Information on the processing of personal data
AZIENDA AGRICOLA RICCARDO FERRI Via Vecchia Barletta n. 251 76123 Andria (Ba), Italy, VAT No. 05526550727, as Data Controller, in accordance with art. 13 of the EU General Data Protection Regulation 679/2016 ( “GDPR”), provides the following information on how the personal data provided by you, as interested party, will be processed.
Everyone has the right to the protection of their personal data.
Who processes your personal data, for what purposes and using which methods
Your personal data is collected and will be processed exclusively for purposes strictly connected with the use of the website, its services and the online purchase of products. Specifically, your personal data may be processed for the following purposes:
when you register using the registration form on the website www.aziendaagricolaferri.com, we collect your personal data (e.g. email address, postal address, gender, User ID, Password) to give you access to the reserved sections of the website and/or to send you the Newsletter, if you subscribed;
if you purchase products and/or services using the order form, we collect your personal data (e.g. email address, personal details, credit/debit card number, bank details, telephone number);
- a) to provide assistance and customer services;
- b) to subscribe to the newsletter;
- c) to enter the data in the Data Controller’s electronic databases;
- d) for accounting purposes;
- e) to manage inflows and payments;
- f) to comply with legal and tax obligations and EU regulations.
Your personal data will be processed mainly in electronic format and in some cases on hard copies – for example, when data processing is required to prevent fraud – by the Data Controller, the Data Processor and by specifically appointed personnel, applying all the precautions to ensure data security and confidentiality.
Processing of sensitive data will be carried out within the limits of the Data Protection Authority general authorisation n. 5, of 2011.
Personal data will be stored in a format that will allow identification for the time strictly necessary for the purposes for which they were collected and later processed and, in any case, for the time provided by law.
Your personal data will not be communicated to third parties for unlawful purposes or without your consent.
Your personal data may be communicated to third parties only when necessary to conclude the contract – e.g. to online payment processors such as PayPal, to provide online payment services via credit/debit card – should you decide to purchase a product or service.
Additionally, your personal data may be communicated to the police or judicial authorities, as prescribed by the law, upon their formal request.
Nature of the data collection and consequences of refusing to provide data
Data provision is mandatory for the purposes strictly connected with the use of the website, its services, any online product purchase and to comply with legal obligations.
The provision of your personal data and, especially, your personal details is necessary to finalize the purchase of products or other services offered on the website on your request or when data are required to comply with obligations prescribed by laws or regulations.
Refusing to provide data required for these purposes may lead to the impossibility of performing the obligations in the contract in relation to the purchase of products and/or services and the impossibility of providing services via this website. In the case of purchases of products and/or services, failure to provide data, depending on the circumstances, may constitute a legitimate and justified reason not to execute the contract.
Communication and dissemination of data
For the execution of the contract and for the above-mentioned purposes, your personal data may be communicated to:
– all natural and juridical persons (legal, administrative, tax and corporate advisers, auditors, couriers and shipping companies, data processing centres, etc.) in all cases in which communication is necessary for the purposes mentioned;
– to banks in order to manage inflows and payments;
– to our specifically appointed collaborators and employees within the limits of their duties.
The data collected will not be disseminated.
However, AZIENDA AGRICOLA RICCARDO FERRI Via Vecchia Barletta n. 251 76123 Andria (Ba), Italy, VAT No. 05526550727, cannot guarantee that the measures adopted for the security of the website and the transmission of data and information will limit or eliminate all risks of unauthorised access or loss of data. We recommend installing software to protect the transmission of incoming and outgoing data on your computer (e.g. latest versions of antivirus software) and make sure your Internet provider has adopted measures to ensure data transmission security (e.g. firewalls and anti-spamming filters).
This website uses automatic systems for the collection of data, such as cookies. Cookies are devices transmitted to the hard disk of the user; they do not contain intelligible information but allow to associate the user with the personal information received from them (e.g. in the case of the user’s IP address and other information regarding the visits to the website or the preferences expressed by the user while browsing). Cookies are placed by our server and nobody can access the information stored on it. This information and data are collected directly and automatically by the website as part of its functionalities. This information and data are then processed in anonymous and aggregate format for commercial purposes and to adapt the services to the needs and preferences of the users of the website.
Data Subjects Rights
You may exercise your rights in accordance with article 7 of Legislative Decree No. 196, 30 June 2003, at any time. For your convenience, please find the article below.
The Data Subject shall have the right to obtain confirmation as to whether or not personal data concerning them exist, regardless of their being already recorded, and communication of such data in intelligible form.
The Data Subject shall have the right to be informed of:
- a) the origin of the personal data;
- b) the purposes and methods of the processing;
- c) the logic applied to the processing, if the latter is carried out with the help of electronic means;
d) the identification data concerning data controller, data processors and the representative designated as per article 5, paragraph 2;
e) the entities or categories of entities to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
The Data Subject shall have the right to obtain:
a) the update, rectification or, where interested therein, integration of the data;
b) the cancellation, transformation into anonymous format or to block unlawful processing of their personal details, including any personal data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c) the certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
The Data Subject shall have the right to partially or entirely object:
a) on legitimate grounds, to the processing of personal data concerning them, even though it is relevant to the purpose of the collection;
b) to the processing of personal data concerning them, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
The rights in article 7 can be exercised by sending or deputising someone to send an informal request on your behalf to the Data Controller or Data Processor. The request will be duly processed.
The request to the Data Controller or Data Processor can be sent by registered letter, fax or email.
Right to oblivion
In accordance with art. 17 of EU General Data Protection Regulation 679/2016 (“GDPR”), you may request the erasure of your personal data to the Data Controller by filling in the form available on the Data Protection Authority website, which may be downloaded from this LINK and sending it to email@example.com.
Should you require further information on how your data are processed, please send an email to firstname.lastname@example.org.
The Data Protection Code ensures that personal data are processed with respect for the basic rights, freedoms, and dignity of the Data Subject, in particular their privacy, identity and personal data processing.