Privacy Policy

Pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data (hereinafter referred to as the "Regulation" or "GDPR"), the Data Controller informs you about the processing of personal data carried out through the website (hereinafter also abbreviated as the "site"). This information relates to this site and not to other websites that the user may surf by browsing the links on the site, for which please refer to the information provided by the other sites regarding their privacy management. .


Data controller - contact details

Villani Spa is the Data Controller of personal data collected and obtained from this website and determines how the data will be processed and who will have access to it. The Data Controller is not obliged to appoint a Data Processor (DP) pursuant to Article 37 of the GDPR.

Villani Spa

Via Zanasi 24, 41051 Castelnuovo Rangone (MO)


tel +39059534411


Data processed and purpose of processing

Technical surfing data - log files

The computer systems and software procedures used to operate this website acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and addresses of websites accessed or exited from, information on the pages visited by users within the site, access time, internal path analysis and other parameters relating to the user's operating system and computer environment. This technical data is accessible to the Data Controller in an aggregate and non-identifying manner and is used for the purposes of technical management of the services provided and anonymous statistical analysis of the traffic generated and the pages visited; in the event of computer attacks on the site, crimes or offences committed through the site, it may be used for purposes of investigation and ascertainment of responsibility. The data are kept for the time necessary to fulfil the specified purposes, except in the case where it is necessary to keep the data to ascertain incidents, offences or crimes or at the request of the Police or Authorities.


Data provided through e-mail, telephone, postal mail

The website publishes our addresses, telephone numbers, e-mail addresses, which anyone can freely contact for requests for information or assistance with purchases: the provision of data is optional, the data will be processed to respond to the request and / or for the purposes specified by the data subject. The data will be stored for the time of achievement of the purposes or for the fulfillment of requests, if not already stored for other purposes of managing the relationship with the data subject that provide for different and extended storage times.


Data provided in information request forms

The visitor can freely fill in these forms to send information requests or other messages. Only common personal contact data is collected which will be used to reply to the message and provide the requested information. By sending the data, the person consents to the processing of their data for the purposes specified in the message. The data will be retained for the time needed to fulfil the purposes or to process the requests, unless it is already stored for other purposes of managing the relationship with the person concerned that require different and longer retention periods.


Data provided for job applications

On the page You can send your job application and fill in the preferences on the area of interest, attaching your Curriculum Vitae. The data will be processed for the purposes of selecting and evaluating persons interested in working with us, as specified in the full text of the information notice on the processing of personal data for job applications, which can be accessed via a link on the same page as the application form.



Cookies are small files that are saved on the user's device while browsing the website. Their purpose is to collect information about the user's browsing of the website and they can be retransmitted or reused on subsequent visits. Cookies have different characteristics and are used for different purposes, either by the owner of the site you are visiting (so-called first party cookies), or by other sites (so-called third party cookies) because web tools provided by third parties are incorporated into our site. Cookies can be stored permanently on your device or have a variable lifetime (persistent cookies), otherwise they are temporary and are deleted when you close your browser or have a limited lifetime (session cookies). There are other technologies such as pixel tags, web bugs, web storage and other similar files and technologies that can perform the same functions as cookies. In this Cookie Policy, we also use the term "cookies" for all these similar technologies.


Session cookies

Their duration corresponds to the session in which the browser is used and they are automatically deleted when the browser is closed.


Persistent cookies

They remain stored on the browsing device until their expiry date, or are deleted by the user before expiry.


Technical or functional cookies

Technical or functional cookies are used for the browsing and enjoyment of the website, they are used to ensure the proper functioning of the site or to manage certain functions of the site according to the user's choices. They are necessary and their deactivation may imply the loss of functionality of the site or the inability to browse it properly. These cookies may be first party cookies, i.e. deposited directly by our site or domain, but also third party cookies, managed by other websites or domains with which our site interacts.

You do not need the visitor's consent for this type of cookie.


Analytical cookies

On the site, we may use third party services provided by Google Analytic ( with anonymisation (partial masking of the IP address). In this way the third party is not able to capture the user's IP address and cross-reference it with other data in its possession, so no profiling of user preferences is possible. We use these cookies to collect and analyze site traffic and usage in an anonymous way: without directly identifying the user, they allow us to monitor access to the site and improve its performance and usability

The deactivation of these cookies can be done without any loss of functionality. For more information, please refer to the link The user can also selectively disable the action of Google Analytics by installing the opt-out component provided by Google on their browser. Please refer to the link

The visitor's consent is not required for these cookies, as the data collected is anonymised.


Third-party cookies

We use third-party services on the site that use tracking and profiling cookies, for which we inform the visitor before accessing the site and request consent: these cookies are only recorded on the device if the user accepts them.

Profiling cookies monitor and profile users during browsing, studying and storing their options and surfing habits on the site and on the web in general, as well as their consumption habits, also for the purpose of sending targeted and customized service advertisements. These tracking cookies are used for marketing purposes, to create profiles on the user and on the user's preferences while browsing the site and may cross reference the information collected with information already held by the third party or collected by other third party websites.

For these cookies, the data collected from the user are also transmitted to providers or web service providers located in the United States (USA) therefore outside the European Union. In accordance with the principles and requirements of Articles 44 and 49 of the GDPR for transfers outside the EU, the legal basis for the transfer is the prior consent of the data subject pursuant to Art. 6 para. 1 letter a) of the GDPR.


Links to other sites

In the pages of the site there are links to visit other third party websites, the use of these features leads the user to interact with web services offered by third party sites and implies the exchange of information with these sites. The visitor is redirected to the third party site by leaving our site, therefore the management of information is carried out by the third party autonomously.


Social Network Plugin

The site also incorporates plugins such as 'social buttons' with the aim of enabling easy sharing of content on your favourite social networks. In order to safeguard the privacy of users, these plugins are programmed so that they do not set any cookies when the page is accessed, but only when the user makes effective and voluntary use of the plugin, according to the settings of the social network. If the user browses the site while logged into his social network profile, he has already consented to the use of cookies conveyed through the social network. The collection and use of information obtained from third parties by means of the plugin is governed by the respective privacy policies of the social networks, to which, you are advised to refer.


Managing cookies

When you access the site, you will see a banner containing a short information notice and a link to this extended information notice.

The banner allows the visitor to manage the use of cookies and to set the choice for optional profiling/tracking cookies. By default, only functional/technical cookies are enabled which are necessary and cannot be disabled.

Consent to the use of cookies set is recorded with a "technical cookie" stored on the user's device.

Management of cookies is also possible by changing the browser settings via the following possible solutions. They are examples but there are many more:

  • changing your browser settings to allow or prevent the storing of cookies and usually also allowing you to set your cookie rules so that 'third party' cookies are not accepted. Some also allow you to block cookies from some third parties and not others, via a function that allows you to indicate from which domains to allow cookies to be sent;
  • with specific software components added to the browser (so-called plug-ins), which specialize the functions commonly made available by browsing software and which can be configured by the user to select cookies on the basis of the domains of origin;
  • by means of 'do not track', which allows the user to indicate, for each site visited, whether or not he wishes to be tracked during surfing. However, this technical method is not standardised and there is no certainty that this function is implemented on all the domains that deposit cookies on the site and for which, since they belong to third parties, the Data Controller is not responsible;
  • You can disable Google Analytics cookies by visiting Google's website (Google GaOptOut) and downloading the add-on component for your browser.

Note: If you choose to block all cookies, the full functionality of the website may be impaired.


Processing and storage methods

Data is processed with computer/electronic means by authorised and personnel instructed by the Data Controller, or also by third parties designated as Data Processors for the relevant processing, always in compliance with the principles of lawfulness of the processing and by adopting appropriate security measures to limit access to the data only to data subjects. Data will be stored for the time required by the purposes of processing, as specified in the previous sections where the storage times are indicated for each processing.


Communication and transfer of data

Data will only be communicated to data subjects, namely subjects duly trained and designated for the management of the site and our site-related activities:

  • internal staff acting under the authority of the Data Controller;
  • professionals, consultants or companies, for services that are instrumental to the management of our activities or for the management of the website
  • hosting providers, other internet service providers for the website.

The data of visitors to the site is not disseminated and is not transferred outside the European Economic Area.


Exercise of data subject's rights

Subject to the limitations provided for in the same Regulation, the data subject may at any time contact the Data Controller at the addresses indicated herein to exercise the rights provided for in Articles 15-22 of the GDPR:

  • access to personal data; rectification; erasure; restriction of processing; objection to processing; data portability;
  • withdrawal of consent, where provided for: withdrawal of consent shall not affect the lawfulness of the processing lawfulness based on the consent given before withdrawal;
  • information on the automated profiling process.

The data subject also has the right to lodge a complaint, in the manner and within the time limits provided, with the Data Protection Authority: please visit the website for further details


Updating the Privacy Policy

The possible entry into force of new special regulations, as well as the constant review and updating of services to the user, may entail the need to change the way in which personal data is processed through the site: it is possible that our policy may change over time and we therefore invite the visitor to periodically refer to this page.