Privacy & Cookie policy

INFORMATION AND CONSENT FOR THE PROCESSING OF PERSONAL DATA

(Art. 13 and 14 EU Regulation 2016/679)

For the purposes set out in the EU Regulation no. 2016/679 concerning the protection of individuals with regard to the processing of personal data we inform you that the processing of personal data provided and acquired, will be processed in accordance with the rules provided by the said Regulation in compliance with the resulting rights and obligations.

Data controller.
The data controller is: Maso Martis società semplice agricola di Stelzer Alessandra e Maddalena & C., VAT number and fiscal code 02632350225 with headquarters in Trento Martignano, (TN) Via dell’Albera 52

It informs you according to the art. 13 D.Lgs. 30.6.2003 n. 196 (hereinafter, “Privacy Code”) and art. 13 and 14 EU Regulation n. 2016/679 (hereinafter, “GDPR”) that your data will be processed in the manner and for the following purposes.

1. Object of the Treatment

The Data Controller processes personal data, such as, for example, name, surname, company name, address, telephone, e-mail, bank details and bank details (IBAN), payment, accounting, administrative, fiscal and financial.

2. Purpose of the processing

Your personal data are processed:
A) for the following Service Purposes:

  • conclude the contracts for the services of the Owner;
  • fulfill the pre-contractual, contractual and tax obligations deriving from relations with you in existence;
  • fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority;
  • respond to any requests for information and to process and manage purchase orders;
  • allow registration to the website;
  • fulfill fiscal, administrative and accounting obligations;
  • fulfill relations with State Administrations, Public Bodies and Private Bodies;
  • exercise the rights of the owner, for example the right to defense in court and to recover his credit;
  • In this first case, the processing is necessary for the execution of pre-contractual and contractual measures adopted upon your
  • request and, the processing of the data, is legitimized by the supply contract of which the User is a party.

B) Only subject to your specific and distinct consent (articles 23 and 130 of the Privacy Code and article 7 of the GDPR), for the following Marketing and profiling purposes:

  • Send them via e-mail, mail and / or text messages and / or telephone contacts, newsletters, commercial communications and / or advertising material on products or services offered by the Data Controller and recognition of the degree of satisfaction with the quality of services;
    send via e-mail, mail and / or sms and / or telephone contacts commercial and / or promotional communications of third parties (for example, business partners);

C) We inform you that any “sensitive data”, pursuant to art. 4, 1 paragraph, lett. d) of the Privacy Code that may be contained in the curriculum or in the other documents sent by the candidates (data suitable to reveal, by way of example, the state of health, such as belonging to protected categories) will be immediately canceled. The members of the protected categories are, therefore, requested to send their curriculum vitae only by ordinary mail to the address indicated, together with the following signed declaration of consent: “Pursuant to art. 26 of Legislative Decree no. 196/2003, I authorize the Owner to process my sensitive data for the purposes specified in the information sheet “. In this case, the Sensitive Data will be processed, pursuant to art. 26, co. 1 of the Privacy Code, in compliance with the indications contained in the authorization n. 1/2016 of the Guarantor for the protection of personal data – Authorization to process sensitive data in employment relationships – 15 December 2016.

D) Cookies
Below is some information on how we process the personal data of visitors who navigate within our site.

Compilation of Web forms
For the newsletter subscription request and the booking request for visits to the winery you will be asked to fill in web forms with some of your personal data.

In compliance with the provisions of EU Regulation 2016/679, regarding the protection of personal data, we provide below some useful information to know how we process the data you send us.

Method and purpose of the treatment
To access services or participate in initiatives (eg visits to the winery, tastings), personal data such as name, surname, telephone, e-mail, etc. can be requested. Through the web forms available on the site we never ask you for sensitive data (eg related to revealing the racial and ethnic origin, religious beliefs, philosophical, political, health status, sexual life, etc.) or judicial (data on criminal records, or relating to the status of defendant or suspect, etc.). The processing of data will be carried out through the use of IT, electronic and paper tools and supports in compliance with the provisions of law aimed at ensuring the security and confidentiality, as well as the accuracy, updating and relevance of the data with respect to the stated purposes. . You can help us to ensure that your data is always accurate by communicating updates to the address amministrazione@masomartis.it. The data that will issue us will be processed by the employees expressly designated by the Owner as persons in charge and / or responsible for the treatment, according to the respective authorization profiles assigned. Distributors and managers will be able to carry out the operations of consultation, use, processing, comparison and any other opportune operation, even automated, only in cases where this has been expressly authorized. We will process personal data that will release us only for the purpose proper and strictly relevant to each service requested and used. In all cases where we intend to use your data for further or different purposes with respect to the provision of the requested service, before proceeding to treatment we will ask you for your consent.

Consent to treatment
In all cases where your consent is required for the processing of your data, we will collect it in advance for the individual purposes, in a free, unconditional form.

Communication and dissemination
Stelzer Antonio will collect and use your data only for the purposes to which you have given your consent and under no circumstances will you disclose it to third parties without having informed you and having requested your consent.

Rights of the interested party
At any time he can exercise the rights referred to in art. 7 of Legislative Decree 196/03. In particular, it has the right to obtain confirmation of the existence or not of the data provided (content and origin), verify its accuracy or request its integration, updating, rectification or cancellation. To exercise your rights, you can contact the Data Processor by writing to amministrazione@masomartis.it

Cookie
This informative report explains in detail how our site (www.masomartis.it) uses cookies. If you visit our website and your browser settings accept cookies, the use of our cookies will be considered accepted.

What are cookies and how do they work?
Cookies are small files sent and stored on your computer by the websites you visit. Cookies are stored in the file directory of your browser. The next time you visit the site, your browser will read the cookie and retransmit the information to the website or to the entity that originally created the cookie. To learn more about these technologies and how they work, you can visit, for example, the allaboutcookies.org website.

Types of cookies

Technical cookies: these cookies are used to ensure and facilitate the normal navigation of the site and allow its features (for example remember the language selected) and to collect some information in aggregate (anonymous) on users.

Statistical or analytical cookies: cookies in this category are used for
collect anonymous information concerning the use of the site by users (number of visitors, pages visited, time spent etc …). This information can be used for statistical analysis in order to improve the use of the site, to elaborate communication strategies and to optimize the contents according to the user’s wishes. These cookies are sent from the site itself or from third-party domains (for example, Google Analytics).

Profiling cookies: include

Cookies for advertising: cookies are installed in order to profile users (based on behavior, preferences, ideas, age, etc.) and then send advertising messages in line with the preferences expressed by the user within the pages of the site.
Cookies for social media: these third-party cookies allow users to interact with social networks (Facebook, Twitter, YouTube, etc.) and in particular to share site content through the aforementioned channels.
Our site uses technical and statistical cookies.
Our site does NOT use profiling cookies.

Why does our site use cookies?
Our site uses cookies to offer our users a more functional experience and for statistical purposes, in order to monitor the use of the site in aggregate (eg number of visitors, language, type of instrument used). You can view your cookie management options in the next chapter.

How can you manage cookies?
You can review the options available for managing cookies in your browser. The browser can be used to manage cookies related to basic functions and to improve the browsing experience on the site. Different browsers use different ways to disable cookies, but they are usually found under the Tools or Options menu. You can also consult the browser’s Help menu.

Data collected through Web Analytics services
Our site collects anonymous data through analytical cookies (see the appropriate section above) provided by third-party web analytics tools. Cookies are used through web analytics tools in order to analyze incoming traffic, establish appropriate changes to the website and therefore make the user experience better and more engaging on our website. We inform you that this site uses analytical cookies of third parties, not profiling, provided by Google Analytics.

Data collected through other third-party services
We also inform you that the site contains links to sites and services of third parties that could in turn use and store cookies. In particular, given that these services could determine a connection between the user and the third party, in which our site simply acts as an intermediary, without any control, it is recommended to view the privacy and cookie information of the following third parties:

Facebook Inc Google Analytics Google+ Instagram Twitter Inc

For how long do we store the information in your cookies?
It depends on the types of cookies. The session cookies expire when you close the browser. Persistent cookies have very long expiration dates, which can extend up to a few years.

Please note that if you are already a customer, we may send you commercial communications relating to services and products of the Owner similar to those you have already used, subject to your disagreement (Article 130 paragraph 4 of the Privacy Code).

Real Cookie banner
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal basis for the processing of personal data in this context are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

This site allows you to enable cookies and change your choice settings through the following links:

3. Processing methods

The processing of your data will be based on the principles of correctness, lawfulness and transparency and can also be carried out through automated procedures designed to store, manage and transmit them and will take place through appropriate tools, as far as reason and state of the art, to ensure safety and confidentiality through the use of appropriate procedures that avoid the risk of loss, unauthorized access, illicit use and dissemination.

The processing of your personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and / or automated processing.

4. Data retention period

The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the Service Finality relationship and for no more than 2 years from the collection of data for Marketing Purposes or in this last case until its explicit withdrawal of consent.

5. Access to data

Your data may be made accessible for the purposes referred to in art. 2.A), 2.B), 2.C) and 2.D):

  • to employees and collaborators of the Owner in their capacity as persons in charge and / or internal managers of the processing and / or system administrators;
  • to third party companies or other subjects (as an indication, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) who carry out outsourced activities on behalf of the Owner, in their capacity as external managers of the treatment.

6. Data communication

Without the need for further consent, the Data Controller may communicate your data for the purposes referred to in art. 2.A) to Supervisory Bodies, Judicial Authorities, to insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of said purposes. These subjects will process the data in their capacity as independent data controllers.

7. Data transfer

Personal data are stored on servers located in Trento – Italy, within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.

8. Nature of the provision of data and consequences of refusal to respond

The provision of data for the purposes referred to in art. 2.A) is mandatory as required by law. In their absence, we can not guarantee the services of the art. 2.A).

The provision of data for the purposes referred to in art. 2.B), 2.C) and 2.D) is optional. You can therefore decide not to give any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material concerning the Services offered by the Data Controller. However, you will continue to be entitled to the Services referred to in art. 2.A).

9. Rights of the interested party

In relation to the data subject of the processing referred to in this informative report, the right to:

  • Access (Article 15 of EU Regulation No. 2016/679): The data subject has the right to obtain from the data controller confirmation that the processing of personal data concerning him or her is in progress and, if so, to obtain access to personal data.
  • Rectification (Article 16 of EU Regulation No. 2016/679): The data subject has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.
  • Cancellation (Article 17 of EU Regulation No. 2016/679): The data subject has the right to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller is obliged to cancel without unjustified personal data delay.
  • Limitation (Article 18 of EU Regulation No. 2016/679): The data subject has the right to obtain from the data controller the limitation of processing
  • Portability, understood as the right to obtain from the data controller the data in a structured format of common use and legible by automatic device to transmit them to another data controller without impediments (Article 20 of EU Regulation No. 2016/679);
  • Opposition to processing (Article 21 of EU Regulation No. 2016/679):
    1. The interested party has the right to oppose at any time, for reasons connected with his particular situation, to the processing of his personal data pursuant to Article 6, paragraph 1, letters e) of), including profiling on the basis of these provisions. The data controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or the defense of a right in court.
    2. If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him / her for such purposes, including profiling in so far as it is related to such direct marketing
    3. If the data subject objects to processing for direct marketing purposes, personal data are no longer processed for these purposes.
    4. Where personal data are processed for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 (1), the data subject shall have the right to object to the processing of personal data for reasons connected with his particular situation. concerns, unless the processing is necessary for the performance of a task in the public interest.
  • Withdrawal of the consent to the processing, without prejudice to the lawfulness of the treatment based on the consent acquired before the revocation (Article 7, paragraph 3 of EU Regulation No. 2016/679): The interested party has the right to withdraw his consent in any moment. The withdrawal of consent does not affect the lawfulness of the treatment based on consent before revocation. Before giving his consent, the interested party is informed about this. The consent is revoked with the same ease with which it is granted.
  • Propose a complaint to the Authority for the Protection of Personal Data (Article 77 of EU Regulation No. 2016/679): Without prejudice to any other administrative or judicial appeal, the interested party who considers that the processing that concerns him is in violation of this regulation the right to lodge a complaint with a supervisory authority, in particular in the Member State in which he normally resides, works or in the place where the alleged violation has occurred.

In your capacity as an interested party, you have the rights set forth in art. 7 of the Privacy Code and art. 15 GDPR and precisely the rights of:

the. obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;

ii. obtain the indication: a) of the origin of personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the owner, the managers and the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, managers or agents;

iii. obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment is it proves impossible or involves a use of means manifestly disproportionate to the protected right;

iv. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail. It should be noted that the right of opposition of the interested party, set out in point b) above, for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the data subject to exercise the right to object even only partially. Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or none of the two types of communication.

Where applicable, it also has the rights referred to in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right of limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority.

10. How to exercise rights

You can exercise your rights at any time by sending:

  • a registered letter to Maso Martis società semplice agricola di Stelzer Alessandra e Maddalena & C. based in Trento in Via dell’Albera 52
  • an e-mail to the address masomartis@pec.it

Any reason for dissatisfaction or protest can be reported by the Authority for the protection of personal data located in Piazza di Monte Citorio nr. 121 Rome tel. 06.696771 e mail: garante@gpde.it

11. Owner, manager and agents

The Data Controller is Maso Martis società semplice agricola di Stelzer Alessandra e Maddalena & C. based in Trento in Via dell’Albera 52;

The Data Controller has designated in writing as Data Processors, pursuant to art. 30 of the Privacy Code, the employees of the company departments responsible for pursuing the aforementioned purposes and to provide them with adequate instructions. The complete and updated list of the Data Processors is knowable on request at Stelzer Antonio, based in Trento, Via dell’Albera 52.

Partners of creativity Why are they so important to us

0