Cookie Policy

Personal data notice – Cookies and browsing data 

This Cookie Policy has been drafted and customized specifically for the website www.anthos.it, owned by Cefla S.c., via Selice Provinciale, 23/a – 40026 Imola (BO) (hereinafter the "Controller").

This policy was drawn up based on the provisions of the Italian Data Protection Authority (Garante) on the subject. It integrates and updates other notices already present on the site and, in combination with them, provides all the elements required by Art. 13 of EU Regulation 2016/679.

1. Methods of processing

Cookies

Cookies are small text strings that the Site you visit sends to your browser, which stores them to retransmit them to the Site upon your next visit.
Cookies allow for the collection of information about the browsing activities carried out.
Cookies can be stored permanently on your computer and have a variable duration (persistent cookies), or they may not be stored persistently on your device and be automatically deleted when the browser is closed (session cookies).
Cookies can be installed by the site you are visiting or can be installed by other websites that provide various types of services to that site (third-party cookies).
 

1.2 Technical Cookies

Cookies in this category allow the Site to function correctly, and those installed by the Site are indicated in the table below at point 1.6.

1.3 Statistical Cookies

The Site also uses statistical cookies created directly by the Data Controller or provided by third parties, as indicated in the table below at point 1.6.
With statistical cookies created directly by the Data Controller, the latter will perform statistical analysis relating to various domains, websites, or apps attributable to the Company itself, proceeding with statistical processing on its own, without such analyses being aimed at making commercial decisions.
With third-party statistical cookies, tools have been adopted to reduce their identifying power, for example, by masking significant portions of the processed IP addresses. In the case of using third-party statistical cookies, the third party has contractually committed to the Data Controller to use them exclusively for the provision of the service, to store them separately, and not to "enrich" or "cross-reference" them with other information at their disposal.

1.4 Marketing Cookies

Marketing cookies are non-technical cookies that allow the Data Controller to carry out marketing activities. The Data Controller uses the marketing cookies listed in the table below at point 1.6.
 1.5 Profiling Cookies

Profiling cookies are non-technical cookies that allow the Company to provide you with personalized services based on your needs. The Company uses the profiling cookies listed in the table below at point 1.6.

 1.6. Cookie Table

The following table summarizes the cookies belonging to the categories mentioned above.
 
Website:

2. Deleting and disabling cookies

You can configure your browser to prevent the processing of cookies or delete them immediately after browsing. Below, we list the methods for disabling and deleting cookies with the main browsers:

3. Browsing data and environmental variables

The Site automatically acquires some personal data relating to your browsing. This category of data includes, for example:

• the IP addresses of the computer you use;
• the number of accesses;
• the pages used;
• the date and time of access;
• the URL the browser was at before viewing the Site;
• the type of navigation browser;
• the operating system used.

4. Data you voluntarily provide

You have the right and freedom to provide data by sending emails to the addresses indicated on the Site, which the Company may acquire for the purposes indicated from time to time. In addition to the email address necessary to reply to you, any other personal data contained in the relative communication will be processed. The data collected in this way will be stored and processed exclusively to maintain correspondence, without using it for other purposes.

5. Purposes, legal basis of processing, optional consent, and consequences of refusal

• Personal data processed with technical cookies: The communication of personal data is a contractual obligation, without which the fully functional website could not be made available in accordance with the terms and conditions of use.

• Personal data processed with statistical cookies: The communication of personal data is purely optional. In case of failure to communicate the data, it will be impossible for the Company to perform statistical analysis activities. The legal basis for the processing is your consent, expressed in accordance with current legislation.

• Personal data processed with marketing cookies: The communication of personal data is purely optional. In case of failure to communicate the data, it will be impossible for the Company to perform marketing activities. The legal basis for the processing is your consent, expressed in accordance with current legislation.

• Personal data processed with profiling cookies: The communication of personal data is purely optional. In case of failure to communicate the data, it will be impossible for the Company to provide you with personalized services through profiling. The legal basis for the processing is your consent, expressed in accordance with current legislation.

• Personal data provided voluntarily via email or form: The communication of personal data is purely optional. In case of failure to communicate the data, the Company will not be able to respond to your requests. The legal basis for the processing is the legitimate interest of the Company, as Data Controller, to respond to requests.

You may express your consent to the processing of personal data with non-technical cookies by clicking on a specific box presented within a banner.

6. Automated decision-making and profiling

If you consent to processing with profiling cookies to benefit from personalized services, your personal data may be subject to an automated decision-making process, with a specific algorithm that will decide which communications are most suitable for your profile or which might be of interest to you. The intended consequences of this processing are the sending of highly profiled commercial communications, the sending of discounts, and the sending of invitations to events deemed of interest.

In accordance with Article 22 of the GDPR, you have the right to:

• obtain human intervention in the decision-making process by the Company;
• express your opinion;
• obtain an explanation of the decision reached by the Company;
• contest the decision itself.

7. Source of personal data and categories of data

The Company will only process personal data provided by you in accordance with the Cookie Policy, collected through the Site or the sending of your email. The Company will not process data from publicly accessible sources. The Company will not process special categories of personal data referred to in Article 9 of the GDPR.

8.  Recipients and Potential Categories of Recipients of Personal Data

The following may receive your personal data:
•    companies offering hosting services;

9. Data transfer

The Data Controller intends to transfer Personal Data to entities established in a third country outside the European Union or to an international organization. These entities could be represented, by way of example, by:

• communications companies that carry out communication activities on behalf of the Company;
• companies offering information society services;
• companies offering hosting services;
• service providers of the communication company;
• any partners in accordance with applicable rules.

The transfer of personal data to such subjects, if established in a third country, or to an international organization, is carried out in the presence of an adequacy decision by the European Commission, which has verified how the third country, the territory or one or more specific sectors within the third country, or the international organization in question ensure an adequate level of protection for your rights. The Company has also deemed it appropriate to conclude specific and separate agreements obliging these subjects to adopt adequate security measures, including organizational ones, aimed at offering appropriate guarantees regarding your rights. The data may thus be transferred to the following countries: United States of America.

To obtain a copy of such data or the location where they have been made available, it is sufficient to send the relevant request to the addresses indicated above.

10. Data retention period

• The Data Controller will keep your personal data processed with technical cookies in order to allow you a correct use of the Site for a period not exceeding 12 (twelve) months starting from the date of the single collection, in accordance with what is indicated in point 3.1 of the Cookie Policy;

• The Data Controller will keep your personal data processed with statistical cookies in order to carry out statistical analysis activities for a period not exceeding 12 (twelve) months from the date of the single collection, in accordance with what is indicated in point 3.2 of the Cookie Policy;

• The Data Controller will keep your personal data processed with marketing cookies in order to carry out marketing activities for a period not exceeding 12 (twelve) months starting from the date of the single collection, in accordance with what is indicated in point 3.3 of the Cookie Policy;

• The Data Controller will keep your personal data processed to provide personalized services via profiling cookies for a period not exceeding 12 (twelve) months starting from the date of the single collection, in accordance with what is indicated in point 3.4 of the Cookie Policy;

• The Data Controller will keep your personal data provided voluntarily via email or form and processed to respond to your requests for a period of time strictly necessary to achieve this purpose and, in any case, not exceeding 12 (twelve) months starting from the date of the single collection.

The Data Controller reserves, in any case, the right to ask you to renew your consent to the processing and/or to verify the consents you have already expressed.

11. Right to Object

As a "data subject," you have the right to object, at any time, for reasons related to your particular situation, to the processing of personal data concerning you, pursuant to Article 6, paragraph 1, letters e) or f) of the GDPR, including profiling based on those provisions.

The Company shall refrain from further processing your personal data unless the Company demonstrates the existence of compelling legitimate grounds for proceeding with the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of a legal claim.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you carried out for such purposes, including profiling to the extent that it is related to such direct marketing.

In the event of an objection to processing for direct marketing purposes, personal data are no longer processed for such purposes.

You may object to the processing of your personal data for direct marketing purposes even only in part, for example by objecting only to the sending of promotional communications carried out through automated and/or digital tools, or to the sending of paper communications and/or the receipt of telephone communications.

Where your personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1 of the GDPR, you have the right, for reasons related to your particular situation, to object to the processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

12. Other Rights

The Company also wants to inform you of the existence of your following rights:

• Right of access: you have the right to obtain confirmation from the Company as to whether or not personal data concerning you are being processed. In this case, you have the right to access your personal data and specific information, in accordance with Article 15 of the GDPR;
• Right to rectification: you have the right to obtain from the Company the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, also by providing a supplementary statement, in accordance with Article 16 of the GDPR;
• Right to erasure: you have the right to obtain from the Company the erasure of personal data concerning you without undue delay. The Company has the obligation to erase personal data without undue delay if the grounds listed in Article 17 of the GDPR exist;
• Right to restriction of processing: you have the right to obtain from the Company the restriction of processing if the grounds listed in Article 18 of the GDPR exist;
• Right to data portability: you have the right to receive in a structured, commonly used, and machine-readable format the personal data concerning you provided to the Company, as well as the right to transmit those data to another controller without hindrance from the Company, in the cases and under the conditions specified by Article 20 of the GDPR;
• Right to object to commercial communications: you have the right to object at any time, free of charge, to the receipt of commercial communications from the Company;

Right to lodge a complaint with the Supervisory Authority: you have the right to lodge a complaint with the Authority for the Protection of Personal Data (Garante) to complain about a violation of the discipline regarding the protection of personal data, in accordance with Article 77 of the GDPR.

13.  How to Exercise Your Rights

You may exercise the rights indicated in the Cookie Policy by addressing the requests directly to the Company at the email address privacy@cefla.it, or by sending the relative communication via registered mail with return receipt to Imola, Via Selice Provinciale 23/A.

You may lodge a complaint with the Personal Data Protection Authority according to the procedures provided on the official website, addressing it to the contact details available at https://www.garanteprivacy.it/web/garante-privacy-en/home_en.

14. Accessibility

The Cookie Policy is accessible at the address via Selice Provinciale, 23/a – 40026 Imola (BO) and at the Company. If you expressly request it, the Company may provide you with the information orally, provided that your identity is proven, with a telephone request made to 0542656441.

15. Changes

The Company may modify the Cookie Policy, also to adapt to national and/or European Union legislation or technological innovations. Any new versions of the Cookie Policy will be reported on the Site. We invite you to periodically check the Cookie Policy. Any changes will in any case be communicated to you through a pop-up on the Site or other methods and/or IT tools. If the Company substantially modifies the Cookie Policy, providing for new processing purposes and/or categories of personal data processed or changing third parties, the Company itself will inform you, requesting the necessary consents via a specific banner. If it is impossible for the Company to verify that cookies have been stored on your device on the occasion of a subsequent visit to the Site, for example in case of deletion of installed cookies, the Company itself will inform you, requesting the necessary consents via a specific banner. If at least 6 (six) months have passed since the previous presentation of the banner on the Site, the Company itself will inform you, requesting the necessary consents via a specific banner.

Imola, 30/03/2026