This section describes the personal data’s processing methods in the management of the website www.peruzzofattoria.com, in accordance with Article 13 of the EU Regulation n. 2016/679 (hereinafter: “GDPR”), as well as the provisions about the Cookies regulation.
This policy does not apply to other websites, pages or online services accessible through hyperlinks or possibly mentioned on this website and referred to resources that are outside the domain of the Farm.
The personal data controller, for everyone who is already identified or could be after visiting the Farm’s website and whose data are processed for the purposes of the activities listed below, is Fattoria di Peruzzo S.S.A. as the legal representative of the same, with registered office in Fattoria di Peruzzo, Strada provinciale Peruzzo, Roccatederighi (GR).
The processing can be performed, under the direct responsibility of the data controller, by subjects appointed by the latter. In this case, in charge of the data controller Fattoria di Peruzzo S.S.A. may be the sole members of the company itself.
Purpose of data processing
All provided data will be stored in the databases of the Farm and shall be processed solely in order to:
provide the services requested, as well as to verify their quality and standards;
fulfil any financial and/or accounting duty, transmission of business invoices included;
direct or indirect selling activities;
statistical and commercial surveys, as well as marketing activities.
Data will be processed in a strictly confidential way and for the sole purposes of the professional fulfilment of the services requested. Moreover, unless the law requires so or unless strictly necessary, data will not be communicated to third-parties.
Data processing methods and storage of personal data
In accordance with the provisions of the GDPR, the processing of personal data is carried out by means of (a set of) operations concerning the collection, registration, organisation and storage of data, performed with or without the aid of electronic or automated devices and by specifically appointed operators, in compliance with Article 29 of the GDPR.
In accordance with Article 32 of the GDPR, Fattoria di Peruzzo S.S.A. adopts, in the processing of personal data, strict security procedures, aimed to prevent improper use (e.g. protection from unauthorised accesses).
In compliance with the principles of lawfulness, data minimisation and purpose limitation (art. 5 GDPR), personal data will be stored for the time necessary to achieve the purposes referred to in point 3.
Types of processed data
Computer systems and software procedures employed in this website acquire, during their normal functioning, personal data, whose transmission is inherent in the use of Internet communication protocols.
Despite these data are not collected to be associated with identified persons, they could anyway, through their processing and association, allow users’ identification.
This category of data includes: IP addresses or domain names of the computers connecting to the website, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method of the submission to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (success, error, etc.) and other data relating to the operating system and the IT environment of the user.
These data are used for the sole purpose of obtaining anonymous statistical information about the use of the website and to check its correct functioning. After their processing, data are immediately deleted. However, they could be used to ascertain responsibility in case of hypothetical computer crimes.
Data voluntarily provided by users
This category of data encompasses the e-mail addresses of the users/customers through which e-mails are voluntarily sent to Fattoria di Peruzzo and which are necessary in order to respond to the requests, as well as any other data included in those e-mails, which will be subsequently acquired.
Informative summaries will be progressively reported or displayed on the website to carry out specific services.
See the Cookies Policy at the following link: http://www.peruzzofattoria.com/it/privacy.html.
Refusal to data submission
Even if the provision of data is optional, any refusal to submit personal data may make it impossible to obtain the requested service(s).
Rights of the user
Article 15 and 22 of the GDPR allow the user/customer to exercise the right to:
request confirmation of whether personal data about the user/customer exist;
obtain information concerning the purposes of the processing, the categories of personal data, recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period;
obtain data portability;
withdraw, at any time, the consent to the processing of data. In this case, the withdrawal will not affect the lawfulness of the treatment based on consent that took place before the withdrawal;
ask the controller to have access to personal data, to delete or correct them or to limit their processing;
make a complaint to the supervisory Authority.
The exercise of the aforementioned rights can be carried out through written recorded-delivery letter to the address: “Fattoria di Peruzzo S.S.A., Strada Provinciale di Peruzzo, Roccatederighi (GR), or by e-mail at: [*].
The child who is at least 14 years old can express consent to the processing of their personal data in relation to the direct offer of the services provided. In case the consent to the processing of data of users/clients under the age of 14 is required, this consent must be legitimised through a specific authorisation of those who exercise parental responsibility, pursuant to art. 2-quinquies of D.lgs. n. 101/2018, in application of Article 8, paragraph 1, GDPR.