Last updated: 12 November 2026

This notice explains how JAMONITA S.R.L. processes the personal data of visitors to jamonita.it and to the online catalogue jamonita.it/catalogojamonita/, of people who contact us and of our trade customers. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Privacy Code), as amended.

1. Data controller

JAMONITA S.R.L.
Via Giovanni Pascoli 32, 84014 Nocera Inferiore (SA), Italy
VAT and tax code 05851460658 · REA 478860
Phone 081 517 3273 · Email [email protected] · Certified email (PEC) [email protected]

For any question about this notice or to exercise your rights, write to [email protected] or, if you prefer certified email, to [email protected].

2. What data we process, why and on what legal basis

a) Contact and price-list requests

Data: first name, surname, email, phone number, the content of your message and any other data you choose to give us through the contact form, by email or by phone.
Purpose: answering requests for information, price lists or access to prices.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR); for general enquiries, our legitimate interest in replying to people who contact us (Art. 6(1)(f)).
Retention: as long as needed to handle the request and, if no business relationship follows, no longer than 24 months from the last contact.

b) Registration to the catalogue customer area

Data: company name, VAT number, contact person’s name, username, email, phone number and password (stored only in encrypted, unreadable form).
Purpose: creating and managing the account, checking that the applicant is a trade business, showing reserved prices and terms, allowing the price list to be exported.
Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).
Retention: as long as the account is active. You can ask for it to be deleted at any time: the data will then be erased, except for data we must keep by law (point c).

c) Orders and business relationship

Data: company and tax details of the customer, contact details of its staff, orders, deliveries, invoices and payments.
Purpose: handling orders, deliveries, invoicing, support and accounting and tax obligations.
Legal basis: performance of the contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)).
Retention: for the duration of the relationship and then for 10 years, as required for accounting records (Art. 2220 of the Italian Civil Code).

d) Website security and browsing data

Data: IP address, date and time of the request, requested page, browser and device type, recorded automatically by the systems that run the site.
Purpose: running the site, protecting it from attacks and abuse (also through Cloudflare), detecting faults.
Legal basis: our legitimate interest in the security and proper functioning of the site (Art. 6(1)(f) GDPR).
Retention: for short periods, unless needed to investigate crimes or abuse.

e) Cookie choices

Data: a random code that does not identify you, date and time, cookie policy version, accepted categories, language and an encrypted fingerprint of the already truncated IP address (from which the IP cannot be recovered).
Purpose: remembering your choices and being able to prove how consent was collected.
Legal basis: legal obligation to demonstrate consent (Art. 6(1)(c) and Art. 7(1) GDPR).
Retention: 24 months.

For the cookies used by the site, see the cookie policy.

3. Whether you must provide data

The data in the contact form and in the registration form are needed to reply or to create the account: without them we cannot do so.

4. How we process data

Data are processed electronically and, where necessary, on paper, by authorised and trained staff, with appropriate security measures: encrypted connection (HTTPS), passwords stored only in encrypted form, restricted access. We do not take decisions based solely on automated processing and we do not carry out profiling.

5. Who we share data with

Data are not published or sold. They may be processed, only for the purposes described, by:

  • authorised Jamonita staff and collaborators, including sales agents for the customers they follow;
  • suppliers processing data on our behalf as processors (Art. 28 GDPR): the website hosting provider; Cloudflare, Inc. (content delivery and website security); OVH SAS (email, servers in the European Union); whoever maintains the website; accountants and consultants;
  • couriers and carriers, for deliveries;
  • public authorities, where required by law.

The up-to-date list of processors is available on request.

6. Transfers outside the European Union

Cloudflare, Inc. is based in the United States. The transfer relies on the European Commission’s adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework, to which Cloudflare adheres, and on the standard contractual clauses approved by the Commission. All other data are processed within the European Union.

7. Your rights

At any time you can ask to:

  • access your data and obtain a copy (Art. 15);
  • have them corrected or completed (Art. 16);
  • have them erased (Art. 17);
  • restrict their processing (Art. 18);
  • receive them in a structured format and transmit them to another controller (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • withdraw your consent, without affecting processing already carried out (Art. 7(3)).

Write to [email protected] or [email protected]: we reply within one month. If you believe the processing breaches the law, you can lodge a complaint with the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or with the authority of the country where you live or work.

8. Minors

The site and the catalogue are intended for trade businesses. We do not knowingly collect data from children under 14.

9. Changes

We may update this notice, for example if the services we use or the law change. The date of the last update is shown at the top.