Information on the treatment of personal data
HOLDER OF THE TREATMENT
Azienda Agricola Mario Costa SSA, with registered office in Canale (CN), via Torino 159, tax code / VAT number IT03654580046, telephone number +39 0173 979486, email address [email protected] (hereinafter also “Company”).
1. PURPOSE OF THE TREATMENT
1.1 – Contractual purpose: view the web pages and take advantage of the services, including any online sale of products, offered within the site www.cantinamariocosta.it (“Site”)
1.2 – Marketing purposes: sending, with automated contact methods (such as sms, mms and e-mail) and traditional (such as telephone calls with operator and traditional mail), promotional and commercial communications relating to services / products offered by the Company or reporting of corporate events, as well as carrying out market studies and statistical analyzes.
1.3 – Profiling purposes: analysis of your preferences, habits, behaviors or interests in order to send you personalized commercial communications.
1.4 – Legal obligations: fulfill obligations under regulations and applicable national and supranational legislation.
1.5 – Sending newsletters: if requested by you by registering for this service.
1.6 – Rights of the owner: if necessary, to ascertain, exercise or defend the rights of the Company in court.
1.7 – Extrajudicial debt recovery: in order to allow the Company to recover its credits without resorting to a judicial authority.
1.8 – Site operation: the computer systems and software procedures used to operate the site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which, by their very nature, could, through processing and association with data held by the Company or by third parties, allow the users of the Site to be identified.
2. LEGAL BASIS OF TREATMENTS
2.1 – Contractual purpose: execution of a contract of which you are a part.
2.2 – Marketing and profiling purposes: consent (optional and revocable at any time).
2.3 – Legal obligations: need to fulfill legal obligations.
2.4 – Sending newsletters: execution of a contract of which you are a part, or subscription to the newsletter.
2.5 – Rights of the owner and extrajudicial debt collection: legitimate interest.
3. STORAGE PERIOD OF PERSONAL DATA
3.1 – Contractual purposes, legal obligations: for the entire duration of the contract and, after termination, for 10 years.
3.2 – Sending the newsletter, marketing and profiling purposes: until the withdrawal of consent for these purposes. The only data relating to the detail of any purchases made will be kept and processed for the terms provided by the provision of the Authority for the protection of personal data of 24 February 2005 and subsequent amendments, or 24 months.
3.3 – Rights of the owner and extrajudicial debt recovery: in the event of a legal dispute, for the entire duration of the same, until the exhaustion of the terms of expiry of the appeal actions.
3.4 – Site operation: for the entire duration of the browsing session on the Site.
Once the aforementioned storage terms have elapsed, your personal data will be destroyed, deleted or anonymized, compatibly with the technical cancellation and backup procedures.
4.1 PERSONAL DATA PROCESSED FOR CONTRACTUAL PURPOSE – OBLIGATIONS OF LAW – RIGHTS OF THE HOLDER – RECOVERY OF CREDITS
Personal data, contact data, administrative-accounting data.
4.2 PERSONAL DATA PROCESSED FOR PURPOSE? MARKETING AND PROFILING
Personal data, contact data, administrative-accounting data, purchase data made on the Site, data collected by cookies installed by the Site.
For more information on cookies visit: https://www.cantinamariocosta.com/cookie-policy/
4.3 PERSONAL DATA PROCESSED FOR SENDING NEWSLETTER
4.4 PERSONAL DATA PROCESSED FOR THE OPERATION OF THE SITE
The IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.), other parameters relating to the operating system and the user’s IT environment, information relating to user behavior on the Site, on the pages that have been visited or searched, in order to select and make specific announcements to the user of the Site and the data relating to the browsing behavior held on the Site using, for example, using cookies.
5. OBLIGATORY DATA SUPPLY
The provision of personal data referred to in point 4.1 for the purposes referred to in point 1.1 is mandatory. The refusal to provide the aforementioned personal data does not therefore allow the possibility of using the services of the Site relating to the booking and sale of products.
The provision of personal data referred to in point 4.2 for the purposes referred to in points 1.2 and 1.3 is optional and subject to your consent.
Some personal data referred to in point 4.4 are strictly necessary for the operation of the Site, others are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, and are deleted immediately after processing. In the treatment of personal data that can directly or indirectly identify your person, we try to respect a principle of strict necessity. For this reason, we have configured the Site in such a way that the use of personal data is reduced to a minimum and in order to limit the processing of personal data that allow you to be identified only in case of need or at the request of the authorities and forces of police (such as, for example, data relating to traffic and your stay on the Site or your IP address) or to ascertain responsibility in the event of hypothetical computer crimes against the Site.
6. RECIPIENTS OF THE DATA
The data can be processed by external subjects operating as autonomous holders such as, by way of example, authorities and supervisory and control bodies and in general subjects, public or private, entitled to request the data.
The data may also be processed, on behalf of the Company, by external subjects designated as managers, to whom adequate operating instructions are given.
These subjects are essentially included in the following categories:
- companies offering e-mail sending services;
- companies offering Site maintenance and development services;
- press agencies or companies offering services related to the organization of events;
- companies offering e-commerce services;
- companies that offer support in carrying out market studies and
- evaluating customer satisfaction.
7. SUBJECTS AUTHORIZED TO TREATMENT
Your data may be processed by employees of the company departments responsible for pursuing the aforementioned purposes, who have been expressly authorized to process and who have received adequate operating instructions.
The data referred to in point 4.4 collected during navigation of the Site will be processed by employees, collaborators of the Company or external subjects, as persons in charge and processors, who carry out technical and organizational tasks of the Site on behalf of the Company.
8. YOUR RIGHTS AS INTERESTED IN THE PROCESSING – COMPLAINT TO THE SUPERVISORY AUTHORITY
By contacting the Company via e-mail at [email protected] you can ask the Company for access to the data concerning you, their cancellation, the correction of incorrect data, the integration of incomplete data, the limitation of the treatment in the cases provided for by art. 18 of the GDPR, as well as the opposition to the processing in the hypothesis of the Company’s legitimate interest.
Furthermore, if the treatment is based on consent or on the contract and is carried out with automated tools, you have the right to receive your personal data in a structured format, commonly used and readable by an automatic device, as well as, if technically feasible, to transmit them to another owner without hindrance.
You have the right to withdraw the consent given at any time for marketing and / or profiling purposes, as well as to object to the processing of data for marketing purposes, including profiling related to direct marketing. The possibility remains that you prefer to be contacted for the aforementioned purpose exclusively through traditional methods, to express your opposition only to the receipt of communications through automated methods.
You have the right to lodge a complaint with the competent supervisory authority in the Member State in which you habitually reside or work or in the State in which the alleged violation occurred.
9. DATA SECURITY
Your personal data will be processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected and in compliance with the principle of necessity and proportionality, avoiding the processing of personal data if the operations can be carried out through the use of anonymous data or in other ways.
We have adopted specific security measures to prevent the loss of personal data, illicit or incorrect use and unauthorized access but please do not forget that it is essential for the security of your data that your device is equipped with tools such as constantly updated antivirus and that the provider that provides you with the Internet connection guarantees the secure transmission of data through firewalls, anti-spam filters and similar devices.