ON THE PROTECTION OF PERSONAL DATA PURSUANT TO ART. 12 and following EU REGULATION 679/2016 AND OF THE D.LGS. 196/2003 AS MODIFIED BY THE D.LGS. 101/2018
Pursuant to and for the purposes of EU Regulation 2016/679, the data subject is hereby informed of the personal data assumed concerning him, acquired by the Data Controller or which are requested later and / or communicated by these parties, are necessary and will be intended for the purposes indicated below.
PURPOSE AND LAWFULNESS OF THE PROCESSING
Pursuant to EU Regulation 679/2016, personal data:
- They are processed in a lawful, correct and transparent way towards the interested party (art. 5);
- The same are collected for specific, explicit and legitimate purposes, and subsequently treated in a way that is not incompatible with these purposes (art. 5);
The purposes for which the data are collected are as follows:
booking of the visit to the cellar
Registration of subjects who accesses the premises of the structure;
Providing the necessary security in relation to the subjects admitted to the premises.
Commercial promotion of the Owner's services.
Any personal data relating to the interested party or collected from it, may be used for marketing purposes (i.e., by way of example, for the promotion of advertising and commercial events, the sending of advertising campaigns, promotions and offers of goods and / or the services we offer), which can be exercised by the Data Controller both with automated methods, but also through traditional methods.
Automated profiling activities for marketing purposes, consisting of the use of personal data to evaluate, analyze or predict aspects concerning personal preferences, interests, behavior, location or movements.
LEGAL BASIS OF THE PROCESSING
Treatment is lawful under the following conditions:
Pursuant to art. 6, paragraph 1, lett. a) EU Regulation 679/2016, the processing is lawful if the interested party has given consent to the processing of their personal data for one or more specific purposes;
Pursuant to art. 6, paragraph 1, lett. b) EU Regulation 679/2016, the processing is necessary for the execution of a contract of which the interested party is a part or for the execution of pre-contractual measures adopted at the request of the same;
Pursuant to art. 6, paragraph 1, lett. f) EU Regulation 679/2016, the processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail, in particular if the person concerned is a minor. The legitimate interest of the Data Controller is connected to the management of personal data for promotional and marketing purposes.
PROCESSING METHODS AND CONFIDENTIALITY OBLIGATION
The data processing is performed through IT tools and / or paper supports, by subjects committed to confidentiality, with logic related to the purposes and in any case in order to guarantee the security and confidentiality of the data. The collected data will not be disclosed or disseminated to third parties in accordance with the law.
COMMUNICATION TO THIRD PARTIES
Your personal data may be communicated to third parties known to us only and exclusively for the aforementioned purposes and, in particular, to the following categories of subjects:
External companies that perform services on our behalf;
- Bodies and Public Administrations for legal obligations;
- Professionals who can be supportive in legal obligations;
- Supervisory Body, Board of Statutory Auditors, Auditor, for control and verification activities.
These subjects will process personal data as managers or independent data controllers.
Your data must be transferred both within the EU area and outside the EU area. In this second case, the transfer will take place, where present, in compliance with the adequacy decisions pursuant to art. 45 EU Regulation 679/2016 or, in any case, based on art. 49, paragraph 1, lett. b of European legislation.
STORAGE TIMES
According to the art. 5 of EU Regulation 679/2016, "Principles of the current processing of personal data", personal data are stored in a form that allows the interest of interests for a period of time not exceeding the achievement of the purposes for which they are processed .
The personal data of the interested parties can also be kept for longer periods in compliance with the obligations relating to the laws in force (and by way of example in accounting matters).
RIGHTS OF THE INTERESTED PARTY
Pursuant to current legislation, the interested party may assert their rights towards the Data Controller, as expressed in art. 15 and following of EU Regulation 679/2016.
In addition to these rights, the interested party has the right to lodge a complaint with the supervisory authority in the event of a law.
For further information in relation to how to exercise these rights, please read the "Procedure for the rights of the interested party" on the website www.tenutadiarceno.com or at the owner at the Data Controller by writing to info@tenutadiarceno.com
DATA CONTROLLER AND PRIVACY NOTICES
The owner is the Tenuta di Arceno.
For any communication pursuant to the articles above EU Regulation 679/2016, the Data Controller provides the address info@tenutadiarceno.com