Information provided in accordance with Article 13 of the EU Regulation 2016/679 (Regulation for short) – to users accessing the website www.frantoiocongedi.com
With this policy OLEARIA CONGEDI SRL owner of the brand and website frantoiocongedi.com intends to inform the users visitors of the website “frantoiocongedi.com” (hereafter the “Site”) of the policy adopted regarding the Protection of Personal Data, underlining its commitment and attention with reference to the protection of the privacy of the visitors of the Site. Please read carefully our Privacy Policy which applies both in case you access the Website and simply decide to browse through it using our services, without purchasing any products, and in case you decide to make purchases.
Browsing within the Site is free and does not require any registration, with the exception of certain areas in which the user may freely and expressly provide a set of data concerning him or her in order to access specifically identified services (e.g. to be able to proceed with purchases, subscribe to the newsletter or request information, etc.).
Where, therefore, the visitor intends to provide his or her personal data in order to access these additional services, he or she will be expressly informed in accordance with Legislative Decree No. 196 of 30 June 2003, “Code on the Protection of Personal Data”, (the “Code”) and EU Regulation 679/2016 “General Data Protection Regulation” (the “Regulation”) with an indication (by way of example) of the purposes and methods of use of the data by frantoiocongedi.com, as well as the right to request at any time the deletion of the data or their updating. Any reference to the Code contained in the Privacy Policy, and in the Site in general, must be understood to be valid and effective to the extent and to the extent that the rules referred to will remain in force after the entry into force of the Regulations (May 25, 2018).
The website is not intended for use by children under the age of sixteen, who are also prohibited from creating an account or otherwise providing their personal information.
Pursuant to the Code and the Regulations, OLEARIA CONGEDI SRL provides the following information.
The Data Controller and Data Processors
The owner of the processing of personal data is OLEARIA CONGEDI SRL, based in Via Mare snc – C.da Masseria Bianco, 73059 Ugento (LE), P.IVA 04230250757, Reg. Imp of LECCE, e-mail info@frantoiocongedi.com
1. OBJECT OF PROCESSING
The Controller processes personal, identifying data (e.g., first name, last name, company name, address, telephone, e-mail, bank and payment references) hereafter, “personal data” or also “data,” communicated by you in connection with the conclusion of contracts for the Controller’s services.
2. PURPOSE.
Your personal data are processed: A) without your express consent (art. 24 lett. a), b), c) Privacy Code and art. 6 lett. (b), (e) GDPR), for the following service purposes: – to conclude contracts for the Controller’s services; – to fulfill pre-contractual, contractual and tax obligations arising from existing relationships with you; – to fulfill obligations under the law, a regulation, EU legislation or an order of the Authority (such as anti-money laundering); – to exercise the Controller’s rights, e.g. the right of defense in court; B) only with your specific and separate consent (art. 23 and 130 Privacy Code and Art. 7 GDPR), for the following marketing purposes: – to send you by e-mail, mail and/or sms and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the Owner and detection of the degree of satisfaction on the quality of services; – to send you by e-mail, mail and/or sms and/or telephone contacts commercial and/or promotional communications of third parties. Please note that if you are already our customers, we may send you commercial communications relating to services and products of the Owner similar to those you have already used, unless you disagree (art. 130 c. 4 Privacy Code).
No registration is required to access the Site. However, there are sections within the Site that require registration or the use of a username and password (e.g., to register for the personal area, or to complete the online purchasing process), or services for the use of which you must provide your information (e.g., your information may be required to access newsletter services, to contact us, etc.).
Where frantoiocongedi.com acquires information and personal data it will inform users in advance of the purposes for which such data is required and the manner in which it will be used. Where necessary, frantoiocongedi.com will acquire the user’s specific consent to the relevant use of the data. By way of example, personal data such as name and surname, telephone number, e-mail address and other information that the user agrees to provide in order to use the services of the Site through the completion of a specific registration form (e.g. to access the reserved area of the Site) may be requested. frantoiocongedi.com will use the personal data collected online for the sole purposes indicated during registration.
Newsletters and commercial communications
Users may voluntarily opt-in to receive newsletters and commercial communications. The site asks for explicit and free consent before undertaking such promotional initiatives and may ask the user for additional information so as to create personalized and more relevant communications. Users can always easily revoke their consent, which is the legal basis for this processing (Art. 6.1.a of the Regulations).
Trade Orders
In the case of an order, frantoiocongedi.com asks the user to provide personal data for the essential purpose of providing the service or good purchased, including also the after-sales phase (e.g. delivery tracking, support services, customer satisfaction) and activities to prevent fraud and misuse of the site. The legal basis for processing is the fulfillment of contractual obligations (Art. 6.1.b of the Regulations). For payments, the site uses third-party providers and does not store any banking information belonging to the user. The data controller has no control over the provider of this type of service and the user should therefore refer to the privacy policy and terms of service of that provider.
Profiling
The purpose of profiling is to propose products, services and initiatives more appropriate to users’ preferences, habits and interests. Personal data may also be used for remarketing, retargeting or profiling purposes through third parties (e.g., social networks). As for the users of the site, it is in the legitimate interest of the site to process personal data to offer more interesting and personalized services by improving the performance of the site.
Minors
The site urges parents and all those who supervise minors to educate them on how to handle personal data on the Internet safely and responsibly. Minors should not transmit personal data to the site without their parents’ consent. The site agrees not to intentionally collect personal data from minors, use them in any way, or disclose them to third parties.
3. MODE, DURATION OF DATA PROCESSING AND SCOPE OF COMMUNICATION
The processing of your personal data is carried out by means of the operations indicated in Art. 4 Privacy Code and Art. 4 No. 2) GDPR and precisely: – collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subject to both paper and electronic and/or automated processing. The Data Controller will process your personal data for as long as necessary to fulfill the above purposes and in any case for no longer than 10 years after termination of the relationship for service purposes and for no longer than 2 years after data collection for marketing purposes.
4. ACCESS TO DATA
Your data may be made accessible for the purposes referred to in art. 2.A) and 2.B): – to employees and collaborators of the Owner and abroad, in their capacity as appointees and / or internal data processors and / or system administrators; – to third party companies or other entities (by way of example, credit institutions, professional firms, etc.) that carry out activities in outsourcing on behalf of the Owner, in their capacity as external data processors. The data may be processed both electronically and on paper (e.g., for the management of purchases on the Site). frantoiocongedi.com guarantees the lawful and according to correctness processing of personal data provided through the Site, in full compliance with the regulations in force, as well as the maximum confidentiality of the data provided during registration. All information collected is transmitted in a secure connection so as to prevent its interception by outsiders.
Any data provided by users will be processed for the time periods stipulated in the specific disclosures provided at the time of data collection.
Regarding the retention times of data collected through the use of profiling tools (e.g., cookies), see our Cookie Policy.
The data will not be communicated or disseminated to third parties except to the extent and under the conditions expressly stated in the information from time to time provided to the user and subject to the user’s authorization.
5. DATA COMMUNICATIONS
Without the need for your express consent (ex art. 24 lett. a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2.A) to Supervisory Bodies, Judicial Authorities, as well as to those subjects to whom the communication is mandatory by law for the fulfillment of the said purposes. These subjects will process the data in their capacity as autonomous data controllers. Your data will not be disseminated.
The owner may transfer the user’s personal data to third parties qualified as data processors or data controllers to carry out technical or commercial operations necessary to perform the services related to the best management of the site (e.g. couriers and postal operators; advertising, commercial and social media agencies; IT service providers; payment service providers; customer service providers). In such cases, disclosure of data is essential to fulfill contractual commitments and to improve site performance. The owner is committed through data processing agreements to ensure that those responsible handle data appropriately and securely.
The user can request a list of data controllers using the data controller’s e-mail. In addition, the controller may be required to share your personal data when required by law or order of public authority or to protect its own right or the right of a third party.
Third-party sites
This policy does not cover other sites or platforms to which the site may link (e.g., banners, advertisements, and other links to third-party sites or platforms) to which you are encouraged to refer by reading the relevant Cookie Policy.
6. DATA TRANSFER
Personal data are stored at the Controller’s premises within the European Union. It is in any case understood that the Data Controller, should it become necessary, will have the right to move the servers outside the EU as well. In this case, the Data Controller assures as of now that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.
The processing related to the services provided by the Site is carried out at the headquarters of OLEARIA CONGEDI SRL indicated in point 1 above and is performed by the data processors of the Marketing Department, as well as the companies that provide functional services for the management of the Site, appointed as external data processors.
7. NATURE OF PROVISION OF DATA AND CONSEQUENCES OF REFUSAL TO RESPOND
The provision of data for the purposes of Art. 2.A) is mandatory. In their absence, we will not be able to guarantee you the Services of Art. 2.A). The provision of data for the purposes of Art. 2.B) is instead optional. He can then decide not to give any data or to deny later the possibility of processing data already provided: in this case, he will not be able to receive newsletters, commercial communications and advertising material related to the Services offered by the Owner. He will, however, continue to be entitled to the Services under Art. 2.A). By means of a communication to be sent to the e-mail address info@frantoiocongedi.com you may at any time exercise your rights under Articles 15 to 23 of the Regulations, including knowing what data we are processing, in what manner and for what purposes we use it, modify the data you have provided us with or delete it, ask us to limit the use of your data, request to receive or transmit your data, without prejudice to the possibility of always changing your consents (if any). You can also always object to the processing of your data carried out, in particular, for marketing purposes or analysis of your preferences.
8. RIGHTS OF THE DATA SUBJECT
In your capacity as a data subject, you have the rights set forth in Art. 7 Privacy Code and Art. 15 GDPR and specifically the rights to: – obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in intelligible form; – obtain information on the origin of personal data, the purposes and methods of processing and the logic applied in case of processing carried out with the aid of electronic instruments as well as the identification details of the owner, managers and the designated representative under Art. 5, paragraph 2 Privacy Code and Art. 3, paragraph 1, GDPR; – obtain the updating, rectification or, when interested, the integration of data; the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept in relation to the purposes for which the data were collected or subsequently processed; – where applicable, also has the rights under Art. 16-21 GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to complain to the Data Protection Authority. Pursuant to Art. 13 para. 2 and Art. 14 para. 2 GDPR you have the right to know: – the storage period of your personal data – to request from the data controller access to and rectification or erasure of your personal data or restriction of processing concerning you or to object to its processing, as well as the right to data portability; Limited to personal data not acquired at your premises, you have the right: – to lodge a complaint with a supervisory authority; – to know the source from which your personal data originates and, if applicable, whether the data comes from publicly accessible sources; – to know whether there is automated decision-making, including profiling as referred to in Article 22(1) and (4) GDPR, and, at least in such cases, meaningful information about the logic used, as well as the importance and the expected consequences of such processing for you.
9. WAYS OF EXERCISING RIGHTS
You may at any time exercise your rights by sending:
registered letter with return receipt to: OLEARIA CONGEDI SRL
Via Mare snc – C.da Masseria Bianco, 73059 Ugento (LE), an e-mail to: info@frantoiocongedi.com
10. OWNER, MANAGERS AND APPOINTEES
The Data Controller is:
OLEARIA CONGEDI SRL
Via F. Quarta 65/S – 73055 Racale (LE).
Responsible DPO OLEARIA CONGEDI SRL
The updated list of data processors and processors is kept at the registered office of the Data Controller. frantoiocongedi.com reserves the right to revise, modify or simply update, in whole or in part, at its sole discretion, in any way and/or at any time, without prior notice, this Privacy Policy also in consideration of changes in laws or regulations on the protection of personal data. Changes and updates to the Privacy Policy will be notified to users by emailing registered users of the Site and posting on the Site’s Home Page, and will be binding as soon as published and communicated. Please perta