1) Information on the collection of personal data and contact details of the controller

1.1 We are pleased that you want to participate in our cooking competition and thank you for your interest. In the following, we inform you about the handling of your personal data when participating in the competition. Personal data is all data with which you can be personally identified.

1.2 The controller in charge for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Mutti s.p.a.industrie conserve alimentari, Via Traversetolo, 28, 43022 Montechiarugolo, Italy (hereinafter “Mutti Parma”). The controller of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Type of data collection

All personal data of the participants will be treated confidentially and will only be used for the purpose of the proper execution of the competition. If you are selected as one of the semi-finalists of the competition we will require your recipes as well as text, video and image material published by you. Your data will be used to send you any profits together with our service providers such as agencies. The data will not be passed on to third parties by Mutti Parma or by the aforementioned parties. Registered users are free at any time to request the deletion of their personal data by notifying them to the e-mail address julie@jellybeancreative.co.uk. In addition, you can contact Mutti Parma’s Data Protection Officer at any time at muttispa@muttispa.it. In all other respects, Mutti Parma’s privacy policy applies.

3) Contact

As part of the application, personal data will be collected. The data collected can be seen from the respective contact form. This data is processed exclusively for the purpose of handling the cooking competition. Your data will be deleted after final processing of your application, this is the case if it can be inferred from the circumstances that the facts in question have been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

4) Rights of the data subject

4.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

Right of access pursuant to Article 15 GDPR: In particular, you have a right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification,  Deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if they were not collected from you by us, the existence of automated decision-making, including profiling and, if applicable, meaningful information about the logic involved and the scope and envisaged effects of such processing concerning you, as well as your right to information,  which guarantees exist in accordance with Article 46 GDPR for the transfer of your data to third countries;

Right to rectification in accordance with Article 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of your incomplete data stored by us;

Right to erasure in accordance with Article 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Article 17 (1) GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

Right to restriction of processing pursuant to Article 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data disputed by you is verified, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data if you use your data to assert,  exercise or defense of legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;

Right to information pursuant to Article 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

Right to data portability pursuant to Article 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller, insofar as this is technically feasible.

Right to revoke granted consent in accordance with Article 7 (3) GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the affected data immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;

Right to lodge a complaint pursuant to Article 77 GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement.

4.2 Right to object

If we process your personal data in the context of a balancing of interests on the basis of our overriding legitimate interest, you have the right at any time to object to this processing with effect for the future for reasons arising from your particular situation.

If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to further processing if we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You can exercise the objection as described above.

If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

5) Duration of storage of personal data

The duration of the storage of personal data is measured on the basis of the respective statutory retention period (e.g., commercial and tax retention periods). After expiry of the period, the corresponding data will be routinely deleted, provided that they are no longer required for the fulfilment or initiation of the contract and/or if there is no legitimate interest on our part in further storage.