Tenuta del Castello, as Data Controller, undertakes to be transparent with regard to any data we collect, the way we use them and the people with whom we share them. We strive to ensure that customers also choose us for our experience, skills and reliability when it comes to full compliance with current national and EU provisions on the protection and security of personal data. That said, please keep in mind that the use of this site (hereinafter, the “Site”) may entail the processing of your personal data. Data will be used only for the purposes and methods discussed below.
The Data Controller is: TENUTA DEL CASTELLO SOCIETA’ AGRICOLA Via Garibaldi, 46 – 87059 Casali del Manco (CS) – P.IVA 03613280787 (hereinafter, the “Data Controller”).
Data Controller Contact Information
The Data Controller can be reached by registered letter with return receipt to the address provided above or to: firstname.lastname@example.org
Purpose and Legal Basis of Processing
Your personal data are collected and processed by the Data Controller for purposes strictly related to the use of the Site and its information services.
Your personal data may also be used in a variety of processing operations (storage, archiving, processing, etc.), whose terms, in any case, are compatible with such purposes. In particular, your personal data may be processed for the following purposes:
address requests aimed at obtaining information and receiving informational materials (catalogs, brochures, price lists, etc.);
respond to your application for our job positions.
The Site only processes common data (first name, last name, city, street address, e-mail address and telephone number).
Processing Methods and Storage Times
The data collected will be processed using electronic, automated, computerized and telematic tools, or by manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in a manner guaranteeing data security.
Your personal data will be stored in any form allowing your identification for the time strictly necessary for the purpose for which data were collected and processed and, in any case, within reasonable limits.
To ensure that your personal data are always accurate and up-to-date, as well as relevant and complete, please notify us of any changes to: email@example.com.
Categories of Personal Data Recipients
Your personal data will not be disclosed or transferred to third parties for purposes not permitted by law or for purposes that do not comply with this Privacy Notice.
Furthermore, your data may be disclosed to police forces or judicial authorities, in accordance with the law and upon formal request by these subjects, for example, for purposes related to fraud-prevention measures.
In the event of reorganization, merger or sale, the Data Controller may transfer to any third parties involved in these operations any and all personal data collected, and for the specific purposes for which consent has been granted. In all such cases, your consent will not be required.
Fundamental Rights of the Data Subject and how to Exercise Them
Pursuant to Art. 15 of EU Regulation 679/2016, any Interested Party has the right to obtain from the Data Controller confirmation that the processing of his/her personal data is in progress and, in this case, to obtain access to personal data and the following information: firstname.lastname@example.org
purpose of processing;
personal data categories;
categories of recipients to whom data have been or will be communicated;
data retention period or criteria used to determine this period.
In addition, any Data Subject has the right to:
pursuant to Art. 16, obtain from the Data Controller the correction of inaccurate personal data concerning him/her, without undue delay;
pursuant to Art. 17, obtain from the Data Controller the deletion of personal data concerning him/her, without undue delay;
pursuant to Art. 18, ensure that the Data Controller limits processing when any of the following circumstances occur:
a) the Data Subject disputes the accuracy of his/her personal data, for the period necessary for the Data Controller to verify the accuracy of such personal data;
b) processing is unlawful and the Data Subject opposes the cancellation of his/her personal data and requests instead that their use be limited;
c) although the Data Controller no longer needs data for processing purposes, such data are necessary for the Data Subject to ascertain, exercise or defend a right in court;
d) the Data Subject has opposed processing pursuant to Art. 21, paragraph 1, pending verification of the possible precedence of the legitimate reasons of the Data Controller over those of the Data Subject;
pursuant to Art. 20, to receive personal data concerning him/her in a structured commonly used format that is readable by an automatic device;
pursuant to Art. 21, to object at any time to the processing of his/her personal data for marketing purpose (commercial notifications sent by the Data Controller).
To exercise your rights, you can send a specific request to the following e-mail address: email@example.com.
We will confirm receipt and follow up on your request within five working days. In more complex cases, we will endeavor to provide you with an initial response no later than fifteen days.
Right to File a Complaint with a Supervisory Authority
The law affords you the right to file a complaint with the competent Supervisory Authority.
Need for and Consequences of your Refusal to Provide Personal Data
Failure to provide data for the purposes indicated above will prevent the Data Controller from sending any information you may have requested.