Considering the current EU legislation 2016/679 (hereinafter “EU Regulation”) and Legislative Decree 101/2018, and in relation to the personal data concerning you and which will be processed, we inform you that:

Purpose of the processing:

Your personal data, communicated and acquired by us due to the activity of Tenuta Colle Piajo S.r.l., will be processed lawfully for the following purposes:

– administrative-accounting in the management of the contractual and / or pre-contractual relationship;

– promotional activities, information and newsletters;

– other purposes related to the activities carried out in collaboration with responsible bodies

Methods of data processing:

Personal data will be processed in accordance with the provisions of the legislation and the confidentiality objectives set out therein in compliance with the procedures set out in Articles. 6 and 32 of the EU Regulation and through the adoption of the appropriate security measures provided therein. Specifically, the processing may take place:

– digitally with computers;

– on paper to be archived;

Legal basis of data processing:

The legal basis for the processing of your personal data is based on the signing of the contract, on the proposal or offer sent to you or vice versa. On your request for information or offers about our products or services.

Interests of the Data Controller:

The Data Controller must respect and honor the contractual obligations signed between the parties or respect their requests. According to art. 6 of the EU Regulation, the lawfulness of the processing is based on the expressly expressed consent of the interested party.

Mandatory or optional nature of data transmission and consequences of any refusal:

The transmission of personal data relating to the processing in question is mandatory to the extent necessary and limited to the achievement of the purposes indicated above. In particular, the nature of the provision of personal data by you is mandatory so that the data controller can provide the requested services. In case of refusal, it will therefore be impossible to proceed with the relationship and the Data Controller will not be able to comply with contractual obligations. The provision of data for advertising and information purposes is not mandatory and derives from explicit consent.

Data communication to third parties:

Your personal data will be processed by the Data Controller, by the Data Processors appointed by him and by the strictly authorized data processors. They may be communicated to the institutional bodies in the event of a request by them. Your data may be communicated following inspections or verifications (if required), to all the inspection bodies responsible for checks and controls concerning the regularity of legal obligations. Your data may also be disclosed to companies / professional firms that provide assistance, consultancy or collaboration to the Data Controller, in accounting, administrative, fiscal, legal, tax and financial matters, to public administrations for the performance of institutional functions. within the limits established by law or regulations and to third party service providers to whom communication is necessary for the fulfillment of the services covered by the contract. Your personal data will not be disseminated in any way.

Intention of the Data Controller:

The Data Controller will not transfer your personal data to a third country or to an international organization.

Data retention period.

In compliance with the law, purpose and data minimization, pursuant to art. 5 lett. e) of the EU Regulation, the retention period of your personal data is n. 10 (ten) years, from the conclusion of the relationship or until the commercial purposes are achieved.

Person in charge of the treatment:

The Data Controller is Mauro Bergamelli, in the person of the Legal Representative. The contact with the Data Controller will be at the following e-mail box: info@piajo.it

Managers and persons in charge who will be able to access your data:

The data processors may also become aware of the data, as well as the employees of the administrative office, because they are in charge of the processing. The data will be processed by internal and external managers and appointed by the Data Controller to carry out the aforementioned activities.

Your rights

The subjects can exercise the rights referred to in art. 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, have the right to obtain confirmation of the existence or not of personal data concerning them, even if not yet registered, and their communication in intelligible form.

The subject has the right to obtain an indication of the origin of personal data; the purposes and methods of the processing; the logic applied in case of processing carried out with the aid of electronic tools; of the identification details of the Data Controller, the Manager and the Representative designated pursuant to art. 5 paragraph 2; of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed Representative in the territory of the State, managers or agents.

The subject has the right to obtain: updating, rectification, or, when there is interest, integration of data; the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed.

The subject has the right to object in whole or in part: for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection; to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication. In particular, the subject may at any time ask the Data Controller for access to personal data and the correction or cancellation of the same or the limitation of the processing concerning him or to oppose their treatment, in addition to the right to data portability. . The interested party has the right to revoke the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation and has the right to lodge a complaint with a supervisory authority. In particular, the interested party can lodge a complaint with the Privacy Authority which can be contacted at the website http://www.garanteprivacy.it/.

You can assert your rights by writing to the e-mail address indicated in point 9 of this Notice.