PRIVACY POLICY

PLACE OF DATA PROCESSING

The processing related to the web services of this site takes place at the head office of the Data Controller and is carried out only by technical staff of the office in charge of the processing, or by persons responsible for occasional maintenance operations.

No data derived from the web service is communicated or disseminated. The personal data provided by users who submit requests for information materials, answers to questions, or offers of services and products are used solely to perform the requested service and are disclosed to third parties only if necessary for that purpose.

Personal data provided by users to subscribe to commercial information services related to the Data Controller’s products or services through online channels (website, web, email marketing, newsletter, etc.) and/or by post are used solely for performing the requested service and are disclosed to third parties only if necessary. The legal basis for processing is the user’s consent, expressed through the appropriate checkboxes on the site.

TYPES OF DATA PROCESSED

Navigation Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified individuals but could, through processing and association with third-party data, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the server response (success, error, etc.), and other parameters related to the user’s operating system and IT environment.

This data is used only to obtain anonymous statistical information on site usage and to verify proper operation and is deleted immediately after processing. The data may be used to determine responsibility in the event of hypothetical cybercrimes against the site.

For more information, please refer to the Cookie Policy.

Data Voluntarily Provided by the User

The optional, explicit, and voluntary sending of emails to the addresses indicated on this site entails the subsequent acquisition of the sender’s email address, which is necessary to respond to requests, along with any other personal data included in the message. Specific summary information will be progressively displayed or shown on the site pages dedicated to particular services on request.

Newsletter Data

Subscribing to the commercial information service related to the Data Controller’s products or services through online communication channels (website, web, email marketing, newsletter, etc.) and/or by post involves the subsequent acquisition of the sender’s email and/or mailing address, required for sending communications, as well as any other personal data included in the registration request.

METHOD OF PROCESSING

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are implemented to prevent data loss, unlawful or incorrect use, and unauthorized access.

TRANSFER OF DATA OUTSIDE THE EU AND PROFILING

Your personal data may be transferred to countries outside the European Union as part of the Data Controller’s collaboration with selected technology partners. If data is transferred to non-EU or non-EEA countries not deemed adequate by the European Commission, the “transfer tools” provided under Article 45 of the GDPR will be used, with the possible adoption of “supplementary measures” to ensure a level of protection substantially equivalent to that required under EU law.

Data will not be subject to profiling.

DATA RETENTION

Personal data provided by users, unless otherwise specified in specific policies related to site services, will be stored for no longer than 24 months.

Data processed for commercial information purposes will be retained until the user unsubscribes, which can be done via a link in each email. If the sending frequency is lower, at least every six months a verification message containing an unsubscribe link will be sent. In any case, data will not be retained for more than ten years from the date of registration.

DATA SUBJECT RIGHTS

Data subjects have the right to obtain confirmation of the existence or non-existence of personal data concerning them at any time and to know its content and origin, verify its accuracy, or request its integration, update, or rectification (Regulation EU 2016/679).

Under the same Regulation, they have the right to request the deletion, anonymization, or blocking of data processed unlawfully, and to object to its processing on legitimate grounds. They also have the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).

DATA CONTROLLER

The Data Controller is Azienda Agricola Althea di Drusian Marika, with its registered office at via Maresia, 2, 31049 Bigolino di Valdobbiadene (TV), email: info@vinialthea.com.