Privacy
INTERNET AND SOCIAL MEDIA PRIVACY POLICY - Under European Reg. 2016/679 (“GDPR”).
Identity and contact details of the Controller
Pastificio di Chiavenna (hereinafter the “Company”) will process your Personal Data in accordance with Regulation EU no. 2016/679 and national personal data protection regulations (hereinafter the “Privacy Regulation”).
The Personal Data we collect and how we collect it
Company may collect and then process your Personal Data when you browse the Website and/or access certain sections of it. When you connect to the Website, the IT systems and the software procedures which allow them to function automatically and indirectly provide and/or acquire certain information (such as the so-called “cookies”, as specified in the section “Cookies Policy” of our website , “IP” addresses, the domain names of the computers used by users who connect to the Website, the “Url” address of the resources requested, the time of the request to the server).
DATA VOLUNTARILY PROVIDED
Your Personal Data may be collected through optional, explicit and voluntary ways, i.e:
- when you send us an email to info@pastificiodichiavenna.it We process your email address, which is mandatory in order to answer you, along with other personal data included in the body of the email (first name, surname, age, place of living, other data.)
- through your publication of Contributions (as defined below), the content of which could include Personal Data which you have provided directly on social networks managed independently by third parties, including, but not limited to, Facebook, Linkedin, Twitter, etc. (hereinafter “Social Networks”). By “Contributions”, we mean images, comments, catchphrases associated with the subject of the Website, contents and any other information you have conceived and published on social network pages of Company, including any image you provide.
The purposes of processing your Personal Data and the legal basis for processing
a) Management of your requests and response to them, management of activities linked to your use of the Website, including publication of your Contributions on the pages of Social Networks of Company (since processing is necessary for execution of a contract or pre-contractual measures);
b) Answering to your emails.You will choose wether to allow the Company to processing of your Personal Data in order to manage and respond to your requests relating to products and initiatives. For this purpose your consent to processing is asked at the time you send the email. If you object to processing of your Personal Data for this purpose, the Controller will be unable to carry out the related processing.
c) Management and fulfilment of legal obligations (accounting, administrative, tax obligations, etc.)
d) Management of complaints and any disputes (as this is a legitimate interest of the Controller)
Management of your requests for customer service purposes;
How we process your Personal Data
Your Personal Data will be processed mainly with automated tools, but also on paper, adopting logic strictly linked to the related purposes, through the use of databases and electronic platforms managed by Company or by third parties appointed as external processors for this purpose and/or through the integrated IT systems of Company and of said third parties and/or websites owned or used by Company.
The Controller has assessed the level of security to be sufficient, taking account of the risks which could derive from loss, destruction, rectification, unauthorised disclosure, accidental or illegal access, abuse or alteration of your Personal Data. In particular:
- it has adopted security measures appropriate to the risks;
- it stores your Personal Data on servers located within Europe, which have an advanced and daily back-up system.
Where we process your Personal Data
The recipients of your Personal Data
(i) legal or natural persons who act as external processors, performing activity in outsourcing, appointed by the Company or by the external processors of the Company (including parties assigned to perform assistance, communication, marketing, advertising, promotion and sale activities relating to products and/or services and also advertisers, advertising agencies, suppliers of IT services, the Website operators, electronic platform operators, partners, credit institutions, professional consultancy firms);
(ii) employees and/or collaborators of the Controller (including system administrators), who operate under its direct authority, who will be authorised to process your Personal Data; and
(iii) employees and/or collaborators of the external processors (including system administrators), who operate under the direct authority of the external processors and will be authorised to process your Personal Data.
How long we keep your Personal Data
- in order to manage and respond to your requests relating to products and initiatives;
- in order to respond to customer service needs;
- for management and fulfilment of legal obligations;
- for management of any complaints and disputes
and in all different purposes for the time requested by the applicable law.
Minors
Your rights in relation to processing of your Personal Data
- obtain from the Controller confirmation of whether or not your Personal Data exists, even if not registered, and its disclosure in intelligible form, and also access to your Personal Data (by obtaining a copy) and the related information (including the purposes of processing, the categories and origin of the Personal Data, the categories of recipients to whom it has been or could be disclosed, the retention period (when possible), the rights which may be exercised);
- obtain from the Controller the rectification of your Personal Data and supplementing of any incomplete Personal Data;
- obtain from the Controller the erasure of your Personal Data without undue delay, including when the Personal Data is no longer necessary for the purposes for which it has been processed or the legal basis for processing no longer exists;
- obtain from the Controller the conversion into anonymous form or blocking of your Personal Data if it is processed illegally, including data which it is not necessary to store, in relation to the purposes for which the Personal Data was collected or subsequently processed;
- obtain from the Controller the limitation of processing of your Personal Data, also when you dispute its accuracy or object to processing, for the period necessary for the respective checks to be performed;
- receive your Personal Data in a structured, commonly used, machine-readable format, and also transmit or, if technically feasible, obtain transmission of your Personal Data to another controller without impediments, in cases in which processing is carried out by automated means and is based on your consent or when necessary for execution of a contract to which you are a party;
- withdraw consent to processing of your Personal Data for any of the purposes for which it has been provided.
Furthermore, if you believe that processing of your Personal Data breaches the Privacy Regulation, you may lodge a complaint with the Data Protection Supervisory Authority in the State in which you reside, where your workplace is located or in which the presumed breach has occurred, or contact said Authority to request information on exercising of your rights under the Privacy Regulation.
- initiatives. For this purpose your consent to processing is asked at the time you send the email. If you object to processing of your Personal Data for this purpose, the Controller will be unable to carry out the related processing.
- Management and fulfilment of legal obligations (accounting, administrative, tax obligations, etc.)
- Management of complaints and any disputes (as this is a legitimate interest of the Controller)
- Management of your requests for customer service purposes;
How we process your Personal Data
Your Personal Data will be processed mainly with automated tools, but also on paper, adopting logic strictly linked to the related purposes, through the use of databases and electronic platforms managed by Company or by third parties appointed as external processors for this purpose and/or through the integrated IT systems of Company and of said third parties and/or websites owned or used by Company.
The Controller has assessed the level of security to be sufficient, taking account of the risks which could derive from loss, destruction, rectification, unauthorised disclosure, accidental or illegal access, abuse or alteration of your Personal Data. In particular:
- it has adopted security measures appropriate to the risks;
- it stores your Personal Data on servers located within Europe, which have an advanced and daily back-up system.
Where we process your Personal Data
The recipients of your Personal Data
(i) legal or natural persons who act as external processors, performing activity in outsourcing, appointed by the Company or by the external processors of the Company (including parties assigned to perform assistance, communication, marketing, advertising, promotion and sale activities relating to products and/or services and also advertisers, advertising agencies, suppliers of IT services, the Website operators, electronic platform operators, partners, credit institutions, professional consultancy firms);
(ii) employees and/or collaborators of the Controller (including system administrators), who operate under its direct authority, who will be authorised to process your Personal Data; and
(iii) employees and/or collaborators of the external processors (including system administrators), who operate under the direct authority of the external processors and will be authorised to process your Personal Data.
The right to object to processing of your Personal Data
You are entitled to object to processing of your Personal Data, by sending an e-mail to info@pastificiodichiavenna.it If you object to processing of your Personal Data for this purpose, the Controller will be unable to carry out the related processing.