PRIVACY POLICY
Pursuant to Article 13 of Legislative Decree No. 196 of June 30, 2003, as amended and supplemented, and European Regulation 679/2016 (hereinafter, the “GDPR Privacy Code”), as an interested party, we hereby inform you that the personal data you have provided or that has otherwise been collected, where lawful, in the course of our business (hereinafter the “Data”) is processed in compliance with the GDPR Privacy Code and the confidentiality obligations that guide the activities of Guido Berlucchi & C S.p.A. (hereinafter “Berlucchi,” the coordinating company) and the joint controllers Antica Cantina Fratta S.p.A., Caccia al Piano 1868 Società Agricola s.r.l., Società Agricola Brambilla Vigne Olcru s.r.l., and Vigne Guido Berlucchi Società Agricola s.r.l., among which there is a joint controller agreement that allows for the sharing of the Data.
The Data is collected electronically [in encrypted form] and subsequently processed using both computerised and manual methods, solely for purposes relating to the provision of the services requested by the user. Processing is carried out in accordance with current security regulations.
Access to the Data within Berlucchi’s corporate organisation will be restricted exclusively to those persons who need to know it by virtue of their duties in connection with the fulfilment of the contractual relationship with you. The complete and up-to-date list of any Data Processors appointed will be available to you from the Data Controller. The Data may be disclosed to bodies, authorities, public institutions, banks and credit institutions, professionals, self-employed contractors, business partners and third parties used by Berlucchi for the fulfilment of the contractual relationship, as well as to any person who is a legitimate recipient of communications required by law or regulations. These parties will process the Data either as Data Controllers, Data Processors, or persons authorised to process the Data, depending on the circumstances, exclusively for the processing purposes specified above. The Data will not be disclosed in any way.
You have the right to request access to your personal data from the Data Controller, as well as the right to request the rectification or erasure of such data or the restriction of processing concerning you. You also have the right to object to the processing of your personal data and the right to data portability. The Data Controller is Berlucchi, which can be contacted at the following address: Piazza Duranti, 4, Borgonato di Corte Franca, 25040, Brescia, Italy. Tel.: 030 98 43 81, fax 030 98 42 93, or by email to privacy@berlucchi.it
The data subject has the right to lodge a complaint with the Supervisory Authority if their requests for information addressed to the Data Controller have not been met with satisfactory responses. The relevant authority is the Italian Data Protection Authority
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524
Our information systems and software programmes are configured to minimise the use of personal and identifying data that is not necessary for the processing purposes specified above. The provision of such Data is necessary for the provision of services, and failure to provide it will make it impossible for Berlucchi to fulfil your request.
Berlucchi notes that your consent is required pursuant to Article 24 of the Privacy Code for the processing necessary to provide services such as the newsletter subscription service and to respond to users’ inquiries and send them requested information, within the limits and in accordance with the procedures laid down by law and in this privacy policy.
RETENTION PERIOD
Data is processed and stored for as long as is necessary for the purposes for which it was collected. Therefore:
Personal Data collected for purposes relating to the fulfilment of a contract between the Data Controller and the User will be retained until the fulfilment of that contract is complete.
Personal Data collected for purposes relating to the Data Controller’s legitimate interests will be retained until those interests have been satisfied. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
Where processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be required to retain Personal Data for a longer period in order to comply with a legal obligation or following an order from an authority.
Personal Data will be deleted at the end of the retention period. Therefore, after this period has expired, the rights of access, erasure, rectification, and data portability will no longer be exercisable.
TYPE OF DATA COLLECTED
The Personal Data collected by this website, either directly or through third parties, includes: cookies, usage data and email addresses. Personal Data may be provided voluntarily by the user, as in the case of enquiry forms, or collected automatically while browsing this website. The purpose of identifying the user and recording their preferences through the use of cookies or other technologies is to ensure the correct and complete provision of the requested service. The Data Controller accepts no liability for third-party data published or shared by the user via this website.
METHOD AND LOCATION OF DATA PROCESSING
The Data Controller implements appropriate security measures designed to prevent unauthorised access to, disclosure, alteration or destruction of users’ personal data through IT and/or telecommunications means, using organisational procedures and methods strictly related to the purposes set out. In addition to the Data Controller, other categories of data processors involved in the organisation of the website (administrative, sales, marketing and legal staff, as well as system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies and communications agencies) may also have access to the data. The data is processed at the Data Controller’s operational offices and at any other location where the parties involved in the processing are located. Processing is carried out using automated tools for the time strictly necessary to achieve the purposes for which the data was collected and, in any event, in accordance with the relevant regulations in force. The user may, at any time, request the cessation of processing or the erasure of the data.
PURPOSE OF PERSONAL DATA PROCESSING
User data is collected to enable the Data Controller to provide its services, as well as for the following purposes: statistics, advertising, contacting the user, interaction with social networks and external platforms, address management and sending emails. The types of personal data used for each purpose are set out in the relevant sections of this document.
DETAILS OF PERSONAL DATA PROCESSING
SENDING EMAILS
When the User subscribes to the newsletter, their email address is added to a contact list to which email messages may be sent containing information – including commercial and promotional content – relating to this Application. Personal data collected: email address.
FURTHER INFORMATION ON PROCESSING
LEGAL DEFENCE
Should it need to defend itself in court against misuse of the services, the Data Controller is entitled to use the user’s personal data and disclose it in response to requests from public authorities. The website may, at the User’s request, provide additional context-specific information regarding specific services or the collection and processing of personal data.
SYSTEM LOGS AND MAINTENANCE
The website and any third-party services it uses collect system logs containing the User’s IP address in order to manage and maintain the services provided by the website.
EXERCISE OF RIGHTS BY USERS
Data subjects have the right at any time to obtain confirmation from the Data Controller as to whether or not Personal Data concerning them exists, to be informed of its content and origin, to verify its accuracy or to request that it be supplemented, erased, updating, rectification, anonymisation or restriction of Personal Data processed in breach of the law, as well as to object, in any case and on legitimate grounds, to the processing of such data. Requests should be addressed to the Data Controller.
CHANGES TO THIS PRIVACY POLICY
The Data Controller may amend this policy at any time by notifying users on this page; the date at the end of the document indicates the most recent revision. Users may request the deletion of their data if they do not accept the changes made by the Data Controller. For further information, users are invited to contact the Data Controller.
PRIVACY NEWSLETTER
Pursuant to Article 13 of Legislative Decree No. 196 of 30 June 2003, as subsequently amended and supplemented, and European Regulation 679/2016 (hereinafter the “GDPR Privacy Code”), as an interested party, we hereby inform you that the personal data you have provided or which has otherwise been collected, where lawful, in the course of our business (hereinafter the “Data”) is processed in compliance with the GDPR Privacy Code and the confidentiality obligations underpinning the activities of Guido Berlucchi & C S.p.A. (hereinafter “Berlucchi”). The Data is collected electronically [in encrypted form] and subsequently processed using both computerised and manual methods, exclusively for purposes related to the provision of the services requested by the user. Processing is carried out in accordance with current security regulations.
Access to the Data within Berlucchi’s corporate organisation will be restricted exclusively to those persons who need to know it by virtue of their duties in connection with the fulfilment of the contractual relationship with you. The complete and up-to-date list of any Data Processors appointed will be available to you from the Data Controller. The Data may be disclosed to bodies, authorities, public institutions, banks and credit institutions, professionals, self-employed contractors, business partners and third parties used by Berlucchi for the fulfilment of the contractual relationship, as well as to any person who is a legitimate recipient of communications required by law or regulations. These parties will process the Data either as Data Controllers, Data Processors, or persons authorised to process the Data, depending on the circumstances, exclusively for the processing purposes specified above. The Data will not be disclosed in any way.
You have the right to request access to your personal data from the Data Controller, as well as the right to request the rectification or erasure of such data or the restriction of processing concerning you. You also have the right to object to the processing of your personal data and the right to data portability. The Data Controller is Berlucchi, which can be contacted at the following address: Piazza Duranti, 4, Borgonato di Corte Franca, 25040, Brescia, Italy. Tel.: 030 98 43 81, fax 030 98 42 93, or by email to privacy@berlucchi.it
Our information systems and software programmes are configured to minimise the use of personal and identifying data that is not necessary for the processing purposes specified above. The provision of such Data is necessary for the provision of services, and failure to provide it will make it impossible for Berlucchi to fulfil your request.
Berlucchi notes that your consent is required Article 13 of European Regulation 679/2016 for the processing necessary to provide services such as the newsletter subscription service and to respond to users’ inquiries and send them requested information, within the limits and in accordance with the procedures laid down by law and in this privacy policy.
LEGAL REFERENCES
Notice to EuropeanUsers: this privacy policy has been drawn up in compliance with the obligations set out in Article 10 of Directive 95/46/EC, as well as the provisions of Directive 2002/58/EC, as amended by Directive 2009/136/EC, regarding cookies.
This privacy policy applies solely to this website.