Privacy

POLICY

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Dear data subject, we wish to inform you that the "REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - from now on "GDPR") provides for the protection of individuals with regard to the processing of personal data as a fundamental right. Pursuant to article 13 of the GDPR, therefore, we inform you that:

A. DATA CATEGORIES:

Cantine dei Marchesi di Barolo Spa will process your personal data such as:

a. Data collected automatically. The computer systems and applications dedicated to the operation of this website detect, during their normal operation, some data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The collected data includes the IP addresses and domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters concerning the operating system, the browser and the IT environment used by the user. These data are processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to check its regular functioning. The provision of such data is mandatory as it is directly connected to the web browsing experience.

b. Data provided voluntarily by the user. The voluntary and explicit sending of e-mails to the addresses indicated in the different access channels of this site does not involve a request for consent and the possible compilation of specifically prepared forms entail the subsequent acquisition of the address and data of the sender / user, necessary to respond to the requests produced and / or provide the requested service. The voluntary sending, on your part, of e-mails to our e-mail addresses does not require further information or requests for consent. On the contrary, specific summary information will be reported or displayed on the pages of the site prepared for particular services on request (form). The user must therefore explicitly consent to the use of the data shown in these forms in order to send the request.

c. Cookies. The site uses cookies. The data collected thanks to cookies can be used to access parts of the site or for statistical purposes or to make the browsing experience more enjoyable and more efficient in the future, trying to evaluate user behavior and modify the offer proposal of content according to their behavior. For more information, a specific cookie policy is available.

B. SOURCE OF PERSONAL DATA:

The personal data processed by Cantine Marchesi di Barolo Spa are collected directly from the data subject.

C. DATA CONTROLLER:

The Data Controller is “Cantine dei Marchesi di Barolo Spa”, with its registered office in Via Alba, 12, 12060 Barolo (ITALY), C.F. and VAT number 00169530045; contact details: phone 0173/564400 - email privacy@marchesibarolo.com

D. PURPOSES AND LAWFULNESS OF DATA PROCESSING:

The processing of your data has your consent as its legal basis and is carried out for the following purposes:

1. To improve the web browsing experience;
2. To use the data reported in the contact emails received and in the forms in order to be able to send responses to specific requests;

E. RECIPIENTS OF THE DATA:

Within the limits relevant to the processing purposes above indicated, your data may be disclosed to partners, consulting companies, private companies, appointed as Data Processors by the Controller or for legal obligations or to fulfill your specific requests. Your data will not be disseminated in any way. The Data Processors and the persons authorised to process personal data are promptly identified in the Privacy Document, which is updated periodically.

F. TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS:

The data collected may be communicated to the foreign shareholders of the Data Controller, natural and / or legal persons, or to other third country companies belonging to the same business group as the Data Controller, by virtue of an adequacy decision of the Commission or in the presence of appropriate guarantees.

G. STORAGE LIMITATION:

The collected data will be kept for a period of time not exceeding the achievement of the purposes for which they are processed ("conservation limitation principle", Article 5, GDPR) or on the basis of the deadlines set by law. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

H. RIGHTS OF THE DATA SUBJECT:

he data subject always has the right to request from the Data Controller access to his/her data, the rectification and erasure of the same, the restriction of processing or the right to object, to request the data portability, to revoke the consent to the processing, by asserting these and the other rights provided for by the GDPR (artt. 15-22) by simply communicating to the Data Controller. The data subject can also lodge a complaint with a Supervisory Authority.

I. CONSENT PROVIDING:

The provision of your data is mandatory while browsing our website as regards points D.1 and D.2 of the aforementioned purposes, to allow the correct provision of the service.

J. DATA PROCESSING METHOD:

The personal data you provide will form the object of the processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the activity of the Data Controller. The data will be processed both with IT tools and on paper and on any other type of suitable support, in compliance with the appropriate security measures pursuant to Article 5 par. 1 letter F of the GDPR.