Privacy Policy

INFORMATION PURSUANT TO ART. 13 OF D.LGS. 196/2003 AND ART. 13 OF EU REGULATION N. 2016/679

 

  1. Data Controller

The Data Controller of your Personal Data is GEMIGNANI TARTUFI SRL, responsible to you for the legitimate and correct use of your Personal Data and that you can contact for any information or request at the following addresses:

Registered office: Gemignani Tartufi S.r.l –  Via Cascina Lari 1/3/5, 56028 San Miniato (Pisa) – Italy

VAT number:  IT01739020509

Fiscal Code: IT01739020509

REA registration number: R.E.A. Pisa150942

Share capital:  €. 100.000,00 i.v.

Phone: +39 0571 419470

Fax: +39 0571 444766

Email: info@gemignanitartufi.it

PEC:  gemignanitartufi@pec.cgn.it

 

  1. Types of data collected, purpose and legal basis.

The Personal Data processed are collected as they are provided directly by the User / Interested party or collected automatically through the site.

Data provided directly by the User / Interested Party:

The data provided directly by the User / Interested Party are all Personal Data entered by the same on the site or which are otherwise provided to the Data Controller in any way. These data will be processed in compliance with the guarantees of confidentiality and security measures provided for by current legislation, also with the aid of electronic tools directly and / or through third parties, for the purposes set out below together with the legal basis of reference:

 

  PURPOSE DATA PROCESSED LEGAL BASIS
A

Purposes strictly related to the execution of contractual and pre-contractual measures e to respond to specific requests from the interested party.

¤ Name, Surname, Tax code, VAT number, Company, Email, Telephone, Address, Post code, City, Province, Country, Payment data – SHOP Area

 

¤ Name, Surname and Email – Contact area shop.gemignanitartufi.it

 

¤ Name Surname, telephone and e-mail

Contract of which the interested party is a party and / or execution of pre-contractual measures adopted at the request of the interested party.
B Fulfillment of Legal Obligations

¤ Name, Surname, Tax code, VAT number, Company, Email, Telephone, Address, Post code, City, Province, Country, Payment data – SHOP Area

 

¤ Name, Surname and Email – Contact area shop.gemignanitartufi.it

 

¤ Name, Surname, Sex, Age, Email, Province, City, Post code, Telephone, Identity document – Gemignani Tartufi Competitions

The processing is necessary to fulfill a legal obligation to which the data controller is subject – European Union standard (GDPR 2016/679)
C Exercise of the rights of the owner, for example the right to defense in court

¤ Name, Surname, Tax code, VAT number, Company, Email, Telephone, Address, Post code, City, Province, Country, Payment data – SHOP Area

 

¤ Name, Surname and Email – Contact area Gemignanitartufi.it

 

¤ Name, Surname, Sex, Age, Email, Province, City, Post code, Telephone, Identity document – Gemignani Tartufi Competitions

Legitimate interest
D Purpose of direct and indirect marketing and market research, for the purpose of sending newsletters and advertising and information material.

¤ Name, Surname, Tax code, VAT number, Company, Email, Telephone, Address, Post code, City, Province, Country, Payment data – SHOP Area

 

¤ Name, Surname and Email – Contact area shop.gemignanitartufi.it

 

¤ Name, Surname, Sex, Age, Email, Province, City, Postcode, Telephone – Gemignani Tartufi Competitions

Consens

The User / Data Subject assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

Data collected automatically through the site:

The data collected automatically is the information collected automatically through the SHOP.GEMIGNANITARTUFI.IT site, (also from third-party applications integrated into this Application), including for example: IP addresses or domain names of the computers used by the User / Data subject who connects to this site, the addresses in URI (Uniform Resource Identifier) ​​notation, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, to the parameters relating to the op erative and the IT environment of the User / Data Subject.

Complete details on each type of data collected are provided in the dedicated sections of the cookie policy of this site.

The automatically collected data are processed exclusively for the purposes for which they are collected, as described below.
The Data Controller processes the data provided by the interested parties to allow the site to function, to allow the display of content from external platforms, statistics, optimization and traffic distribution in addition to the additional purposes described in this document and in the Cookie Policy.

 

  1. Mandatory or optional nature of the provision of data and consequences of a refusal to provide data

The provision of data for the purposes referred to in points a), b), c) and d) is optional but necessary to execute the contract, to execute pre-contractual measures, to respond to specific requests of the interested party and to allow participation in prize competitions and other initiatives promoted by Gemignani Tartufi Srl.

The provision of data for the purposes referred to in point e) is optional and your data may be used with your consent, in case of lack of consent your data may not be processed for the purpose described in that point.

Unless otherwise specified, all data required for browsing the site are mandatory. If the User / Data Subject refuses to communicate them, it may be impossible for this Application to provide the Service. In cases where this Application indicates some data as optional, Users are free to refrain from communicating such data, without this having any consequence on the availability of the Service or on its operation. Users who have doubts about which data are mandatory are encouraged to contact the owner.

  1. Processing methods

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.

The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.

  1. Recipients

Your data may be communicated, in addition to the personnel in charge of the processing, also to the following subjects also appointed, if necessary, as Data Processors by the Data Controller:

  • private and public entities for the performance of administrative and legal procedures in compliance with the requirements of EU Reg. no. 679/2016;
  • consultants and companies that assist the Company from an IT and infrastructural point of view;
  • professionals, service consortia and consultants who assist the Company from a tax, commercial and legal point of view;
  • subsidiary, investee or associated companies;
  • banks and credit institutions;
  • insurance companies;
  • debt collection company;
  • other companies, professionals and agents who collaborate with the Company for the performance of the contracted services.

The updated list of Managers can always be requested from the Data Controller.

The data will not be subject to other methods of dissemination.

 

  1. Place of processing

The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved in the processing are located. For more information, contact the owner.

The data provided directly by the interested party and collected automatically could be transferred to a country other than that in which the User / Interested party is also located outside the European Economic Area. In this case, GEMIGNANI TARTUFI SRL ensures that the processing of your Personal Data by these subjects to whom the data is transferred takes place in compliance with the European Regulation 679/2016, all always in accordance with the principles indicated in art. 45 of the GDPR 2016/679 relating to the existence of an adequacy decision by the European Commission, or in the absence of such decisions in compliance with Article 46 relating to the transfer in the presence of adequate guarantees or in compliance with Article 49 paragraph 1 lett b) – transfer necessary for the execution of a contract concluded between you and the Owner or for the execution of pre-contractual measures.

 

  1. Retention period

Data provided directly by the User / Data Subject

The Personal Data provided directly by the interested party collected for the purpose of responding to specific requests and / or for carrying out pre-contractual / contractual negotiations, for the fulfillment of legal obligations and for participation in prize competitions will be processed and stored for the period of time necessary for the pursuit of the aforementioned purposes and in any case no later than 20 years from their collection or 20 years from the conclusion of the contractual relationship.

Personal data collected for purposes related to the legitimate interest of the owner will be retained until this interest is satisfied. In case of pending judgment, the data will be further processed until their resolution. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

The Personal Data collected for direct and indirect marketing and market research purposes, for the purpose of sending newsletters and advertising and information material will be processed and stored for the period of time necessary for the pursuit of the aforementioned purposes and in any case no later than 3 years from their collection.

The automatically collected data will be retained for the period better specified in the Cookie Policy,

At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

Data collected automatically through the site:

The automatically collected data will be retained for the period better specified in the Cookie Policy,

At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

 

  1. Rights of the interested party

Pursuant to art. 13 GDPR each User / Interested party has the right to obtain confirmation of the existence or not of your Personal Data, even if not yet registered, and their communication in an intelligible form.

In particular, the interested party has the right to obtain from the Data Controller the indication:

  • the origin of the Personal Data;
  • the purpose and methods of treatment;
  • the logic applied in case of processing carried out with the aid of electronic / IT tools;
  • the identification details of the Data Controller, the Managers and the designated Representative;
  • of the subjects and categories of subjects to whom the data may be communicated or who can learn about them as appointed Representative in the territory of the State, Managers or Officers.

Furthermore, the interested party has the right to obtain from the Data Controller:

  • updating, rectification or integration of their data;
  • the cancellation, transformation into anonymous form or blocking of data processed in violation of the law;
  • access to their data, i.e. confirmation that the processing of personal data concerning them is in progress or not;
  • the limitation of processing, the portability of the data, i.e. the right to receive the Personal Data concerning him in a structured format;
  • right of complaint to the supervisory authority.

 

Finally, the interested party has the right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection. In particular, the interested party has the right to object to the processing of personal data concerning him for the purpose of sending commercial advertising material or for commercial communication purposes. The rights referred to in the previous points may be exercised by writing to the contacts indicated in point 1 of this information.