Privacy Policy
Privacy Policy
Enoteca Regionale del Barbaresco
Piazza del Municipio, 7 12050 BARBARESCO – CN
Partita Iva: 01905830046
This page describes how we collect and handle your personal information when you navigate our website. This Privacy Notice pursuant to art. 13 of the EU reg. 2016/679 (hereinafter referred to as the Privacy Code) is for users of the website services of Enoteca Regionale del Barbaresco at this Internet address: www.enotecadelbarbaresco.com
We inform you that the indications presented on the site are subject to change to keep up to date with the regulations in force.
Hence we advise you to consult the Privacy Notice from time to time
Type of Information Collected:
We collect navigation data and voluntarily-provided user information, defined as follows:
Navigation data
During the ordinary course of operations, the IT systems and software procedures for running the website acquire some personal data, implicitly transmitted via the use of Internet protocols. This information is not collected for purposes of association with specific users, however the nature of this information could, through links with information held by third parties permit eventual user identification.
This information includes IP addresses and domain names of computers used in navigating the site, including URI (Uniform Resource Identifier) addresses searched, the time of the search, the type of browser used, the file size obtained in response, the numerical code indicating the status of the server response and other parametres relative to the operating system and environment of the user.
This information is used solely to obtain anonymous statistical information regarding website usage and to ensure correct functioning of the website and is deleted immediately after use.
Voluntarily provided user data
Email addresses, explicitly and voluntarily submitted to the addresses indicated on the site lead to the recording of the user’s email address, in addition to other personal data contained in the email, for the purpose of responding to user requests.
Specific information will carry over or be visualised on site pages related to services available on request, in such a way as to draw user attention to the processing of his or her personal data.
Purpose of data collection and processing
Data is collected solely for the following uses:
a) data required to utilise services offered via navigation of the site;
b) activities connected with and necessary for contact with the clientèle (contact requests);
c) marketing, solely and exclusively limited to specific user permission, aimed at market research; economic and statistical analysis; the sending of advertising and promotional material, newsletters regarding promotions and programmes, including online versions, communications, development and maintenance of commercial relationships.
d) collection of data relative to curriculum vitae of prospective employees.
The use of data in point c) is optional and submitted according to the regulations set out in article 7 of the Privacy Code. Marketing activities may also be communicated by traditional means (e.g. regular post, telephone), as well as by email. If you are already one of our clients, we may send you commercial information relating to services analogous to ones already used by you, unless you withdraw your permission.
Handling of personal data:
In addition to collection of data, personal data handling may include recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, utilisation, interconnection, blocking, communication, cancellation and erasure, pursuant to Article 4, no. 2) of the Privacy Code.
This may be carried out via a paper version and/or with the help of hardware, software and computerised transmission, in accordance with regulations and with the use of devices approved for the purpose of guaranteeing security and privacy of data. In particular, technical and organisational measures adopted will conform to the requisites of data protection law and the protection of user rights.
Data handling will be carried out with automated systems for the minimum amount of time strictly necessary to attain the objectives for which they were collected and in conformity with legislation currently in force.
The principal terms for data storage are set out in the attached table:
|
MAIN CATEGORIES |
DURATION |
REFERENCES TO LEGISLATION |
|
Prospective employees |
Maximum 24 months |
art 5 e) of EU Reg 2016/679 |
|
Employees and contract agents |
Ten years from cessation of employment |
art. 43 of the Presidential Decree 600/73; art. 2946 of the Italian Civil Code referring to the ordinary statute of limitations; Chapter 3 of Title 1 of the Legislative Decree 81/08 as amended. |
|
Customers and suppliers |
5-10 years |
art. 2948 of the Italian Civil Code provides for a limit of 5 years for periodic payments; art. 2220 of the Civil Code provides for the keeping of company accounts for 10 years; art. 22 of the Presidential Decree of 29 September 1973, n.600. |
|
Prospective Customers |
with respect to the terms set out by law according to type of activity until withdrawal of consent or expiry of right of opposition |
General Provisions of 15/05/13; art 21. EU Reg 2016/679. |
|
Data retained for marketing purposes |
with respect to the terms set out by law according to type of activity until withdrawal of consent or expiry of right of opposition |
General Provision of 15/05/13, art. 21 EU Reg. 2016/679 |
|
Closed circuit television images |
24 hours |
General Provisions of the European Data Protection Supervisor 19/03/2015; art. 21 EU Reg. 2016/679 |
|
Cookies |
Maximum of 6-12 months |
General Provisions of the European Data Protection Supervisor 19/03/2015; art. 21 EU Reg. 2016/679 |
|
System Administrators LOG |
6 month maximum |
General Provision of the European Data Protection Supervisor 27/11/2008 and subsequent amendments; art. 21 of EU Reg. 2016/679 |
|
Navigation data |
Last 10 sites visited |
General Provision of the European Data Protection Supervisor; art. 21 EU Reg. 2016/679 |
Communication and disclosure of data:
Data will not be disclosed and will be processed by appropriately-trained employees of the Company, authorised to handle data required for specific duties. Data may be communicated to third parties including persons deemed responsible pursuant to art. 28 of the Privacy Code.
In particular, data may be communicated to the following groups, including but not limited to: banking institutions and companies specialised in the management of payments and credit insurance, law and consulting firms, companies entrusted with the auditing of company accounts, public authorities or administrations to fulfil legal requirements, Italian as well as foreign suppliers, finance and transport companies.
A detailed list of the persons responsible for data handling is available at the registered office of Enoteca Regionale del Barbaresco
Piazza del Municipio, 7 12050 BARBARESCO – CN
For the purposes indicated in this information circular your data may be communicated abroad, both within and without the European Union, with respect to the rights and guarantees provided for in the legislation in force, following verification of the country in question as having a sufficient level of protection as called for in the Privacy Code.
Data subject rights
In relation to the foregoing data, all rights may be exercised, as set out in art. 7 of the Privacy Code and articles 15, 16, 17, 18, 20 and 21 of the Privacy Code, specifically:
a) the right to access personal data;
b) the right to rectify data in case of inaccuracy;
c) the right to erase data;
d) the restriction on processing;
e) the opposition to processing of data;
f) f) the right to data portability, that is, a right to obtain a copy of the stored data from the Data Controller in a commonly-used and machine-readable format and the freedom to move it from one service provider to another, without hindrance.
In the event of a breach of these provisions the data subject has the right to lodge a complaint with the competent supervisory authority.
For further explanation with respect to this Privacy Notice or the theme of data privacy, to exercise your rights or withdraw consent, please write to info@salumibettella.it
Withdrawal of consent
Consent given with respect to the handling of personal data can be withdrawn at any time, without endangering the lawfulness of data processed in the period preceding the withdrawal of consent or further processing based on different legal grounds with respect to consent.
Owner and Data Controller
The Data Controller is Enoteca Regionale del Barbaresco – Piazza del Municipio, 7 12050 BARBARESCO – CN .
A detailed list of the persons responsible for data handling is available at the registered office of Enoteca Regionale del Barbaresco – Piazza del Municipio, 7 12050 BARBARESCO – CN .