PRIVACY POLICY

pursuant to European Regulation 679/2016 (so-called 'GDPR').

1 - IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

The Data Controller is SOCIETÀ AGRICOLA TENUTA DIPAL SRL , C.da San Domenico Snc, 85034 Francavilla in Sinni (PZ) - P.Iva 020 280 90765.

2 - SOURCE AND PURPOSE OF PROCESSING

The personal data in our files are collected from the person concerned and are processed for the execution of contracts and to process orders in all their stages, from acceptance to delivery.

The same data are also processed in order to comply with administrative and other regulations that are compulsory under applicable national law or by virtue of decisions of the European Union and stored for the time required by these regulations.

3 - TREATMENT MODALITIES

Personal data are processed by the Data Controller using mainly electronic methods and are stored within the company's own management system. Appropriate security measures are observed to prevent data loss, illegal or incorrect use and unauthorised access.

In the event that the customer has voluntarily provided his or her telephone number, that number will not be used if it is entered in the Public Register of Oppositions, unless the customer subsequently gives his or her express consent.

The data provided by the customer will be used to carry out analyses and evaluations necessary to better understand the customer's purchasing preferences with regard to the products and services offered by SOCIETÀ AGRICOLA TENUTA DIPAL SRL.

4 - LEGAL BASIS

Data are processed on the basis of the performance of a contract to which the data subject is party or consent given or on other equivalent mechanisms permitted by law, such as, among others, 'legitimate interest' (Art. 6(1)(f) GDPR and Recital C47, GDPR).

In particular, the legitimate interest of SOCIETÀ AGRICOLA TENUTA DIPAL SRL is to keep the relationship voluntarily established by the customer active and to inform the customer of its marketing and direct sales activities, to make new products known, to present offers, discounts, promotions, allowing the customer to become aware of these opportunities and to decide, if he/she so wishes, to place further orders.

5 - SUBJECTS ALLOWED TO PROCESS DATA

Persons authorised to process data are those responsible for customer service and contact centre, sales, marketing, administration, order processing, information systems and data security.

The data will also be processed by external data processors in charge of services related to the above, as well as by third parties, autonomous data controllers, for purposes instrumental to the management of orders or related administrative activities, and, to the extent not indicated herein, required to provide the information to be provided pursuant to Article 13, GDPR.

6 - SCOPE OF DATA COMMUNICATION

If explicit and specific consent has been given by the customer, personal data may be disclosed to third-party companies operating in the direct marketing and distance selling sectors (list available upon request to the Controller).

7 - DATA TRANSFER

Personal data are managed and stored on servers located within the European Union, on servers owned by the Data Controller and/or third party companies appointed and duly appointed as Data Processors. It is in any case understood that the Data Controller, should it become necessary, shall have the right to move the management and/or storage to non-EU countries. In this case, the Data Controller assures as of now that the transfer of data will take place in compliance with the applicable legal provisions, stipulating - if necessary - agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses envisaged by the European Commission.

8 - DATA RETENTION PERIOD

Personal data provided in the context of orders will be retained for the period necessary to process those orders and for the periods required by laws, regulations or EU legislation, especially in administrative and tax matters.

Furthermore, for the marketing purposes of SOCIETÀ AGRICOLA TENUTA DIPAL SRL, the data are kept in our archives for the period necessary to maintain the relationship established with the customer and to inform them of our activities, enabling SOCIETÀ AGRICOLA TENUTA DIPAL SRL to legitimately continue its marketing and direct sales activities as long as the customer remains interested in our products and services. Obviously, this retention period will be interrupted when the customer expresses the wish not to receive further information and offers from the SOCIETÀ AGRICOLA TENUTA DIPAL SRL, communicating this in the manner explained below. SOCIETÀ AGRICOLA TENUTA DIPAL SRL will take appropriate technical and organisational measures to stop contacting the person. Afterwards, the data will be anonymised for statistical purposes and then destroyed, unless otherwise ordered by control authorities, law enforcement agencies and the judiciary. It may therefore be retained for longer periods in cases of litigation, for the purpose of defending or enforcing a right in court, either by the Controller or by the data subject.

9 - RIGHTS OF THE DATA SUBJECT

Pursuant to Articles 15-22 of GDPR 2016/679, please write to the Data Controller at the postal address SOCIETÀ AGRICOLA TENUTA DIPAL SRL, C.da San Domenico Snc - 85034 Francavilla in Sinni (PZ) or at the e-mail address info@tenutapadi.it the interested party may exercise with reference to his/her personal data the rights of: access, rectification, portability, revocation of consent, cancellation and oblivion, restriction of processing, objection to processing for legitimate reasons or for the purpose of sending marketing and direct sales communications also limited to one or more contact tools (e.g.: by post and/or e-mail and/or telephone). At any time, the data subject may request a complete and updated list of the data processors and third parties to whom personal data may be communicated.

The data subject has the right to lodge a complaint with the Supervisory Authority, which in Italy is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

Further information on our data protection policy can be obtained by e-mailing info@tenutapadi.it.

10 - WHAT ARE COOKIES AND HOW ARE THEY USED BY SOCIETÀ AGRICOLA TENUTA DIPAL SRL

Cookies are information saved on the hard disk of your PC and which are sent by your browser to a web server and which relate to your use of the network. Consequently, they make it possible to find out about the services, sites visited and options manifested by you while surfing the net.
This information is not, therefore, provided spontaneously and directly, but leaves a trace the data collected through cookies will be used for technical needs, in order to ensure easier, more immediate and faster access to the site and its services and easier navigation for the individual user.
Profiling cookies may also be used, with the user's consent, to create user profiles based on sections of the site or actions taken by the user on this site or by surfing the web.
The use of so-called session cookies (which are not stored persistently on the user's computer and are automatically deleted when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable the safe and efficient exploration of the site. The so-called session cookies that are used in this site avoid the use of other IT techniques that are potentially detrimental to the confidentiality of users' browsing and do not allow the acquisition of personal data identifying the user. In any case, it is possible to configure the browser so that you are notified when a cookie is received and then decide whether to accept it.

11 - NAVIGATION DATA

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected in order to be associated with identified users, but which by its very nature could, through processing and association with data held by third parties, make it possible to identify such users. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error or similar) and other parameters relating to the user's operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.

12 - THE SECURITY OF YOUR PERSONAL DATA

SOCIETÀ AGRICOLA TENUTA DIPAL SRL adopts suitable and preventive security measures to safeguard the confidentiality, integrity, completeness and availability of your personal data. As established by the regulations governing the security of personal data, technical, logistical and organisational measures are put in place to prevent damage, loss, even accidental, alteration, improper and unauthorised use of the data that concern you. Similar preventive security measures are taken by third parties (data processors) to whom we have entrusted processing operations of your data on their own behalf.
On the other hand, SOCIETÀ AGRICOLA TENUTA DIPAL SRL is not responsible for untruthful information sent directly by the user (e.g. correct e-mail address or postal address or other personal data), as well as for information concerning the user that has been provided by a third party, even fraudulently.

13 - CREDIT CARD SAFETY Purchases made on-line require the provision of credit card identification data and the card holder. It should be noted here that SOCIETÀ AGRICOLA TENUTA DIPAL SRL will not, under any circumstances, have knowledge of this information, since, at the time of the transaction, the credit card data (number, expiry date, holder's details) will be collected directly by the issuing institute and the credit institutions involved in the process. Storage, processing methods and security measures are, therefore, defined by the institutions with which the cardholder has his financial relations. It should be noted, on the other hand, that SOCIETÀ AGRICOLA TENUTA DIPAL SRL does not accept any responsibility for unauthorised or fraudulent use of your credit card by third parties.