Privacy & Cookies
Processing of personal data pursuant to EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
Last updated: 1 June 2026
Data controller
BluFarma S.r.l., registered office at Via Eschilo 209, 00124 Rome (RM), Italy. VAT and tax code 09870841005 · REA RM-1193988 · Share capital € 10,000.00 fully paid up · Tel. +39 06 89716459 · email for privacy requests: info@blufarma.it.
Data processed
- Aggregate browsing measurement data (pages viewed, traffic source, device type) collected by the proprietary Farmaware system without cookies and without retaining the IP address(see «Audience measurement»).
- Any email address and name provided voluntarily to subscribe to the newsletter.
- Any data communicated spontaneously by email to the controller.
Purposes and legal bases
- Aggregate traffic measurement and site improvement → the legitimate interest of the controller (Art. 6(1)(f) GDPR).
- Newsletter subscription and delivery → consent (Art. 6(1)(a) GDPR), with double opt-in and an unsubscribe link in every mailing.
- Replies to email enquiries → pre-contractual measures / provision of the service (Art. 6(1)(b) GDPR).
- Compliance with legal obligations (Art. 6(1)(c) GDPR).
Audience measurement (first party, no consent required)
This site uses aggregate first-party statistical measurement (Farmaware) without cookies or other identifiers stored on your device and without retaining the IP address; unique visitors are estimated through a pseudonymous identifier that is renewed every day, which prevents persistent tracking. The data is processed in aggregate form, is not shared with third parties and is not used for profiling. Under the Italian Data Protection Authority’s guidelines of 10 June 2021, this processing does not require consent and rests on the legitimate interest of the controller. The site does not use profiling or marketing cookies; any technical session cookies, where present, do not require consent.
Retention
Measurement data: processed in aggregate form; per-event data is retained for a maximum of 12 months. Newsletter subscriber emails: until consent is withdrawn by the data subject.
Recipients and place of processing
Processing is carried out by electronic means at the controller’s premises and in the data centers of the cloud providers appointed as processors pursuant to Art. 28 GDPR; the hosting servers are located in Italy (provider Aruba S.p.A.). No transfers outside the EU are made without adequate safeguards.
Your rights
You may exercise the rights set out in Articles 15-22 GDPR (access, rectification, erasure, restriction, objection, portability) by writing to info@blufarma.it, and you may also lodge a complaint with the Italian Data Protection Authority or with the supervisory authority of your country of residence.
Changes
This notice may be updated; the version in force is always published on this page.