Privacy policy
Last updated: 3 September 2026
This notice describes how Investfood S.r.l. processes the personal data of visitors to the BiteOS presentation website. It is provided under Articles 13 and 14 of EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
Data controller
The data controller is the company indicated below, which can be contacted for any request concerning personal data.
Via Riva di Trento 11/A, 20139 Milano (MI), Italia
P. IVA 12925600962
privacy@investfood.it
What data we collect
This site consists of static pages. It has no contact forms, does not ask for registration and does not collect data that you have to type in.
As with any site reachable over the internet, the systems that host it automatically record certain technical information related to the request:
- the IP address of the device making the request
- the date and time of the request
- the address of the page requested and the server response code
- the browser type and operating system declared by the device
- the referring page, when the browser transmits it
This data is not used to identify individuals and is not cross referenced with other information to profile browsing activity.
Why we process it and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Delivering the requested pages and keeping the site working | Legitimate interest of the controller in providing the requested service, Article 6.1.f GDPR | Up to 30 days in technical logs |
| Security of the service, detection of abuse and intrusion attempts | Legitimate interest of the controller in the security of its own systems, Article 6.1.f GDPR | Up to 12 months in security logs |
| Remembering the choice expressed on cookies | Legal obligation to keep proof of consent, Article 6.1.c GDPR | 6 months, after which the choice is requested again |
| Access by authorised users to the management platform | Performance of the employment relationship or contract, Article 6.1.b GDPR | For the duration of the relationship and the subsequent statutory periods |
Who can access the data
The technical browsing data is processed by the authorised personnel of the controller and by the providers that deliver the IT services, appointed as data processors under Article 28 GDPR.
The site is hosted on Firebase Hosting and on Google Cloud infrastructure, provided by Google Ireland Limited, with servers in the European region. The data is not transferred, sold or disclosed to third parties for their own purposes.
Transfers outside the European Economic Area
The site is served from infrastructure located in the European region. Should a provider need to access the data from a third country for technical support reasons, the transfer takes place on the basis of the standard contractual clauses adopted by the European Commission and the supplementary measures put in place by the provider.
Restricted area of the management platform
The management platform login page is restricted to authorised users of Investfood and the group brands. For authentication we process email address, encrypted credentials, user identifier and access log.
Authentication relies on Firebase Authentication by Google Ireland Limited. Credentials are never stored in plain text. Anyone not registered among the active users cannot log in.
Cookies
This site uses only technical cookies and local storage. The detail, with name, purpose and duration, is set out in the cookie policy.
Your rights
At any time you can exercise the rights set out in Articles 15 to 22 of the GDPR:
- access your data and obtain a copy of it
- request its rectification if inaccurate or incomplete
- request its erasure in the cases provided for by law
- request restriction of processing
- object to processing based on legitimate interest
- receive the data in a structured format and transmit it to another controller
Requests should be sent to the email address given on this page. We reply within one month of receipt, extendable by two months for particularly complex requests.
If you believe the processing breaches the regulation, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, or refer the matter to the judicial authority.
Nature of the provision of data
Collecting the technical browsing data is essential to deliver the pages: without it the request cannot be fulfilled. No other data is requested of you to browse this site.
Automated decisions
This site does not use automated decision making processes or profiling activities under Article 22 GDPR.
Changes to this notice
We may update this notice when the services described or the applicable regulation change. The date at the top of the page always indicates the version in force. We invite you to read it again from time to time.