This document describes how the site https://www.icalanchi.it (“Site”) is managed, with reference to the processing of personal data belonging to the users (“User/Users”) consulting it.

It is an information notice issued in accordance with article 13 of the Italian Legislative Decree no. 196/2003 (“Privacy Code”) and articles 13 of the EU Regulation no. 679/2016 (“GDPR”), for anyone who visits the Site and/or interacts with Azienda Vitivinicola Rizzi services available through the Site.

The privacy policy is provided only for the Site and not for other sites accessible by the user via links available through the Site.

1. DATA CONTROLLER

The data controller is:

I CALANCHI S.R.L.S. – SOCIETA’ AGRICOLA A RESPONSABILITA’ LIMITATA SEMPLIFICATA – Via Vittorio Veneto,10 – 89044 – Locri (RC)

Mail: info@icalanchi.it

P.IVA 03043420805

(“Data Controller”).

2. TYPES OF DATA PROCESSED

2.1 Browsing data

During normal use, the electronic systems and software procedures enabling this Site to operate, acquire certain personal data transmission of same is implicit in the use of internet communication protocols.

This information is not being collected in order to be associated to well-identified data subjects, but its nature, by means of processing and associations with data held by third parties, could make the users identification possible.

The category of data could be listed as follow:

(i) IP addresses or domain names of computers used by users connecting to the Site

(ii) addresses in URI (uniform resource identifier) notation for resources requested

(iii) the time of request

(iv) the method used to submit the request to the server

(v) the dimension of the file obtained in response

(vi) the numerical code indicating the status of the response given by the server (success, error etc)

(vii) other parameters regarding the user’s operating system and the IT environment.

This data is used only to glean anonymous statistical information on the use of the Site and to check that it operates correctly and this data is deleted immediately after processing.

2.2 Cookie

Cookies are text strings (small files), which the websites visited (“first parties”) or different websites or web servers (“third parties”) place and store within a terminal device in the availability of the user (PC, tablet, smartphone, etc.), to then be re-transmitted to the same sites that sent them, during the next visit by the same user.

• Use of technical cookies – YES
• Use of analytics/statistical cookies – NO
• Use of profiling/marketing cookies – NO

The User assumes responsibility for the data of third parties published or shared through the Website and guarantees that he or she has the right to communicate or disseminate them. The User declares to be of age, freeing the Owner from any liability.

3. PURPOSES OF THE PROCESSING AND VOLUNTARY OR OBLIGATORY NATURE OF PROVIDING THE DATA

The personal data of the Users are processed by the Data Controller in order to:

• pursue, in accordance with article 6(1) let. f) of GDPR, an its own legitimate interests consisting in ensuring network and information security, i.e. the ability of a network or an information system to resist, at a given level of confidence, accidental events or unlawful or malicious actions that compromise the availability, authenticity, integrity and confidentiality of stored or transmitted personal data, and the security of the related services offered by, or accessible via, those networks and systems;
• contact the User and sending messages related to services and products offered;
• to exercise of the rights of the Data Controller, for example the right of defense;
• to fulfill the legal obligations provided by the law, a regulation or community norm or to any order from the competent Supervisor Authority.

4. CONSEQUENCES OF ANY REFUSAL TO RESPOND

Except as provided for the browsing data which are necessary to allow the Users to correctly use the Site and for the cookie, the users are free to provide their personal data in order to ask for a Data Controller reply. The refusal to allow their data to be processed would make impossible for Users to obtain any reply.

5. METHOD OF PROCESSING

The personal data is processed through computerized, automated manual systems for such a period of time that is necessary to achieve the purposes for which the data is collected.

The personal data, moreover, is processed only by those subjects appointed to carry out such fulfillments, currently identified and duly educated on the constraints provided by the applicable law, as well as by adopting specific security measures aimed to ensure the protection of Your confidentiality and to avoid the loss of data, any unauthorized accesses to the data and any data processing which may be qualified as unlawful or not in compliance with the above mentioned purposes.

6. COMMUNICATION OF PERSONAL DATA

In any case, it remains understood that the Data Controller retains the right to communicate the Users personal data to the companies in charge for carrying out specific services within its activity and/or, in general, in its favor, that will operate as independent data controllers or processors, as well as the right to communicate and/or to distribute the User personal data that, in compliance with the applicable law, the police, the judicial authority, the information and security agencies or other public subjects might ask for purposes related to defense or State security or to preventing, detecting or suppressing crimes.

Your data are not subject to dissemination.

7. TRANSFER OF PERSONAL DATA

The Data storage and processing take place on servers within the European Union. It is understood that, the Data Controller, if necessary, will have the right to move the location of servers in Italy and / or European Union and / or non-EU countries. In such a case, the Data Controller shall ensure that the transfer of Data in non-EU countries will take place in accordance with applicable law by stipulating, where necessary, agreements ensuring an adequate level of protection and / or adopting the standard contractual clauses as provided by the European Commission.

8. DATA SUBJECT’S RIGHTS

Pursuant to article 7 of the Privacy Code and articles 15 et seq. of GDPR, the User has the right to obtain confirmation of whether or not there is personal data concerning him/her, even if such data has not been registered yet, is entitled to receive notice of such data in a form that is legible and to access to such data:

• the purposes of the processing;
• the categories of personal data in question;
• the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients are from third countries or international organizations;
• when possible, the expected retention period of personal data or, if this is not possible, the criteria used to determine this period;
• the existence of the right of the interested party to ask the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their processing;
• the right to lodge a complaint with the supervisory authority;
• if the data are not collected from the interested party, all available information on their origin;
• the existence of an automated decision-making process and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party

Furthermore, the User has the right to object, in whole or in part:

• for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection;
• to the processing of personal data concerning him for the purposes of sending advertising material or direct sales or for carrying out market research or commercial communication.

In order to exercise the aforementioned rights, it is necessary to write to the Data Controller e-mail address, as it is indicated at the previous paragraph 1, specifying “Privacy ” as object.

Finally, we inform You that if You believe that your rights have been infringed by the Data Controller and/or by a third party, you have the right of lodging a complaint with a Italian Data Protection authority (“Garante Privacy”) and/or with another competent authority provided by GDPR.

9. DATA RETENTION

The processing will last only for such a period of time that is necessary for achieving the purposes mentioned at the previous paragraph 3. The Data Controller will then store Your personal data only in compliance with the legal obligations provided by the applicable laws, for administrative purposes and/or to claim or to defend an own right in the case in which a litigation or a pre-litigation procedure arises.

10. CHANGES TO THE PRIVACY POLICY

This document constitutes the Site privacy policy which over time may be amended and/or updated. Where the Data Controller intends to process personal data for a purpose other than those indicated at previous paragraph 3, the Data Controller shall provide the data subject, prior to that further processing, with information on that other purposes and shall carry out this data processing in compliance with the applicable law.

11. COMPLAINTS

If the User considers that its rights have been infringed by the Data Controller, has the right to lodge a complaint with the Italian Supervisory Authority or any other supervisor authority in the European Union.

This Privacy policy is revised as of 04/24/2024. Any possible amendments will be published on this page.