Information pursuant to art. 13 of the Regulation (EU) n. 679/2016 (“GDPR”)
This Application collects some Personal Data from its Users.
Caseificio La Villanella S.r.l., firstname.lastname@example.org
Types of Data collected
Among the Personal Information collected by this Application, either independently or through third parties, there are: Cookies, Usage Data, Telephone Number, First Name, Last Name, Username, Email, Password, Company Name, Tax Code, VAT Number, Province , CAP and City.
Personal Data may be entered voluntarily by the User, or collected automatically during the use of this Application.
Failure to provide the User with some Personal Data may prevent this application from providing its services.
The User assumes the responsibility of the Personal Data of third parties published or shared through this Application and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.
Mode and place of processing of collected data
Method of treatment
The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
Processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may have access to the Data subjects of the persons involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (as suppliers of third party technical services, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller. The updated list of Managers can always be requested from the Data Controller.
The Data are processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For more information, contact the owner.
The Data are processed for the time necessary to perform the service requested by the User, or required by the purposes described in this document, and the User can always ask for the interruption of treatment or deletion of data.
Purposes of the processing of collected data
The data are used by the Data Controller to follow up the registration request and the contract for the supply of the selected Service and / or the purchased Product, manage and execute the contact requests sent by the Interested Party, provide assistance, comply with legal and regulatory obligations. which the holder is kept in function of the activity exercised. In no case does the La Villanella dairy resell the personal data of the interested party to third parties or use them for undeclared purposes. In particular the data of the interested party will be processed for:
a) registration and contact requests and / or information material. The processing of personal data of the interested party takes place to carry out the preliminary activities and consequent to the registration request, to the management of requests for information and to contact and / or sending information material, as well as for the fulfillment of any other obligation arising. The legal basis of these treatments is the fulfillment of the services inherent to the request for registration, information and contact and / or sending of informative material and compliance with legal obligations.
b) management of the contractual relationship. The processing of personal data of the interested party takes place to carry out preliminary activities and consequent to the purchase of a Service and / or a Product, the management of the related order, the provision of the Service itself and / or production and / or the shipment of the purchased Product, the related invoicing and management of the payment, the handling of complaints and / or reports to the assistance service and the provision of the assistance itself, the prevention of fraud and the fulfillment of any other obligation arising from the conditions of sale. The legal basis of these treatments is the fulfillment of the services inherent in the contractual relationship and compliance with legal obligations.
c) promotional activities on Services / Products similar to those purchased by the Interested Party (Recital art 47 GDPR)
The data controller, even without your explicit consent, may use the contact details provided by the Interested Party, for the purpose of direct sale of their Services / Products, limited to the case in which the Services / Products are similar to those object of the sale, unless the interested party explicitly objects.
d) the commercial promotion activities on Services / Products different from those purchased by the Interested The personal data of the interested party may also be processed for purposes of commercial promotion, surveys and market research with regard to Services / Products that the Owner offers only if the interested party has authorized the treatment and does not oppose this. This treatment can be automated, in the following ways: – e-mail; – sms; – telephone contact and can be carried out: 1. if the interested party has not revoked his consent for the use of the data; 2. if, in the event that the processing takes place through contact with the telephone operator, the interested party is not registered in the register of oppositions referred to in the D.P.R. n. 178/2010; The legal basis of such processing is the consent given by the interested party prior to the processing itself, which can be revoked by the interested party freely and at any time.
In any case, it is always possible to ask the Owner to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.
e) computer security
The Owner, in line with the provisions of Recital 49 of the GDPR, treats, also through its suppliers (third parties and / or recipients), the personal data of the interested party relating to traffic to a strictly necessary and proportionate extent to ensure the security of networks and information, ie the ability of a network or an information system to resist, at a given level of security, unforeseen events or illicit or malicious acts that compromise availability, authenticity, integrity and confidentiality of personal data stored or transmitted. The Data Controller will promptly inform the Interested parties, if there is a particular risk of violation of their data without prejudice to the obligations arising from the provisions of art. 33 of the GDPR concerning notifications of violation of personal data. The legal basis of these treatments is compliance with legal obligations and the legitimate interest of the Data Controller to carry out processing related to the protection of the company assets and the security of the homes and systems of the La Villanella dairy.
The personal data of the interested party may also be processed for profiling purposes (such as analysis of the transmitted data and of the selected Services / Products, to propose advertising messages and / or commercial proposals in line with the choices expressed by the users themselves) only in the event that the interested party has provided an explicit and informed consent. The legal basis of such processing is the consent given by the interested party prior to the processing itself, which can be revoked by the interested party freely and at any time.
g) fraud prevention (recital 47 and article 22 of the GDPR) the personal data of the interested party, with the exclusion of the special data (Art 9 GDPR) or judicial (Art 10 GDPR) will be processed to allow controls for monitoring and prevention purposes fraudulent payments, by software systems that perform an automated check and preliminary to the negotiation of Services / Products; exceeding these checks with a negative result will make it impossible to carry out the transaction; the interested party may in any case express his opinion, obtain an explanation or contest the decision motivating his reasons for Customer Service or contact email@example.com; personal data collected for the sole purpose of anti-fraud, unlike the data necessary for the correct execution of the requested service, will be immediately canceled at the end of the control phases. h) the protection of minors The Services / Products offered by the Data Controller are reserved to subjects legally able, on the basis of the national reference legislation, to conclude contractual obligations. The Data Controller, in order to prevent illegal access to its services, implements prevention measures to protect its legitimate interest, such as the control of the tax code and / or other checks, when necessary for specific Services / Products, the correctness of the data identification of identity documents issued by the competent authorities.
The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: Analytics, Interaction with external social networks and platforms, Management of payments, Displaying content from external platforms, Contacting the User, Registration and authentication and management of addresses and sending of email messages.
The types of Personal Data used for each purpose are indicated in the specific sections of this document.
The Personal Data will be processed for the time strictly necessary for the pursuit of the purposes indicated in this Notice or until the user will not communicate, in one of the methods provided for in this Notice, your will to revoke the consent to one or all purposes for which you have been asked and will in any case be kept for a period of time not exceeding 10 (ten) years for administrative purposes.
Transfer of data abroad
Personal Data will be processed by the Data Controller and / or by the Joint Data Controllers within the European Union.
If for technical and / or operational reasons it is necessary to make use of subjects located outside the European Union, these subjects will be appointed as Data Processors pursuant to and for the purposes of article 28 of the Rules and the transfer of the your Personal Information to such subjects will be regulated in accordance with the provisions of Chapter V of the Rules.
Rights of the interested party
The data subject has the right to obtain from the data controller the following: a) confirmation that personal data is being processed and / or in this case, to obtain access to personal data and the following information : 1. the purposes of the processing; 2. the categories of personal data in question; 3. the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations; 4. when possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period; 5. the existence of the right of the data subject to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment; 6. the right to lodge a complaint with a supervisory authority; 7. if the data are not collected from the data subject, all information available on their origin; 8. the existence of an automated decision-making process, including profiling, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject. 9. the appropriate guarantees provided by the third country (outside the EU) or an international organization to protect any transferred data b) the right to obtain a copy of the personal data being processed, provided that this right does not affect the rights and freedoms others; c) the right to obtain from the data controller the correction of inaccurate personal data concerning him without unjustified delay d) the right to obtain from the data controller the deletion of personal data concerning him without undue delay, if the reasons stated in GDPR at the art. 17, among which, for example, in the case in which they are no longer necessary for the purposes of the processing or if this is assumed to be illegal, and the conditions provided for by law still exist; and in any case if the treatment is not justified by another equally legitimate reason; e) the right to obtain from the data controller the limitation of processing, in the cases provided for by art. 18 of the GDPR, for example where you have challenged its accuracy, for the period necessary for the Data Controller to verify its accuracy. The interested party must be informed, in reasonable time, also of when the suspension period has been completed or the cause of the limitation of the treatment has ceased, and therefore the limitation itself revoked; f) the right to obtain communication from the holder of the recipients to whom the requests for any corrections or cancellations or limitations of the processing have been transmitted, unless this proves impossible or involves a disproportionate effor; g) the right to receive personal data concerning him in a structured, commonly used and automatically readable format, and the right to transmit such data to another data controller without impediments by the data controller who provided them , in the cases provided for by art. 20 of the GDPR, and the right to obtain direct transmission of personal data from one controller to another, if technically feasible. For any further information and in any case to send your request you must contact the Owner at firstname.lastname@example.org. In order to ensure that the rights mentioned above are exercised by the Data Subject and not by unauthorized third parties, the Data Controller may request the same to provide any additional information necessary for the purpose.
Opposition to the processing of personal data (Article 21 GDPR)
For reasons relating to the particular situation of the interested party, the same may oppose at any time the processing of their personal data if it is based on legitimate interest or if it takes place for commercial promotion, sending the request to the owner at info @ caseificiolavillanella .com. The interested party has the right to cancel his / her personal data if there is no legitimate overriding reason for the Data Controller than the one giving rise to the request, and in any case in case the Data Subject opposes the processing for commercial promotion activities.
Complaint the interested party (Article 15 GDPR)
Without prejudice to any other action in administrative or judicial, the interested party may lodge a complaint with the competent supervisory authority on the Italian territory (Authority for the protection of personal data) or the one carrying out its duties and exercising its powers in the Member State where the GDPR violation took place.
Each update of this Information will be promptly communicated and by means of reasonable means and will also be communicated if the Data Controller processes the data of the Data Subject for further purposes than those referred to in this Notice before proceeding and following the manifestation of the relative consent of the ‘Interested if necessary
Details on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Contact the user
Contact by phone (This Application)
Users who provided their telephone number may be contacted for commercial or promotional purposes related to this Application, as well as to satisfy requests for support.
Personal data collected: Telephone number.
The payment management services allow this Application to process payments by credit card, bank transfer or other instruments. The data used for payment are acquired directly by the payment service provider requested without being in any way treated by this Application.
Some of these services may also allow the sending of messages to the User, such as emails containing invoices or notifications regarding payment.
PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments using their PayPal credentials.
Address management and sending of email messages
These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User.
These services may also allow us to collect data relating to the date and time the messages are displayed by the User, as well as to the User’s interaction with them, such as information on clicks on the links inserted in the messages.
Mailchimp is an address management and e-mailing service provided by Mailchimp Inc.
Personal data collected: Email.
Interaction with social networks and external platforms
These services allow you to make interactions with social networks, or other external platforms, directly from the pages of this application.
The interactions and information acquired by this Application are in any case subject to the User’s privacy settings related to each social network.
If an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, the same collect traffic data relating to the pages in which it is installed.
• Google information
• Facebook information
Except for technical cookies strictly necessary for normal browsing, the provision of data is left to the will of the person who decides to browse the site after having read the brief information contained in the appropriate banner.
The interested party can therefore avoid the installation of cookies by keeping the banner (refraining from closing it by clicking on the “ok” button), as well as through the special functions available on your browser.
Like button and Facebook social widgets (Facebook, Inc.)
The “Like” button and Facebook social widgets are services of interaction with the social network Facebook, provided by Facebook, Inc.
Personal data collected: cookies and usage data.
Registration and authentication
By registering or authenticating the User allows the Application to identify it and give it access to dedicated services.
Depending on the following, the registration and authentication services may be provided with the help of third parties.
If this happens, this application will be able to access some data stored by the third party service used for registration or identification.
Direct registration (This Application)
The User registers by filling in the registration form and providing his Personal Data directly to this Application.
Personal data collected: ZIP code, City, Surname, Email, Name, Telephone number, Password, Province, Business name and Username.
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.
Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualise and personalize the advertisements of its advertising network.
Personal data collected: cookies and usage data.
In light of the precautions taken, the service of Google Analytics, used by this site for mere statistical purposes, is activated upon landing, not requiring the user any consent for the release of the related cookies
Wordpress Stat (Automattic Inc.)
Wordpress Stats is a statistical service provided by Automattic Inc.
Personal data collected: cookies and usage data.
Displaying content from external platforms
These services allow you to view content hosted on external platforms directly from the pages of this Application and interact with them.
In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, the same collect traffic data relating to the pages in which it is installed.
Google Fonts (Google)
Google Fonts is a service of visualization of styles of character managed by Google Inc. that allows this Application to integrate such contents within its pages.
Personal data collected: cookies and usage data.
Youtube Video Widget (Google)
Youtube is a video content visualization service managed by Google Inc. that allows this application to integrate such contents within its pages.
Personal data collected: cookies and usage data.
Google Maps widget (Google)
Google Maps is a map visualization service managed by Google Inc. that allows this application to integrate such contents within its pages.
Personal data collected: cookies and usage data.
Further information on Personal Data
Sale of goods and services online
The Personal Data collected is used for the provision of services to the User or for the sale of products, including payment and any delivery. The Personal Data collected to complete the payment may be those relating to the credit card, the bank account used for the transfer or other payment instruments provided. The payment details collected by this application depend on the payment system used.
Information on cookies
These cookies are necessary for the statistics services described in the respective section to work.
_ut *, _ga *
Google Analytics Cookie.
Cookies for displaying content from external platforms
These cookies are necessary for viewing content from external platforms, described in the respective section, to work.
ACTIVITY, APISID, GED_PLAYLIST_ACTIVITY, GEUP, HSID, LOGIN_INFO, PREF, SAPISID, SID, SSID, VISITOR_INFO1_LIVE, YSC, __utma, __utmc, __utmz, s_gl, wide
Youtube Video Cookie Widget.
More information on treatment
Defense in court
The User’s Personal Data may be used for the defense by the Owner in court or in the stages leading to its eventual establishment, by abuses in the use of the same or related services by the User.
The User declares to be aware that the Data Controller may be required to disclose the Data at the request of the public authorities.
System logs and maintenance
For needs related to operation and maintenance, this Application and any third party services used by it may collect System Logs, which are files that record the interactions and which may also contain Personal Data, such as the User IP address.
Information not contained in this policy
More information in relation to the processing of Personal Data may be requested at any time to the Data Controller using the contact information.
Exercise of rights by Users
The subjects to whom the Personal Data refer have the right at any time to obtain confirmation of the existence or otherwise of the same with the Data Controller, to know its content and origin, to verify its accuracy or request its integration , the cancellation, updating, rectification, transformation into anonymous form or blocking of Personal Data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing. Requests should be addressed to the Data Controller.
Rights of the interested party
The interested party can assert at any time, by contacting the data controller by sending an e-mail to email@example.com the rights referred to in art. 7 of Legislative Decree 30 June 2003 no. 196, which is reported below.
Art. 7 – D.Lgs. 196/2003
1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him / her, even if not yet registered, and their communication in intelligible form.
2. The interested party has the right to obtain the indication:
a) of the origin of personal data;
b) of the purposes and methods of the processing;
c) of the logic applied in case of treatment carried out with the aid of electronic instruments;
d) of the identifying details of the holder, of the responsible and of the designated representative according to article 5, paragraph 2;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents.
3. The interested party has the right to obtain:
a) updating, rectification or, when interested, integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment is it proves impossible or involves a use of means manifestly disproportionate to the protected right.
4. The interested party has the right to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning him / her, even though they are relevant to the purpose of the collection;
b) to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
Without prejudice to the foregoing in relation to cookies strictly necessary for navigation, the user may delete the other cookies through the functionality provided for this purpose by the Owner through this information or directly through their browser.
Each browser has different procedures for managing settings. The user can obtain specific instructions through the links below.
The deactivation of third-party cookies is also possible through the methods made available directly by the third party owner of said processing, as indicated in the links in the paragraph “third-party cookies”.
Attention: the total or partial disabling of technical cookies can compromise the use of the website features reserved for registered users. On the contrary, the usability of public content is also possible by completely disabling cookies.
Automated decision-making process concerning individuals, including profiling (Article 22 GDPR)
1. The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person. 2. Paragraph 1 shall not apply where the decision: a) is necessary for the conclusion or execution of a contract between the data subject and a data controller; (b) is authorized by the law of the Union or of the Member State to which the controller is subject, which also specifies appropriate measures to protect the rights, freedoms and legitimate interests of the data subject; c) is based on the explicit consent of the interested party. 3.In the cases referred to in paragraph 2 (a) and (c), the controller shall implement appropriate measures to protect the rights, freedoms and legitimate interests of the data subject, at least the right to obtain human intervention from the holder treatment, to express their opinion and to challenge the decision. 4.The decisions referred to in paragraph 2 shall not be based on the particular categories of personal data referred to in Article 9 (1), unless Article 9 (2) (a) or (g) applies, and adequate measures to protect the rights, freedoms and legitimate interests of the data subject are not in force.
Definitions and legal references
Personal Data (or Data)
It constitutes personal data any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.
This information is collected automatically by this Application (or by third-party applications that this Application uses), including: IP addresses or domain names of the computers used by the User that connects with this Application, the addresses in Uniform Resource Identifier (URI) notation, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (success, error, etc. ) the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details of the itinerary followed within the Application, with particular reference to the sequence of pages consulted, to the parameters relating to the operating system and to the IT environment of the User is.
The individual who uses this application, which must coincide with the interested party or be authorized by him and whose personal data are being processed.
The natural or legal person to whom the Personal Data refers.
Data Processor (or Manager)
Data Controller (or Holder)
The natural person, legal entity, public administration and any other body, association or body to which they are responsible, even together with another owner, decisions regarding the purposes, methods of processing personal data and the tools used, including the profile of the security, in relation to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.
The hardware or software tool through which the Personal Data of Users are collected.
Small portion of data stored in the User’s device.
Notice to European Users: this privacy statement has been prepared in fulfillment of the obligations under Art. 10 of the Directive n. 95/46 / EC, as well as the provisions of the Directive 2002/58 / EC, as updated by Directive 2009/136 / EC, concerning Cookies, REGULATION (EU) 2016/679 (GRPR)
La Villanella Dairy is certified by a certification mechanism approved in accordance with Article 42 of the GRDP
This privacy statement only concerns this Application
Last update date 24/05/2018