Privacy Policy International

NOTICE PURSUANT TO ARTICLES 12 AND 13 OF EU REGULATION NO. 679/2016 AND CONSENT TO THE PROCESSING OF PERSONAL DATA

Preamble EU Regulation No. 2016/679 (hereinafter referred to as GDPR) establishes rules regarding the protection of individuals with regard to the processing of personal data, as well as rules on the free movement of such data. In order to protect the fundamental rights and freedoms of individuals, the Regulation imposes on data controllers the obligation to provide data subjects with the information required by Articles 12, 13, and 14, as well as specific information on the data subject’s rights as provided in Articles 15 to 22 of the GDPR.

Information pursuant to Article 13, paragraph 1 A) Data Controller and Contacts The data controller is AZIENDA AGRICOLA GAMBINO EMANUELE, with its registered office at Corso IV Novembre No. 55 – 12058 Santo Stefano Belbo (CN), Italy; email: discover@monvirelais.com The data controller informs you that your personal data will be processed in accordance with Articles 12 and 13 of EU Regulation No. 2016/679 (General Data Protection Regulation, hereinafter referred to as “GDPR”), by specifically authorized individuals, limited to the purposes and methods specified below with reference to the functions of the website www.monvirelais.com. It is also informed that the data controller uses data processors for the performance of its activities in compliance with the provisions of GDPR 2016/679. The list of data processors can be requested from the data controller by making a specific request, also via email.

B) Subject, Purpose of Processing The Data Controller informs you that when you use our services, you agree to the processing of your personal data. Personal data means any data that can be related to your person, such as:

• Name and surname
• Email
• Phone number

Your data, as described above, will be processed in accordance with the GDPR. The data you provide when contacting the Data Controller at the addresses provided on the website will be used for the following purposes: a) To respond to specific requests made by you to the Data Controller through the Website; b) For informational communications regarding the services of the Data Controller, following your request for information; c) For receiving newsletters and commercial communications from the Data Controller. Please refer to the Cookie Policy for further information.

C) Legal Basis for Processing Apart from what is specified in the Cookie Policy for browsing data, your communication of personal data to the Data Controller, as specified above, has the following legal bases for processing: the data controller’s legitimate interests, provided they do not conflict with the rights and freedoms of the data subject, the fulfillment of contractual and/or pre-contractual obligations assumed by the data controller, and your consent. The processing of users’ personal data is based on Article 6 of EU Regulation 2016/679, letters A, B, C, F. In particular, the provision of data for the purposes in points a) and b) is mandatory, and failure to provide it will result in the inability to use the services offered by the Data Controller. For the purposes in point c), the provision is optional, and processing can only occur with your consent. Your consent can be revoked at any time, without affecting the lawfulness of processing carried out prior to such revocation.

D) Recipients and Categories of Recipients of the Data Collected With regard to the purposes mentioned above, the data may be communicated to the following subjects and/or categories of subjects, or may be disclosed to companies and/or individuals providing services, even externally, on behalf of the Data Controller. These include, by way of example but not exhaustively: subjects, whether internal or external to the organization, providing information technology and telematic services for managing the information system used by the Data Controller and telecommunications networks, subjects that the Data Controller may appoint as data processors, financial administrations, and other public authorities to comply with legal obligations, competent authorities and/or supervisory bodies for the performance of legal obligations.

Information pursuant to Article 13, paragraph 2 A) Data Retention Period We inform you that, in accordance with Article 5 of the GDPR, respecting the principles of lawfulness, purpose limitation, data minimization, data collected for the purposes in points a) and b) will be retained in compliance with the law and for the time necessary to perform the activities related to the purposes mentioned above, in accordance with legal terms. For the purposes in point c), your data will be processed, subject to your consent, until such consent is revoked. Consent can be revoked at any time.

B) Rights of the Data Subject

• Right of Access and Rectification Under Article 15 of the GDPR, as the data subject, you have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning you are being processed, and to access the data and all the information specified in the same Article 15, paragraphs 1(a) to (h), by providing a copy of the data undergoing processing in a structured, commonly used, and machine-readable format, and to have it transmitted to an automated processing device and interoperable.

Under Article 16 of the GDPR, as the data subject, you have the right to obtain from the Data Controller the rectification and/or integration of your data if they are inaccurate, incomplete, or not up to date.

• Right to Erasure and Right to Restriction Under Article 17 of the GDPR, as the data subject, you have the right to obtain from the Data Controller, without undue delay, in the cases specified in Article 17, paragraph 1(a) to (f), the erasure of your data, with the exceptions set out in Article 17, paragraph 3. Under Article 18, paragraph 1(a) to (d) of the GDPR, you have the right to request and obtain from the Data Controller the restriction of the processing of your personal data, or that such data no longer be subject to further processing and cannot be altered. The Data Controller ensures that the restriction of processing is carried out using appropriate technical measures to ensure its inaccessibility and immutability.
• Right to Data Portability Under Article 20 of the GDPR, as the data subject, you have the right to receive your personal data processed by the Data Controller in a structured, commonly used, and machine-readable format, and you also have the right to transmit this data to another data controller, or, where technically feasible, to have the data transmitted directly to another specifically identified data controller.
• Right to Object Under Article 21 of the GDPR, as the data subject, you have the right to object at any time to the processing of personal data concerning you, for reasons related to your particular situation, in cases where the processing of your data is necessary (1) for the performance of a task carried out in the public interest and/or in the exercise of public authority vested in the Data Controller; (2) for the legitimate interests pursued by the Data Controller or a third party; (3) for profiling activities, if carried out by the Data Controller, based on the previous points. You also have the right to object to the processing of your personal data for reasons related to your particular situation