Information pursuant to articles 13 and 14 of the European Regulation n. 679/2016 regarding the protection of personal data and subsequent national adaptation standards
The protection of your privacy is one of our main objectives.
In accordance with the commitment and care that the company VARVAGLIONE VIGNE & VINI s.r.l. (hereinafter ‘Company’) dedicated to the protection of personal data, we inform you on the methods, purposes and scope of communication and dissemination of your personal data collected when accessing the site www.varvaglione.com, as well as on your rights, in accordance with articles 13 and 14 of the European Regulation n.679/2016 (hereinafter GDPR) and subsequent national adaptation standards (hereinafter Applicable Regulations).
SITE PRIVACY POLICY
This section contains information relating to the methods of managing personal data with reference to the processing of the same on the site www.varvaglione.com (hereinafter the “site”). In line with the Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (hereinafter “Privacy Code”) and the Regulations, the company VARVAGLIONE VIGNE & VINI s.r.l. intends to guarantee the privacy and security of the personal data of each visitor in line with the provisions of this Information, for which the treatments will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and conservation, minimization of data, accuracy, integrity and confidentiality.
The information is provided only for the site and not for other websites that may be consulted by the user through links contained therein.
The purpose of this document is to provide information on the methods, timing and nature of the information that the Data Controller must provide to users when connecting to the web pages of the site regardless of the purpose of the connection itself, according to Italian and European legislation.
If the user is under the age of 16, pursuant to article 8, c.1 of EU regulation 2016/679, he will have to legitimize his consent through the authorization of his parents or guardians.
1. Data controller
With regard to this website, the data controller is the company VARVAGLIONE VIGNE & VINI SRL, in the person of its pro tempore legal representative, with registered office in Contrada Santa Lucia s.n.c. 74020 Leporano (Taranto), VAT number 01996660732, telephone +39 0995332254, email privacy@varvaglione.com, certified email vigneevini@legalmail.it
2. Personal data being processed and purposes
By processing of personal data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, conservation , adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
We inform you that the personal data being processed will consist – also depending on your decisions on how to use the services of the Site – by an identifier such as the name, email address, an identification number, location data, a online identifier, and other data suitable for making you identified or identifiable, depending on the type of Services requested (hereinafter only “Personal Data”). In particular, the Personal Data processed through the Site are as follows:
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and website addresses from which access was made, information on the pages visited by users within of the site, the time of access, the permanence on the single page, the analysis of the internal path and other parameters relating to the operating system and the user’s IT environment.
This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and/or abuses, and are canceled immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site or third parties: except for this eventuality, the data on web contacts do not currently persist for more than fourteen days, unless requested by the user (e.g.: access to the user’s personal pages within the Site which summarize the services used, the information published, etc.).
b. Data provided voluntarily by the interested party
Identifiers provided by the user as an interested party and/or on behalf of another natural person (e.g. name, surname, email, telephone number, location, etc.), to follow up on requests about our products and services, through the appropriate sections of the Site https://www.varvaglione.com/, for the specific purposes specified in paragraph 3 of this information.
c. Traffic data
As part of the e-mail service, the Company will process some data for the purpose of sending communications over the electronic communications network. These data are those listed in Legislative Decree 30 May 2008, n. 109, and in particular they are:
– IP address used and e-mail address and any additional identifier of the sender;
– IP address and fully qualified domain name of the mail exchanger host, in the case of SMTP technology or of any type of host relating to a different technology used for communication transmission;
– e-mail address, and any additional identifier, of the recipient of the communication;
– IP address and fully qualified domain name of the mail exchanger host (in the case of SMTP technology), or of any type of host (relative to a different technology used), which provided for the delivery of the message;
– IP address used for receiving or consulting e-mail messages by the recipient regardless of the technology or protocol used;
– date and time (GMT) of connection and disconnection of the user of the Internet e-mail service and IP address used, regardless of the technology and protocol used;
– the internet service used.
These data are processed and stored by the Company, through the service provider, to provide the service and by legal obligation, for the purpose of ascertaining and suppressing crimes. Adequate security measures have been adopted which make them accessible only to persons specifically authorized in writing, who access them only following a request from the judicial authority accompanied by a reasoned decree from a public prosecutor and in any case with particularly sophisticated authentication techniques envisaged by the legislation.
3. Purposes and legal bases of the treatments
Personal data will be processed exclusively with the necessary methods and procedures:
a) for requests for information and estimates, sent by interested parties also by e-mail, for the purpose of selling products marketed by us;
b) for the organization and provision of our services, such as for example the ‘Guided tours’;
c) for booking public events, such as fairs, events or charity initiatives;
d) for sending newsletters, institutional communications, advertising, informative, promotional material, for direct and indirect marketing activities;
e) for manual profiling related to the wine sector.
Furthermore, for the purposes of site security, automatically recorded data, such as the IP address, could be used, in accordance with the laws in force on the subject, in order to block attempts to damage the site itself or to cause damage to other users, or in any case harmful or constituting a crime.
The treatments referred to in letters a), b) and c) are mandatory for the execution and conclusion of the requests forwarded by the interested party and for the finalization of a possible contract, while those referred to in letters d), e) are optional and require express consent, which can be revoked equally freely and at any time by contacting the Data Controller.
It should be noted that the direct (carried out by VARVAGLIONE VIGNE & VINI SRL) and indirect (carried out by VARVAGLIONE VIGNE & VINI SRL) marketing activity through appointed third parties) has the purpose of collecting and using pertinent data limited to what is necessary with respect to the purpose for which they are processed, to prepare studies, research, market statistics, send advertising and information material, carry out direct sales or placement of products or services, send commercial information, carry out interactive commercial communications. The profiling activity, on the other hand, consists in the collection of information on commercial behavior and habits in the wine sector in order to improve the services offered based on the needs of customers who have given specific consent.
With reference to marketing and profiling activities, it should be noted that, in the event of lack of specific consent to the processing by the interested party, it will not be possible to carry out the aforementioned activities.
4. Recipients of personal data
Within the scope of the aforementioned purposes, your data may be communicated to:
• third parties, such as eg. Professionals such as tax and legal consultants, IT service and assistance companies, commercial agents, marketing service companies, event organization, market research and/or customer satisfaction survey companies, shippers, third-party companies that carry out part of the processing activities and/or activities connected and instrumental to them on behalf of the Data Controller. These subjects will also be appointed as data processors pursuant to art. 28 of the GDPR;
• subjects, bodies or authorities to whom it is mandatory to communicate your personal data by virtue of provisions of the law or orders of the authorities (for example, during criminal investigations, the Data Controller may receive requests from the judicial authority to provide telematic traffic log);
• individuals, employees and/or collaborators of the Data Controller, who have been entrusted with specific and/or more processing activities on your personal data. These individuals have been given specific instructions regarding the security and correct use of personal data and are defined as the persons authorized to process personal data under the direct authority of the Data Controller (pursuant to Article 29 of the GDPR).
This information on the processing of personal data applies to the site https://www.varvaglione.com/, as well as to the online services associated with the aforementioned site.
It does not apply to any links to external sites relating to external companies and institutions.
For information on the purposes, type and methods of collection, processing, use and storage of personal data by external platforms and/or social networks, as well as the methods by which to exercise your rights, please consult the privacy policy adopted by the single site.
The website can use the c.d. social plug-ins. Social plug-ins are special tools that allow you to incorporate the features of the social network directly within the website (e.g. the Facebook “like” function).
All social plug-ins on the site are marked with the respective logo owned by the social network platform (e.g. Facebook, Google, Twitter, Istagram, Youtube).
When you visit a page of our site and interact with the plug-in (e.g. by clicking the “Like” button) or decide to leave a comment, the corresponding information is transmitted from the browser directly to the social network platform and memorized from this. For information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, as well as the methods by which to exercise one’s rights, please consult the privacy policy adopted by the individual social networks.
5. Transfer of personal data
Personal data will be processed by the company VARVAGLIONE VIGNE & VINI SRL within the territory of the European Union. If for technical and/or operational reasons it is necessary to make use of subjects located outside the European Union, or it is necessary to transfer some of the data collected to companies located outside the European Union area, the treatment will be regulated in compliance with the provisions of chapter V of the Regulation and authorized in based on specific decisions of the European Union.
6. Processing methods and storage times for personal data
The processing of personal data takes place using manual, IT and telematic tools with logic strictly related to the purposes themselves in order to guarantee their security and confidentiality.
The data relating to the recorded navigation logs will be kept by the provider for a minimum period of 6 months, as per the regulatory prescription of storage times.
We also inform you that the data you provide through the internal pages of the site or received by e-mail will be processed for the time necessary to satisfy the requests of the interested party and subsequently kept for at least 10 years after the last treatment, except explicit request by the interested party and in any case for a period not less than that envisaged by all legal and tax regulations or for the entire duration of any disputes.
7. Rights of data subjects
The subjects to whom the aforementioned personal data refer (so-called “interested parties”), have the right to exercise their rights according to the methods and within the limits established by the current privacy legislation, from articles 15 to 22 of the GDPR.
In relation to the processing of your personal data, you have the right to ask the company Varvaglione Vigne & Vini s.r.l.:
• access: you can request confirmation as to whether or not data concerning you are being processed, as well as further clarifications regarding the information referred to in this Information, as well as to receive the data itself, within the limits of reasonableness;
• rectification: you can ask to rectify or integrate the data you have provided us or in any case in our possession, if inaccurate;
• cancellation/oblivion: you can request that your data acquired or processed by the Data Controller be cancelled, if they are no longer necessary for our purposes or where there are no disputes or disputes in place, in the event of withdrawal of consent or your opposition to the processing , in the event of unlawful processing, or if there is a legal obligation to cancel;
• the limitation: you can request the limitation of the processing of your personal data, when one of the conditions referred to in art. 18 of the GDPR; in this case, your data will not be processed, except for storage, without your consent except for what is explained in the same article in paragraph 2.
• opposition: you can oppose the processing of your data at any time on the basis of our legitimate interest, unless there are legitimate reasons for proceeding with the processing that prevail over yours, for example for the exercise or our defense in judicial seat; your opposition will always prevail over our legitimate interest in processing your data for marketing purposes;
• portability: you can request to receive your data, or to have them transmitted to another holder indicated by you, in a structured format, commonly used and readable by an automatic device.
Finally, we inform you that you have the right to lodge a complaint with the Supervisory Authority, which in Italy is the Guarantor for the Protection of Personal Data, which can be contacted at garante@gpdp.it or via the website http://www.gpdp.it .
Furthermore, pursuant to art. 7, par. 3, GDPR, we inform you that you can exercise your right to withdraw consent at any time, without prejudice to the lawfulness of the processing based on the consent previously given. To exercise these rights, make reports or ask for clarifications on the processing of your personal data, you can do so by completing and sending the form: Model for exercising rights regarding the protection of personal data.
The form, duly completed, must be addressed to the data controller, i.e. to the company VARVAGLIONE VIGNE & VINI SRL, in the person of its pro tempore legal representative, with registered office in Contrada Santa Lucia s.n.c. 74020 Leporano (Taranto), VAT number 01996660732, telephone +39 0995332254, email privacy@varvaglione.com
7. Changes
The document was updated on 05/10/2023 to comply with the relevant regulatory provisions, and in particular in compliance with EU Regulation 2016/679.
The company VARVAGLIONE VIGNE & VINI s.r.l. reserves the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation. If the amendments to this policy concern substantial changes in the treatments or may in any case have a significant impact on the interested parties, the company VARVAGLIONE VIGNE & VINI s.r.l. will take care to duly notify them.