Tartufido Privacy Policy
Last updated: May 11, 2026
This Privacy Policy describes how personal data is processed for users who access and use the Tartufido website and platform.
Tartufido is a digital service created and operated by Kipify S.r.l. for collecting, organizing and managing requests related to truffles, as well as managing operational information relating to truffle hunters, merchants, restaurants, lots, seals, QR codes and supply chain steps.
This notice is provided pursuant to EU Regulation 2016/679 ("GDPR").
1. Data controller
The data controller is:
Kipify S.r.l. Registered office: Via della Treggia 42/B, 06125 Perugia (PG), Italy VAT/Tax ID: 03912000548 Contact email: legal@kipify.io
2. Personal data processed
Tartufido may process different categories of personal data, depending on the user's role and the features used.
2.1 Registration and contact data
The following may be processed:
first and last name; company name or business name; professional role; email address; phone number; business or professional data; login credentials; data entered in forms on the website or platform.
2.2 Data of merchants, restaurants and parties submitting requests
When a merchant, restaurant or other party submits a truffle-related request, Tartufido may process data relating to:
requested truffle type or species; indicative quantity; desired grade or quality; price range; urgency or requested timing; operational notes; request status; any communications relating to the request; possible association of the request with one or more truffle hunters.
2.3 Truffle hunter data
For users who register or are registered as truffle hunters, Tartufido may process:
first and last name; tax code, where required; contact data; municipality, province or indicative operating area; permit number, authorization, qualification or other title relating to truffle harvesting; region, authority or body that issued the title; issue date and, if applicable, expiry date; copy or image of the permit, authorization or equivalent documentation; declarations made by the truffle hunter about their activity; declared role, for example truffle hunter, merchant, truffle hunter/merchant, supplier or pickup point.
2.4 Data relating to the dog used for searching
For users registered as truffle hunters, Tartufido may also request and process data relating to the dog used for truffle searching, including:
dog's name; dog's microchip code; any information declared by the truffle hunter about the dog's use in searching.
This data is processed exclusively for operational platform management, prevention of improper use, greater reliability of information declared by truffle hunters and protection of Tartufido and Kipify S.r.l. in case of disputes.
The dog's microchip code is not published on lot cards or QR codes intended for external consultation, unless otherwise required for operational reasons, by law or by specific request from the competent authority.
2.5 Data relating to lots, seals and QR codes
Tartufido may process data relating to:
lot; truffle species; weight; lot status; identification seal; QR code; truffle hunter associated with the lot; pickup point or operational step; date and time of registration; information declared by the parties involved; steps recorded on the platform.
Lot-related information is based on data entered or declared by the parties involved in the supply chain.
2.6 Technical data
During use of the website or platform, technical data necessary for service operation and security may be processed, including:
IP address; technical logs; browser and device data; session data; authentication data; information necessary for platform security.
3. Purposes and legal bases of processing
Personal data is processed for the following purposes.
3.1 Account registration and management
Data is processed to enable registration, access and use of the Tartufido platform.
Legal basis: performance of the service requested by the user or pre-contractual measures.
3.2 Management of truffle-related requests
Data is processed to receive, organize, manage and classify requests submitted by merchants, restaurants or other users.
Legal basis: performance of the service requested by the user or pre-contractual measures.
3.3 Forwarding requests to truffle hunters
Tartufido may forward received requests to one or more truffle hunters so they can assess availability, quantity, operational conditions and interest in supplying.
In the preliminary phase, the request may be forwarded even without communicating all identifying data of the merchant or restaurant. Information such as requested species, quantity, grade, price range, urgency and operational notes may be shared.
Identifying and contact data of the merchant or restaurant may be communicated to the truffle hunter only when necessary for operational management of the request, confirmation of availability, delivery or other obligations connected to supply.
Legal basis: performance of the service requested by the user and legitimate interest in orderly, confidential and secure management of requests.
3.4 Registration and management of truffle hunters
Truffle hunter data is processed to enable registration, role classification, collection of declarations and documents, management of received requests and possible association of the truffle hunter with lots, seals, QR codes and operational steps.
Legal basis: performance of the service requested by the user and legitimate interest of Tartufido and Kipify S.r.l. in correct platform management, abuse prevention and protection of their rights.
3.5 Processing of the dog's microchip
The dog's microchip code may be processed to strengthen documentary management of the truffle hunter profile, reduce the risk of false qualifications, prevent improper use of the platform and link the truffle hunter profile to operational information consistent with the declared activity.
The dog's microchip does not constitute automatic guarantee of truffle hunter qualification, dog ownership, truffle origin or compliance of the activity carried out.
Legal basis: performance of the service requested by the truffle hunter and legitimate interest of Tartufido and Kipify S.r.l. in platform security, prevention of false declarations and protection of their rights.
3.6 Management of lots, seals and QR codes
Data is processed to associate each lot with operational information, identification seals, QR codes, recorded steps and information declared by parties involved in the supply chain.
These features serve to make management of lot-related information more orderly, consultable and readable.
Legal basis: performance of the service requested by the user and legitimate interest in digital management of operational supply chain information.
3.7 Operational communications
Data may be used to send communications necessary for service management, such as confirmations, operational notifications, requests for clarification, platform updates or communications relating to accounts, requests and lots.
Legal basis: performance of the service and legitimate interest.
3.8 Security, abuse prevention and protection of rights
Data may be processed to protect the platform, prevent unauthorized access, abuse, false declarations, improper use, disputes or fraudulent activity.
Legal basis: legitimate interest of Kipify S.r.l. in platform security and protection of its rights.
3.9 Legal obligations
Data may be processed to comply with obligations provided by law, regulations or legitimate requests from competent authorities.
Legal basis: legal obligation.
3.10 Promotional communications
Only if the user gives specific consent, data may be used to send promotional communications, commercial updates or information relating to Tartufido.
Legal basis: user consent.
Consent may be withdrawn at any time by writing to legal@kipify.io.
4. Information declared by users
Information relating to requests, availability, truffle hunters, dogs used for searching, lots, seals, QR codes, pickup points and operational steps is based on data entered or declared by the parties involved.
Kipify S.r.l., through Tartufido, organizes, records and makes such information consultable within the platform.
Tartufido does not automatically carry out official certifications of origin, quality, compliance or legal traceability of the product and does not replace certifications, public inspections, mandatory documentation or checks required by applicable law.
5. Processing methods
Data is processed using IT, telematic and organizational tools suitable to ensure its security, confidentiality and integrity.
Kipify S.r.l. adopts reasonable technical and organizational measures to reduce the risk of loss, unauthorized access, improper use, disclosure or modification of data.
6. Data recipients
Personal data may be communicated, within the limits necessary, to:
truffle hunters involved in request management; merchants or restaurants involved in management of specific requests or supplies; parties collaborating in operational platform management; technical providers, hosting providers and IT services; legal, tax, administrative or technical consultants; public authorities, where required by law.
Data is not sold to third parties.
Truffle hunters who receive requests through Tartufido must use the information received exclusively to assess and manage the specific truffle-related request.
7. Data visible via QR code or lot card
Some lot-related information may be made consultable via QR code or digital card.
The lot card may include, by way of example:
lot code; truffle species; weight; lot status; identification seal; registration date; declared operational information; truffle hunter code or internal reference; steps linked to the lot.
Unless otherwise required for operational reasons or by law, the following are not shown on the publicly consultable lot card:
truffle hunter's tax code; identity document; personal contact details; dog's microchip code; copy of permit or authorization; other data not necessary for lot consultation.
8. Data retention
Data is retained for the time necessary to pursue the purposes for which it was collected.
In particular:
account data is retained while the account remains active; request data is retained for the time necessary to manage the request and protect Kipify S.r.l.'s rights; truffle hunter data is retained for the entire duration of the relationship with the platform and subsequently for the time necessary to protect Kipify S.r.l.'s rights; dog and microchip data is retained as long as necessary for truffle hunter profile management, abuse prevention and protection of Kipify S.r.l.'s rights; lot, seal and QR code data is retained for the time necessary for operational consultation and supply chain information management; data processed for legal obligations is retained for the periods provided by applicable law; data processed for promotional purposes is retained until consent is withdrawn or the user objects; technical logs are retained for the time necessary to ensure security, diagnostics and abuse prevention.
At the end of retention periods, data will be deleted, anonymized or retained only when necessary for legal obligations or protection of Kipify S.r.l.'s rights.
9. Transfers outside the European Economic Area
Data may be processed through technical providers operating outside the European Economic Area.
In such cases, Kipify S.r.l. will adopt safeguards provided by applicable law, such as adequacy decisions, standard contractual clauses or other instruments recognized by the GDPR.
10. Cookies and tracking tools
Currently Tartufido does not use analytics, advertising, profiling, remarketing or advertising tracking tools such as Google Analytics, Meta Pixel or equivalent tools.
The website and platform may use technical cookies or similar tools necessary for service operation, for example for login, security, authentication, session management and technical preferences.
Technical cookies are necessary to provide the service requested by the user and do not require prior consent. If Tartufido introduces analytics, marketing, profiling, retargeting cookies or similar tools in the future, this notice will be updated and, where necessary, user consent will be requested through an appropriate banner or preference management system.
11. User rights
Users may exercise, in the cases provided by applicable law, the following rights:
right of access to personal data; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; right to withdraw consent, where processing is based on consent; right to lodge a complaint with the Data Protection Authority.
To exercise their rights, users may write to:
legal@kipify.io
12. Complaint to the supervisory authority
Users have the right to lodge a complaint with the Data Protection Authority if they believe that processing of their personal data violates applicable law.
13. Changes to this Privacy Policy
Kipify S.r.l. may update this Privacy Policy to reflect technical, operational, regulatory or organizational changes.
The updated version will be published on the website or made available through the Tartufido platform.