Il Borro S.r.l. – Società Agricola, Loc. Borro 1 – 52024 San Giustino V.no , Email: email@example.com Tel.: +39 055.977053 Fax: + 39 055.977864, Reg. Reg. N° AR-94016 VAT N°: 01261410516 (Company);
PROCESSED PERSONAL DATA
1. Personal data processed for website operation purposes
During normal use, the information systems and software procedures used to operate the Website acquire some information whose transfer is implicit in the use of Internet communication protocols. Though this information is not collected so as to be linked to identified data subjects, due to the very nature of the data, it could allow identifying the users of the website, by processing and linking with data stored by the Company or by third parties.
This category includes IP addresses or domain names of the computers used by the users browsing the Website, URI (Uniform Resource Identifier) notation addresses of the requested resources, the request time, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters regarding the operating system and the computer environment of the user.
1. Data submitted directly by the user
As provided for by various sections of this Website data submission is on optional, explicit and voluntary basis. In addition, the data is used for meeting the user’s requests (for example strictly by way of non-exhaustive example: when requesting information or clarification by calling the numbers indicated in the Website or by email through the addresses provided therein, for booking our facilities, taking part in events or purchasing online).
We hereby declare that the website is reserved to adults only.
2. Geolocation information
This website can process data regarding your geographic position, with the aim of providing services based on the position. Most browsers provide the user, in a predefined manner, with some tools aimed at disabling geographic tracking. Should the user have expressly authorised the geolocation, this website could receive information on the actual geographic position.
PURPOSES, LEGAL BASIS OF PROCESSING AND PERSONAL DATA STORAGE PERIOD
How the Website works
The data collected while browsing is used for creating anonymous statistical information on the use of the website and verifying the correct operation thereof.
Legal basis of the purposes: performing a contract you are part of (using the website).
Personal data storage period: over the entire duration of the Website browsing session.
The data submitted directly by the user is used for the following purposes:
a. meeting the data subject’s requests (e.g. contact request);
Legal basis of the purposes: performing a contract you are part of.
Personal data storage period: the entire duration of the contract relationship and beyond based on the limitation periods established by the law.
Purposes related to legitimate interest of the Controller
Data submitted directly by the user is used, if necessary, for verifying, exercising or defending the Controller’s rights in judicial and/or extra-judicial proceedings.
Legal basis of the purpose: legitimate interest of the Controller (in judicial and/or extra-judicial proceedings)
Personal data storage period: over the entire duration of the dispute, up to the termination of the enforceability period of appeal actions.
Once the aforementioned storage period expires, your data will be destroyed, deleted or made anonymous.
OBLIGATION TO SUBMIT DATA
Save for browsing data, required for implementing computer and electronic protocols, users shall submit personal data on voluntary and optional basis. However, failure to submit the data requested and marked as compulsory will necessarily entail hindering the service requested by user.
Your data could be disclosed to entities operating as Data Controllers (such as, by way of example, supervisory and monitoring bodies and any other public entity authorised to request the data) or processed, on behalf of the Company, by entities designated as Data Processors, who will be given appropriate operating instructions.
In particular, the data may be disclosed to the following categories of entities:
a) Il Borro srl partner or subsidiary companies, which act as independent data controllers (after disclosure consent thereof) or external processing officers;
a) natural or legal persons providing services of various types to the Company (e.g. Website management services providers, such as system outsourcers, companies providing internet connection services, companies providing email delivery services, technical support companies, companies providing market survey support services, companies providing online booking services). Such entities may act as data processing officers;
b) public and private entities and/or bodies to whom data will be disclosed with the aim of meeting or enforcing compliance with specific obligations provided for by the European Union laws, regulations and standards. Such entities will operate as independent Data controllers.
ENTITIES AUTHORISED TO PROCESS DATA
Data will be processed by in-house employees, collaborators of the company or external entities that provide website technical and organisation services on behalf of the Company.
TRANSFER OF PERSONAL DATA IN NON-EUROPEAN UNION COUNTRIES
Some browsing-related data may be transferred abroad in non-European Union countries, and in particular in the USA, a country whose data protection level was deemed appropriate by the European Commission pursuant to article 45 of the GDPR (Privacy Shield)
For further information on the European Commission’s appropriateness decision see the following link: http://eur-lex.europa.eu/legal-content/IT/TXT/PDF/?uri=CELEX:32016D1250&from=IT
RIGHTS OF THE DATA SUBJECTS – COMPLAINT BEFORE THE SUPERVISORY BODY
By contacting the Company, by email to firstname.lastname@example.org, the data subjects can request permission from the Controller to access data related thereto, to delete it, to correct inaccurate data, to supplement incomplete data, to limit processing in the cases provided for by article 18 GDPR, as well as object to the processing in case of legitimate interest of the owner.
Furthermore, should the processing be based on consent or contract and be carried out using automated means, the data subjects have the right to receive the Data in a format that is structured, commonly used and readable by an automatic device and, as well as transfer the data to another data controller without any hindrances whatsoever if technically feasible.
The data subjects have the right to withdraw consent granted for marketing and/or profiling purposes, as well as object to the processing of data for marketing purposes, including direct marketing-related profiling. This without prejudice to the data subject’s right of preference to be contacted for the aforementioned purpose exclusively through conventional means for expressing the objection thereof solely upon receipt of communications through automated means. Withdrawal of consent does not jeopardise the lawfulness of the processing based on consent prior to withdrawal of consent.
The data subjects have the right to lodge a complaint before the due Supervisory body in the member country of residence or work or the country where the alleged breach occurred.