Personal Data Processing Policy
pursuant to the Privacy Code (Italian Legislative Decree no. 196/2003) and
articles 13 and 14 of the G.D.P.R.(the General Data Protection Regulation – Reg.EU 2016/679)
* * *
This policy is issued pursuant to art. 13 of Italian Legislative Decree no. 196/2003 (hereinafter the “Privacy Code”) and articles 13 and 14 of Reg.EU 2016/679 (the General Data Protection Regulation, hereinafter the “Regulation”).
We would like to thank you for visiting our website (https://www.podereforte.it).As you browse, and upon submitting any booking requests for products or guided tours at Podere Forte, Agricola Forte s.s. will acquire certain user data items in order to provide the services requested.We therefore wish to provide you with the following information.
* * *
Your data will be processed according to the principles of transparency, fairness, lawfulness, and confidentiality.
Data controller.
The Data Controller is Agricola Forte società semplice – VAT no. 00934570524, with registered offices at Loc. Petrucci no. 13, Castiglione d’Orcia (SI), Italy.
For all communications concerning the processing of your data, as well as to exercise your rights, you may contact the Data Controller by mail by writing to the address Loc. Petrucci no. 13 – 53023 – Castiglione d’Orcia (SI), Italy, or by email by writing to the email address privacy@podereforte.it.
Based on the instructions provided by the Data Controller, your data may also be processed by administrative staff for collection, registration, organisation, retention, consultation, processing, modification, and communication purposes (exclusively in cases authorised by the Data Controller).Whatever the case, the administrative staff will only carry out data processing activities for the purposes indicated under point 2) of this policy.
Legal basis and purposes of the data processing.
Your data will be lawfully processed for the following purposes:
to allow you to browse the website; to conclude and execute the contract or to carry out the activities you have requested (e.g. to conclude the sales contract, to proceed with the delivery of the products, or to schedule the requested tours); to ensure the properly handling of all relations between you and the Data Controller; to fulfil the Data Controller’s legal, tax and, accounting obligations, including communications to the Public Authorities, where expressly required; to pursue the Data Controller’s legitimate interests (e.g. the analysis of the data transmitted via the website to carry out ordinary marketing activities, legal protection, etc.); to provide you with personalised services, with your express consent, in order to ensure a better browsing experience and to improve the procedures for booking products or tours (e.g. subscription to the newsletter, access to personalised offers, even based on your preferences, invitations to promotional events, etc.).
Types of data processed.
3.1 – Browsing data.
The simple act of browsing the website (https://www.podereforte.it), even without logging-in as a registered user, entails the transmission of certain user data.
The Data Controller does not collect the aforementioned information to identify the users.However, by their very nature, these data could allow the users to be identified through processing and association with data held by third parties (e.g. IP addresses, domain names, type of devices used to connect to the website, etc.).Whatever the case, your data will only be processed for the purposes indicated under point 2) above.
Prior to being deleted, the data could potentially be used to ascertain liability in the event of any hypothetical IT crimes carried out against the website.
3.2 – Cookies.
The website makes use of so-called first and third party cookies.Cookies are short strings of text which are sent to a browser and, possibly, saved on a computer, smartphone, or any other tool used to access the Internet, every time a website is visited.
No personal user data is acquired by the Website in this respect.No cookies are used to divulge personal information, nor are any so-called persistent cookies or user tracking systems used.The use of so-called session cookies (which are not stored permanently on the user’s computer and are erased when the browser is closed) is strictly limited to the transmission of session identifiers which are necessary to allow for the safe and efficient consultation of the Website.The so-called session cookies used by this Website do not involve other computer techniques that could compromise the confidentiality of the user’s browsing and do not allow for the acquisition of the user’s significant personal data.
For more information regarding the use of cookies and their purposes and methods, as well as to manage your preferences regarding their use, please refer to the Cookie Policy (https://www.podereforte.it/cookie-policy).
3.3 – Data processed when booking products online.
Agricola Forte s.s. offers the possibility of requesting information about products and booking them online.The user’s personal data (name, surname, address) and e-mail address are required for this purpose.These data allow us:
to reply to user requests submitted via e-mail;
to process product bookings and, in the event of a subsequent purchase, to deliver the desired products;
to meet any legal obligations arising from the tax and accounting legislation, as well as any other legal obligations applicable to Agricola Forte s.s.
The processing of these data is necessary to carry out the user’s requests, and Agricola Forte s.s. may not be able to fulfil their requests if the data aren’t provided.
The user is asked to verify the correctness of their data upon entering them, and to modify them or contact Agricola Forte s.s. if they are subject to any changes.
3.4 – Data processed for booking guided tours.
Agricola Forte s.s. offers the possibility of booking guided tours.For this purpose, the user must enter their personal data (name, surname), e-mail address, the time of the tour, and the number of participants.For tours booked by educational institutions, the name of the institution and the personal data (name and surname) of the chaperone must also be indicated.The provision of these data will allow us:
to reply to user requests submitted via e-mail;
to book and organise the visit;
to meet any legal obligations arising from the tax and accounting legislation, as well as any other legal obligations applicable to Agricola Forte s.s.
The processing of these data is necessary to carry out the user’s requests, and Agricola Forte may not be able to fulfil their requests if the data aren’t provided.
The user is asked to verify the correctness of their data upon entering them, and to modify them or contact Agricola Forte s.s. if they are subject to any changes.
Data recipients
The data provided will be processed by the Data Controller and by any staff appointed for that purpose (e.g. the staff of the Administrative Offices).The administrative staff operates according to the instructions provided by the Data Controller.
Your data may be disclosed to third parties, such as tax experts, consultants, data processing companies, independent professionals, couriers, and shipping companies, who assist the Data Controller in managing its legal obligations, and the obligations arising from the contract, if stipulated.
Your data will only be disclosed to these subjects if strictly necessary for the management of your requests, for the execution of the contract, if stipulated, or for the fulfilment of specific legal obligations on the part Data Controller, with the confidentiality and security of the data being maintained at all times.It should also be noted that your data may be disclosed to the Public Authorities, if requested by the same, and used to fulfil the Data Controller’s legal obligations.
Data retention period or criteria for determination.
The data provided will be retained at the Data Controller’s registered offices for the time strictly necessary to provide the requested services, typically no more than 2 (two) years, unless an extension of the retention time is deemed necessary to protect the Data Controller’s legitimate interests.
Processing methods.
Your data will be collected and processed manually, with the aid of automatic acquisition and storage tools, including portable devices, in order to guarantee their security and confidentiality.
Your data will be stored at the Data Controller’s registered offices in paper and electronic format.
It should also be noted that your data will not be processed for profiling purposes, nor will it be communicated, disclosed, or granted for use to any third parties, with the exception of those indicated under point 4) of this policy.
Rights of the data subject.
In relation to the data provided, you may exercise:
the right to access your personal data;
the right to obtain the correction or deletion of the same, or the restriction of processing activities concerning you;
the right to object their processing;
the right to portability of the data (in electronic format).If this right is exercised, the Data Controller may request a reimbursement for any administrative costs incurred;
the right to obtain the deletion of data concerning you, without prejudice to any legitimate interests on the part of the Data Controller;
the right to lodge a complaint with the Data Protection Authority.The Italian Data Protection Authority has its registered offices at Piazza di Monte Citorio no. 121, Rome, Italy.
The Data Controller will reply within one month of receiving the request; in particularly complex cases, the user will receive a reply within three months of the request.
Methods of exercising these rights.
The rights indicated under point 7) above may be exercised by sending a written communication to the Data Controller by mail, to the following address:Loc.Petrucci no. 13 – 53023 – Castiglione d’Orcia (SI), Italy; or by e-mail, to the following address: privacy@podereforte.it.
Mandatory or optional nature of providing the data, and consequences of non disclosure.
The user is under no obligation to provide their personal data (name, surname, address, and e-mail address).However, the provision of the aforementioned personal data is necessary to carry out the user’s requests, which otherwise will not be able to be fulfilled.