PRIVACY POLICY AND COOKIE POLICY POLICY
This information governs the processing of personal data carried out by the owner, defined below, of this website.The information indicated here can also be provided orally, provided that the identity of the applicant is proven, by means of a telephone request addressed to the addresses of the Data Controller.
1. Identity and contact details of the data controller
The data controller is:
Az. Vitivinicola Il Pupillo di Benelli Laura
Podere Pupillo, Provincial Road No. 60 of Puntone Km 7.00 58020 Scarlino (Grosseto) Italy
VAT number 01188400533
CF BNLLRA68E65E202X
Tel. +39 0566 37230
Cell. +39 347 7851919
E-mail: info@ilpupillo.com ilpupillovini@gmail.com
Since the Owner is established / resident in the Italian territory, no representative has been appointed.
2. Contact details of the data protection officer
The Data Controller has not appointed a data protection officer.
3. Processing methods
INFORMATION ON THE USE OF COOKIES
3.1 Cookies and environmental data
What are cookies?
Cookies are small text files that are saved by a site on the computer (or tablet, or smartphone) of the visitor; allow the web server to store information on the client (the browser) to be reused during the same visit to the site (session cookies) or later (persistent cookies).
Thanks to cookies, the site remembers the actions and preferences of the user (eg login, language, display settings) so it is not necessary to re-enter them during navigation or during subsequent visits to the site.
Types of cookies
Based on the different purposes of use, cookies can be divided into:
• technical cookies: allow certain sections of the site to function properly. They are divided into session cookies (they are destroyed when the browser is closed) and persistent cookies (they are not destroyed when the browser is closed, but persist up to a certain established time limit). According to current legislation, direct consent from the user is not required in case of use of cookies of this type; therefore, the presentation of short information (banner) is not required on the first visit to any page of the site.
• profiling cookies: used to track the user's navigation and create profiles on his tastes and habits, both by the visited site ("first party") and by other services ("third party").
Third-party cookies
The management of the information collected by "third-party" cookies is governed by the relevant information to which reference should be made. To ensure greater transparency and convenience, the web addresses of the various information and methods for managing cookies are shown below. Google+ (information): http://www.google.it/intl/it/ policies / technologies / cookies /
Google+ (configuration): http://www.google.it/intl/it/policies/technologies/managing/
Facebook (information): https: //www.facebook. com / help / cookies
Vimeo (information): https://vimeo.com/cookie_policy
Google Analytics
This site also contains certain components transmitted by Google Analytics, a traffic analysis service web provided by Google, Inc. ("Google"). Also in this case these are third-party cookies collected and managed anonymously to monitor and improve the performance of the host site (performance cookies).
Google Analytics uses "cookies" to collect and analyze anonymous information on site usage behavior (including the user's IP address). This information is collected by Google Analytics, which processes it in order to draw up reports on the activities on the website itself. This site does not use (and does not allow third parties to use) the Google analysis tool to monitor or collect personal identification information. Google does not associate the IP address with any other data held by Google nor does it try to connect an IP address with the identity of a user. Google may also communicate this information to third parties where this is required by law or where such third parties process the aforementioned information on Google's behalf.
For more information, please refer to the link below:
https: //www.google.it/policies/privacy/partners/
The user can selectively disable the action of Google Analytics by installing the opt-out component provided by Google on his browser. To disable the action of Google Analytics, please refer to the link below:
https://tools.google.com/dlpage/gaoptout
User management of cookies
The user can decide whether or not to accept cookies using the settings of his browser.
The complete navigation of the site is also possible in following the total disabling of cookies.
The setting can be defined specifically for the different websites and web applications. Furthermore, the most popular browsers allow you to define different settings for the various types of cookies.
Example: in Firefox, through the Tools -> Options -> Privacy menu, you can access a control panel where you It is possible to define whether or not to accept the different types of cookies and / or proceed with their removal.
Information relating to the various browsers can be accessed through the following links: Firefox - Chrome - Internet Explorer - Safari - Opera
Browsing without the use of technical and profiling cookies is also possible without changing the related settings , by activating the so-called incognito browsing present in all the main browsers.
3.2 Data provided voluntarily by the interested party
The data optionally and freely provided by the interested party by sending e-mails to the addresses on the site may be acquired for the purposes indicated from time to time.
In particular, in addition to the email address necessary to reply to the sender, any other personal data contained in the relative communication will be processed.
Such data collected in this way will be stored and processed exclusively for the purpose of preserving correspondence and will not be used for other purposes.
4. Purpose of the processing and legal basis of the processing
In relation to the technical cookies referred to in point 3.1 and the navigation data, the processing of the personal data of the data subject is carried out in order to allow the correct use of the website; its use is necessary for browsing the website www.ilpupillo.com. In this case, the legitimate interest of the Data Controller constitutes the legal basis of the processing.
In relation to non-technical cookies, the processing of personal data carried out through them allows us to offer a personalized browsing experience through profiling. In the latter case, the consent of the interested party, expressed in accordance with current legislation, constitutes the legal basis.
In relation to the data provided voluntarily by email, the processing of personal data carried out makes it possible to respond to the requests of the interested parties. The legitimate interest of the Data Controller to respond to the interested parties constitutes the legal basis of the processing.
5. Automated decision-making and profiling
If you have given your consent to the processing of personal data for profiling purposes using cookies, they may be subject to an automated decision-making process, using a specific algorithm that will decide which communications are most suitable to your profile or which ones could be of most interest to you.
The processing carried out in this way has, as an example, the sending of highly profiled commercial communications. In any case, you have the right to obtain human intervention in the decision-making process by the Data Controller, to express your opinion, to obtain an explanation of the decision made and to contest the decision itself.
6. How to express consent
Consent to the processing of personal data using non-technical cookies can be expressed:
By clicking on a specific box presented in a banner or checkbox.
7 . Source from which the personal data originate
Only the data provided by the interested party will be processed in accordance with this information, collected through the website or by sending an email from the interested party. processed data from sources accessible to the public.
8. Recipients and possible categories of recipients of personal data
The recipients of the personal data of the data subject may be:
Communication companies that carry out commercial communication and profiling activities on behalf of the Data Controller and those that offer management services of the online platforms, if the relative consent has been expressed, which hold the qualification of data processors;
The companies that offer information society services, including, in particular, those that offer hosting services;
Companies that carry out statistical and market surveys, if the relative consent has been expressed;
9. Categories of data
The personal data of the interested party will be processed.
10. Data transfer
The Data Controller intends to transfer personal data to a third country or to an international organization. These subjects could be represented, by way of example, by:
The communications companies that carry out communication activities on behalf of the Data Controller;
The companies that offer information society services, including, in particular, those that offer hosting services;
The companies that manage the site on behalf of the Data Controller;
Service providers of the communication company.
The transfer of personal data to such subjects, if established in a third country or an international organization, is carried out in the presence of an adequacy decision of the European Commission, which has verified how the third country, the territory or one or more specific sectors within the third country, or the international organization in question guarantee a adequate level of protection of your rights. In any case, the Data Controller - if he deems it appropriate in any case - reserves the right to conclude specific separate agreements that oblige these subjects to adopt adequate security measures, including organizational ones, aimed at offering appropriate guarantees regarding their rights. Google Inc., in particular, is contractually bound to ensure appropriate protection of the rights of the data subject. The data may thus be transferred to the following countries: Italy, United States of America. To obtain a copy of such data or the place where they were made available, simply send the relevant request to the address: info@ilpupillo.com
11. Retention period of personal data
The personal data processed and stored in order to allow a correct use of the website are processed and stored for a period not exceeding 12 months starting from the date of the single collection. The Data Controller reserves the right, in any case, to request the interested party to renew his consent to the processing and / or to verify the consents already expressed.
12. Optional nature of consent and consequences of non-consent
In relation to personal data processed through technical cookies in order to allow correct use of the website, the communication of personal data is not a contractual obligation, but is based on legitimate interest of the Data Controller, as without this processing the fully functional website could not be made available. Consent is to be considered optional in relation to non-technical cookies. In the latter case, failure to communicate such data will only make it impossible to provide a personalized service.
In relation to the data provided voluntarily via email, consent is to be considered optional. However, failure to communicate such data will make it impossible to respond to the interested parties.
13. Rights of the interested party
13.1 Right of opposition
The interested party has the right to oppose, at any time for reasons connected with his particular situation, to the processing of personal data concerning him, pursuant to article 6 , paragraph 1, letters e) or f) of the GDPR, including profiling on the basis of these provisions. The Data Controller refrains from further processing personal data unless he demonstrates the existence of compelling legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense. of a right in court.
13.2 Other rights
The Data Controller also intends to inform the interested party of the existence of the following rights:
Right of access of the interested party: the interested party has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and specific information, in accordance with art. 15 of the GDPR;
Right of rectification: the interested party has the right to obtain from the Data Controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration, in accordance with art. 16 of the GDPR;
Right to cancel data, including the right to withdraw consent: the interested party has the right to obtain from the Data Controller the cancellation of personal data concerning him without undue delay and the Data Controller is obliged to delete personal data without undue delay, or to withdraw your consent, if the reasons defined by art. 17 of the GDPR. As regards the right of revocation, the interested party also has the right to revoke the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
Right to limitation of treatment: the interested party has the right to obtain from the Data Controller the limitation of the processing when the hypotheses defined by art. 18 of the GDPR; - Right to data portability: the interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to the Data Controller and has the right to transmit such data to another holder without impediments on the part of the holder in the cases and under the conditions specified by art. 20 of the GDPR.
14. Exercise of rights
The requests for exercise of the rights indicated in this information, including, in particular, the right to cancellation and the right to revoke the consent given, must be addressed directly to the Data Controller at the email address info@ilpupillo.com . Alternatively, you can exercise your rights by sending the relevant communication by registered letter with return receipt to the address: Il Pupillo Provincial Road No. 60 del Puntone Km 7.00 58020 Scarlino (Grosseto) Italy
15. Accessibility of the information
The information is accessible at www.ilpupillo.com/privacy-policy, as well as from the Owner. If expressly requested by the interested party, the information can also be provided orally, provided that the identity of the interested party is proven, by means of a telephone request addressed to the addresses of the Data Controller.
16. Privacy and newsletter
If the interested party has given his consent by means of a flag to receive commercial communications, the processing of his data may be carried out to send direct marketing communications, newsletters, sending advertising material, carrying out research market, by means of traditional contact systems and automated computer systems, including commercial or promotional communications by email or SMS; the consent of the interested party, expressed in accordance with this information, constitutes the legal basis. In this case, the communication of personal data is not a contractual obligation. The interested party has the right to provide personal data; in case of failure to communicate such data, however, it will not be possible to carry out any marketing activities. The personal data processed in this way are kept for a period not exceeding 24 months starting from the date of the single collection.
17. Changes
The Owner may make changes to this Privacy Notice, also in order to implement changes in national and / or EU legislation, to adapt to technological innovations or for other reasons. Any new versions of this Privacy Policy will be posted on the Site. The User is therefore invited to periodically check the Privacy Policy.
The document was updated on 29/06/2020 to comply with the regulatory provisions in the field.
