Information on the processing of personal data ex art. 13 of regulation (EU) 679/2016 (General Data Protection Regulation - GDPR)

1. Data Controller

Owner and manager of the treatment is TENUTA GLORIA MARIA ROSARIA with headquarters in C.DA COCCHIATO SNC 87040 MONGRASSANO CS.
The contact details of the Data Protection Officer is

2. Types of data processed, purpose and legal basis of the processing

Following consultation of this site or use of the services made available through it, the following types of users' personal data may be processed:

  • a) Navigation data
    The computer systems and software procedures used to operate the site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols . This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and / or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site or third parties: except for this possibility, the data on web contacts do not currently persist for more than seven days
  • b) For the site, the personal data provided voluntarily by the user
    The personal data provided freely and voluntarily by the users of this site concern respectively:
    • 1. necessary for the conclusion of e-commerce transactions, in the context of online purchases. The payment management services allow this site to process payments by credit card, bank transfer, PayPal. The data used for payment are acquired directly by the requested payment service manager without being processed by the company in any way (eg PayPal is a payment service provided by PayPal Inc., which allows the user to make payments online using the your PayPal credentials).
    • 2. those inserted in the forms present in some sections of the site (eg: the "Contacts" section), or sent via e-mail messages to the e-mail addresses indicated on the Site, or the data entered for the purpose of registering on the website or for sending the newsletter, to the extent necessary to provide feedback to the user's requests.
      The personal data provided freely and voluntarily by users are collected and processed for the following purposes:
      • • supply of products requested by the user and management of related payments;
      • • registration on the site;
      • • subscription and e-mailing of newsletters;
      • • response to requests for information;
      • • statistical purposes.

The legal basis of the processing for the aforementioned purposes is represented not only by the need to execute the contract of which the user is a party or to respond to his requests, but also by the need to fulfill the legal obligations to which the Company is subject. .
For the processing carried out for the purpose of sending direct advertising material or commercial communications in relation to products or services similar to those already requested by users, the Company may use the e-mail and paper mail addresses to pursuant to and within the limits permitted by the provision of the Guarantor Authority for the protection of personal data of 19 June 2008, as the legal basis of such processing is represented by the pursuit of one's own legitimate interest. In any case, pursuant to art. 21 of the Regulations, the user has the possibility to oppose this treatment at any time, initially or on the occasion of subsequent communications, easily and free of charge, also by writing to the Data Controller or the Personal Data Protection Officer at the addresses indicated above, as well as to obtain immediate feedback confirming the interruption of this treatment.
Regarding the statistical purposes, the data will be treated in an anonymous and aggregate form.

3. Mandatory or optional nature of providing users' personal data

The provision of personal data to the Data Controller, in particular the personal data, the e-mail address, the postal address for the shipment of the products and the telephone number is necessary with regard to the conclusion of the purchase contract of products on the site or of the registration phase.
Any refusal to indicate personal data marked with an asterisk could make it impossible to complete the registration phase or to execute the contract for the purchase of products on the site, or to use the services available on it.

4. Recipients of users' personal data

The personal data of users who consult this site or use the services made available through it, will be communicated:
• to the staff of Tenuta Gloria Maria Rosaria C.da Cocchiato snc, 87040 Mongrassano CS specifically authorized to treatment pursuant to art. 29 of the Regulation as part of their respective duties and to the extent necessary to allow the performance of activities strictly related to the provision of the requested services;
• to SEEWEB srl, VAT number 02043220603 - Lazio 9 / a - 03100 Frosinone - Italy as responsible for the provision of hosting services of the site;
• to subjects, authorities or entities to whom it is mandatory to communicate personal data by virtue of legal provisions or orders of the authorities competent;

The personal data of users will not be transferred abroad, to countries or international organizations not belonging to the European Union that do not guarantee an adequate level of protection, recognized, pursuant to art. 45 of the Regulation, based on an adequacy decision of the EU Commission. In the event that it is necessary for the provision of services, the transfer of personal data to countries or international organizations outside the EU will be carried out in compliance with Articles 45-49 of the Regulation.

5. Retention of users' personal data

The personal data provided voluntarily by users will be kept in a form that allows the identification of data subjects for the time strictly necessary to pursue the purposes for which the data were collected and subsequently processed and, in any case, within the limits by law.
Personal data related to the purchase of products online will be kept for 10 years.

6. Rights of the interested party

Articles 15-22 of the Regulations give the interested party the following rights:
• request confirmation of the existence or otherwise of their personal data (Article 15 par 1);
• obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated, and when possible, the retention period (Article 15 paragraph 1 letter a, c);
• obtain the rectification and deletion of data (articles 16 and 17);
• obtain the limitation of processing (article 18);
• obtain information on the recipients from the Data Controller to whom the personal data and any corrections or cancellations or limitations of processing have been transmitted; (art. 19)
• obtain data portability, ie receive them from a Data Controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments (art .20)
• oppose an automated decision-making process relating to natural persons, including profiling (articles 21 and 22);
• If the processing is based on consent, you can revoke it at any time (art .7 paragraph 3);
• When the violation of personal data is likely to present a high risk for the rights and freedoms of individuals, the data controller communicates the violation to the data subject without undue delay (art . 34);

Interested parties can contact the data protection officer for all matters relating to the processing of their personal data and the exercise of their rights deriving from this regulation by sending an email to the following address
Users who believe that the processing of their personal data, carried out through this site, is in violation of the provisions of current legislation on the protection of personal data have the right to lodge a complaint with the Supervisory Authority pursuant to art. 77 of the Regulations, or to take appropriate judicial offices.

7. Changes and updates to this Privacy Policy

Changes and updates to this Privacy Policy will be notified to users on the Home page of the website or by e-mail (for registered users) as soon as they are adopted and will be binding as soon as they are published on the website in this section.