INFORMATION ON THE PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679-GDPR (GENERAL DATA PROTECTION REGULATION)

Dear User,

Vinicola Arno srl Società Agricola, with registered office in Via Giuseppe Verdi 4 14049 Nizza Monferrato, VAT no. 01639310059, in accordance with EU Regulation no. 2016/679 (hereinafter ‘Regulation’) is required to provide you with some information regarding the use of your personal data.

This information is provided for the site https://vinicolaarno.com/ (hereinafter the ‘Site’), and not for any other websites that may be consulted by the user through links, and is an integral part of the Site and the services we offer; the information is provided pursuant to Article 13 of the Regulations to those who interact with the web services of the Site.

Your personal data will be processed in accordance with the legal provisions of the Regulation and the confidentiality obligations set out therein. The processing of your personal data will therefore be based on the principles of correctness, lawfulness, transparency, purpose limitation and storage, minimisation and accuracy, integrity and confidentiality, as well as on the principle of accountability set out in Article 5 of the Regulation.

DATA CONTROLLER AND DATA PROCESSORS

The Data Controller is Vinicola Arno srl Società Agricola as identified above. The updated list of the persons in charge can be requested at the following e-mail address .

TYPE OF DATA PROCESSED

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. At present, the data on web contacts do not persist for more than seven days.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of personal data in specific sections of the site (e.g. in the ‘Contact Us’ section), as well as any other personal data included in the message, will be processed exclusively for the purposes strictly related to the request (e.g. replying to requests for information sent). Without prejudice to any processing required by law, any other purpose is excluded.

Cookies

Details on the cookies used on the Site can be found in the ‘cookie policy’ available at the following link, where you can customise your experience of using the Site.

PURPOSE AND LEGAL BASIS OF PROCESSING

Personal data will be processed for the following purposes:

- Operational management and strictly related purposes for accessing the website.

Legal basis for processing: consent and performance of a contract.

- Processing for statistical purposes in an anonymous and aggregate form on the use of the site and control of its proper functioning.

Legal basis of the processing: consent and legitimate interest of the data controller.

Fulfilment of any obligations under applicable laws, regulations or EU legislation, fulfilment of requests from the authorities.

Legal basis for processing: fulfilment of a legal obligation.

- Purposes of responding to your requests sent through the contact section

on the site.

Legal basis for processing: consent of the data subject.

NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL

Although the provision of personal data is not compulsory, it may be indispensable to enable us to perform our services.

In particular, for the purposes referred to in point d., the provision of data is always optional, and you may therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided, revoking at any time the consent already given by sending a specific request to the Data Controller in the manner described in this notice. However

Withholding consent may make it impossible to acquire your data and thus to respond to your requests.

MODE OF TREATMENT

Your personal data will be processed with the aid of automated paper and/or computer tools, by Data Processors appointed pursuant to Article 28 of Regulation (EU) 2016/679 or by persons authorised to process them for the time necessary to achieve the purposes for which they are collected or for any other legitimate related purpose (unless you withdraw your consent). At the end of this period, the data will be retained in order to comply with specific regulatory or contractual obligations, as well as for administrative purposes and/or to assert or defend a right, in the event of litigation and pre-litigation.

In any event, the Data Controller undertakes to take appropriate technical and organisational security measures to prevent the destruction or loss of data, any unauthorised use and unauthorised access, pursuant to Article 32 of Regulation (EU) 2016/679.

Your data will not be disseminated in any way whatsoever, but may be communicated to third parties whose activities are necessary and related to the achievement of the above-mentioned purposes (such as, by way of example: professionals, competent administrative and judicial authorities, professional legal consultancy firms, national and/or international public authorities who are entitled to do so).

No automated decision-making processes, including profiling as referred to in Article 22(1) and (4) EU Reg. 2016/679, are involved in the processing.

TRANSFER OF PERSONAL DATA

The personal data processed by this Site are not transferred outside the European Economic Area. It is in any case understood that the Data Controller, should it become necessary, shall have the right to move the location of the servers to countries outside the EU. In this case, the Data Controller assures as of now that the transfer of data will take place in compliance with the applicable legal provisions by entering, if necessary, into agreements that guarantee an adequate level of protection.

RIGHTS OF THE DATA SUBJECT

As a data subject, you may contact the Data Controller to assert your rights, as provided for in Articles 15 to 22 of EU Reg. 2016/679, which are set out below:

• right to request access to personal data from the data controller (Art. 15);
• right to ask the data controller for rectification (Art. 16);
• right to ask the data controller to delete them (Art. 17);
• the right to request from the data controller the restriction of processing operations concerning you (Art. 18);
• right to data portability (Art. 20);
• right to object to processing (Art. 21);
• right in relation to automated decision-making processes (Art. 22).

Where the processing is based on Article 6(1)(a), you have the right to withdraw your consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation. You also have the right to lodge a complaint with the Data Protection Authority. To exercise your rights you can send a registered letter with advice of receipt to Vinicola Arno srl Società Agricola, with registered office in Via Giuseppe Verdi 4 14049 Nizza Monferrato or an e-mail to info@vinicolaarno.com.