Privacy policy
Disclosure pursuant to Art. 13 EU Regulation GDPR 2016/679
- WHY THIS NOTICE
This page describes the processing of personal data carried out by the writer towards all forms of interested parties, and with the intention of expressing the Company Policy adopted to ensure compliance with the provisions of GDPR 2016 / 679, Legislative Decree 196/2003, National Provisions for this matter, Guidelines issued by the European Data Protection Board as well as Community Directives relating to the protection of data of individuals.
This is an information notice pursuant to art. 13 of EU Regulation 2016/679 towards those who establish any form of relationship with the writer, the latter represented primarily by this web address:
The Privacy Policy of this website does not refer to other treatments carried out or described following the navigation of websites through links that may be present on the website indicated above.
- DATA CONTROLLER
The Data Controller is Caseificio Montecoppe srl, registered office in Via Montecoppe sotto, 19/4 – 43044 Loc. Ferlaro – Collecchio (PR).
- TYPES OF DATA PROCESSED
- DATA FOR CONTACT REQUEST
The optional, explicit and voluntary sending of personal data necessary for the contact request through the forms present on this site, or through any e-mail addresses indicated on this site, entails the subsequent acquisition of the data only necessary to respond to requests sent.
| Purpose and legal basis of the processing (GDPR Art.13, par. 1, lett. C) | These data are used for the sole purpose of responding to information requests sent by filling in the forms |
| Communication scope (GDPR Art.13, par. 1, lett. E, f) | The data are processed exclusively by internal personnel, duly authorized and trained in the processing (GDPR Art. 29) and will not be disclosed to external parties, disseminated or transferred to non-EU countries. Only in the event of an investigation can they be made available to the competent authorities. |
| Processing methods (GDPR C. 39) | Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. |
| Data retention period (GDPR, Article 13, paragraph 2, letter a) | The data are usually kept for short periods of time, only to satisfy the requests received. |
| Contribution (GDPR, Article 13, par, 2, letter f) | The data are optionally provided by the interested parties. |
| Lawfulness (GDPR, Art. 6 par. 1) | Processing is necessary to respond to requests received, therefore consent is expressed by filling in the forms. |
& nbsp;
- DATA FOR DIRECT CUSTOMERS, COMPANY REFERENCES CUSTOMERS, COMPANY REFERENCES SUPPLIERS
The personal data communicated by the subjects indicated, or collected by the writer during the performance of the activities deriving from contractual relationships, derive from the need to carry out the activities organized between the parties.
| Purpose and legal basis of the processing (GDPR Art.13, par. 1, lett. C) | The data is collected and used in order to: – conclude contractual / professional relationships, – fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships, as well as manage the necessary communications connected to them; – fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority; – exercise a legitimate interest as well as a right of the Data Controller (for example: the right of defense in court, the protection of credit positions; the ordinary internal needs of an operational, managerial and accounting nature). |
| Communication scope (GDPR Art.13, par. 1, lett. E, f) | The data are processed exclusively by internal personnel, duly authorized and trained in the processing (GDPR Art. 29) and will not be disclosed to external subjects, disseminated or transferred to non-EU countries. |
| Processing methods (GDPR C. 39) | Personal data are processed with automated and paper-based tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. |
| Data retention period (GDPR, Article 13, paragraph 2, letter a) | The data are usually kept for short periods of time, strictly necessary for the fulfillment of contractual or regulatory obligations. |
| Contribution (GDPR, Article 13, paragraph 2, letter f) | I are requested by the writer for the purposes indicated. |
| Lawfulness (GDPR, Art. 6 par. 1) | Processing is necessary for the establishment of contractual relationships, and therefore consent is not required. |
& nbsp;
- DATA FOR SUBSCRIPTION OF THE INFORMATIVE NEWSLETTER
Personal data communicated by interested parties by voluntarily entering contact details using the appropriate form online , are processed for purposes related to sending newsletters.
| Purpose and legal basis of the processing (GDPR Art.13, par. 1, lett. C) | The information collected identifies the interested parties to carry out information activities by sending newsletters or otherwise described in the relative form , and in relation to products / services. < / td> |
| Communication scope (GDPR Art.13, par. 1, lett. E, f) | The data are processed exclusively by internal personnel, duly authorized and trained in the processing (GDPR Art. 29) and will not be disclosed to external subjects, disseminated or transferred to non-EU countries. </ td > |
| Processing methods (GDPR C. 39) | Personal data are processed with automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. |
| Data retention period (GDPR, Article 13, paragraph 2, letter a) | The data are usually kept until the data subject’s consent is revoked. |
| Contribution (GDPR, Article 13, paragraph 2, letter f) | The data are optionally provided by the interested parties in relation to the subscription to informative newsletters. |
| Lawfulness (GDPR, Art. 6 par. 1) | The processing is optional for the sending of communications of an informative nature, therefore following the relative expression of consent. |
- DATA FOR COMMERCIAL NEWSLETTER SUBSCRIPTION
Personal data communicated by interested parties by voluntarily entering contact details using the appropriate form online , are processed for purposes related to sending newsletters.
| Purpose and legal basis of the processing (GDPR Art.13, par. 1, lett. C) | The information collected identifies the interested parties for marketing purposes as well as to carry out promotional activities by sending newsletters or otherwise described in the relative form , in relation to products / services purchased or different from them, news and promotions of the writer. |
| Communication scope (GDPR Art.13, par. 1, lett. E, f) | The data are processed exclusively by internal personnel, duly authorized and trained in the processing (GDPR Art. 29) and will not be disclosed to external subjects, disseminated or transferred to non-EU countries. </ td > |
| Processing methods (GDPR C. 39) | Personal data are processed with automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. |
| Data retention period (GDPR, Article 13, paragraph 2, letter a) | The data are kept for up to 24 months after collection, and then the consent is renewed if of interest to the interested parties. |
| Contribution (GDPR, Article 13, paragraph 2, letter f) | The data are optionally provided by the interested parties in relation to the subscription to the newsletter in the pr area homologation / commercial. |
| Lawfulness (GDPR, Art. 6 par. 1) | The treatment is optional for the receipt of promotional / commercial communications, therefore following the relative expression of consent. |
& nbsp;
& nbsp;
- ACCOUNT CREATION DATA FOR ONLINE PURCHASES
The personal data communicated by the interested parties during the compilation of specific forms for the activation of accounts are processed for the purpose of registering users to the Online Shop.
| Purpose and legal basis of the processing (GDPR Article 13, paragraph 1, letter c) | Personal data are required from interested parties to follow up on the registration requests to the site to create their account and make online purchases. The provision of the data referred to in the registration and / or product purchase form, as well as the additional personal data required for the payment and delivery of the goods, is aimed at executing the order and concluding the contract. </ Td > | |||
| Communication scope (GDPR Article 13, paragraph 1, letter e, f) | The data are processed exclusively by internal personnel, duly authorized and trained in the processing (GDPR Art. 29) and will not be disclosed to external parties, disseminated or transferred to non-EU countries . | |||
| Data retention period (GDPR, Article 13, paragraph 2, letter a) | The data collected are kept only for the time needed to allow the services requested to be provided. | |||
| Processing methods (GDPR C. 39) | Personal data are processed with automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. | |||
| Contribution (GDPR, Article 13, paragraph 2, letter f) | The provision of data is mandatory for the purposes indicated above, in order to allow the services requested to be provided. | |||
| Lawfulness (GDPR, Art. 6 par. 1) | Processing is necessary for the establishment of contractual relationships, and therefore consent is not required. | |||
& nbsp;
- DATA FOR BOOKING GUIDED TOURS
The personal data communicated by the interested parties during the compilation of specific forms for booking guided tours of various forms and interests , are processed for the purpose of registering with such events.
| Purpose and legal basis of the processing (GDPR Article 13, paragraph 1, letter c) | Personal data are required from interested parties to follow up on registration requests for the event of interest. The e-mail address will be used only to complete the registration to the same events chosen, as well as to send remainder about the event of interest to interested parties. The other data collected is required to complete the registration and registration of participation in events of interest. | |
| Communication scope (GDPR Article 13, paragraph 1, letter e, f) | The data are processed exclusively by internal personnel, duly authorized and trained in the processing (GDPR Art. 29) and will not be disclosed to external subjects, disseminated or transferred to non-EU countries . | |
| Data retention period (GDPR, Article 13, paragraph 2, letter a) | The collected data are kept only for the time necessary to allow the services requested in relation to the organized events to be provided. | |
| Contribution (GDPR, Article 13, paragraph 2, letter f) | The provision of data is mandatory for the purposes indicated above, solely in order to grant registration to the events proposed by the writer. | |
| Processing methods (GDPR C. 39) | Personal data are processed with automated tools. Specifications misecurity measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. | |
| Lawfulness (GDPR, Art. 6 par. 1) | Processing is necessary for the establishment of contractual relationships, and therefore consent is not required. | |
& nbsp;
- NAVIGATION DATA
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
| Purpose and legal basis of the processing (GDPR Art.13, par. 1, lett. C) | These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site. |
| Communication scope (GDPR Art.13, par. 1, lett. E, f) | The data are processed exclusively by internal personnel, duly authorized and trained in the processing and are not disclosed to external subjects, disseminated or transferred to non-EU countries. Only in the event of an investigation can they be made available to the competent authorities. |
| Processing methods (GDPR C. 39) | Personal data are processed with automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. |
| Data retention period (GDPR, Article 13, paragraph 2, letter a) | The data are usually kept for short periods of time, with the exception of any extensions connected to investigation activities. |
| Contribution (GDPR, Article 13, paragraph 2, letter f) | I are collected automatically from the interested parties and for the purposes indicated above. |
| Lawfulness (GDPR, Art. 6 par. 1) | Processing is necessary to fulfill a legal obligation, and therefore consent is not required. |
& nbsp;
- COOKIE
The description of the type of cookies used, their management of use and purpose, is referred to the paragraph “Cookie Policy” in the document published on this website.
- RIGHTS OF THE INTERESTED PARTY (GDPR articles 15-22)
At any time, the interested party may exercise the right to:
- ask for confirmation of the existence or otherwise of your personal data.
- obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period.
- obtain the rectification and deletion of data.
- obtain the limitation of the processing.
- obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without hindrance.
- oppose the processing at any time and also in the case of processing for direct marketing purposes.
- oppose an automated decision-making process relating to natural persons, including profiling.
- to lodge a complaint with the Italian Data Protection Authority.
Requests should be addressed to the Data Controller by writing to _______
Every effort will be made to make the functions of this site as interoperable as possible with the automatic privacy control mechanisms available in some products used by users.
- DATA PROTECTION MANAGER:
The figure of Data Protection Officer (DPO) has not been identified as the writer does not process data of natural persons falling within the definition of art. 37 European Regulation GDPR 2016/679.
Considering that the state of improvement of the automatic control mechanisms does not currently make them free from errors and malfunctions, it is specified that this document, published at [], constitutes the “Privacy Policy” of this site which will be subject to updates.