Privacy Notice according to Art. 13, EU Regulation No. 2016/679
Dear Customer,
We wish to inform you as “person affected by data processing” that the EU Regulation No. 2016/679 of the European Parliament and the Council of 27 April 2016 provides for the protection of physical persons as regards the processing of personal data, and the free circulation of that data.
According to the legislation mentioned above, that processing will follow principles of correctness, lawfulness and transparency to protect your privacy and your rights.
As the Data Controller collects and processes your personal data during its business activities, we are giving you the following information, pursuant to Article 13 of the Regulation:
1) Why we process your personal data
We will process the data you provide for the following purposes: a) to execute your purchase and/or sale agreement for our products; b) to manage our contractual relationship with you; c) to respond to your specific requests, even before your agreement starts; d) to carry out all our obligations regarding the organisation and implementation of events; e) to propose advertising offers or initiatives via direct marketing; f) to fulfil our accounting and tax obligations. In addition, photos taken during events may be published on the site, in catalogues or on company social media pages subject to prior consent. The types of data processed, by way of example and not exhaustive, are as follows: name, surname, tax code, VAT number, e-mail and other ordinary identification and contact details. Furthermore, we may transmit and diffuse any photos taken at events. Any special data will be processed only if necessary and subject to your consent.
The legal basis of the processing is the execution of a contract and / or the legitimate interest of the Data Controller as well as the consent of the data subject.
2) How we process your data
We will use the following methods to process your data: computerised, hard copy. Processing is carried out by the data controller, data supervisor and/or persons in charge of data processing.
3) Providing and refusing your data
Providing your ordinary personal data for the activities in the preceding point 1) does not constitute any obligation for you.
You may refuse to provide your personal data according to this point 3). However, we will be unable to carry out the activities mentioned in point 1).
4) Who will see your data and who we will communicate your data to
Your personal data may be revealed to our employees, external collaborators, others operating in the sector and all those public and private organisations, which need your data to be communicated to correctly fulfil the purposes indicated in point 1.
5) Sharing your data and transferring it abroad
We will not share your personal data or transfer it to a third country or to an international organisation.
6) Data storage
We will store your personal data for no longer than is necessary to achieve the purposes for which we collected and processed it. We will store your personal data not only throughout the agreement (and/or relationship) we have with you, but also for a subsequent period according to the following criteria:
i. within the terms established by the legislation in force;
ii. within the terms established by even secondary legislation imposing data storage (e.g. tax returns);
iii. within the period required to protect the data controller’s rights in the event of any disputes linked to the provision of services. In any event, the maximum time for data storage is estimated at 10 years from the termination of our contractual agreement.
7) Data access, correction, deletion (right to be forgotten), opposition and transfer
You have the right to ask the Data Controller to access, correct or delete (so-called right to be forgotten) your data or to restrict or oppose its processing. You also have the right to request the transfer of your data, i.e. to ask the data controller for your data in a structured, user-friendly format, which can be read by an automatic device to send to another data controller without any difficulty.
8) Withdrawal of your consent
If processing even of special categories of personal data is based on consent [see Article 6, paragraph 1, letter a) or Article 9, paragraph 2, letter a) of the Regulation], you have the right to withdraw your consent at any time without prejudice to the lawfulness of the processing based on your consent given prior to your withdrawal.
9) Claims
You have the right to make a claim to the Control Authority.
10) Profiling
We wish to inform you that no automated, decision-making procedure is used to process your data.
11) Data Controller
The Data Controller for the processing is Società Agricola Saio – famiglia Mencarelli S.S., Via della Passerella 9 – Assisi (PG) VAT number: 03175970544 – phone number (+39) 075812305, mail: info@saioassisi.it
12) Data protection officer
Not appointed as not necessary.
13) Your Rights
You may exercise your rights against the Data Controller at any time, pursuant to Articles 15 et seq. of the Regulation, which shall be deemed to be transcribed herein.
