The personal data provided directly by the user to AZIENDA AGRICOLA F.lli TRAVERSO on the pages of the website accessible at vinitraverso.it at the time of registration and subsequently for the use of services provided by AZIENDA AGRICOLA F.lli TRAVERSO will be processed in compliance with the provisions of Legislative Decree 196/2003 on the protection of personal data (‘Privacy Code’) and following the entry into force of EU Regulation no. 679/2016 (‘GDPR’) in accordance with the provisions of Article 13 of the aforementioned European Regulation.
AZIENDA AGRICOLA F.lli TRAVERSO informs the user of the following:
By processing of personal data, we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as collection, recording, organization, structuring, storage, processing, selection, blocking, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, deletion or destruction.
It is specified:
1. JOINT CONTROLLERS OF THE PROCESSING
The Joint Controllers of the processing of personal data pursuant to Article 26 are:
– AZIENDA AGRICOLA F.lli TRAVERSO, with registered office in Via Sofia n. 16 – 09129 CAGLIARI
– Registered with VAT No. 03978390924 – REA CA – 354144
– The company’s certified email address is: [email protected]
2. PURPOSES OF PROCESSING
The user’s personal data, freely communicated and acquired due to the activity carried out by AZIENDA AGRICOLA F.lli TRAVERSO, will be processed lawfully and fairly for the following purposes:
A – Without the express consent of the user (Art. 24 letters a, b, c Privacy Code and Art. 6 letters b, e GDPR): – the data will be collected and used exclusively for purposes directly connected and instrumental to the activation and operation of the services provided by AZIENDA AGRICOLA F.lli TRAVERSO, for example to allow the registration of the Account, Favorites, Customer Service as well as for the fulfillment of obligations under the law, a regulation or community legislation and for the exercise of its rights in court.
B – Only with specific and distinct consent of the user and until its withdrawal (Arts. 23 and 130 Privacy Code and Art. 7 GDPR): – use of personal data, in particular email address and postal address, by the Joint Controllers, for order management, fulfillment, invoicing and delivery of ordered products, commercial communication services, including the newsletter relating to offers on the Site, as well as for conducting market research also aimed at assessing the degree of user satisfaction.
The user can object to the processing referred to in Art. 2 B at any time after giving their consent:
– via the appropriate link at the bottom of any promotional email sent by AZIENDA AGRICOLA F.lli TRAVERSO;
– by sending an email to [email protected];
– by accessing the ‘contacts’ section on the website and sending a specific request for cancellation/modification of the preferences granted;
C – Soft Spam: The email address provided by the user when purchasing a product or service offered on the Site may be used by the Joint Controllers to send email communications regarding the direct sale of products or services similar to those purchased or activated by the User, provided that the user does not exercise the right to object in the ways described in point B above.
3. ACCOUNT
The user can create their own account on the website vinitraverso.it by entering their personal data (including name, surname, telephone number, email, address). The user can update their personal profile, modify and delete their data at any time through the personal area of their account.
4. DATA PROCESSING METHODS
The data will be processed, in compliance with the necessary security and confidentiality, through the following methods: collection of data from the interested party, collected and recorded for determined, explicit and legitimate purposes and used in further processing operations in terms compatible with these purposes, processing carried out with the aid of electronic and automated tools (collection of data electronically, directly from the interested party).
5. LEGAL BASIS OF THE PROCESSING
The legal basis of the processing is constituted by the user’s consent, the fulfillment of a contractual obligation and legal provisions.
6. LEGITIMATE INTERESTS PURSUED BY THE JOINT DATA CONTROLLERS
The legitimate interests pursued by the Joint Controllers in the processing of data stem from the need to respect and honor the contractual obligations signed between the parties. Pursuant to Art. 6, the lawfulness of the processing is based on the consent expressly manifested by the data subject, documented in written form.
7. NATURE OF DATA PROVISION
The provision of data requested at the time of service activation, for the purposes referred to in the previous section 2A, is mandatory, as it is strictly functional to the performance of these services. Any refusal to provide the data results in the impossibility for AZIENDA AGRICOLA F.lli TRAVERSO to complete the user registration process and therefore to provide the offered services. The provision of data for the purposes referred to in the previous section 2B is optional.
8. DATA COMMUNICATION AND POTENTIAL RECIPIENTS OF PERSONAL DATA
The user’s personal data may be communicated to specific subjects, appointed by the Data Controller to provide services instrumental or necessary to the execution of obligations related to registration on the vinitraverso.it website and online purchases, within the limits and in accordance with the instructions given. In particular, the data may be communicated to:
A. Individuals, companies, or professional firms that provide assistance, consultation, or collaboration to the Data Controllers in accounting, administrative, legal, tax, and financial matters;
B. Subjects delegated and/or appointed by AZIENDA AGRICOLA F.lli TRAVERSO to carry out activities or part of the activities related to the provision of sales services, such as Customer Service, even if managed through outsourcing; the logistics center responsible for packaging products purchased by the user; carriers responsible for delivering purchased products; subjects who perform after-sales assistance on behalf of AZIENDA AGRICOLA F.lli TRAVERSO and any other external collaborator to whom communication is necessary for the proper fulfillment of the obligations assumed by AZIENDA AGRICOLA F.lli TRAVERSO in relation to the contract for the provision of its services;
C. Public Administrations for the performance of institutional functions within the limits established by law or regulations. The Joint Controllers have appointed some data processors for users’ personal data, depending on the functions performed. The updated list of all Data Processors is available at the headquarters of AZIENDA AGRICOLA F.lli TRAVERSO and can be requested at the following email address: [email protected].
This list may be subsequently integrated and/or updated as needed.
9. PROCESSING METHODS
Data is collected electronically and processed through registration, consultation, communication, conservation, and deletion operations, carried out primarily with the aid of electronic tools, ensuring the use of appropriate measures for the security of the processed data and guaranteeing their confidentiality.
The user’s data, stored on electronic media, are kept and archived on a server owned by Piero Delfino (contacts visible on pierodelfino.it) whose services AZIENDA AGRICOLA F.lli TRAVERSO uses. In particular, the Joint Controllers declare that the data recorded on the server are protected against the risk of intrusion and unauthorized access and that they have also adopted security measures suitable to guarantee the integrity and availability of the data as well as the protection of relevant areas and premises for their custody and accessibility.
Personal data will be processed by collaborators and/or employees of the Joint Controllers as data processors or persons in charge of processing, within their respective functions and in accordance with the instructions given by the Joint Controllers.
The joint controllers guarantee the highest level of security in managing user data. Information relating to credit cards is stored only in encrypted format and according to the security requirements provided by PCI certification. The Joint Controllers do not have access to confidential information relating to credit cards, which will be processed by intermediaries and card issuers in compliance with the Privacy Code.
10. RIGHTS OF THE DATA SUBJECT
The user (hereinafter also referred to as “data subject”), pursuant to the provisions of Article 7 of the Privacy Code and Article 15 of GDPR, has the right to:
– obtain confirmation of the existence or absence of personal data concerning them, even if not yet recorded, and their communication in an intelligible form;
– obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic tools; d) the identification details of the controller, processors and the designated representative pursuant to Article 5, paragraph 2 of the Privacy Code and Article 3, paragraph 1, of GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representative in the State’s territory, processors or persons in charge;
– obtain: a) updating, rectification or, when interested, integration of data; b) erasure, anonymization or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification that the operations in letters a) and b) have been notified, as also related to their contents, to the entities to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
– object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning them, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning them for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by email and/or through traditional marketing methods by telephone and/or paper mail. It is noted that the right of opposition of the data subject for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the data subject to exercise the right to object even only in part. Therefore, the data subject can decide to receive only communications using traditional methods or only automated communications or none of the two types of communication;
– request from the Joint Controllers access to personal data (Art. 15 GDPR), rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) of the same, restriction of processing or to object to their processing (Art. 18 GDPR);
– to the portability of your data processed in an automated form where applicable;
– to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
– lodge a complaint with the Data Protection Authority.
To exercise the aforementioned rights, as well as to receive information regarding the subjects with whom the data are archived or to whom the data are communicated or the subjects who, as processors or persons in charge, may become aware of your data, you may contact the Joint Controllers by sending a request to the following email address [email protected].
11. DURATION OF PROCESSING AND DATA RETENTION PERIOD
The processing of personal data with reference to the purpose referred to in section 2.A will have a duration equal to that necessary for the execution of the requested services, to which will be added the further period legally required in compliance with current civil, fiscal and tax obligations.
12. INTENTION OF THE JOINT CONTROLLERS TO TRANSFER PERSONAL DATA
The management and storage of personal data will take place on servers of AZIENDA AGRICOLA F.lli TRAVERSO located within the European Union. Currently, the servers are located in Italy. The data will not be transferred outside the European Union.
13. UPDATES TO THE PRIVACY POLICY
This Privacy Policy is subject to occasional revisions. If changes are introduced to the processing, AZIENDA AGRICOLA F.lli TRAVERSO will give appropriate notice to the user by publishing the changes on the Site. Where required by current legislation, the user will have the option to give their consent to any new processing. In case of refusal, users’ data will not be processed according to the changes contemplated by the privacy policy.