects to the deletion of the data, requesting instead that its use be restricted; (iii) although the Data Controller no longer needs the data for processing purposes, the data is necessary for the data subject to establish, exercise or defend a right in court; (iv) the data subject has objected to the processing pursuant to Art. 21(1) of the GDPR, pending verification as to whether the legitimate reasons of the Data Controller outweigh those of the data subject.
Right to data portability (Art. 20 GDPR): you have the right (i) to receive your data in a structured, commonly used, machine-readable format, (ii) to have it transmitted directly by the Data Controller to another data controller specified by you, if technically feasible, as well as (iii) to have it transmitted to another data controller without hindrance by the Data Controller.
Right to object (Art. 21 GDPR): you have the right to object, at any time on grounds relating to your particular situation, to the processing of personal data relating to you based on the lawful condition of legitimate interest, including profiling, or the performance of a task carried out in the public interest or in the exercise of official authority, unless there are legitimate grounds for the Controller to continue the processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
Right not to be subjected to automated decision-making, including profiling (Art. 22 GDPR): you have the right not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or significantly affects you in a similar way.
Right to revoke consent (Art. 7(3) GDPR): you can revoke the consent you have given at any time, without affecting the lawfulness of the processing based on your prior consent.
Finally, you have the right to file a complaint with the Privacy Guarantor, through the procedure made available on the Guarantor's website: https://www.garanteprivacy.it/.
Date of last update: 12-05-2025
