Privacy policy

Privacy policy statement pursuant to art. 13 of Legislative Decree no. 196 of June 30, 2003, and art. 13 of EU Regulation 679/2016 (GDPR)

1. TYPES OF DATA COLLECTED

This policy is provided in accordance with the provisions of Legislative Decree no. 196 of June 30, 2003 (the “Privacy Code”), as well as in compliance with EU Regulation 679/2016 (the “GDPR”) and applies to individuals who choose to access the website www.dattilo.it (respectively, the “Users” and the “Site”), as well as to browse within it.

1.1 THE TYPES OF DATA COLLECTED ARE AS FOLLOWS:

BROWSING DATA

Simply browsing the Site involves the implicit collection of so-called “Browsing Data” which does not allow the direct or indirect identification of the User, including:

• IP addresses;
• type of browser used;
• operating system;
• domain name and addresses of websites from which access or exit was made;
• data derived from cookies and/or similar technologies: learn more about this information by visiting the Cookie Policy page.

DATA VOLUNTARILY PROVIDED BY THE USER

The essential information for the provision of certain services, such as responding to requests received, is the email address. The data you may provide us, useful for optimal service delivery, are the following: first name, last name, date of birth, city, telephone number, and email address. When providing third-party data, you must be sure that they are adequately informed and have consented to the processing of the same, personally assuming responsibility/consequences. Minors under 16 years of age cannot provide us with personal data. We therefore do not assume any responsibility for any false statements. In any case, if we detect any false statements, we will proceed to delete the relative data acquired.

2. WHY DO WE COLLECT CERTAIN DATA ON OUR SITE?

2.1 TO MAKE OUR SERVICES ACCESSIBLE AND IMPROVE THEIR PROVISION

Your data is used to ensure the operation and provision of our services, such as, by way of example but not limited to: communications to and from the customer, activities related to the administrative/accounting area, and requests required by specific laws or regulations. This processing is necessary to provide our services correctly, but you may object at any time through the methods specified in point 6.

2.2 TO INFORM YOU ABOUT OUR COMMERCIAL ACTIVITIES

If you have expressly provided your consent, we may use your data to inform you about promotional activities that may interest you. This data is used in particular to:

• update you on news regarding events, initiatives, and promotional and advertising activities.
• conduct statistical reports related to promotional systems such as, for example, analyses regarding the number of emails read and the number of clicks made on links.

3. IS IT MANDATORY TO PROVIDE DATA?

Except for data collected to improve user usability during the browsing experience on our Website, we do not collect additional data. Therefore, consent from Users is optional for promotional and profiling purposes; in fact, any refusal to provide consent would not result in a failure to provide the service.

4. WHO PROCESSES YOUR DATA?

4.1 DATA CONTROLLER

The data controller is Società agricola Ceraudo Roberto srl • P.iva 03054290790

4.2 DATA PROCESSOR AND DATA TRANSFER

Personal data will not be transferred abroad to countries or international organizations outside the European Union that do not guarantee an adequate level of protection, recognized pursuant to art. 45 of the GDPR, based on an adequacy decision by the EU Commission. Should it become necessary for the provision of the Site’s services, the transfer of personal data to non-EU countries or international organizations for which the Commission has not adopted any adequacy decision pursuant to art. 45 of the GDPR will only take place in the presence of adequate safeguards provided by the recipient country or organization, pursuant to art. 46 of the GDPR, and on condition that data subjects have enforceable rights and effective legal remedies. In the absence of an adequacy decision by the Commission under art. 45 GDPR, or adequate safeguards under art. 46 GDPR, including binding corporate rules, cross-border transfer will only take place if one of the conditions indicated in art. 49 GDPR occurs. In particular, it should be noted that, according to recent interpretations provided by some European Supervisory Authorities, the use of Google Analytics could involve the transfer of the user’s personal data to the United States, whose legal regime does not guarantee a level of protection equivalent to that in force within the European Union in compliance with the GDPR. By accepting the placement of Google Analytics cookies, therefore, the user is aware of the possible risks of such transfer—which is in any case neither requested nor authorized by the Data Controller—due to the lack of an adequacy decision pursuant to Article 45, par. 3 of the GDPR, or adequate safeguards pursuant to Article 46 of the GDPR. For further information regarding the data processor, you can send an email to: info@dattilo.it

5. EXPORT AND DELETION OF PERSONAL DATA PROCESSING

To export your personal data or request its deletion, you can send a request to the email address: info@dattilo.it Your personal data will be exported within 30 days or, in cases where the export is particularly complex, within three months. Data deletion will take place within the indicated technical timeframe and in accordance with the storage period reported in point 7, which will not, in any case, exceed 30 days.

6. EXERCISING YOUR RIGHTS

Anyone who has provided us with their personal data may:

• receive information from the controller regarding the existence of their personal data in our systems, its origin, the purposes of processing and, upon request, obtain access to their data and the information referred to in art. 15 of the General Data Protection Regulation (EU Regulation 2016/679);
• request the modification, deletion, and limitation of data processing in the event that one of the conditions provided for in art. 18 of the General Data Protection Regulation (EU Regulation 2016/679) applies;
• object, for legitimate reasons, to the processing of data or revoke consent at any time;
• receive their personal data and be able to transmit it to another controller without hindrance;
• lodge a complaint with the Supervisory Authority for the protection of personal data in Italy (Garante per la protezione dei dati personali).

The exercise of your rights as a data subject is free of charge pursuant to Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, including due to their repetitiveness, the Controller may charge a reasonable fee in light of the administrative costs incurred to manage the request or, alternatively, refuse to satisfy the request. Requests can be forwarded to the following email address: info@dattilo.it

7. DATA STORAGE

Data will be stored in paper and/or electronic/computerized form for the time strictly necessary to fulfill the purposes indicated in point 2. In any case, for a period not exceeding 24 months, except in the case of legal time provisions that dictate otherwise or until the revocation of consent expressed by the Data Subject. For direct marketing and profiling purposes, data storage will take place for the maximum period provided by applicable regulations (24 and 12 months respectively). Invoices, accounting documents, and transaction data are stored for 10 years as required by law (including tax obligations). In the case of exercising the right to be forgotten, data will be stored in a protected form with limited access for the purposes of investigation and prosecution of crimes, for a period not exceeding 12 months from the date of the request, and will subsequently be deleted or irreversibly anonymized.

7.1 DATA PROTECTION

Data is collected, according to the indications of the reference legislation, by the subjects indicated in point 4 of this policy. Data will be processed according to the logic and purposes provided for in point 2, and the security measures provided for in art. 32 of the General Data Protection Regulation (EU Regulation 2016/679) are observed.

8. CHANGES TO THE POLICY

Should changes be made to this policy, the Controller will inform Users with maximum prominence through its pages or alternative means.