PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA PURSUANT TO GDPR 2016/679
This notice governs the processing of personal data carried out by our company within this website, in accordance with current data protection regulations, in particular, EU Regulation 2016/679 (hereinafter ‘GDPR’)
Data Controller: Cas. Soc. Pelloni So. Agr. Coop.
Head office: Via S. Dalmazio, 1113, 41028 Serramazzoni MO – Italy
Contacts and contact details: info@caseificiobucamante.it – (+39) 0536 953600
The Data Controller is responsible to you for the lawful and correct use of your personal data and may be contacted for any information or request regarding such processing.
Privacy Policy
This page describes how the site is managed with regard to the processing of the personal data of users who consult it.
This information is provided in accordance with the new GDPR 2016/679 on the protection of personal data to those who interact with web services accessible by electronic means from the address: https://www.caststairs.it
The information is provided only for the website in question and not for any other websites that may be consulted by the user via links. The indications provided below concern in particular the collection of personal data on the Internet, with the aim of identifying the minimum measures that must be implemented in respect of the persons concerned in order to guarantee the fairness and lawfulness of such practices.
Place of data processing
The processing operations connected to the Web services on this site take place at the aforementioned premises and are carried out only by employees, collaborators or persons in charge of processing, or by persons in charge of occasional maintenance operations. No data deriving from the Web service is communicated or disseminated. The personal data provided by users who request dispatch of informative material are used for the sole purpose of performing the service or provision requested and are communicated to third parties where this is necessary for that purpose.
Data, purpose and legal basis
The computer systems and programs used to operate the site collect certain personal data, the transmission of which is implicit in the use of Internet communication protocols (e.g. IP addresses or domain names of the computers used by users who connect to the site, URI -Uniform Resource Identifier- addresses of the resources requested, time of the request, method used to submit the request to the server, size of the file obtained in response, numeric code regarding the status of the response from the server – successful, error, etc.- and other parameters relating to the user’s operating system and computer environment). Although this information is not collected to be associated with identified interested parties, by its nature it could, through processing and association with data held by third parties, allow users to be identified.
This data is used solely for the purpose of obtaining statistical information not associated with any user identification data on the use of the Site and to check its correct operation and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Site.
The optional, explicit and voluntary sending of your personal data (name, surname, telephone number, e-mail address, etc.) to the address indicated on this site or by filling in the form to request a quote or for further information on our activity, entails the subsequent acquisition of the sender’s address, which is necessary to reply to requests, as well as any other personal data included in the message.
Newsletter and processing of your data
If you have given your consent by means of a ‘flag’ to receive commercial communications, your data may be processed for the purpose of sending direct marketing communications, newsletters, sending advertising material, carrying out market research, by means of traditional contact systems and automated computer systems, including commercial or promotional communications by e-mail or SMS; this constitutes the consent of the person concerned, expressed in accordance with this information notice. In this case, consent to the processing of personal data is not a contractual obligation. The data subject has the right to provide personal data; however, if this data is not provided, no marketing activities can be carried out. The Data Controller would like to inform you that, in relation to the right to object to the processing of personal data for marketing purposes, this right may be exercised in part, i.e. by objecting, for example, only to the sending of promotional communications by automated and/or digital means or, alternatively, to traditional means.
Recipients and transfers outside the European Union
Your data will not be passed on to third parties or resold for any reason whatsoever. Your personal data will not be transferred to any non-EU country or international organisation and may be processed by formally appointed external data processors (a list of which is available upon your request) belonging to categories of entities that support the data controller in providing the services offered through this site (e.g. software developers, website operators).
Communication
Your data are processed within the company by the following categories of persons authorised and appointed by the Controller:
– Marketing department
– Information systems
Your data may be disclosed to third parties, in particular to:
– External provider OVH
– Companies that carry out routine and extraordinary maintenance of the website
– Third party companies providing third party services
We may handle some of your personal data with services located outside the European Union area, for example with the MailChimp service. The transfer is authorised on the basis of specific decisions of the European Union and the Garante per la tutela dei dati personali, in particular decision 1250/2016 (Privacy Shield – here the information page of the Italian Garante), so no further consent is required. The providers used guarantee their adherence and compliance with the Privacy Shield.
Treatment modes
Personal data are processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected, unless the same information is processed by the same Data Controller in other ways. Specific security measures are observed to prevent the loss of data, unlawful or incorrect use in compliance with the obligations to comply with minimum security measures.
In any case, upon withdrawal of consent, the data will no longer be processed.
We also inform you of the following rights you may have vis-à-vis the data controller:
Right to request access to your personal data (Art. 15).
Right to rectification (Art. 16) or right to erasure of personal data (Art. 17).
Right to restriction (Art. 18) or right to object to processing (Art. 21).
Right to data portability (Art. 20).
Right to withdraw consent given for one or more specific purposes, at any time, without prejudice to processing carried out before consent was withdrawn (Art. 7).
Right to lodge a complaint with the Garante per la protezione dei dati personali (Art. 77).
Requests to exercise the rights set out in this notice, including, in particular, the right to cancellation and the right to revoke consent given should be addressed directly to the Controller at the following email address: info@caseificiobucamante.it
