PRIVACY AND POLICY
Legislative Decree 196/2003 (Personal Data Protection Code) guarantees the protection of all data subjects with respect to the processing of their personal data. Set out hereunder is all the information regarding the processing of personal data provided by you to this institution, now and for the duration of your stay.
The Data Controller
The Data Controller informs you that any information supplied by you will be subject to the conditions set out in the above-mentioned code. Further information could be disclosed later, also verbally.
Data relating to natural persons, companies and commercial activities: name and surname, date of birth, contact details including residential address, telephone, fax, email, tax information, business name, head office address, business operations address, personal tax number and VAT number, etc
Purposes of data processing
The purposes of the processing of your personal data are as follows:
- to meet with the obligation contained in art. 109 of T.U.P.S. (R.D. n. 773/1931);
- to comply with administrative, financial and fiscal obligations in effect;
- to be able to perform the function of receiving messages and telephone calls for your attention;
- to facilitate sales marketing and communication by means of automated systems with reference to goods and services similar to those purchased by you.
Duration of processing
Personal data relative to the purposes outlined in no. 1.,2.,3. and 4, in accordance with legislative decree 196/2003, may be processed for the duration necessary for the execution of all services offered by the Data Controller. The data subject’s consent may be withdrawn at any time.
Nature of providing the requested data
The provision of data for processing is compulsory with regard to purposes 1-2 in order to fulfil all legal obligations inherent in this working relationship and for all other intentions and purposes of laws, regulations and community legislation. Refusal to provide this information to personnel employed by the Data Controller will prevent the same to comply with the rules set out in article 7 and consequently prevent the provision by the same of the goods or services you expect. Consent to data processing is necessary for the purposes of points 3-4. Communication of information for the purposes of point 4 will be completed electronically.
Data Processing methods.
Data will be collected and archived for the sole purposes stated above using hard copy, electronic and telematic means and processed with instruments designed to guarantee integrity, security and privacy in accordance with the provisions set forth in legislative decree 196/2003. Every technical, electronic, organisational, logistical and security prevision consented to by law will be implemented to ensure maximum data protection, allowing access only to persons designated responsible for processing of personal data. Data may also be communicated to or collected from third parties (as in the purchase of data by data processing centres or by other companies) These entities will accordingly be designated as personal data processors and will be responsible for conforming with all legal obligations in place or by certain specific legal requirements (eg suppliers, consultants, etc).
Communication or dissemination of data
Your data will not be disseminated, nor communicated to third parties, however the personnel of Vignamaggio SRL and the stores and hoteliers affiliated to Vignamaggio may have access to it.
Collection of data in aggregated form is automated and relates to navigation on the pages of the site. If this is not desired, it is necessary to terminate navigation on the site itself. Data collected (country of origin, details of pages visited and length of time spent on such pages) will be used in the development of marketing strategies and statistical research.
Rights according to art. 7 legislative decree 196/2003.
A data subject shall have the right to obtain confirmation as to whether or not personal data
concerning him exist, regardless of their being already recorded, and communication of such data in
intelligible form. He/she has the right to obtain updating, rectification or, where interested therein, integration of the data provided. He/ she has the right to obtain erasure, anonymization or blocking of data that have been processed unlawfully.
The data subject also has the right to oppose the retention of all or part of his/ her own personal data if it is unnecessary for the purposes for which they have been collected as well as the processing of his/ her own personal data for use in advertising or sales material.
REFERENCE TO NATIONAL AND EUROPEAN LEGISLATION
-Data Protection Code (Legislative Decree No 30-6-2003 n. 196 – Code for the protection of personal information) and in particular, article 13 which addresses the scope of the application and disciplinary measures related to the processing of personal data, the type of data processed, the purposes of the data processing, the duration of the data processing, the nature of the data collection, the methods of data processing, the communication and dissemination of the data;
– L.R. n.86 del 20-12-2016 c.d. Consolidated Regional Tourism Code
– Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
– The European Union Directive 25-11-2009 No 136, amending Directive 2002/22/EC on universal service and users’ rights relating to electronic communications networks and services of the Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector and Regulation (EC) No 2006/2004 on cooperation between national authorities responsible for the enforcement of consumer protection laws
Data Controller and Data Processor Villa Vignamaggio SRL
Via Petriolo 5 – 50022 Greve in Chianti (FI)