Privacy Policy

Data Controller

Biovalley Group S.p.A.
Via Flavia 23/1 c/o BIC FVG
34148 Trieste (TS), Italy
VAT: 01249120328
Email: privacy@biovalleygroup.com
PEC: biovalley@legalmail.it

Types of data collected

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, browser type, operating system, pages visited, access times). This data is used solely for the purpose of obtaining anonymous statistical information on the use of the site and to verify its proper functioning.

Voluntarily provided data

The optional, explicit and voluntary sending of messages through the contact form or to the email addresses indicated on this site entails the acquisition of the sender's data (name, email address, phone number if provided, message text), which are necessary to respond to requests.

Purposes and legal basis of processing

Personal data is processed for the following purposes:

• Site navigation — legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR) to ensure the proper functioning and security of the site.
• Responding to contact requests — legal basis: performance of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).
• Analytics and marketing cookies (if enabled by the user) — legal basis: consent of the data subject (Art. 6(1)(a) GDPR). For details on cookies used, please see the Cookie Policy.

Data recipients

Personal data is not disseminated or communicated to third parties, except for:

• Parties that need access for purposes ancillary to the relationship (e.g. hosting service provider);
• Competent authorities in compliance with legal obligations.

Data transfers outside the EU

The site does not transfer personal data to third countries outside the European Union. The fonts used by the site are hosted locally and do not involve any data communication to external services.

Data retention period

Browsing data is retained for the time strictly necessary for the technical management of the site and is deleted immediately after processing. Data provided through the contact form is retained for the time necessary to fulfil the request and for a maximum period of 24 months, unless required by law.

Rights of the data subject

Pursuant to Articles 15-22 of the GDPR, the data subject has the right to:

• Access their personal data;
• Obtain rectification or erasure;
• Obtain restriction of processing;
• Object to processing;
• Request data portability;
• Withdraw consent at any time, without affecting the lawfulness of processing based on consent given before the withdrawal.

To exercise these rights, the data subject may send a request to privacy@biovalleygroup.com.

Complaint to the Supervisory Authority

The data subject who believes that the processing of their personal data is in violation of the GDPR has the right to lodge a complaint with the Italian Data Protection Authority — Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

Changes to this policy

The Data Controller reserves the right to make changes to this policy at any time. The updated version will be published on this page with the date of the last update indicated.

Last updated: February 2026