Privacy Policy
Last updated: 2 September 2026
This notice explains what personal data we collect through bioingre.com, why we collect it, and what rights you have. It is written under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
1. Who processes your data
The data controller is:
Bioingredients Research S.r.l.
Corso Cavour 2/2 — 34132 Trieste, Italy
VAT 01351590326
Email: info@bioingre.com
We have not appointed a Data Protection Officer, as the conditions in Article 37 GDPR do not apply to us. For anything concerning your data, write to the address above.
2. What we collect
2.1 What you give us
The site has two forms. Filling them in is your choice: if you don’t use them, we collect nothing about you.
Quotation request form — company, country, your role, full name, business email, sector (food or cosmetics), reference or category requested, indicative volume, supply frequency, preferred Incoterm, requested delivery date, and any free-text notes.
Bioingre Gateway to Europe form — company, country, your role, full name, business email, sector, service requested, and any free-text notes.
In both cases we also record your confirmation that you have read this notice, the date and time of submission, the language of the page, and the IP address the submission came from. The IP address serves only to protect us against automated submissions.
If you write to us directly at info@bioingre.com, we process the data contained in your message.
2.2 What is collected automatically
Our server logs page requests, as any web server does: IP address, date and time, page requested, browser type. This keeps the site running and helps us spot abuse.
The site also uses analytics cookies, but only if you accept them. See section 7.
2.3 What we do not do
We do not collect special categories of data (health, opinions, memberships). We do not profile visitors and we make no automated decisions about you. We do not sell or pass your data to third parties for marketing.
3. Why we process it
| Purpose | Legal basis |
|---|---|
| Answering your quotation or information request, and carrying out the negotiations that follow | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) |
| Managing the commercial relationship that may follow, and meeting tax and accounting obligations | Performance of a contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR) |
| Keeping the site running and secure, and protecting it from automated submissions | Our legitimate interest in a working site that is not abused (Art. 6(1)(f) GDPR) |
| Understanding how the site is used, in aggregate | Your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR) |
4. How long we keep it
- Requests that do not lead to a commercial relationship: 24 months from the last contact, then deleted.
- Requests that become a commercial relationship: for the duration of the relationship and, for documents of tax and accounting relevance, the 10 years required by Italian law.
- Server access logs: as long as security requires, generally a few months.
- Analytics cookies: for the periods given in section 7.
5. Who else may see it
Your data is handled by the people at Bioingredients Research authorised to do so. Alongside them, the suppliers that keep our site and mail running act as processors under Article 28 GDPR:
- Amazon Web Services — the server the site runs on and where received requests are stored.
- Aruba S.p.A. (Italy) — the email service on which we receive requests.
- Google Ireland Limited — visit statistics, active only if you accepted them.
- Sobax International S. de R.L. de C.V. (Zapopan, Jalisco, Mexico) — the group company covering the Mexican and Latin American market. When your request concerns those markets, it is passed on so that you can be answered.
Data may also be disclosed to tax and legal advisers, and to public authorities where the law requires it.
6. Transfers outside the European Union
Two of the activities described involve transferring data outside the European Economic Area, and we want to be plain about it:
- United States — the server hosting the site and storing requests is in a United States region of Amazon Web Services.
- Mexico — requests concerning the Mexican and Latin American market are passed to Sobax International.
These transfers rely on the Standard Contractual Clauses approved by the European Commission, or on other safeguards under Chapter V GDPR. You may ask us for a copy of the safeguards in place by writing to info@bioingre.com.
7. Cookies
A cookie is a small file a site leaves on your device. We use very few on bioingre.com.
7.1 Technical cookies
These keep the site working and need no consent. The site stores a single value in your browser, called bioingre-cookie, recording the choice you made on the banner, so we don’t have to ask again on every visit. It stays until you clear your browser data.
7.2 Analytics cookies
We use Google Analytics 4 to see how many people visit the site, from which countries, and which sections they read. We do not install them unless you accept: until you press “Accept” on the banner, your browser contacts no Google server at all.
We have enabled IP anonymisation, so Google does not receive your full address. Google Analytics cookies last up to 24 months.
7.3 Changing your mind
You can withdraw or give consent at any time by clicking Cookie at the foot of any page: the banner reopens and your new choice replaces the previous one. You can also delete cookies from your browser settings.
7.4 No other tracking
The site embeds no video, maps, social buttons or advertising. Images and typefaces are contained within the page itself, so your visit is not reported to any other supplier.
8. Your rights
Over data concerning you, you may exercise the rights in Articles 15 to 22 GDPR:
- Access — know what data we hold and receive a copy.
- Rectification — have us correct data that is wrong or incomplete.
- Erasure — ask us to delete it, where we have no legal reason to keep it.
- Restriction — ask us to pause its use while we check a complaint of yours.
- Portability — receive the data you gave us in a readable format, or have it sent to another controller.
- Objection — object to processing we carry out on the basis of our legitimate interest.
- Withdrawal of consent — withdraw consent to analytics cookies, without affecting what was done before.
To exercise them, write to info@bioingre.com. We reply within one month; if the request is complex we may take two months more, and will tell you so.
If you believe your data is not being handled properly, you may lodge a complaint with the Italian Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — garanteprivacy.it), or with the supervisory authority of the country where you live or work.
9. Changes
If we change how we handle data, we will update this page and the date at the top. We invite you to read it again when you send us a new request.