(Art. 13 and 14 EU Regulation 2016/679)
For the purposes set out in the EU Regulation no. 2016/679 concerning the protection of individuals with regard to the processing of personal data we inform you that the processing of personal data provided and acquired, will be processed in accordance with the rules provided by the said Regulation in compliance with the resulting rights and obligations.
The data controller is: Maso Martis società semplice agricola di Stelzer Alessandra e Maddalena & C., VAT number and fiscal code 02632350225 with headquarters in Trento Martignano, (TN) Via dell’Albera 52
It informs you according to the art. 13 D.Lgs. 30.6.2003 n. 196 (hereinafter, “Privacy Code”) and art. 13 and 14 EU Regulation n. 2016/679 (hereinafter, “GDPR”) that your data will be processed in the manner and for the following purposes.
1. Object of the Treatment
The Data Controller processes personal data, such as, for example, name, surname, company name, address, telephone, e-mail, bank details and bank details (IBAN), payment, accounting, administrative, fiscal and financial.
2. Purpose of the processing
Your personal data are processed:
A) for the following Service Purposes:
B) Only subject to your specific and distinct consent (articles 23 and 130 of the Privacy Code and article 7 of the GDPR), for the following Marketing and profiling purposes:
C) We inform you that any “sensitive data”, pursuant to art. 4, 1 paragraph, lett. d) of the Privacy Code that may be contained in the curriculum or in the other documents sent by the candidates (data suitable to reveal, by way of example, the state of health, such as belonging to protected categories) will be immediately canceled. The members of the protected categories are, therefore, requested to send their curriculum vitae only by ordinary mail to the address indicated, together with the following signed declaration of consent: “Pursuant to art. 26 of Legislative Decree no. 196/2003, I authorize the Owner to process my sensitive data for the purposes specified in the information sheet “. In this case, the Sensitive Data will be processed, pursuant to art. 26, co. 1 of the Privacy Code, in compliance with the indications contained in the authorization n. 1/2016 of the Guarantor for the protection of personal data – Authorization to process sensitive data in employment relationships – 15 December 2016.
Below is some information on how we process the personal data of visitors who navigate within our site.
Compilation of Web forms
For the newsletter subscription request and the booking request for visits to the winery you will be asked to fill in web forms with some of your personal data.
In compliance with the provisions of EU Regulation 2016/679, regarding the protection of personal data, we provide below some useful information to know how we process the data you send us.
Method and purpose of the treatment
To access services or participate in initiatives (eg visits to the winery, tastings), personal data such as name, surname, telephone, e-mail, etc. can be requested. Through the web forms available on the site we never ask you for sensitive data (eg related to revealing the racial and ethnic origin, religious beliefs, philosophical, political, health status, sexual life, etc.) or judicial (data on criminal records, or relating to the status of defendant or suspect, etc.). The processing of data will be carried out through the use of IT, electronic and paper tools and supports in compliance with the provisions of law aimed at ensuring the security and confidentiality, as well as the accuracy, updating and relevance of the data with respect to the stated purposes. . You can help us to ensure that your data is always accurate by communicating updates to the address email@example.com. The data that will issue us will be processed by the employees expressly designated by the Owner as persons in charge and / or responsible for the treatment, according to the respective authorization profiles assigned. Distributors and managers will be able to carry out the operations of consultation, use, processing, comparison and any other opportune operation, even automated, only in cases where this has been expressly authorized. We will process personal data that will release us only for the purpose proper and strictly relevant to each service requested and used. In all cases where we intend to use your data for further or different purposes with respect to the provision of the requested service, before proceeding to treatment we will ask you for your consent.
Consent to treatment
In all cases where your consent is required for the processing of your data, we will collect it in advance for the individual purposes, in a free, unconditional form.
Communication and dissemination
Stelzer Antonio will collect and use your data only for the purposes to which you have given your consent and under no circumstances will you disclose it to third parties without having informed you and having requested your consent.
Rights of the interested party
At any time he can exercise the rights referred to in art. 7 of Legislative Decree 196/03. In particular, it has the right to obtain confirmation of the existence or not of the data provided (content and origin), verify its accuracy or request its integration, updating, rectification or cancellation. To exercise your rights, you can contact the Data Processor by writing to firstname.lastname@example.org
What are cookies and how do they work?
Cookies are small files sent and stored on your computer by the websites you visit. Cookies are stored in the file directory of your browser. The next time you visit the site, your browser will read the cookie and retransmit the information to the website or to the entity that originally created the cookie. To learn more about these technologies and how they work, you can visit, for example, the allaboutcookies.org website.
Types of cookies
Technical cookies: these cookies are used to ensure and facilitate the normal navigation of the site and allow its features (for example remember the language selected) and to collect some information in aggregate (anonymous) on users.
Statistical or analytical cookies: cookies in this category are used for
collect anonymous information concerning the use of the site by users (number of visitors, pages visited, time spent etc …). This information can be used for statistical analysis in order to improve the use of the site, to elaborate communication strategies and to optimize the contents according to the user’s wishes. These cookies are sent from the site itself or from third-party domains (for example, Google Analytics).
Profiling cookies: include
Cookies for advertising: cookies are installed in order to profile users (based on behavior, preferences, ideas, age, etc.) and then send advertising messages in line with the preferences expressed by the user within the pages of the site.
Cookies for social media: these third-party cookies allow users to interact with social networks (Facebook, Twitter, YouTube, etc.) and in particular to share site content through the aforementioned channels.
Our site uses technical and statistical cookies.
Our site does NOT use profiling cookies.
How can you manage cookies?
You can review the options available for managing cookies in your browser. The browser can be used to manage cookies related to basic functions and to improve the browsing experience on the site. Different browsers use different ways to disable cookies, but they are usually found under the Tools or Options menu. You can also consult the browser’s Help menu.
Data collected through Web Analytics services
Our site collects anonymous data through analytical cookies (see the appropriate section above) provided by third-party web analytics tools. Cookies are used through web analytics tools in order to analyze incoming traffic, establish appropriate changes to the website and therefore make the user experience better and more engaging on our website. We inform you that this site uses analytical cookies of third parties, not profiling, provided by Google Analytics.
Data collected through other third-party services
We also inform you that the site contains links to sites and services of third parties that could in turn use and store cookies. In particular, given that these services could determine a connection between the user and the third party, in which our site simply acts as an intermediary, without any control, it is recommended to view the privacy and cookie information of the following third parties:
Facebook Inc Google Analytics Google+ Instagram Twitter Inc
For how long do we store the information in your cookies?
It depends on the types of cookies. The session cookies expire when you close the browser. Persistent cookies have very long expiration dates, which can extend up to a few years.
Please note that if you are already a customer, we may send you commercial communications relating to services and products of the Owner similar to those you have already used, subject to your disagreement (Article 130 paragraph 4 of the Privacy Code).
3. Processing methods
The processing of your data will be based on the principles of correctness, lawfulness and transparency and can also be carried out through automated procedures designed to store, manage and transmit them and will take place through appropriate tools, as far as reason and state of the art, to ensure safety and confidentiality through the use of appropriate procedures that avoid the risk of loss, unauthorized access, illicit use and dissemination.
The processing of your personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and / or automated processing.
4. Data retention period
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the Service Finality relationship and for no more than 2 years from the collection of data for Marketing Purposes or in this last case until its explicit withdrawal of consent.
5. Access to data
Your data may be made accessible for the purposes referred to in art. 2.A), 2.B), 2.C) and 2.D):
6. Data communication
Without the need for further consent, the Data Controller may communicate your data for the purposes referred to in art. 2.A) to Supervisory Bodies, Judicial Authorities, to insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of said purposes. These subjects will process the data in their capacity as independent data controllers.
7. Data transfer
Personal data are stored on servers located in Trento – Italy, within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.
8. Nature of the provision of data and consequences of refusal to respond
The provision of data for the purposes referred to in art. 2.A) is mandatory as required by law. In their absence, we can not guarantee the services of the art. 2.A).
The provision of data for the purposes referred to in art. 2.B), 2.C) and 2.D) is optional. You can therefore decide not to give any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material concerning the Services offered by the Data Controller. However, you will continue to be entitled to the Services referred to in art. 2.A).
9. Rights of the interested party
In relation to the data subject of the processing referred to in this informative report, the right to:
In your capacity as an interested party, you have the rights set forth in art. 7 of the Privacy Code and art. 15 GDPR and precisely the rights of:
the. obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
ii. obtain the indication: a) of the origin of personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the owner, the managers and the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, managers or agents;
iii. obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment is it proves impossible or involves a use of means manifestly disproportionate to the protected right;
iv. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail. It should be noted that the right of opposition of the interested party, set out in point b) above, for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the data subject to exercise the right to object even only partially. Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or none of the two types of communication.
Where applicable, it also has the rights referred to in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right of limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority.
10. How to exercise rights
You can exercise your rights at any time by sending:
Any reason for dissatisfaction or protest can be reported by the Authority for the protection of personal data located in Piazza di Monte Citorio nr. 121 Rome tel. 06.696771 e mail: email@example.com
11. Owner, manager and agents
The Data Controller is Maso Martis società semplice agricola di Stelzer Alessandra e Maddalena & C. based in Trento in Via dell’Albera 52;
The Data Controller has designated in writing as Data Processors, pursuant to art. 30 of the Privacy Code, the employees of the company departments responsible for pursuing the aforementioned purposes and to provide them with adequate instructions. The complete and updated list of the Data Processors is knowable on request at Stelzer Antonio, based in Trento, Via dell’Albera 52.