Privacy Policy EN

Privacy Policy drafted pursuant to EU Regulation 2016/679 of 27 April 2016 – GDPR.

1. DATA CONTROLLER and PERSONAL DATA PROCESSOR

Pursuant to art. 4 and 24 of EU Reg. 2016/679, it is FATTORIA DI RIMAGGIO S.S. SOCIETÀ AGRICOLA, with registered offices in Via Nazionale 2/2 – 52019 Laterina – Pergine Valdarno (AR), CONTACT: +39 0575-896502 e-mail: info@fattoriadirimaggio.it

2. TYPES OF PROCESSED DATA
Navigation data

The IT systems and procedures used to operate this site acquire certain personal data in the course of normal operation, which are then implicitly transmitted when using Internet communication protocols. This information is not collected in order to be associated with identifiable data subjects. All our activities are governed by ethical principles and we are committed to protecting the privacy of all website visitors. For this reason, the way in which we collect and store data is closely linked and related to the way in which you use the site and its included services.

Data provided voluntarily by the user

Should users/visitors connecting to this website send in their personal data in order to make requests via e-mail or through prepared forms, this entails the acquisition of the sender’s address and any other data provided by FATTORIA DI RIMAGGIO S.S. SOCIETÀ AGRICOLA.

3. PURPOSE AND LEGAL BASIS OF PROCESSING

The personal data provided will be processed, in compliance with the conditions of lawfulness pursuant to art. 6 of EU Reg. 2016/679, for the following purposes:

• browsing this website – legitimate interest (legal basis for processing: art. 6 paragraph 1 lett. f);

• possible contact request, with sending of information you have requested – legitimate interest (legal basis for processing: art. 6 paragraph 1 lett. f).

4. RECIPIENTS OR CATEGORIES OF DATA RECIPIENTS (art. 28 – 29 EU Regulation 2016/679)

The personal data provided may be communicated to recipients, who will process the data in their capacity as data processors and/or as persons in charge of the processing acting under the authority of the Data Controller and the Data Processor, for the purposes listed above (par. 3).

Specifically, the data may be communicated to parties for the performance of the following activities: Maintenance and development of the IT network and infrastructure – Consultancy – Processing and fulfilment: administrative, accounting and tax – Legal – Management of e-mail, newsletters and website management; – Competent authorities for fulfilment of legal obligations and/or provisions of public bodies, upon request.

5. DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION AND GUARANTEES
Data of a personal nature provided may be transferred to countries belonging to the European Union in order to fulfil the above-mentioned related purposes.  The data provided will not be disseminated.

6. DATA RETENTION PERIOD OR CRITERIA FOR DETERMINING THE PERIOD
Processing will be carried out in automated and manual form, using methods and tools designed to guarantee maximum security and confidentiality, by persons specifically appointed for that purpose.

The retention of data of a personal nature depends on the purpose of the processing:
a) browsing this website (see cookies policy);

1. b) for a contact request (maximum 12 months).

7. NATURE OF PROVISION AND REFUSAL

Apart from what is specified for navigation data, the user is free to provide personal data. The provision of data is optional or necessary depending on the specific purpose that the data is processed for. Failure to provide data marked with an asterisk * will make it impossible to obtain what is requested or to use the services of the data controller.

8. RIGHTS OF DATA SUBJECTS

You may assert your rights as expressed in articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679 by contacting the Data Controller. You have the right, at any time, to ask the data controller for access to, rectification of, erasure of, or restriction of your personal data. Furthermore, you have the right to object at any time to the processing of your data (including automated processing, e.g. profiling), as well as to the portability of your data.  Without prejudice to any other administrative and jurisdictional appeal, if you consider that the processing of data relating to you violates the provisions of EU Reg. 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Reg. 2016/679, you have the right to lodge a complaint with the Data Authority, according to the legal prerequisites defined in art. 77 of EU Reg. 2016/679.