Interested parties: Navigators

Pursuant to Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes the methods of processing of personal data of users who consult the website accessible electronically at the following address:

https://www.igelsidisantacristina.it

This information does not concern other sites, pages or online services accessible via hypertext links published on the site but referring to resources external to the Owner’s domain.

Please note that the Privacy Policy may be modified from time to time in function of the activation of new services or following updates to the Law, therefore it is advisable to periodically check any news on the matter by consulting the aforementioned sites. This page describes the methods of management of the site in reference to the processing of personal data of users who consult it. This is an information notice that is also provided pursuant to art. 13 of the Regulation (EU) relating to the protection of natural persons with regard to the processing of personal data to those who interact with the web services of “I Gelsi di Santa Cristina Località Monteluiano 59 – 06024 Gubbio (PG)” accessible electronically from the address cited above, further and possible data processing are defined in the information and cookie policy corresponding to the footer of the site.

The information is provided only for this site, and not for other websites that may be consulted by the user via links. The information is also inspired by Recommendation no. 2/2001 that the European authorities for the protection of personal data, gathered in the Group established by art. 29 of directive no. 95/46/CE , adopted on 17 May 2001 to identify some minimum requirements for the collection of personal data online, and, in particular, the methods, times and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purposes of the connection.

The Data Controller

Following consultation of this site, data relating to identified or identifiable persons may be processed.

The “owner” of their treatment is I GELSI DI S. CRISTINA SOCIETA’ AGRICOLA A RESPONSABILITA’ LIMITATA SEMPLIFICATA, email info@igelsidisantacristina.it

Data Protection Officer

The Data Protection Officer (DPO) is Francesca Marvardi who can be reached at the following email address: info@igelsidisantacecilia.it

Legal basis for processing

The personal data indicated on this page are processed by I GELSI DI S. CRISTINA SOCIETA’ AGRICOLA A RESPONSABILITA’ LIMITATA SEMPLIFICATA for the performance of its activities. Consent, execution of a contract, fulfillment of a legal obligation as well as the pursuit of a legitimate interest are the legal bases that, depending on the data processing carried out on the aforementioned website, will be pursued.

Place of data processing

The processing operations connected to the web services of this site are based in Italy, and are managed by the service provider of “Aruba SpA”; and are handled by the technical personnel of reference (data controller), and by other persons in charge of “Novanta snc di Venerucci C. & C.”, during updating and maintenance operations. No data deriving from the web service is disclosed. The personal data provided voluntarily by users who forward contact requests are used for the sole purpose of performing the service or performance requested, also possibly through external service providers.

Types of data processed and purposes of processing

Browsing data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

Such data, necessary for the use of web services, are also processed for the purpose of:

• Obtain statistical information on the use of services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);
• Check the correct functioning of the services offered.

Data communicated by the user

The optional, explicit and voluntary sending of messages to the contact addresses in the forms, as well as the compilation and forwarding of the forms present, entail the acquisition of the sender’s contact data, necessary to respond, as well as all personal data included in the communications.

Specific information will be published on the pages of the sites set up to provide certain services.

Cookies and other tracking systems

No cookies are used to profile users.

Instead, session cookies (non-persistent) are used strictly limited to what is necessary for safe and efficient navigation of the sites. The storage of session cookies in terminals or browsers is under the control of the user, where on the servers, at the end of HTTPS sessions, information relating to cookies remains recorded in the service logs, with retention times specific to each individual third-party manager of the service. Any data acquired through cookies, and the methods for their management, are described in full in the “cookie policy” document.

Browsing data

This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning for the time strictly necessary to achieve the purposes for which it was collected. The information collected automatically can be used by “I GELSI DI S. CRISTINA SOCIETA’ AGRICOLA A RESPONSABILITA’ LIMITATA SEMPLIFICATA” to ascertain responsibility in the event of hypothetical computer crimes against the site, for statistical purposes, to improve navigation and the contents of the sites. Any data acquired through cookies are described in full in the “cookie policy” document.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of data inserted in the data collection modules (forms), or the sending of emails to the email addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. It is specified that the personal and/or company data inserted in the forms on the sites are used to respond to user queries, to provide the information and services requested.

Treatment methods

Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. We inform you that, in order to provide a complete service, there are links to other websites managed by other owners. We decline any responsibility in the event of errors, contents, cookies, publications of immoral or illicit content, advertising, banners or files that do not comply with current legislation and compliance with the Privacy legislation by sites not managed by us to which reference is made.

Data recipients

The recipient of the data collected following consultation of the site, pursuant to Article 28 of the Regulation, as data controller, is Aruba SpA, as provider of the web platform hosting services;

Data transfer abroad

Third Countries: The communication services present on the site may use external suppliers located in non-EU countries, in particular in the USA. For these suppliers, it has been verified that the contractual clauses provide for adherence to the Privacy Shield agreements.

Rights of interested parties

You have the right to obtain from the owner the cancellation (possible right to be forgotten), limitation, updating, rectification, portability, opposition to the processing of personal data concerning you, as well as in general you can exercise all the rights provided for by articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR, where applicable with respect to the purposes of data processing.

Reg.to EU 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 –

1. The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in an intelligible form.

• The interested party has the right to obtain the indication:

a. of the origin of the personal data;

b. of the purposes and methods of processing;

c. of the logic applied in case of processing carried out with the aid of electronic instruments;

d. of the identifying details of the owner, the managers and the designated representative pursuant to Article 5, paragraph 2;

e. the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or persons in charge.

• The interested party has the right to obtain:

a. the updating, rectification or, when there is interest, the integration of the data;

b. the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;

c. certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disclosed, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected;

d. data portability.

• The interested party has the right to object, in whole or in part:

a. for legitimate reasons to the processing of personal data concerning him/her, even if pertinent to the purpose of the collection;

b. to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.

Right to complain

Interested parties who believe that the processing of their personal data carried out through this site is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the Regulation itself, or to take appropriate legal action (art. 79 of the Regulation).