PERSONAL DATA PROCESSING POLICY
Personal data processing policy pursuant
to Article 13 of Legislative Decree No. 196 dated 30th June 2003
("Personal Data Protection Code") and Articles 13 and 14 of EU
Regulation 2016/679 ("Regulation").
TENUTA DI DONNAFUGATA S.r.l. Società
Agricola (“Donnafugata”) provides information concerning personal data
processing to users who visit Donnafugata’s website and https://visit.donnafugata.it (“Website”) and
fill in forms from the “Subscribe to our newsletter” and “Book
your visit” sections (“Forms”).
1. Types of data collected
The computer systems and software procedures involved
in the website's operation acquire, during their normal operation, some
personal data, the transmission of which is implicit in the use of Internet
communication protocols. This category includes the IP addresses or domain
names of computers used by users to connect to the website, the iMAC (Media
Access Control) address, URI (Uniform Resource Identifier) form addresses of the
resources requested, the time of the request, the method used to submit the
request to the server, the size of the file obtained in reply, the numerical
code indicating the status of the reply given by the server (done, error, etc.)
and other parameters concerning the user's operating system and computer
environment. This data is used for the sole purpose of obtaining anonymous
statistical information concerning use of the website and checking that it is
operating correctly. The data is deleted immediately after it has been
processed. This data may be used to ascertain responsibility in the case of
hypothetical computer crimes to the detriment of the website.
Data supplied voluntarily by natural and
The voluntary sending of electronic mail to the email
addresses indicated in this website involves Donnafugata processing the
sender's email address, as well as any other personal data contained in the
message, in order to reply by email to the requests made by the user.
Within this context, Donnafugata
Specific privacy notices will also be displayed on web
pages dedicated to particular services provided by the website on request.
2. Purpose and legal basis for processing
Data provided by natural and legal persons
and collected by Donnafugata will be processed for the following purposes:
a. to check that services offered via the
Website are functioning correctly;
b. to obtain statistical information about
use of the services and the Website, for example, most visited pages, number of
visits per hour or day, geographic areas of origin, etc.
c. in the event that express consent has
been given, for promotional and advertising purposes related to the “Subscribe to our newsletter” section.
In these cases, consent given to the processing of
personal data authorises Donnafugata to send promotional offers and marketing
messages related to Donnafugata’s products and services using automated means,
such as email, as well as conventional means such as postal mail or
operator-assisted phone calls;
d. in the event that express consent has been given,
related to the “Book your visit” section, to allow access to
Donnafugata’s premises and participation in guided tours with tastings (that
may involve the administration of alcoholic drinks and food).
Failure to provide data in the “Subscribe
to our newsletter” section, or in relation to use of the “Store Locator”
application, will prevent correct performance of the relative services
requested by the user.
3. Data processing methods
Data collected will be handled, stored and
processed using electronic means and will be saved on electronic media as well
as on paper, in databases and on any other suitable type of media. Specific
security measures are taken to prevent data loss, unlawful or incorrect use of
the data and unauthorised access to the same.
The data will not be visible to other
users filling in the forms and will not be distributed; it may be communicated
to companies, associations or professional firms responsible for managing the
three forms or responsible for dealing with the customers’ requests. A list of
third parties that may receive the personal data is available on request from
the contact details specified in Point 6.
In addition to the purposes specified in
Point 2, data may be processed to fulfil obligations set forth by laws,
regulations or EU legislation and in accordance with provisions set forth by
The personal data provided may be
transferred out of the country to other countries located within the European
Union. If required, transfer of the data subject’s personal data to countries
located outside of the European Union will only be performed when adequate and
appropriate safeguards have been provided pursuant to applicable legislation
and in particular Articles 45 and 46 of the Regulation.
4. Data retention period
Personal data collected and processed as a result of a
user visiting the Website will be retained for the time needed to perform the
services requested by the customer and then immediately deleted, with the
Data collected and processed in relation to services
referred to in the forms will be retained for a period of time not exceeding
that required for the purposes for which it was collected and subsequently
processed, including in relation to the fulfilment of contractual or legal
obligations and to document activities performed. The data will be processed as
long as the data subject does not withdraw their consent.
5. Rights of the data subject
With regard to the data processing
mentioned above, the data subject has the right, at any time, to exercise the
rights set forth in the Personal Data Protection Code (Article 7) and the
Regulation (Articles 15, 16, 17, 18, 19, 20 and 21), namely the right to: a)
access their data; b) request the rectification, updating, integration,
deletion, limitation or portability of said data; c) object to the processing
of said data; d) withdraw their consent to the processing of said data and e)
lodge a complaint with the Personal Data Protection Authority, in accordance
with the procedures and instructions published on the website
6. Data controller – Contact data
The data controller is: Tenuta di
Donnafugata S.r.l. Via S.Lipari 18, Marsala TP, VAT No. 01155720814, Tel/Fax
+39 0923 724201/+39 0923 724211.
The person responsible for data processing
in the company is Genna Salvatore, who can be contacted at the email address firstname.lastname@example.org for any information about the data processing methods or to
exercise the rights listed above.
Donnafugata reserves the right to update
this policy governing the processing of personal data.