INFORMATION AND CONSENT
Holder of the data treatment:
GIULIANO TARTUFI S.P.A., in the person of its legal representative, Italian VAT number 02381170543, with registered office in Pietralunga (PG), Zona Industriale Sud - Italy, as owner of the processing of personal data, hereby guarantees compliance with the legislation on the protection of personal data (Legislative Decree 196/03_ subsequent amendments D .Lgs n. 101/2018 and Reg. 2016/679 / EU).
GIULIANO TARTUFI S.P.A., in the person of its legal representative, is the Controller of personal data; furthermore any partner site that from time to time independently participate in data processing activities can assume the role of autonomous data controller.
OBJECT OF THE TREATMENT:
The personal data processed through the website are as follows:
- Browsing data
The IT systems and software procedures used to operate this site acquire, in normal operation, some personal data which are then implicitly transmitted in the use of Internet communication protocols.
These information by its nature could, through associations and processing with data held by third parties, allow users / visitors to be identified (e.g. IP address, domain names of computers used by users / visitors who connect to the site, etc.).
These data are used only for statistical information and to check the correct website operations.
No data deriving from the web service will be communicated or disseminated.
The personal data provided by users / visitors will be communicated to third parties only if necessary to comply with the requests of the users / visitors themselves or by law.
- Data voluntarily provided by users / visitors
Should users / visitors, connecting to this site, send their personal data to access certain services, or to make requests via e-mail, they are aware how this involves the acquisition by the Owner of the sender's address and / or any other personal data that will be processed exclusively to respond the request, or for the provision of the service.
In addition to the data expressly given to the Data Controller, other data resulting from the user's navigation on the website may be recorded: when the user accesses it, as a matter of fact, the site may send the user a "cookie".
- Processing methods
Processing is carried out through automated tools (eg using electronic procedures and media) and / or manually (eg on paper) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the relevant regulations in force.
- Processing purposes
In addition to those mentioned in the individual information before the FORM filling of the various site sections, the purposes of the processing carried out by the Data Controller are:
a) collection, storage and processing for the purpose of establishing, operational and administrative management of the contractual relationship connected to the provision of the offered service;
b) use of the user's personal data (in particular the e-mail address) to make communications related to the performance of the contractual relationship in force;
c) processing of given personal data and those derived from browsing the site, in order to provide a service consistent with the information transmitted during the use of the service;
d) collection, storage and processing of data to perform statistical analysis in anonymous and / or aggregate form;
e) purposes in line with the performance of the business, such as offering personalized content (eg. newsletter services);
f) communication of commercial information on future initiatives, announcements of new products or services;
g) market research and statistical analysis;
h) sending advertising or promotional material and for promotional initiatives.
- Processing legal basis
The legal basis for the processing of customer data carried out by the owner through the website www.giulianotartufi.it consists of the contract between the interested parties; should it be absent, the legal basis is to be found in the legitimate interest of the owner to free economic initiative, referred to in art. 41 of the Italian Constitution. With reference to the additional purposes that require consent, a specific form will be requested and likewise must be considered a valid legal basis.
In addition to the Data Controller, in some cases, categories of Managers and authorized subjects involved in the corporate organization (administrative, commercial, marketing, legal, system administrators) may have access to the data and the Data Controller may make use of external subjects (such as third party technical service providers, transporters, hosting providers, cloud services, IT companies, communication agencies) who may be appointed as external managers. Furthermore, they may be shared with subjects, bodies or authorities to whom it is mandatory to communicate personal data by virtue of legal provisions or orders of the authorities.
The updated list of managers can always be requested to the Data Controller, by contacting the e-mail address: firstname.lastname@example.org
- Transfer to a Third Country
For the services offered by the website, the data controller uses servers located in France; to be considered suitable, on the basis of Reg. 2016/679 / EU, since a country part of the European Union. The data processed by the Data Controller will never be disclosed.
- Place of data processing
The processes connected to the web services of this website take place at the aforementioned headquarters of the Data Controller and are only handled by technical staff. If necessary, the data connected to the newsletter service can be processed by the staff of the company that manages the Data centre (data processor pursuant to Article 28 of Reg. 2016/679 / EU), at the company headquarters.
- Time and Place of Data Retention
Data are processed for the time necessary to perform the requested service, and then destroyed by secure means of destruction, such as paper shredders and software with wiping capabilities for data on IT support.
- Optional or compulsory provision of data
Further to what is specified for browsing data that acquire data automatically, users / visitors are free to provide their personal data or not to provide them. Failure to provide them may only result in the impossibility of obtaining the requested service.
- Rights of the interested parties
The subjects to whom the personal data refer have the right at any time, according to the relevant GDPR, to obtain confirmation of the existence or otherwise of the same data, and to know its content and origin, verify its accuracy or request its integration, updating, amendment or cancellation.
Such requests should be sent to the Data Controller in writing at the following e-mail address: email@example.com
In relation to the processing of aforementioned data, the customer has the right to obtain from the Data Controller:
1. confirmation of the existence or otherwise of personal data, their communication in an intelligible form and knowledge of their origin, as well as the logic behind the processing;
2. cancellation, within a reasonable period, of data, their transformation into anonymous form or the blocking of those processed in violation of the law;
3. data updating, correction or, when required, integration;
4. attestation that the operations referred to in paragraphs 2) and 3) above have been brought to the attention of those to whom they have been communicated, provided that it is not impossible or involves the use of means;
5. to obtain the amendment or the cancellation of data concerning him or the limitation of use §§§;
6. to withdraw consent relating to optional processing, not related to the execution of the contract signed with the Data Holder;
7. to oppose for legitimate reasons the processing of personal data concerning him, even if pertinent to the purpose of collection, to request its portability, to use the right to be forgotten, as well as to contact the Supervising Authority in charge of protection of personal data for any violation he believes he has suffered. In Italy, the Guarantor for the Protection of Personal Data is garanteprivacy.it
- Automated decision-making processes
No automated decision-making processes are carried out on the collected data.
- Geo-location consent clause
The user agrees that, including through third party applications, the Owner can identify the user position exclusively for purposes related to a better management of the website.
- Data provision consent clause for profiling purposes
- Consent clause for the provision of data to third parties <<<
The user agrees that its personal data will be used, further to the execution of the contract, for communications to third parties, subsidiaries or affiliates, with the purpose of the best execution of the contract or for a legitimate interest of the Data Controller or third parties.
- Final clauses