Pursuant to the provisions established in the EU 2016/679 European Regulation, we wish to inform you of the necessary information regarding the processing we will carry out of your personal data and, more specifically, the categories of data processed, the purposes, the management methods, the scope of communication and dissemination, the expected retention period, the possibility of data transfer to third countries and the existence of profiling processes that may deal directly with your personal data.
The processing of data, depending on the services provided to you for which you have given us your personal data, will have the following purposes:
Your personal data is collected to follow up on your specific request or for providing one of our services which you wish to use. Alternatively, processing will always be based on consent.
Providing your data is necessary whenever you request the prompting/provision/features of a service among those that we offer (that is, for the processing purposes described above and numbered from 1 to 5 and 7).
The processing of personal data for marketing and profiling purposes is carried out only upon receiving the explicit and specific consent by the interested party.
The consent to the processing for profiling purposes implies consent for marketing purposes, as this activity is carried out only after the interested party’s profile has been recorded. No direct marketing activities will be undertaken if the preliminary profiling registration has not been carried out.
The refusal to grant consent to processing regarding marketing and profiling purposes will not entail any consequences for the interested party in relation to the possibility of adhering to the other services offered.
The consent expressed by the user can be freely revoked, at any time, by simply sending an email to the email to firstname.lastname@example.org.
The processing of your data will be based on principles of correctness, lawfulness and transparency and will be carried out using computer tools and also through the use of paper documentation for archiving, managing and issuing purposes. The processing will be carried out by means of suitable tools, as far as is reasonable and in the state of the art, so as to guarantee security and confidentiality through the use of suitable procedures that avoid the risk of loss, unauthorized access, illicit use and dissemination.
Your personal data may be disclosed to company employees and/or collaborators specifically appointed as data managers and/or processors.
Personal data may be disclosed to third parties in order to comply with legal obligations, or to comply with requests from legitimate public authorities, or to assert or defend a right in the court of law.
Your personal data, for the purposes indicated above, may be made available to:
Your personal data will not be disclosed or passed on to third parties for purposes other than those mentioned, except where required by a rule of law or regulation or by EU community legislation.
The personal data provided by you and processed for the purposes described above will under no circumstances be transferred to countries outside the European Union. If data transferring becomes necessary in the future, this will only be possible after your informed and explicit consent.
Your personal data will be kept only for the time necessary to activate/provide/carry out the service you have signed for, and more generally, as required by law or by specific provisions issued by the National or European Supervisory Authority.
The Data Controller is:
Marchesi Frescobaldi soc. agricola s.r.l. unipersonale, C.F. and VAT number 01770300489 registered office in Via S. Spirito 11 50125 Firenze, Administrative offices in Via Aretina 120, 50065 Sieci (FI).
The Data Processing Manager is Dr. Marco Ghilli.
The complete list of appointed data processors is available from the Data Controller, as specified above.
We would like to remind you that you can, at any time, exercise the rights set out in the EU 2016/679 European Regulations as transcribed in the annex.
We therefore wish to inform you that:
These rights may be exercised by writing to the Data Controller directly, by mail or by e-mail, at the following e-mail address: email@example.com You will be able to:
It is understood that, if the request for data access is put forth via electronic means, the information will be provided in a commonly used electronic format.
The exercise of rights is not subject to any constraint form and is free.
For more details, an excerpt of articles 15 to 23 of the Regulation is provided at this link:
Legislative references of the EU Regulation 679/2016
Article 13: Information to be provided if personal data is collected from the data subject
Article 15: Right of access of the interested party
Article 16: Right of rectification
Article 17: Right to deletion
Article 18: Right to limit processing
Article 20: Right to data portability
Article 21; Right to oppose
Article 22: Automated decision-making process, including profiling