Privacy Policy

PRIVACY POLICY FOR THE CASTELLO DI RADDA WEBSITE

Dear User,

As the Data Controller, pursuant to EU Regulation 679/2016, we consider privacy and the protection of personal data as the main goal of our activity. Therefore, we invite you, before communicating any personal data to the Data Controller, to carefully read this Privacy Policy as it contains important information about the protection of your personal data.

This Privacy Policy:

• is intended for the website www.castellodiradda.com;
• is an integral part of the Site and the services we offer;
• is provided in accordance with Article 13 of the Regulation to those who interact with the web services of the Site, both by simple consultation and by using specific services made available through the Site (e.g., contact forms).

The Data Controller can be contacted at the following address: info@castellodiradda.com.

This document has been prepared in accordance with Article 13 of EU Regulation 2016/679 in order to allow you to understand our privacy policy, to understand how your personal information is managed when you use our website, and, if necessary, to give your express and informed consent to the processing of your personal data. The information and data you provide or otherwise acquire in the context of using the services of (insert company name) will be processed in compliance with the provisions of the Regulation and the confidentiality obligations that inspire the activity of (insert company name). According to the rules of the Regulation, the processing carried out by (insert company name) will be based on the principles of lawfulness, fairness, transparency, limitation of purposes and storage, data minimization, accuracy, integrity, and confidentiality.

1. Data Controller and Data Protection Officer (DPO)

The data controller for the processing carried out through the Site is Società Agricola Castello di Radda SS, located at Località Il Becco 101/A, CAP 53017, Radda in Chianti (SI), Tel. 0577 738992, Fax 0577 738985, VAT and CF 01113530529.

2. Personal data subject to processing

Following navigation of the Site, we inform you that Società Agricola Castello di Radda SS will process your personal data, which may consist of an identifier such as your name, an identification number, an online identifier, or one or more characteristics of your physical, economic, cultural, or social identity that are suitable for identifying you. The Personal Data processed through the Site are as follows: Contact data such as name, surname, email, and phone number.

a. Browsing data The computer systems and software procedures used to operate the Site acquire, during their normal operation, certain Personal Data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature, it could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the Site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user’s operating system and computer environment. These data are used solely to obtain anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and/or abuses. The data may be used to ascertain responsibility in case of hypothetical computer crimes against the Site or third parties: except for this possibility, the web contact data do not persist for more than seven days.

b. Special categories of personal data In using the “Contacts” section of the Site, there may be a provision of your Personal Data falling within the special categories of Personal Data referred to in Article 9 of the Regulation, namely “[…] data suitable for revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as processing genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or a person’s sexual life or sexual orientation.” We ask you to provide such data only when strictly necessary. Indeed, we remind you that in the absence of specific consent to process such data, Società Agricola Castello di Radda SS cannot be held responsible in any way, nor can it receive any claims, since in this case, the processing will be allowed as it concerns data that has been manifestly made public by the data subject, in accordance with Article 9(1)(e) of the Regulation. However, we emphasize the importance, as already mentioned above, of giving explicit consent to the processing of special categories of Personal Data if you decide to share such information.

c. Data voluntarily provided by the data subject In using certain Site Services, there may be processing of Personal Data of third parties sent to Società Agricola Castello di Radda SS by you. With regard to these hypotheses, you act as the independent data controller, assuming all legal obligations and responsibilities. In this sense, you grant the broadest indemnity with respect to any dispute, claim, request for compensation for damage from processing, etc. that should be received by Società Agricola Castello di Radda SS from third parties whose Personal Data has been processed through your use of the Site’s functions in violation of applicable data protection laws. In any case, if you provide or otherwise process Personal Data of third parties in using the Site, you guarantee from now on – taking on all related responsibilities – that this particular processing is based on an appropriate legal basis under Article 6 of the Regulation, which legitimizes the processing of the information in question.

3. Purpose of the processing

The processing we intend to carry out, with your specific consent where necessary, has the following purposes: a. Allow the provision of the Service requested by you; b. Respond to requests for assistance or information; c. Fulfill any legal, accounting, and tax obligations.

4. Legal basis and mandatory or optional nature of the processing

The legal basis for the processing of Personal Data for the purposes set out in Section 3(a-b) is Article 6(1)(b) of the Regulation, as the processing is necessary for the provision of the Services or for responding to the data subject’s requests. The provision of Personal Data for these purposes is optional, but failure to provide them would make it impossible to activate the Services provided by the Site. The purpose set out in Section 3c represents a legitimate processing of Personal Data under Article 6(1)(c) of the Regulation. Once Personal Data is provided, the processing is indeed necessary to comply with a legal obligation to which Società Agricola Castello di Radda SS is subject.

5. Recipients of personal data

Your Personal Data may be shared, for the purposes set out in Section 3 above, with: a. subjects who typically act as data processors pursuant to Article 28 of the Regulation, namely: i) individuals, companies, or professional firms that provide assistance and consultancy to Società Agricola Castello di Radda SS in accounting, administrative, legal, tax, financial, and credit recovery matters relating to the provision of Services; ii) subjects with whom it is necessary to interact for the provision of Services (e.g., hosting providers); iii) or subjects delegated to perform technical maintenance activities (including maintenance of network equipment and electronic communication networks); (collectively “Recipients”); the list of data processors processing data can be requested from the Data Controller.

b. subjects, entities, or authorities, independent data controllers, to whom it is mandatory to communicate your Personal Data by virtue of legal provisions or orders of authorities;

c. individuals authorized by Società Agricola Castello di Radda SS to process Personal Data pursuant to Article 29 of the Regulation necessary to perform activities closely related to the provision of Services, who have undertaken to observe confidentiality or have an adequate legal obligation of confidentiality (e.g., employees of Società Agricola Castello di Radda SS).

6. Data retention

The Personal Data processed for the purposes set out in Section 3(a-b) will be retained for the time strictly necessary to achieve those same purposes in compliance with the principles of minimization and limitation of storage pursuant to Article 5.1.e) of the Regulation. In any case, the Data Controller will process Personal Data for the time necessary to fulfill contractual and legal obligations.