Tenuta del Castello, as the data controller, is also committed to being transparent about the data we collect, how we use it, and with whom we share it. It is our desire to make sure that customers also choose us because of the guarantees of experience, capacity and reliability to ensure full compliance with current national and Community provisions on the protection of personal data, including the security profile. That being said, we inform you that the use of this site (hereinafter, the "Site") may involve the processing of your personal data. The same will be used only for the purposes and in the manner indicated below.
The owner of the processing of personal data is: owner - TENUTA DEL CASTELLO SOCIETA' AGRICOLA C.da Castello snc, 87070 - Montegiordano (CS) - P.IVA 03613280787 (hereinafter, the "Owner").
Contact details of the Owner
The Holder can be reached by registered mail with return receipt at the above address or at the following e-mail address: email@example.com
Purpose and legal basis for processing
Your personal data are collected and processed by the Owner for purposes strictly related to the use of the Site and its information services.
Your personal data may also be used in different processing operations (storage, archiving, processing, etc.) however in terms compatible with these purposes. In particular, your personal data may be processed for the following purposes:
responding to requests aimed at obtaining information and receiving informative material (catalogs, brochures, price lists, etc.);
responding to your application for our job positions.
The Site processes only common data (first name, last name, city , address, e-mail address, phone number).
Processing methods and retention times
The data collected will be processed by means of electronic or otherwise automated, computerized and telematic tools, or by manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to ensure the security of the same.
Your personal data will be kept in a form that allows your identification for as long as is strictly necessary for the purpose for which the data was collected and subsequently processed and, in any case, within reasonable limits.
To ensure that your personal data is always accurate and up-to-date, in any case relevant and complete, please notify us of any changes that have occurred to: firstname.lastname@example.org
Categories of recipients of personal data
Your personal data will not be disclosed or transferred to third parties for purposes not permitted by law or for purposes not in accordance with this policy.
In addition, your data may be disclosed to law enforcement or judicial authorities, in accordance with the law and upon formal request by such parties, for example as part of anti-fraud services.
The Controller, in the event of a reorganization, merger or sale may transfer to third parties affected by such operations all personal data collected and for the specific purposes for which you have given consent. In all such cases, your consent will not be necessary.
Basic rights of the data subject and how to exercise them
The data subject, pursuant to Article 15 of EU Regulation 679/2016, has the right to obtain confirmation from the data controller as to whether or not personal data concerning him or her is being processed and, if so, to obtain access to the personal data and the following information: email@example.com
purpose of processing;
categories of personal data;
categories of recipients to whom the data have been or will be disclosed;
data retention period or criteria used to determine this period.
The data subject also has the right:
under Article 16, to obtain from the Controller the rectification of inaccurate personal data concerning him/her, without undue delay;
under Article 17, to obtain from the Controller the deletion of personal data concerning him/her without undue delay;
pursuant to Article 18, to obtain from the Controller the restriction of processing when one of the following occurs:
(a) the data subject disputes the accuracy of the personal data, for the period necessary for the Data Controller to verify the accuracy of such personal data;
b) the processing is unlawful and the data subject objects to the deletion of the personal data and instead requests that its use be restricted;
(c) although the Data Controller no longer needs the personal data for the purposes of processing, the personal data are necessary for the data subject to establish, exercise or defend a right in a court of law;
(d) the data subject has objected to the processing in accordance with Article 21(1), pending verification as to whether the legitimate reasons of the Controller outweigh the data subject's reasons;
pursuant to Article 20, to receive the personal data concerning him/her in a structured, commonly used and machine-readable format;
pursuant to Art. 21, to object at any time to the processing of personal data concerning him/her carried out for marketing purposes (commercial communications sent by the Controller).
To exercise your rights, you can send a request to the following e-mail address: firstname.lastname@example.org
We will notify you of receipt and follow up on your request within five working days. In more complex cases, we will strive to provide you with initial feedback no later than fifteen days.
The right to file a complaint with a regulatory authority
You also have the right to file a complaint with the relevant supervisory authority.
Necessity and Consequences of refusal to disclose your personal data
Failure to provide data for the above purposes will prevent the Owner from sending you the requested information.