Privacy
Information in compliance with ex art. 13 of the Regulation (EU) 2016/679 on the protection of personal data (RGPD) and Legislative Decree 196/03 with subsequent amendments made by Legislative Decree 101/18
This information is provided to inform you of the processing of your personal data.
1. Identity and contact details of the Data Controller
AZIENDA ACGRICOLA MALAVASI DANIELE, a company specialized in the exercise of agricultural activities and the marketing of products deriving from cultivation and more precisely the wine business, with headquarters in Località Casina Sacco, 2 25010 Pozzolengo (BS), as owner of the Treatment (hereinafter "Owner") informs you pursuant to articles 13 and 14 of the GDPR 2016/679 that your data will be processed according to the principles of correctness, lawfulness, transparency and protection of your privacy and your rights, with the methods and for the following purposes.
2. Contact details of the Data Controller
The data controller can be reached through the following e-mail: privacy@malavasivini.it
3. Purpose and legal basis of the processing
We process your personal data only if one or more of the following conditions exist:
a. He has freely given his consent to the processing for one or more specific purposes: for example, because he has subscribed to our newsletter to receive communications and updates on our activities and our products;
b. The processing is necessary for the execution of a contract and / or the execution of pre-contractual measures: for example, because you have requested a quote from us or you have purchased wine from us or want to book a tasting of our wines;
c. The treatment is necessary to fulfill a legal obligation to which we are subject: for example, because it is indispensable in the fulfillment of our obligations in accounting, tax, social security matters;
d. Processing is necessary to be able to pursue our legitimate interest: examples of our legitimate interests are the following:
- Identify and prevent fraud;
- Implement the security of our network and our IT systems;
- Constantly improve our services and our communication for the benefit of the consumer by sending information about our wines and our business activities;
- Maintain cordial relations with our customers and increase customer satisfaction and brand awareness towards our company.
You can always ask us to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, is provided for by a contract or is necessary to conclude a contract, or is justified by our legitimate interest.
4. Nature of the provision of data
You have the right to know that the provision of data may be mandatory or optional, as well as having consequences in the event of a refusal.
What happens if the interested party does not provide his data identified as necessary for the performance of the requested service? (Article 13, paragraph 2, letter and GDPR)
The collection and processing of personal data is necessary to follow up on the requested services as well as the provision of the Service and / or the supply of the requested Product if there is a need / requirement. If the interested party does not provide the personal data expressly provided as necessary in the order form or the registration form, the Data Controller will not be able to process the processing related to the management of the requested services and / or the contract and the Services / Products connected to it, nor to the obligations that depend on them.
What happens if the Data Subject does not consent to the processing of personal data for commercial promotion activities on Services / Products other than those purchased?
In the event that the interested party does not give his consent to the processing of personal data for these purposes, said processing will not take place for the same purposes, without this having effects on the provision of the requested services, nor for those for which he already has given their consent, if required.
In the event that the interested party has given consent and should subsequently revoke it or oppose the processing for commercial promotion activities, his data will no longer be processed for these activities, without this having consequences or prejudicial effects for the interested party and for the required performance.
5. Communication of data
In addition to the Data Controller, in some cases, other subjects belonging to our company (administrative and commercial staff, marketing department, system administrators) or external subjects may have access to your data.
By way of example, your personal data may be shared with:
- people, companies or professional firms that provide assistance and advice to our company in accounting, administrative, legal, tax and financial matters;
- credit institutions, insurance companies and brokers;
- transport companies;
- hosting providers and IT service providers.
Apart from the aforementioned hypotheses, your data will not be communicated except to subjects, entities or authorities to whom communication is mandatory by virtue of legal provisions or regulations or orders of the Authorities themselves.
We will never and under no circumstances sell or rent your data to third parties.
6. Possible transfer of data to third countries
There is no transfer of data outside the EU or to international organizations. In any case, should the need arise, the Data Controller will verify whether or not there is an adequacy decision of the EU Commission that guarantees an adequate level of data protection.
7. Data retention period
Unless you explicitly express your will to remove them, your personal data will be kept as long as they are necessary with respect to the legitimate purposes for which they were collected.
In particular, they will be kept for the entire duration of your registry registration and in any case no later than a maximum period of 24 (twenty-four) months of inactivity, or if, within this period, they are not associated with the Services and / or purchased the Products through the registry itself. It should also be added that, in the event that a user forwards unsolicited or unnecessary personal data to the Data Controller for the purpose of performing the requested service or providing a service strictly connected to it, the Azienda Agricola Daniele Malavasi will not may be considered the owner of these data, and will delete them as soon as possible. Furthermore, personal data will in any case be kept for the fulfillment of obligations (eg tax and accounting) that remain even after the termination of the contract (Article 2220 of the Civil Code) and in any case for a period of not less than 10 years; for these purposes, the Data Controller will only keep the data necessary for its prosecution. The cases in which the rights deriving from the contract and / or from the registration in the registry are valid, in which case the personal data of the interested party, exclusively those necessary for these purposes, will be processed for the time necessary to their pursuit.
8. Rights of the interested party
You may, at any time, exercise the rights indicated below.
a) Access to personal data: obtain confirmation or not that data concerning you is being processed and, in this case, access to the following information: the purposes, categories of data, recipients, the period of conservation, the right to lodge a complaint with a supervisory authority, the right to request the correction or cancellation or limitation of the processing or opposition to the processing itself as well as the existence of an automated decision-making process;
b) Request for rectification or cancellation of the same or limitation of the treatments that concern him; "limitation" means the marking of the data stored with the aim of limiting their processing in the future;
c) Opposition to processing: oppose for reasons connected with your particular situation to the processing of data for the performance of a task of public interest or for the pursuit of a legitimate interest of the Data Controller;
d) Data portability: in the case of automated processing carried out on the basis of consent or in execution of a contract, to receive the data concerning him in a structured format, commonly used and readable by an automatic device.
e) Revocation of consent to processing for marketing purposes, both direct and indirect, market research and profiling; the exercise of this right does not in any way prejudice the lawfulness of the treatments carried out before the revocation;
f) Propose a complaint pursuant to art. 77 GDPR to the competent supervisory authority based on his habitual residence, place of work or place of violation of his rights; for Italy, the Guarantor for the protection of personal data is competent, which can be contacted via the contact details shown on the website http://www.garanteprivacy.it;
The aforementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in art. 2 of this information.
Requests relating to the exercise of the user's rights will be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity and in the number of requests can this deadline be extended by a further 2 (two) months.
9. Minors
This Site and the Controller's Services are not intended for minors under the age of 18 and the Controller does not intentionally collect personal information relating to minors. In the event that information on minors were unintentionally registered, the Data Controller will delete them in a timely manner, at the request of users.
10. Update of the information
L'Azienda Agricola Malavasi Daniele will keep this information constantly updated.
The information was last updated on 19 September 2018.
