Dear Customer,
In compliance with the obligations set forth in the European General Data Protection Regulation (EU) 2016/679 (GDPR), we hereby inform you that Terre di Borgata SRL, with registered office at Via Montegrappa 22, Postal Code 31010, Monfumo, Province of Treviso, certified email (PEC) sellebassano@pec.it, VAT number 05173210260, tax code 05173210260, registered in the Treviso Business Register, Economic and Administrative Index (REA) number TV 191110, as Data Controller, will process your personal data that you or other parties have provided or may provide to us during your relationship with us.
The processing of data, whether freely provided by you or otherwise collected, will be carried out in compliance with applicable privacy regulations. Based on the principles of fairness, lawfulness, and transparency, and carried out in compliance with the principles of relevance, completeness, and non-excessiveness.
The data will be collected and recorded solely for the purposes referred to in point 1) and will be retained for such purposes for a period no longer than 10 years from their collection for administrative and accounting purposes and no longer than 24 months from their collection for marketing purposes.
1. Therefore, pursuant to Article 13 of the European Privacy Regulation (EU) 2016/679 (GDPR), we inform you that the data you provide will be processed for the following purposes:
For the proper performance of institutional activities and/or those envisaged by the corporate purpose;
For requirements relating to the stipulation of contracts and assignments, their execution, subsequent amendments or changes, and for any obligations required for their fulfillment;
For operational, organizational, management, tax, financial, insurance, and accounting requirements relating to the contractual and/or pre-contractual relationship established;
To fulfill any obligations required by laws, regulations, or EU legislation;
To record, manage, and maintain logs of any access to the company website, the company information system, and company offices;
For access control, corporate security, and video surveillance purposes;
To monitor the delivery of products/services, the progress of supplier relationships, and the analysis and management of risks associated with the contractual relationship;
For traditional marketing activities, such as sending brochures, catalogs, and commercial and/or technical documentation by post and through operator-assisted telephone calls (subject to your explicit consent);
For marketing activities using automated or similar tools, such as email, instant messaging, chat, and operator-assisted telephone calls (subject to your explicit consent);
For online marketing, web marketing, and web advertising (subject to your explicit consent). – n) For profiling activities and/or management of automated decision-making processes (subject to obtaining
your explicit consent).
2. The processing will be carried out partially automated and may consist of the following operations:
Collection, recording, organization, and storage;
Consultation and use;
Selection, extraction, comparison;
Interconnection.
The processing will be carried out both using paper media and with the aid of electronic, IT, and telematic tools suitable for ensuring the security and confidentiality of the data in accordance with the provisions of Article 32 of the European Privacy Regulation (EU) 2016/679 (GDPR).
In carrying out the processing operations, all technical, IT, organizational, logistical, and procedural security measures will always be adopted to ensure the minimum level of data protection required by law. The aforementioned processing methods applied will guarantee access to the data only to the subjects specified in points 4) and 5).
3. The provision of data is:
Indispensable and does not require your consent for all personal data essential for the proper establishment, management, and continuation of the commercial and/or contractual relationship;
Optional for data for which consent is required.
Any refusal, even if legitimate, to provide all or part of the above data could compromise the proper functioning of the relationship with our organization and, in particular, for the personal data defined as mandatory and indispensable, could make it impossible for us to perform normal business operations and provide the requested products/services.
4. The subjects or categories of subjects who may become aware of the data or to whom the data may be disclosed are the following:
Legal Representative of the Data Controller;
Data Processors (Customer Service, Marketing);
Data Processors.
Personal data may also be disclosed, but only in aggregate, anonymous form and for statistical purposes.
5. If the processing also involves personal data that falls within the category of “sensitive” data (i.e., data revealing racial or ethnic origin, religious, philosophical, or other beliefs, political opinions, membership of political parties, trade unions, associations, or organizations of a religious, philosophical, political, or trade union nature, as well as personal data revealing health and sex life), the processing will be carried out within the limits indicated by the General Authorizations of the Data Protection Authority, in accordance with the procedures set forth in Legislative Decree 196/03, as amended by Legislative Decree no. 101/2018, and for purposes strictly necessary for the proper conduct of business, operations related to the provision of products/services, and the fulfillment of contractual and/or legal/regulatory obligations.
In this case, the subjects or categories of subjects who may become aware of sensitive data or to whom the data may be disclosed are the following:
Legal Representative of the Data Controller;
Data Processors.
6. Personal data may also be disclosed to public bodies, law enforcement agencies, or other public and private entities, but only for the purpose of fulfilling legal, regulatory, or EU legislation obligations. The data in question will not be disclosed to parties other than those specified in this policy, and data revealing the data subject’s health status will not be disseminated under any circumstances.
7. The data may be processed and transferred, for the purposes referred to in point 1) and according to the methods referred to in point 2), also to entities located in countries within the European Union and/or outside the European Union based on an Adequacy Decision by the European Commission.
8. In any case, you may request at any time from the Data Controller’s Legal Representative a copy of your personal data, information regarding the location where your personal data is processed, and an updated list with the identification details of all Data Processors and System Administrators authorized to process your data.
9. You may freely withdraw your consent at any time, without any burden or prejudice to the lawfulness of the processing carried out up to that point, and exercise the following data subject rights vis-à-vis the Data Controller as provided for by the European Privacy Regulation (EU) 2016/679 and Legislative Decree no. 196/03, as amended by Legislative Decree no. 101/2018:
Access
Rectification
Cancellation
Objection
Terre di Borgata SRL
