Pivacy policy
PRIVACY POLICY OF WWW.CASCINAFONDA.COM
INFORMATION PURSUANT TO ART. 12 AND 13 OF EU REGULATION N. 679/2016 AND CONSENT TO THE PROCESSING OF PERSONAL DATA
​
Preamble
The EU Regulation n. 679/2016 (hereinafter also GDPR) establishes rules relating to the protection of individuals with regard to the processing of personal data, as well as rules relating to the free circulation of the same. In order to protect the fundamental rights and freedoms of individuals, the Regulation therefore imposes on the data controllers the obligation to provide the data subjects with the information referred to in Articles. 12, 13 and 14, and the specific indication of the rights of the interested party, provided for by articles 15 to 22 of the GDPR.
Please refer to the reading of art. 4 of the GDPR - "Definitions", for the possible specification and deepening of the meanings of the terms used below.
​
***
Information pursuant to art. 13, par. 1
​
A) Data Controller and contacts
The data controller is the Cascina Fonda Di Marco E Massimo Barbero Ss Agricultural Company, in the person of the legal representative pro tempore, located in Via Spessa n. 27 Neive - 12052 (Cn) - Italy - VAT 02492640046 - Tel: +39 0173 677877 - email: fonda@cascinafonda.com.
the Soc. Agr. Cascina Fonda Ss informs you that your personal data will be processed:
- pursuant to art. 12 and 13 of the EU Regulation no. 679/2016 (General Data Protection Regulation, hereinafter referred to as "GDPR" for brevity), by specifically authorized subjects, limited to the purposes and with the methods that will be specified below with reference to the functions of the web portal www.cascinafonda.com.
​
B) Contact details of the Data Protection Officer
The activity carried out for the purposes referred to in this information notice of the Soc. Agr. Cascina Fonda Ss does not fall within the hypotheses provided for by art. 37 of EU Reg. No. 679/2016.
​
C) Object, purpose of the processing
Soc. Agr. Cascina Fonda Ss, as Data Controller, informs you that it will process your personal data, specifically, your common personal data, i.e. name, surname, e-mail address, telephone number and identifiers and IP addresses or names to domain
Your data, as described above, will be processed in the ways and in the forms prescribed by the GDPR, for the performance of the Website's own functions, with particular - but not exhaustive - reference to the procedures described therein for data collection through the contact form. , direct contact by telephone, fax or email.
In particular, the personal data you provide to the Data Controller will be processed for the pursuit of the following purposes:
- to follow up on the specific requests you made to the Data Controller through the Website and its communication tools (contact area and the like);
- for communications of an informative nature relating to the services and products of the same Data Controller, following your request for information via e-mail messages, filling out the contact form and other communication tools such as for example by telephone or fax;
- for any subscription to the newsletter, if present on the site, and the consequent sending of commercial communications and various information concerning the sector in which the Data Controller operates, with the specific consent given by you by selecting the relevant box;
- for sending newsletters, commercial proposals, reporting of advertising events, sending promotional communications for a similar service, managing direct relationships and company / customer-user contacts, via e-mail and therefore for direct marketing activities with a specific consent given by you by selecting the relevant box.
- for any operation within the Chat, where active, and the consequent sending of commercial communications and various information concerning the sector in which the Data Controller operates, with the specific consent given by you;
- for other accessory purposes or related to those indicated above and in any case falling within the scope of the Website's activities;
The processing of the data provided in a generic way will be carried out, even following automatic collection during navigation, for the sole purpose of ascertaining and controlling access to the Website. This also applies to any technical cookies, to be understood as session cookies. , of functionality or analytics that have the requirements specified by the Guarantor. In particular, with regard to the latter, it is clarified that they can be assimilated to technical cookies where these are created and used directly by the Website. In any case, for these analytics cookies, the Website, also in compliance with the clarifications of the Guarantor, provided for the anonymization of IP addresses and the amendment of data processing; the collection and use of the aforementioned navigation data (without prejudice to the anonymization of the IP addresses) allow the monitoring of the progress of the Website and allow to improve the service offered, offering the User a better browsing experience. Please refer to the specific Cookie Policy for further information.
This information is effective only with reference to the aforementioned web portal www.cascinafonda.com, but not with reference to other and different portals or websites that may be consulted through the links therein, of which Soc. Agr. Cascina Fonda Ss is in no way the owner.
Legal basis of the processing
Apart from that specified for navigation data, the communication by you to the Data Controller of the personal data specified above, has the following legal bases as prerequisites for the lawfulness of the processing:
Art. 6, par. 1, letter a) of the GDPR, concerning your express free, specific, informed and unequivocal consent, for this purpose we inform you that the aforementioned consent can be issued only if you are aged 16 (sixteen) in default you will not be able to proceed but solely and exclusively the holder of parental responsibility.
Art. 6, par. 1, letter b) of the GDPR, concerning the execution of a contract of which the interested party is a party or the execution of pre-contractual measures adopted at the request of the same.
Both the aforementioned legal bases are therefore purely optional and not mandatory, having no other consequence other than the impossibility for the Data Controller to properly carry out the aforementioned direct communication services or contractual / pre-contractual execution. And, in any case, the consent you may have given may be revoked by you at any time, with immediate effect on the aforementioned company activities and services.
​
D) the treatment is not based on art. 6 par.1 let f)
E) recipients and categories of recipients of the collected data and F) data transfer
In particular, in relation to the purposes indicated above, the data could be communicated to the following subjects and / or to the categories of subjects indicated below, or they could be communicated to companies and / or persons, who provide services, including external ones, on behalf of the Data Controller. of the Treatment. Among these, for greater clarity, by way of example but not limited to: subjects - internal or external to the company - who provide IT and telematic services for the management of the information system used by the Data Controller and of the telecommunications networks (including mail electronics and management of web portals and internet sites - hosting), subjects that the Data Controller reserves the right to appoint as data processors in the event; financial administrations and other companies or public bodies in fulfillment of regulatory obligations; competent authorities and / or Supervisory Bodies for the fulfillment of legal obligations; consulting firms and firms; companies and law firms for the protection of contractual rights; subjects who carry out operations of control, revision and certification of the activities carried out by the Data Controller who operate as external data processing managers pursuant to art. 28 of the GDPR, or in total autonomy as separate Data Controllers.
This site may share some of the data collected with localized services both within the EU and outside the EU (in the latter case it will only be subjects adhering to the Privacy Shield protocol). The transfer is authorized on the basis of specific decisions of the European Union and the Guarantor for the protection of personal data, in particular decision 1250/2016 (Privacy Shield - here the information page of the Italian Guarantor), for which no further consent is required. In particular, the following are indicated:
Google Analytics with anonymized IP (Google Inc.) Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google uses the personal data collected for the purpose of evaluating the use of this Site, compiling reports and sharing them with other services developed by Google.
Place of processing: USA - Privacy Policy - Opt Out
​
Information pursuant to art. 13, par. 2
​
A) data retention period
We point out that, in compliance with the principles of lawfulness, purpose limitation and data retention and minimization, pursuant to art. 5 of the GDPR, the retention period of your personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed, or for the entire duration of the fulfillment of the aforementioned purposes.
​
B) rights of the interested party
- Right of Access and Rectification
Pursuant to art. 15 of the GDPR, in your capacity as an interested party you have the right to obtain from the Data Controller confirmation of the existence or otherwise of the processing of personal data concerning you, to obtain access to them and to all the information referred to in the same art. . 15, paragraph 1, letters from (a) to (h), by issuing a copy of the data being processed in a structured format, commonly used, readable by an automatic and interoperable device.
Pursuant to art. 16 of the GDPR, in your capacity as interested party you have the right to obtain from the Data Controller the correction and / or integration of the data being processed if they are out of date and / or inaccurate and / or incomplete.
- Right of cancellation and Right of Limitation
Pursuant to art. 17 of the GDPR, in your capacity as interested party you have the right to obtain, without undue delay, from the Data Controller, exclusively in the cases referred to in art. 17, paragraph 1, letters from (a) to (f), of the GDPR, the deletion of data concerning you - with the exception of the hypotheses specifically provided for by art. 17 paragraph 3.
Pursuant to art. 18 paragraph 1, letters from (a) to (d), of the GDPR, in your capacity as an interested party you have the right to request and obtain from the Data Controller, the limitation of the processing of your personal data, or that such data are not subjected to further treatments and can no longer be changed. The Data Controller ensures that the limitation of the processing is implemented through appropriate technical devices that guarantee its inaccessibility and immutability.
- Right to Portability
Pursuant to art. 20 of the GDPR, in your capacity as an interested party you have the right to receive from the Data Controller the personal data concerning you, the processing of which is carried out by automated means, in a structured format, commonly used and readable by an automatic device, and also has the right to transmit such data to another data controller, or to obtain from the Data Controller, where technically feasible, the direct transmission of such data to another specifically identified Data Controller.
- Right of Opposition
Pursuant to art. 21 of the GDPR, in your capacity as interested party you have the right to object at any time to the processing of personal data concerning you, for reasons connected with your particular situation, in cases where the processing of your data is necessary (1) to the execution of a task of public interest and / or connected to the exercise of public authority vested in the Data Controller; (2) for the pursuit of a legitimate interest of the Data Controller or a third party; (3) for the profiling activity, if carried out by the Data Controller, on the basis of the previous points. You also have the right to object to the processing of your personal data for reasons connected to your particular situation if they are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1 of the GDPR, except in the case in which the processing is necessary for the performance of a task of public interest.
You have the right to object to the processing even if your personal data are processed by the Data Controller for the purposes of direct marketing and / or profiling activities linked to direct marketing. In such cases the Soc. Agr. Cascina Fonda Ss, Data Controller, having received your communication in the manner indicated below, will refrain from further processing your personal data.
how to exercise the above rights
You can exercise the rights listed above by sending a request to the email address fonda@cascinafonda.com to the owner's account Soc. Agr. Cascina Fonda Ss; or by registered letter with return receipt to the address of Cascina Fonda di Marco and Massimo Barbero agricultural company, located in Via Spessa, 27 Neive - 12052 (Cn) Italy
The Data Controller will confirm receipt of your request and provide you with information relating to the action taken, with reference to the exercise of your rights provided for in articles 15 to 22 of the GDPR, within 1 (one) month of receipt of the request. If necessary, and taking into account the complexity and number of requests, the Data Controller may extend this term by 2 (two) months, subject to a reasoned communication to be sent within 1 (one) month of receipt of the request.
The Data Controller will communicate any rectification, cancellation, limitation of opposition to all recipients, as identified by art. 4, paragraph 1, n. 9 of the GDPR, to which such data have been transmitted, unless this proves impossible and / or involves a disproportionate effort.
Following the sending of your request for rectification, cancellation, limitation of opposition, if the Data Controller has reasonable doubts about your identity, he will request further information to confirm it. These communications will be sent by email from the address fonda@cascinafonda.com, and will be processed by the person specifically authorized for the purpose.
In the event that the Data Controller does not comply with your request within the term of 1 (one) month from receipt of the request, the latter will inform you of the reasons for the non-compliance, informing you as of now of your right to lodge a complaint with the Authority. of Control (Guarantor for the protection of personal data), as specified pursuant to art. 13, paragraph 2, letter (d) and governed by articles 77 et seq. of the GDPR.
​
C) withdrawal rights
Pursuant to art. 6 par 1 let. a) You have given your consent to the processing of your data for the purposes specified above and therefore your express consent is purely optional and not mandatory, having no other consequence other than the impossibility for the Data Controller to properly carry out the aforementioned direct communication services. And, in any case, the consent you may have given may be revoked by you at any time, with immediate effect on the aforementioned company activities and services. It should be noted that this revocation will not affect the lawfulness of the processing based on the consent given before the revocation.
​
D) right of complaint
Pursuant to art. 77 of the Gdpr, in your capacity as interested party you have the right to lodge a complaint with a supervisory authority according to the procedures indicated in the article itself.
​
E) consequences for failure to communicate your data
The communication of your data is not a legal obligation. But as previously specified, it has as prerequisites for the lawfulness of the processing, or your express free, specific, informed and unequivocal consent or, possibly, the execution of a contract of which you are a party or the execution of pre-contractual measures adopted by you. .
Both the aforementioned legal bases are therefore purely optional and not mandatory, having no other consequence other than the impossibility for the Data Controller to properly carry out the aforementioned direct communication services or contractual / pre-contractual execution. And, in any case, the consent you may have given, as mentioned, may be revoked by you at any time, with immediate effect on the aforementioned company activities and services.
​
F) Automated decision making and profiling
The Data Controller informs you that, for the purposes of processing your personal data, it does not make use of automated decision-making processes, or those aimed at making decisions based solely on technological means based on predetermined criteria (i.e. without human involvement), nor does it carry out activities. profiling, i.e. that aimed at using your personal data to analyze or predict aspects concerning professional performance, economic situation, health, personal preferences, interests, reliability, behavior, location or travel, etc. .
​
Methods of processing
The processing of personal data communicated by you is carried out by means of the operations indicated in art. 4 n. 2) of the GDPR, and more precisely: "collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, communication, cancellation and destruction of data".
The personal data communicated by you are subjected to automated processing for the time strictly necessary to achieve the purposes for which they were collected, with technical and organizational methods, adopted to prevent the loss of data, illicit or incorrect use and unauthorized access, and, therefore, such as to guarantee a level of security adequate to the risk pursuant to art. 32 of the GDPR, by specifically authorized subjects, in compliance with the provisions of art. 29 of the GDPR, or employees and / or collaborators of the Data Controller in their capacity as authorized subjects and / or system administrators, who will be able to carry out consultation, use, processing, comparison and any other appropriate operation in compliance with the necessary legal provisions to guarantee, among other things, the confidentiality and security of the data as well as the accuracy, updating and relevance of the data in compliance with the stated purposes and methods.
​
It should be noted, in particular, that the personal data communicated by you will be processed only at the headquarters of the data controller, except as specified below, they will therefore not be disclosed, and, pursuant to art. 13, paragraph 1, lett. (e), the same may be processed only by authorized subjects and / or by external data processors (in the person of individual professionals and / or complex professional associations), among which the hosting company is explicitly included. and / or by technical personnel in charge of the management and / or maintenance of the website, but only and exclusively for the purposes expressly and specifically indicated above.