PERSONAL DATA PROCESSING POLICY
Personal data processing policy pursuant to Article 13 of Legislative Decree No. 196 dated 30th June 2003 ("Personal Data Protection Code") and Articles 13 and 14 of EU Regulation 2016/679 ("Regulation").
TENUTA DI DONNAFUGATA S.r.l. Società Agricola (“Donnafugata”), provides information concerning personal data processing to users who visit Donnafugata’s website and https://visit.donnafugata.it (“Website”) and fill in forms from the “Subscribe to our newsletter” and “Book your visit” sections (“Forms”).
1. Types of data collected
The computer systems and software procedures involved in the website's operation acquire, during their normal operation, some personal data, the transmission of which is implicit in the use of Internet communication protocols. This category includes the IP addresses or domain names of computers used by users to connect to the website, the iMAC (Media Access Control) address, URI (Uniform Resource Identifier) form addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (done, error, etc.) and other parameters concerning the user's operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information concerning use of the website and checking that it is operating correctly. The data is deleted immediately after it has been processed. This data may be used to ascertain responsibility in the case of hypothetical computer crimes to the detriment of the website.
Data supplied voluntarily by natural and legal persons
The voluntary sending of electronic mail to the email addresses indicated in this website involves Donnafugata processing the sender's email address, as well as any other personal data contained in the message, in order to reply by email to the requests made by the user.
Within this context, Donnafugata processes:
- identification data;
- contact data;
Specific privacy notices will also be displayed on web pages dedicated to particular services provided by the website on request.
2. Purpose and legal basis for processing personal data
Data provided by natural and legal persons and collected by Donnafugata will be processed for the following purposes:
- to check that services offered via the Website are functioning correctly;;
- to obtain statistical information about use of the services and the Website, for example, most visited pages, number of visits per hour or day, geographic areas of origin, etc.
- in the event that express consent has been given, related to the “Book your visit” section, to allow access to Donnafugata’s premises and participation in guided tours with tastings (that may involve the administration of alcoholic drinks and food).
Failure to provide data in the “Subscribe to our newsletter” section, or in relation to use of the “Store Locator” application, will prevent correct performance of the relative services requested by the user.
3. Data processing methods
Data collected will be handled, stored and processed using electronic means and will be saved on electronic media as well as on paper, in databases and on any other suitable type of media. Specific security measures are taken to prevent data loss, unlawful or incorrect use of the data and unauthorised access to the same.
The data will not be visible to other users filling in the forms and will not be distributed; it may be communicated to companies, associations or professional firms responsible for managing the three forms or responsible for dealing with the customers’ requests. A list of third parties that may receive the personal data is available on request from the contact details specified in Point 6.
In addition to the purposes specified in Point 2, data may be processed to fulfil obligations set forth by laws, regulations or EU legislation and in accordance with provisions set forth by supervisory authorities.
The personal data provided may be transferred out of the country to other countries located within the European Union. If required, transfer of the data subject’s personal data to countries located outside of the European Union will only be performed when adequate and appropriate safeguards have been provided pursuant to applicable legislation and in particular Articles 45 and 46 of the Regulation.
4. Data retention period
Data collected and processed in relation to services referred to in the forms will be retained for a period of time not exceeding that required for the purposes for which it was collected and subsequently processed, including in relation to the fulfilment of contractual or legal obligations and to document activities performed. The data will be processed as long as the data subject does not withdraw their consent.
5. Rights of the data subject
With regard to the data processing mentioned above, the data subject has the right, at any time, to exercise the rights set forth in the Personal Data Protection Code (Article 7) and the Regulation (Articles 15, 16, 17, 18, 19, 20 and 21), namely the right to: a) access their data; b) request the rectification, updating, integration, deletion, limitation or portability of said data; c) object to the processing of said data; d) withdraw their consent to the processing of said data and e) lodge a complaint with the Personal Data Protection Authority, in accordance with the procedures and instructions published on the website www.garanteprivacy.it.
6. Data controller – Contact data
The data controller is: Tenuta di Donnafugata S.r.l. Via S.Lipari 18, Marsala TP, VAT No. 01155720814, Tel/Fax +39 0923 724201/+39 0923 724211.
The person responsible for data processing in the company is Genna Salvatore, who can be contacted at the email address firstname.lastname@example.org.
Donnafugata reserves the right to update this policy governing the processing of personal data.