DATA CONTROLLER

Azienda Agricola Mario Costa, with registered office in Canale (CN), via Torino 159, tax code/VAT number IT03654580046, telephone number +39 0173 979486, email address info@cantinamariocosta.it (hereinafter also "Company").

1. PURPOSE OF PROCESSING

1.1 - Contractual purpose: to view the web pages and use the services, including the possible online sale of products, offered on the site www.cantinamariocosta.it ("Site")
1.2 - Marketing purposes: sending, by automated contact methods (such as SMS, MMS and e-mail) and traditional methods (such as telephone calls with operator and traditional mail), promotional and commercial communications relating to services/products offered by the Company or notification of company events, as well as carrying out market studies and statistical analysis.
1.3 - Profiling purposes: analysis of your preferences, habits, behaviour or interests in order to send you personalised commercial communications.
1.4 - Legal obligations: fulfilling obligations provided for by regulations and applicable national and supranational legislation.
1.5 - Sending newsletters: if requested by you by registering for this service.
1.6 - Rights of the owner: if necessary, to ascertain, exercise or defend the rights of the Company in court.
1.7 - Out-of-court credit recovery: in order to allow the Company to recover its credits without recourse to a judicial authority.
1.8 - Site operation: the computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties but, by its very nature, could, through processing and association with data held by the Company or by third parties, allow the identification of the Site's users.

2. LEGAL BASES FOR PROCESSING

2.1 - Contractual purpose: performance of a contract to which you are a party.
2.2 - Marketing and profiling purposes: consent (optional and revocable at any time).
2.3- Legal obligations: the need to fulfil legal obligations.
2.4 - Sending newsletters: performance of a contract to which you are party, i.e. subscription to the newsletter.
2.5 - Rights of the owner and extrajudicial debt collection: legitimate interest.

3. PERIOD OF RETENTION OF PERSONAL DATA

3.1 - Contractual purposes, legal obligations: for the entire duration of the contract and, after termination, for 10 years.
3.2 - Sending of the newsletter, marketing and profiling purposes: until consent for such purposes is withdrawn. The only data relating to the details of any purchases made will be stored and processed for the terms provided for by the provision of the Guarantor Authority for the protection of personal data of 24 February 2005 and subsequent amendments, or 24 months.
3.3 - Rights of the owner and out-of-court debt collection: in the event of legal disputes, for the entire duration of the same, until the time limit for appeals has been exhausted.
3.4 - Operation of the Site: for the duration of the browsing session on the Site.

After the expiry of the aforementioned retention periods, your personal data will be destroyed, erased or made anonymous, compatibly with technical erasure and backup procedures.

4.1 PERSONAL DATA PROCESSED FOR CONTRACTUAL PURPOSES - LEGAL OBLIGATIONS - RIGHTS OF THE HOLDER - DEBT COLLECTION

Personal data, contact details, administrative-accounting data.

4.2 PERSONAL DATA PROCESSED FOR MARKETING AND PROFILING PURPOSES

Personal data, contact data, administrative-accounting data, data on purchases made on the Site, data collected by the cookies installed by the Site.
For further information on cookies, please visit: https://cantinamariocosta.it/informativa-sui-cookie/

4.3 PERSONAL DATA PROCESSED FOR SENDING NEWSLETTERS

Contact details.

4.4 - PERSONAL DATA PROCESSED FOR THE OPERATION OF THE SITE

The IP addresses or domain names of the computers used by users who connect to the Site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), other parameters relating to the user's operating system and computer environment, information relating to the user's behaviour on the Site, the pages that have been visited or searched, in order to select and make specific announcements to the user.), other parameters relating to the user's operating system and computer environment, information relating to the user's behaviour on the Site, the pages that have been visited or searched, in order to select and make specific announcements to the user of the Site and data relating to navigation behaviour on the Site using, for example, cookies.

5. OBLIGATION TO PROVIDE DATA

The provision of the personal data referred to in point 4.1 for the purposes referred to in point 1.1 is compulsory. Therefore, refusal to provide the aforementioned personal data does not allow you to use the services of the Site relating to the booking and sale of products.

The provision of the personal data referred to in point 4.2 for the purposes referred to in points 1.2 and 1.3 is optional and subject to your consent.

Some personal data referred to in point 4.4 are strictly necessary for the operation of the Site, others are used only to obtain anonymous statistical information on the use of the Site and to check its correct operation, and are deleted immediately after processing. When processing personal data that may directly or indirectly identify you, we try to respect a principle of strict necessity. For this reason, we have configured the Site in such a way that the use of personal data is kept to a minimum and so that we limit the processing of personal data that can identify you only in case of necessity or at the request of the authorities and the police (such as, for example, for data relating to traffic and your stay on the Site or your IP address) or to ascertain responsibility in case of hypothetical computer crimes against the Site.

6. RECIPIENTS OF THE DATA

The data may be processed by external parties acting as autonomous controllers such as, for example, authorities and supervisory and control bodies and, in general, public or private parties entitled to request the data.

The data may also be processed on behalf of the Company by external parties designated as data processors, who are given appropriate operating instructions.

These entities are essentially included in the following categories:

1. companies offering e-mail services;
2. companies providing maintenance and development services for the Site;
3. press agencies or companies offering services related to the organisation of events;
4. companies offering e-commerce services;
5. companies offering support in carrying out market studies and evaluating customer satisfaction.

7. PERSONS AUTHORISED TO PROCESS DATA

Your data may be processed by the employees of the company departments responsible for pursuing the above-mentioned purposes, who have been expressly authorised to do so and who have received appropriate operating instructions.

The data referred to in point 4.4 collected when browsing the Site will be processed by employees, collaborators of the Company or external subjects, in their capacity as persons in charge of and responsible for processing, who carry out technical and organisational tasks on behalf of the Company.

8. YOUR RIGHTS AS A DATA SUBJECT - COMPLAINT TO THE SUPERVISORY AUTHORITY

By contacting the Company by e-mail at info@cantinamariocosta.it you can ask the Company for access to the data concerning you, their deletion, the rectification of inaccurate data, the integration of incomplete data, the limitation of processing in the cases provided for by Article 18 of the GDPR, as well as opposition to processing in cases of legitimate interest of the Company.

In addition, if the processing is based on consent or on contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format and, if technically feasible, to transmit it to another controller without hindrance.

You have the right to withdraw your consent at any time for marketing and/or profiling purposes, as well as to object to the processing of your data for marketing purposes, including profiling in connection with direct marketing. Should you prefer to be contacted for the aforementioned purposes exclusively through traditional methods, you may express your opposition only to receiving communications through automated methods.

He has the right to lodge a complaint with the competent supervisory authority in the Member State in which he normally resides or works or in the State where the alleged infringement occurred.

9. DATA SECURITY

Your personal data will be processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected and in accordance with the principle of necessity and proportionality, avoiding processing personal data if the operations can be carried out through the use of anonymous data or by other means.

We have adopted specific security measures to prevent the loss of personal data, unlawful or incorrect use and unauthorised access, but please remember that it is essential for the security of your data that your device is equipped with tools such as constantly updated antivirus software and that the provider providing the Internet connection guarantees the secure transmission of data through firewalls, spam filters and similar measures.