INFORMATION ON DATA PROTECTION PURSUANT TO art. 3 EU GDPR 2016/679
We take care of the protection of your data. The EU regulation 2016/679 "General Data Protection Regulation - RGPD" applies to the fully or partially automated and non-automated processing of personal data of natural persons contained in an archive or intended to appear therein.
The purpose of this document is to inform you, in particular, of which of your data we process, the purposes for which we process and possibly share them, how long we keep them, what are the rights of the interested party and how he can exercise them.
Data controller : is the F.lli Romanese agricultural company with registered office in Levico Terme (TN) - e-mail: email@example.com, in the person of its legal representative, domiciled for office at the company itself, to which it can address requests for the exercise of your rights, provided for by the Regulation (RGPD).
1) WHAT PERSONAL DATA CONCERNING INDIVIDUALS MAY BE COLLECTED
We only collect common personal data, excluding any other type of particular data or data relating to criminal convictions and offenses (sensitive data).
Contact details. Personal data relating to Customers and Suppliers acting as a natural person; legal representatives, employees or other subjects who, by position or assignment, can be a reference with Customer companies, Suppliers or other Bodies and Institutions. Of them are collected name, surname, function, telephone numbers and e-mails, possibly Street address, if not domiciled at the institution.
Data of interest. They concern requests for quotes and information regarding products and services of the agricultural company F.LLI ROMANESE. In addition to contact details, they may relate to preferences related to products or services and other useful information to complete the fulfillment of the request.
Tax, identity and other common personal data, transaction and payment data. They relate to customers and suppliers, natural persons with whom contracts are in progress or must be stipulated. Data concerning legal representatives of companies or other entities are collected within the limits necessary for the contractual or legal activities required.
2) HOW WE COLLECT PERSONAL DATA
At the interested party or provided by the same. Your data may be collected in the following circumstances:
by entering data and sending the request for information from the websites connected to our company;
in the context of preliminary activities, connected to the execution of contracts or in relation to the economic relationships with the interested party;
through collection carried out from the interested party and transmitted to our office by one of our agents or representatives, for the fulfillment of a request for information, a quote or an order;
provided through correspondence, emails, messages, telephone calls or other communication systems.
From public registers, from lists available to the public or disseminated by internet sites. In this case it is information necessary to verify and refine the elements of a contract being signed, or to acquire an initial consent to the processing of personal data for informational and commercial purposes.
3) PURPOSE AND PREREQUISITE OF THE PROCESSING TO WHICH THE PERSONAL DATA ARE INTENDED
Neither profiling activities nor automated decision-making processes are carried out. Personal data may be processed for:
A) The fulfillment of obligations established by laws, regulations or other rules, by judicial authority provisions, or on the basis of accounting, salary, welfare or tax obligations.
The provision of personal data necessary for these purposes is mandatory and the relative processing does not require the consent of the interested party. Instead, it will be the responsibility of the interested party to collaborate to keep the data correct and updated, promptly reporting errors or changes that should affect their data.
B) Purposes related to the execution of contracts or in relation to economic relationships with the interested party.
This category includes:
the execution of a contract or pre-contractual obligations requested by the interested party;
the improvement of the product and / or service quality and the management of any complaints;
the processing of commercial analysis and statistics, through the use of data in anonymous and / or aggregate form.
The provision of personal data necessary for these purposes is not mandatory, but the refusal to provide them may make it impossible for the company to perform the contract itself or part of it or fulfill specific requests of the interested party preliminary to the conclusion of a contract.
If such data are provided, the consent to their treatment is considered implicit in the request of the interested party.
C) Purposes related to the satisfaction of a legitimate interest of F.LLI ROMANESE SA, relating to the prevention of fraud and the maintenance and development of economic activities in relation to the interested party. This category includes:
proof of transactions carried out by the data subject and the prevention of fraud;
Information, promotion and / or direct sales in relation to products, services or new initiatives (similar or complementary to those already included in current or previous commercial relationships for which implicit or explicit consent has already been acquired and not subsequently revoked) proposed by the company or by third parties on behalf of the company itself. For these activities, the data and communication channels already acquired by the company in execution of previous contracts or in the course of similar economic activities in relationship with the interested party will be used, through letters, telephone (landline or mobile for call with operator), address e-mail already used, for contacts, direct promotion and sending of advertising material. However, if the interested party wants to oppose the processing of his data in relation to these purposes, he can do so at any time, by simple written request or by e-mail sent to the company, specifying the channels through which you no longer wish to be contacted.
D) Marketing and functional activities of the company. This category includes:
information, promotion and sale relating to new initiatives and / or products and services of the company, or of third-party companies, carried out through automated communication systems;
the elaboration of studies, research and statistics on the activities of the wine and / or food sector, carried out through the processing of data already in the possession of the company or acquired through specific collection or through a combination of the two activities, without however analyzing consumption habits or choices or defining the profile or personality of the data subject;
the detection of the degree of customer satisfaction with the quality of the services rendered, through activities carried out directly or through the work of specialized companies with personal interviews
carrying out public relations activities.
The provision of personal data necessary for these purposes is not mandatory. If such data are provided, their treatment requires specific consent.
4) HOW LONG WE KEEP PERSONAL DATA
Personal data are kept only for the time necessary to achieve the purposes for which they were collected or for any other legitimate related purpose. If personal data are processed for two or more purposes, they will be kept until the purpose with the longer retention term has ceased. Personal data that are no longer necessary or for which there is no longer a legal prerequisite for its conservation are irreversibly anonymised (and in this way can be kept) or destroyed in a secure manner.
Unless the law imposes specific storage requirements, personal data are stored for the entire duration of the contract and for a further term equal to 10 years and six months or 15 years and six months from the termination of the relationship, in consideration of the limitation periods of the rights in relation to which the agricultural company F.lli Romanese it may need to defend itself or the conservation needs imposed by the legislation, if it is data necessary to execute the contracts in place with the interested party or to satisfy a legitimate interest of the data controller.
With reference to the functional data for the establishment of the relationship, where not perfected, they will be kept for a maximum of 36 months, in order to allow us to be able to respond to specific requests from the interested party.
Personal data processed by consent for marketing purposes, they will be kept until the duration of a relationship or contacts with the interested party and for a further period of 24 months, unless the term is subject to changes based on supervening rules.
5) SECURITY OF PERSONAL DATA
The company uses all the security measures necessary to improve the protection and maintain the security, integrity and accessibility of the personal data collected.
All personal data is stored on secure servers or suitably stored paper copies or those of our suppliers or business partners who have been specifically authorized to process and are accessible according to our standards and our security policies or equivalent standards. The details of the technical and organizational methods for the processing and the related security measures are available, upon request, from the company itself - Data Controller.
6) ACCESS TO PERSONAL DATA AND / OR SHARING WITH OTHER SUBJECTS
Personal data may be accessed by duly authorized employees, as well as external suppliers, appointed, if necessary, as data processors, who provide support for the provision of services.
This treatment will be carried out, on behalf of the Company - for the same purposes and in the manner described above. The list of said entities, companies or enterprises is available at the company's registered office.
The owner does not transfer personal data to non-EU countries except in the cases of certain IT service companies or software of general use with registered offices in non-EU countries, which guarantee the application of the principles of the GDPR in their services (Privacy Shield). , unless specific indications to the contrary for which the interested party will be informed in advance and, if necessary, consent will be requested.
7) RIGHTS OF THE INTERESTED PARTY REGARDING DATA PROTECTION AND TO MAKE COMPLAINTS BEFORE THE SUPERVISORY AUTHORITY
As required by the GDPR, pursuant to art. 15-21 and 77, the interested party has the right to ask the Company:
access to your personal data,
a copy of the personal data you have provided us (so-called portability),
the correction of the data in our possession,
the cancellation of any data for which we no longer have any legal basis for processing,
opposition to processing where required by applicable law
the withdrawal of consent, in the event that the processing is based on consent;
the limitation of the way in which your personal data are processed, within the limits established by the legislation for the protection of personal data.
The exercise of these rights is subject to some exceptions aimed at safeguarding the public interest (for example the prevention or identification of crimes) and the interests of the company, such as, for example, the maintenance of professional secrecy. In the event that the interested party exercises any of the aforementioned rights, it will be our responsibility to verify that he is entitled to exercise it, giving a prompt reply, in any case within one month. For any complaints or reports on the methods of processing your data, we will make every effort to respond to your requests. However, in the event that you are not satisfied with our support and you wish it, you can forward any complaints or reports to the authority responsible for data protection, using the contact details of the Guarantor for the protection of personal data - Piazza di Monte Citorio n. 121 - 00186 ROME.