PRIVACY NOTICE PURSUANT TO ARTICLE 13 OF EU REGULATION NO. 2016/679
Az. Agricola Perseveranza (VAT: 04046020360) (hereinafter “PERSEVERANZA”), with its registered office in Modena, Via Enrico Misley, 12/03, as the Data Controller pursuant to Articles 4(7) and 24 of EU Regulation No. 2016/679 (GDPR), informs you that, pursuant to Article 13 of the GDPR, your personal data described in the following Article 1 will be processed for the purpose described in Article 2.
1. Category of Personal Data Subject to Processing
1.1. PERSEVERANZA collects and processes your personal data (e.g., name, surname, email address), categorized as identifying data under Article 4(1) of the GDPR, for the purpose outlined in Article 2, using one or more functionalities available on the PERSEVERANZA website (hereinafter “Website”).
2. Purpose of Processing and Legal Basis
2.1. Your personal data is processed by PERSEVERANZA to fulfill the following purpose: execution of your request for contact and/or additional information, made through one or more functionalities available on the Website. Pursuant to Article 13(2)(e) of the GDPR, PERSEVERANZA specifies that the failure to provide (even partially) your personal data, through one or more functionalities chosen by you on the Website, may result in the inability of PERSEVERANZA to execute the purpose of processing in question.
PERSEVERANZA clarifies that the legal basis for the processing purpose under Article 2.1(a) can be found in Article 6(1)(b) of the GDPR.
3. Retention Period
3.1. In compliance with Article 13(2)(a) of the GDPR, PERSEVERANZA communicates the following retention period, after which your personal data will be subject to deletion, destruction, or anonymization: (i) for the execution of the processing purpose under Article 2.1(a): 5 years, starting from the complete execution of your request for contact and/or additional information, which may be extended to comply with regulatory obligations (even those subsequently enacted) or to assert or defend a right, including in judicial proceedings.
4. Recipients.
4.1. In compliance with Article 13(1)(e) of the GDPR, PERSEVERANZA specifies that your personal data may be disclosed, where appropriate and necessary, to one or more recipients pursuant to Article 4(9) of the GDPR, identified in general by category as follows: (i) for the execution of the processing purpose under Article 2.1(a): parties authorized by PERSEVERANZA under Articles 4(10), 29, and 32(4) of the GDPR; subsidiaries or companies otherwise affiliated, even indirectly, with PERSEVERANZA; consultants or companies providing various services and/or performances (including professional services) connected, even indirectly, with the execution of the purpose in question. PERSEVERANZA further specifies that your personal data will not be subject to dissemination.
5. Data Transfer.
5.1. PERSEVERANZA informs you that your personal data is stored within automated, partially automated, or non-automated archives owned by or otherwise attributable, even indirectly, to PERSEVERANZA and located within the European Economic Area (EEA).
6. Rights of the Data Subject.
6.1. Regarding your personal data, PERSEVERANZA informs you of the right to exercise the following rights, potentially subject to the limitations set out in Articles 2-undecies and 2-duodecies of the Italian Privacy Code:
- Right of access under Article 15 of the GDPR: right to obtain confirmation as to whether or not personal data is being processed, as well as the information referred to in Article 15 of the GDPR (e.g., purpose of processing, retention period);
- Right of rectification under Article 16 of the GDPR: right to correct, update, or complete personal data;
- Right to erasure under Article 17 of the GDPR: right to obtain the deletion, destruction, or anonymization of personal data, where the conditions listed in the same article apply;
- Right to restriction of processing under Article 18 of the GDPR: right with a markedly precautionary nature, aimed at obtaining the restriction of processing where the conditions set out in Article 18 apply;
- Right to data portability under Article 20 of the GDPR: right to receive personal data provided to the Data Controller in a structured, commonly used, and machine-readable format (and, where requested, to transmit them directly to another Data Controller), where the specific conditions indicated in the same article apply (e.g., legal basis of consent and/or contract performance; personal data provided by the data subject);
- Right to object under Article 21 of the GDPR: right to obtain the permanent cessation of a particular personal data processing activity;
- Right to lodge a complaint with the Supervisory Authority (i.e., the Italian Data Protection Authority) under Article 77 of the GDPR: right to lodge a complaint if it is believed that the processing under consideration violates national and EU regulations on personal data protection.
6.2. In addition to the rights described in Article 6.1, the Data Controller informs you that, in relation to your personal data, you have the right to exercise, where possible and applicable:
- The (sub)right provided by Article 19 of the GDPR (“The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1), and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it”), which is considered connected and related to the exercise of one or more rights governed by Articles 16, 17, and 18 of the GDPR;
- The right under Article 22(1) of the GDPR (“The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her”), subject to the exceptions provided for in the following paragraph 2.
6.3. In accordance with Article 12(1) of the GDPR, PERSEVERANZA undertakes to provide communications under Articles 15 to 22 and 34 of the GDPR in a concise, transparent, intelligible, and easily accessible form, using clear and plain language: such information will be provided in writing or by other means, including electronic means where appropriate, or, upon request by the data subject, orally, provided that the identity of the data subject is proven by other means.
6.4. In accordance with Article 12(3) of the GDPR, PERSEVERANZA informs you that it undertakes to provide information on the action taken regarding a request under Articles 15 to 22 of the GDPR without undue delay and, in any event, no later than one month from the receipt of the request; this period may be extended by 2 months where necessary, taking into account the complexity and number of requests (in such cases, PERSEVERANZA undertakes to inform you of such extension and the reasons for the delay within one month of receipt of the request).
6.5. The aforementioned rights (with the exception of the right under Article 77 of the GDPR) may be exercised using the contact details provided in Article 7 below.
7. Contact Details.
7.1. PERSEVERANZA can be contacted at the following address: info@cantinaperseveranza.it