The Data Controller is the company Impresa Agricola Pier Delle Vigne – VAT number 02002490502, with registered office in Palaia, Vallicelle, 2 – 56036 – Pisa.
This Privacy Policy aims to provide you with the necessary information to give explicit and informed consent to the processing carried out through or in connection with the use of the website.
The Data Controller protects the confidentiality of the personal data collected and ensures their necessary protection from any event that could jeopardize their security. To this end, the Data Controller implements recommended practices concerning the collection and use of personal data, which will be processed in accordance with internationally recognized principles of lawfulness, fairness, transparency, purpose limitation and storage limitation, data minimization, accuracy, integrity, and confidentiality, as well as the exercise of the rights recognized by applicable data protection laws for the data subjects.
This Privacy Policy only applies to the website and does not extend to other websites, pages, or online services that may be accessed through hyperlinks published on the website.
Collection and Processing of Personal Data
The Data Controller collects, receives, and processes personal data of users who access the website to use its features, for contact purposes to request assistance and/or to take advantage of the services offered by Impresa Agricola Pier Delle Vigne.
If personal data is provided on behalf of third parties, the transmitting party must ensure in advance that the individuals concerned have read this Privacy Policy.
Personal Data Subject to Processing
To enable the use of the website and its services, the Data Controller needs to collect and process certain personal data.
The personal data subject to processing includes the following:
Contact information – name, place and date of birth, tax code, address, phone number, mobile number, email address.
Interests – information provided regarding the person’s interests, including the services they are interested in.
Other personal data – information related to education, professional situation, or business-related information.
Navigation data – information related to the ways in which the website is used, as well as our communications, including information collected through cookies. Examples of this type of data include IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the response given by the server (successful, error, etc.), and other information related to the user’s operating system and computer environment.
Data voluntarily provided by users
The optional, explicit, and voluntary sending of emails, including through forms, as well as the submission of any curriculum vitae, involves the acquisition of the sender’s name, email address, and any other personal data included in the email message, forms, or curriculum vitae if attached.
In particular, users who intend to submit their application and curriculum vitae through the website are advised to exercise the utmost caution regarding their content, avoiding the inclusion of any personal data belonging to special categories, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as data concerning health.
Data voluntarily provided by users for marketing purposes
In the case of users who express their consent to the processing of personal data to receive advertising and promotional communications about the services of Impresa Agricola Pier Delle Vigne, for any discounts, gifts, and exclusive offers, in accordance with Article 13 of the Code. In particular, the processing is intended to conclude, manage, and execute the request submitted by the Data Subject for subscribing to the newsletter and other mailing lists of the Company in order to receive commercial and/or promotional and/or advertising communications via email about the Company’s services; to organize, manage, and execute the aforementioned subscription request, also by communicating the data to third-party providers; to fulfill legal obligations or other requirements requested by the competent Authorities.
Purpose of the processing and legal basis
The personal data processed by the Data Controller are exclusively those provided during the navigation of the Website, during the use of its Services, or through the sending of specific communications via email or contact forms.
The processing of personal data must be based on one of the legal bases provided for by the current legislation on the protection of personal data, as described below. Personal data are processed for the following purposes:
Establishment and execution of contractual relationships and related obligations, including any communication relating to services
The Data Controller may process contact data for the purpose of establishing and executing contractual relationships, providing the requested services, and responding to reports and complaints. The Company may also use contact data, particularly email, to provide information about the service.
The legal basis for the processing is the necessity to fulfill a contract of which the data subject is a party and the necessity to comply with legal obligations.
Use of the website
The Data Controller may process contact data and website usage data to: (i) manage services; (ii) transmit contact requests or requests for information or assistance.
These data, necessary for the use of the Website, are also processed to obtain statistical information on the use of the Services (most visited pages, number of visitors per hour or day, geographical areas of origin, etc.) and to ensure the proper functioning of the offered Services.
The legal basis for the processing is the fulfillment of contractual obligations.
Submit your curriculum vitae for potential job opportunities
The provision of your personal data for this purpose is optional. However, without your consent, it will not be possible to collect and evaluate your spontaneous application.
The legal basis for the processing is your explicit consent to the processing of personal data.
Send commercial and promotional communications
The provision of personal data, particularly the email address, with prior express consent, to send commercial communications about our products and services, keeping you updated on news, offers, and promotions. The provision of your personal data for this purpose is optional.
The legal basis for the processing is your explicit consent to the processing of personal data.
Send marketing communications related to similar services/products
The provision of personal data, particularly the email address or possibly the phone number, to receive information about promotional initiatives, conducted through automated contact methods, or for market research and statistical surveys related to services/products similar to those requested by you.
The legal basis for the processing is the Company’s legitimate interest in maintaining an effective contractual relationship.
Compliance with legally binding requests to fulfill a legal obligation, regulations, or judicial orders, as well as to defend a right in court
The Company collects your contact data to fulfill a legal obligation and/or to defend its own rights in court.
The legal basis for the processing is a legal obligation that the Company is required to comply with.
Personal data may be processed using both computerized and paper-based tools.
Consequences of not providing personal data
The provision of data is optional, but necessary for the fulfillment of contractual and regulatory obligations towards the data subject (purposes mentioned in the previous points a-b-c)
and for these purposes, consent is not required. The incorrect communication of requested personal data, for the same aforementioned purposes, not only prevents the fulfillment of contractual obligations but may also result in the inability of the data controller to guarantee the appropriateness of the processing and the possible non-compliance of the processing results with the obligations imposed by the relevant regulations. The purpose referred to in point d) can only be achieved with the express and specific consent of the data subject, who is free to provide it or not without consequences in case of refusal (except for the inability to receive proposals and communications in line with the data subject’s preferences). However, the possibility of objecting to and revoking consent is always reserved, even after the eventual granting of specific consent.
Consequences of not giving consent for personal data processing for marketing purposes by the Data Controller
If the user decides not to give consent for the processing of personal data for marketing purposes, the Data Controller will not be able to process such data for those purposes; this will not have any effect on the execution of the assignment received.
Moreover, even if the user consents today to the processing of their personal data for promotional and marketing purposes, they can always revoke their consent or object to the processing for such purposes. From that moment on, the collected personal data can no longer be processed for marketing activities, without any negative consequences for the assignment entrusted to Impresa Agricola Pier Delle Vigne.
Categories of recipients of the data
Personal data may also be communicated to companies entrusted with the fulfillment of contractual or regulatory obligations or that manage services related to the aforementioned purposes; the details of these companies will be made available to the data subject upon request. Personal data will not be disclosed or transferred outside the European Union.
In particular, for the performance of a large part of its activities, the Company also relies on external companies, professionals/consultants/technicians, with which it has entered into specific agreements, for example, for:
the provision of data processing and transmission services or general IT services;
the implementation of installation, maintenance, and update interventions aimed at ensuring the optimal functioning of equipment, systems, and procedures;
the performance of expert activities, accounting review, financial statement certification, professional consulting, and customer assistance;
the performance of control, review, and certification activities;
the archiving of data and the communication/documentation of relationships with customers, suppliers, employees, collaborators, and other parties;
customer support activities (call center/help desk, etc.);
customer satisfaction surveys;
the organization and management of promotional initiatives (including any prize operations, contests, etc.) aimed at customers or potential customers, activated at their request.
The data may be communicated and/or transferred for promotional purposes, subject to your consent for this purpose, to entities operating in the Classified Advertising sector (online classified sites), Marketing Automation, Email Marketing, Social Media, and SMS marketing.
However, those who may become aware of your personal data in relation to the aforementioned processing purposes are: individuals who may have access to the data by virtue of legal provisions provided for by European Union law or the law of the Member State to which the Data Controller is subject;
Furthermore, our employees may become aware of your personal data, provided that they have been previously designated as subjects acting under the authority of the Data Controller in accordance with Article 29 of the European Regulation or as System Administrators.
Any communication of your personal data will be carried out in full compliance with the legal provisions provided for by the European Regulation and the technical and organizational measures implemented by the Data Controller to ensure an adequate level of security.
How and for how long personal data are stored
The processing of the collected personal data is carried out both electronically and manually, made available to authorized and Personal data is stored for the time necessary to carry out the activities related to the execution of the assignment received from the Data Controller and to fulfill the resulting obligations, including legal ones, for up to ten years following the conclusion of the contractual relationship. Personal data collected for marketing purposes may be stored by the Data Controller for a maximum of 24 months from their collection. Navigational data is not retained for more than seven days and is immediately deleted after aggregation, unless it is required for the investigation of crimes by the judicial authorities. The electronic archives are located within the EU boundaries and are not connected or interact with databases located abroad.
In the event of a personal data breach, the Data Controller has established a crisis team and specific intervention procedures to promptly resolve the issue and provide users with appropriate communication to allow them to take suitable precautions to minimize potential damage. The Data Controller will notify the user of the breach, provide contact information for obtaining more information, specify the consequences of the breach, and detail the measures taken or proposed by the legal representative to remedy the breach and mitigate its potential negative effects. The Data Controller will also report the breach to the supervisory authority within 72 hours if necessary.
Individuals have rights regarding their personal data, including the right to access, rectify, delete, restrict processing, data portability, object to processing, withdraw consent, and lodge a complaint with a supervisory authority. Requests regarding these rights should be addressed to info@tenutachiudendone.com.
Rights of the data subject:
Please be informed that at any time, the data subject can:
– Request access to their personal data and information related to it (including the origin of the data when not obtained directly from the data subject, such as from public entities), the purposes and objectives of the processing, the recipients of the data, the retention period, or the criteria used to determine it.
– Request the rectification of inaccurate data or the integration of incomplete data.
– Request the erasure of their personal data (under the conditions specified in Article 17(1) of the GDPR and subject to the exceptions provided in paragraph 3 of the same article).
– Request the restriction of the processing of their personal data (in the situations indicated in Article 18(1) of the GDPR).
– Request and obtain from the Data Controller, in cases where the legal basis for the processing is a contract or consent, and the processing is carried out by automated means, their personal data in a structured, commonly used, and machine-readable format, with the right to transmit such data to another data controller (the so-called right to data portability).
– Object to the processing of their personal data at any time, in cases where there are specific circumstances concerning the data subject.
– Withdraw consent at any time, limited to cases where the processing is based on the data subject’s consent for one or more specific purposes and concerns common personal data (such as date and place of birth or residence) or special categories of data (such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health, or sex life). However, the lawfulness of the processing based on consent prior to its withdrawal remains unaffected.
– Lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedies.
If the data subject makes a request, the Data Controller must respond promptly and, in any case, no later than one month from the receipt of the request. If necessary, taking into account the complexity and number of requests, this period may be extended by two additional months. In any case, within one month from the receipt of the data subject’s request, the Data Controller must inform them of any reasons for the delay.
Contact:
For further information and to submit any requests, the Data Controller provides the following contact address: info@tenutachiudendone.com
