Privacy & Cookies

PROCESSING OF YOUR PERSONAL DATA

This notice is provided under Art. 13 of Legislative Decree No. 196/2003 (Italian Data Protection Code) and Art. 13 of EU Regulation No. 2016/679 (GDPR) to those interacting with the web services of AZIENDA CANTARUTTI ALFIERI Società Agricola Semplice, accessible electronically from www.cantaruttialfieri.it. It aims to inform users about how their data will be processed and for what purposes.

The notice is only for the mentioned sites and not for other websites possibly consulted via links.

IDENTITY AND CONTACT DETAILS

Data Controller: AZIENDA CANTARUTTI ALFIERI Società Agricola Semplice Via Ronchi, 9, 33048 San Giovanni al Natisone (UD) Tel. 0432756317 – Email: info@cantaruttialfieri.it

PURPOSE OF PROCESSING

Personal data, freely provided and acquired through site use and voluntary form completion, is processed lawfully for:

Contract execution
Sending information about requested services
Order invoicing and accounting
Sending informational material

Data processed will be updated, relevant, complete, and not excessive relative to the purposes for which they are collected and subsequently processed.

DATA PROCESSING LOCATION AND METHODS

Data processing connected to web services takes place at AZIENDA CANTARUTTI ALFIERI Società Agricola Semplice and is handled by technical staff or occasional maintenance personnel. Personal data provided by users requesting information or access to the reserved area is used only to perform the requested service and is not shared with third parties.

Personal data provided by you is collected electronically and processed both on paper and electronically, directly or through third parties (postal and data entry companies), for the time strictly necessary to fulfill the purposes for which they were collected, such as order execution, invoicing, and shipping. Data may only be accessed by those specifically appointed to execute the contract.

LEGAL BASIS FOR PROCESSING

The legal basis for processing your personal data is based on your request for information and/or to enter into a contract to purchase the products sold by the Data Controller and the related contract that is executed. The lawfulness of the processing is thus based on the consent expressly given at the end of this notice by the data subject and the necessity for the Data Controller to fulfill contractual obligations.

TYPES OF DATA PROCESSED

Automatically Acquired Data IT systems and software procedures operating this website acquire certain personal data during their normal operation, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects but could identify users through processing and association with data held by third parties. This category includes IP addresses or domain names of computers used by site users, URI addresses of requested resources, request times, methods used to submit requests to the server, response file sizes, server response status codes, and other parameters related to the user’s operating system and IT environment. These data are used only to obtain anonymous statistical information on site use and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical IT crimes against the site.

Voluntarily Provided Data Voluntary, explicit, and optional email sending to addresses indicated on this site, account registration, and form completion involve the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included. Specific brief information will be progressively reported or displayed on site pages dedicated to particular on-demand services.

No “special categories of personal data” (revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or union membership, genetic data, biometric data uniquely identifying a person, data concerning health or sex life or sexual orientation) will be collected or processed.

COOKIES

Cookies are used to transmit information necessary for site operation. Persistent cookies for automatic login functions or user tracking systems may be used. Session cookies (not persistently stored on the user’s computer and disappearing with browser closure) are limited to transmitting session identifiers (random numbers generated by the server) necessary for safe and efficient site exploration. Session cookies avoid the use of IT techniques potentially detrimental to user navigation confidentiality and do not allow the acquisition of personal identifying data.

MANDATORY OR OPTIONAL DATA PROVISION AND CONSEQUENCES OF REFUSAL

Apart from navigation data, providing data and consenting to processing for contract purposes or order fulfillment and related payment is necessary for contract conclusion and execution. Refusal to provide such data or consent results in the inability to purchase products and services offered.

Providing personal data for informational material or commercial communications is optional. Refusal to provide such data may result in the inability to receive additional services.

DATA COMMUNICATION TO THIRD PARTIES

Your personal data will be processed within the company by the Data Controller, any Data Processors, and authorized processing personnel. Data may be communicated—strictly necessary for contract execution—to:

Third-party service providers essential for contract performance (postal companies, data entry companies, delivery services)
Banks for payment management

Your personal data may also be communicated to:

Companies/professional firms providing assistance, consultancy, or collaboration in accounting, administrative, fiscal, legal, tax, and financial matters
Public administrations for institutional functions within legal or regulatory limits

Data may also be communicated to inspection bodies for verifying law compliance.

Your data will not be disclosed.

DATA RETENTION PERIOD

Data will be retained for ten (10) years from product supply for accounting document retention requirements. After this period, data will be deleted along with the destruction of paper documentation.

DATA TRANSFER

The Data Controller will not transfer data to EU Member States or non-EU countries.

DATA SUBJECT RIGHTS

Under Art. 7 of Legislative Decree No. 196/2003 and Articles 15-22 of EU Regulation No. 2016/679, data subjects can exercise their rights, including: a) Requesting confirmation of the existence of personal data b) Obtaining information on data processing purposes, personal data categories, recipients or recipient categories, and retention periods when possible c) Obtaining data rectification and erasure (right to be forgotten) d) Obtaining processing limitation e) Obtaining data portability, receiving them in a structured, commonly used, machine-readable format, and transmitting them to another controller without hindrance f) Objecting to processing at any time, including for direct marketing g) Objecting to automated decision-making, including profiling h) Revoking consent at any time without affecting the lawfulness of processing based on consent before revocation i) Lodging a complaint with a supervisory authority

For exercising the above rights, data subjects can write to AZIENDA CANTARUTTI ALFIERI Società Agricola Semplice, Via Ronchi, 9, 33048 San Giovanni al Natisone (UD). The Data Controller will provide information on action taken regarding a request without undue delay, and in any case, within one month of receiving the request.

COMPLAINTS

Data subjects have the right to lodge a complaint with the supervisory authority and can contact the Italian Data Protection Authority (Garante per la protezione dei dati personali) at Garante@gpdp.it. For more details, visit the Garante privacy website at www.garanteprivacy.it.