Dear customer, the following information, prepared pursuant to art. 13 of the General Data Protection Regulation No. 2016/679 (hereinafter also “GDPR”), in which we indicate all the details relating to the processing of your data collected through the site https://www.terredipetrara.it/ (hereinafter also the “site”)
1. Who will process your data?
Your data will be processed, as Data Controller, by Terre di Petrara firstname.lastname@example.org with headquarters in Contrada Petrara, 15 – 83050 San Mango sul Calore (AV).
2. To whom will we communicate your data?
Your data could be shared with:
– People authorized by the Data Controller to process;
– External data processors delegated and/or appointed by the Data Controller to carry out activities related to the pursuit of AFOREMENTIONED purposes (including technical maintenance on the systems); The list of external managers is presenta t the Company’s headquarters.
– Subjects, entities or authorities to whom the communication of the personal data is mandatory pursuant to legal provisions;
– Your personal data will not be transfered outside the EU.
3. What data do we collect?
Data provided by the user including contact data such as, by the was of example but not limited to (name, surname, date of birth (in order to identify the age of majority) tax code, email address, shipping addresses and telephone number);
If you decide to provide third party data, make sure that these subjects have been previously and adequately informed on the relation to this hypothesis, you position yourself as an independent Data Controller, assuming all legal obligations and responsibilities.
4. Why do we need your data?
For purposes related to the delivery of the requested services:
Telephone and / or email assistance for the purchase of products offered though the site;
– Purchase of products offered through the site;
– Communications related to the delivery of the services;
– Administrative, financial or accounting activities;
– Compliance with legal obligations, regulations and community norms.
4.2 For commercial purposes:
For sending promotional commercial offers related to out products.
The processing for the purposes referred to in point 4.1, is necessary for the execution of a contract or for the execution of pre-contractual measures adopted at your request. The provision of personal data for this purpose is optional, but remember that your refusal will not allow us to provide you with the service.
The processing of your data referred to in point 4.2 is subject to your consent.
5. How long do we keep your data?
The storage of personal data will take place in paper and / or electronic form and for the time strictly necessary for the pursuit of the purposes referred to in point 4.
In the event of finalizing the purchase of the products offered through the site, the invoices, accounting documents and transaction data are kept for 10 years pursuant to the law (including tax obligations).
In case of failure to finalize the purchase of the services offered though the site, your personal data will be kept for a maximum period of 24 months.
For promotional purposes, consistent with the provisions of the applicable legislation, we keep your data for a maximum period of 3 years.
6. How can you exercise your rights?
To withdraw the consent given for direct commercial purposes, simply press the “Unsubscribe” button at the bottom of all our communications or, if it is more convenient, by writing to email@example.com.
You can ask the Data Controller at any time to access your personal data, to correct or cancel them or to oppose their treatment. The law also allows you to exercise the right to request the limitation of treatment in the cases provided for by art. 18 of the GDPR, as well as obtaining the data concerning you in a structured format, commonly used and readable by an automatic device, in the cases provided for by art. 20 of the GDPR.
Requests can be sent to the email address at firstname.lastname@example.org.
Finally, we remind you that you always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the GDPR, if you believe that the processing of your data is contrary to the legislation in force.
7. How do we protect your data?
Your personal data are processed by the subject referred to in point 1, in accordance with the provisions of current legislation. In particular, to ensure the security of your data taking into account the state of the art and implementation costs, as well as the nature, object, context and purposes of the processing, as well as the risk of varying probability and seriousness for the rights and freedom of our users, we have adopted adequate technical and organizational measures to ensure a level of security appropriate to the risk.