PRIVACY POLICY

This information notice, given in accordance with current national and EU legislation on the processing of personal data, concerns the website https://www.tenutacantoallamoraia.com (hereinafter also "Site").

The information is intended for all persons who access the Site (hereinafter also "Users" or, individually, "User") and is provided only for data acquired as a result of consulting the Site. This notice also does not refer to other websites that may be reached and consulted by the User through hyperlinks (links) that may be contained in the Site.

DATA CONTROLLER

The "owner" of the processing of data, relating to identified or identifiable persons who access this Site is TENUTA CANTO ALLA MORAIA SRL, C.F./ P.IVA 02359010515, in the person of the legal representative pro tempore, with headquarters in CASTIGLION FIBOCCHI (AR), VIA SETTEPONTI 53.

TYPE OF DATA PROCESSED, PURPOSE AND LEGAL BASIS FOR PROCESSING

NAVIGATION DATA

The computer systems and computer programs used for the operation of the site collect some personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses or domain names of computers used by users connecting to the site, the URI-Uniform Resource Identifier addresses of the requested resources, time of the request, method used in submitting the request to the server, size of the file obtained in response, numerical code about the status of the response rendered by the server -good end, error, etc.- and other parameters relating to the user's operating system and computer environment). Although this information is not collected in order to be associated with identified data subjects, by its nature it could, through processing and association with data held by third parties, allow users to be identified.

These data are used for the sole purpose of obtaining statistical information not associated with any user identification data on the use of the Site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site.

DATA VOLUNTARILY PROVIDED BY THE USER

No provision of personal data by the user is required for site consultation only.

However, any contact with the data controller, or the optional, explicit and spontaneous sending of messages, electronic or traditional mail, to the addresses indicated on the site entails the subsequent acquisition of the address, including e-mail, of the sender or the relevant telephone number, necessary to respond to requests, as well as any other personal data included in the relevant communications.

This data will be used for the sole purpose of following up the user's request and may be disclosed to third parties only if it is necessary for that purpose.

For the use of the section of the site dedicated to e-commerce (online purchases), on the other hand, the interested party will be asked to provide the following data: email; first name; last name; telephone number; address; country; zip code; city; company name; tax code/VAT number; province; billing address; shipping address; street number. Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informational texts displayed before the data is collected.

The processing of such data is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at his or her request (Art. 6(1)(b) of the Regulation), as well as, where applicable, to comply with a legal obligation (Art. 6(1)(a) of the Regulation), as well as on the legitimate interest of the data controller (Art. 6(1)(f) of the Regulation). (a) of the Regulation), as well as on the legitimate interest of the data controller (Art. 6(1)(f) of the Regulation) (taking into account the reasonable expectations of the data subject at the time and in the context of the collection of the personal data, when the data subject could reasonably expect processing to take place for that purpose).

On the other hand, data processing for the purposes of sending newsletters or promotional communications via e-mail will be carried out only where the user has given his or her specific consent for this purpose.

PAYMENT MANAGEMENT

Payment processing services enable this Web Site to process payments by credit card, wire transfer, or other means. The data used for payment is acquired directly from the operator of the requested payment service without being processed in any way by this Web Site.

Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment.

The Data Controller uses for the e-commerce platform the payment service provided by PayPal Inc (Paypal) which allows the User to make online payments and whose privacy policy you are invited to consult at the following link(Privacy Policy) for further information.

LEGAL BASIS FOR PROCESSING

The Owner processes Personal Data related to the User if one of the following conditions exists:

  • the User has given consent for one or more specific purposes; Note: In some jurisdictions, the Data Controller may be authorized to process Personal Data without the need for the User's consent or another of the legal bases specified below, as long as the User does not object ("opt-out") to such processing. However, this does not apply if the processing of Personal Data is governed by European legislation on the protection of Personal Data;

  • processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures;

  • processing is necessary to fulfill a legal obligation to which the Controller is subject;

  • the processing is necessary for the performance of a task of public interest or the exercise of public authority vested in the Controller;

  • processing is necessary for the pursuit of the legitimate interest of the Owner or third parties.

However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on law, required by a contract or necessary to conclude a contract.

PLACE OF DATA PROCESSING

Processing related to the services of the Site takes place at the aforementioned location of the Data Controller. The data are processed through the servers of the Site's hosting service provider, which is currently Aruba spa.

MODE OF TREATMENT

The processing of data will be carried out, by personnel appointed by the owner with procedures, technical and computer tools suitable to protect the confidentiality and security of your data and consists of their collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation, destruction of the same including the combination of two or more of the above activities.

MANDATORY OR OPTIONAL NATURE OF PROVIDING DATA

The Owner will use the data voluntarily provided by the User to fulfill the User's requests.

The User is not required to provide his/her personal data, however in case of refusal, the Owner may not be able to fulfill his/her requests.

DATA RETENTION PERIOD

Personal data will be retained in a form that allows the identification of the user for a period of time not exceeding the achievement of the purposes for which they are processed, and in any case in compliance with legal obligations regarding data retention times (tax assessments and limitation periods for the exercise of rights).

In particular, personal data will be retained until the user requests the deletion of his or her data. In some cases, personal data that can prove the management of services and the exercise of your rights may be retained.

DATA COMMUNICATION AND DISSEMINATION

For the pursuit of the purposes set forth in this statement and within the limits of what is strictly necessary for this purpose, the data will be processed by the Data Controller and its employees, collaborators and/or specially appointed officers.

As part of its activities and for the purposes indicated above, the Data Controller may make use of services rendered by third parties operating on its behalf and in accordance with its instructions, as data processors (or autonomous data controllers): these are entities that provide the Data Controller with processing or instrumental services (e.g., computer services for the operation of the site), of which the user may request a complete and updated list by contacting the Data Controller, at the e-mail address info@tcmoraia.com

Except for specific legal obligations, the data are not intended for dissemination.

TRANSFER ABROAD

If necessary, for technical and operational reasons, the Data Controller reserves the right to transfer personal data to countries outside the European Union or international organizations for which there are adequacy decisions of the European Commission, or on the basis of adequate guarantees provided by the country to which the data is to be transferred or on the basis of the specific exceptions provided for in EU Regulation 2016/679.

RIGHTS OF INTERESTED PARTIES

Pursuant to Articles 15 et seq. of the GDPR and current legislation, the User has the right, in addition to lodging a complaint with the Data Protection Authority and to revoke any consent given at any time, to:

a) obtain confirmation of the existence or otherwise of personal data concerning him/her and their communication in an intelligible form, receiving them in a structured, commonly used and readable format with the possibility of transmitting them to another owner ("Right to portability");

(b) obtain indications on: (i) the origin of the personal data, the purposes and methods of processing, the logic applied in case of processing carried out with the aid of electronic instruments; (ii) the identification details of the Data Controller, the Data Processor(s) and the Data Protection Officer; (iii) the subjects or categories of subjects to whom the data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, data processors or designees.

(c) to obtain (i) the updating, rectification or integration of the data concerning him or, in case of dispute as to the correctness of the data, the restriction of the processing of the same for the time necessary for the appropriate checks, (ii) the transformation into anonymous form or the blocking of data processed in violation of the law, including those whose retention is necessary in relation to the purposes for which the data were collected or subsequently processed (iii) certification of the fact that the operations referred to in the preceding points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, unless this requirement proves impossible or involves the use of means manifestly disproportionate to the protected right.

d) object, in whole or in part (i) to the processing of data concerning him/her, even if pertinent to the purpose of collection, (ii) to the processing of personal data concerning him/her, provided for the purposes of commercial information or sending advertising or direct sales material or for carrying out market research or commercial communication.

e) obtain erasure without undue delay ("Right to be Forgotten") if the data is no longer necessary in relation to the purposes for which it was collected or otherwise processed, has been unlawfully processed, or if the User (i) requests or (ii) objects in whole or in part to the processing.

(f) obtain the restriction of the processing in the event that the data (i) are processed unlawfully but the User objects to their deletion, (ii) are necessary for the User to establish, exercise or defend a right, (iii) an assessment as to the legitimate grounds for processing by the Controller is pending.

The above rights may be exercised by making a request to the Holder, at the e-mail address info@tcmoraia.com or, with reference to the rights sub d), also through the appropriate link at the bottom of any e-mail with promotional or informational content.