The document was updated on 27/04/2022 to comply with the new regulations regarding the protection of personal data.
DISCLOSURE pursuant to regulation (EU) 2016/679 (general regulation on data protection) in the current version of OJ L 119 of 04.05.2016.
HOLDER OF THE TREATMENT
This policy applies to the website www.oliosenso.com, belonging to Azienda Agricola Alessandro Ibba, via Nievo 3, Sennori 07036 Italia, VAT number 026687909906, tel +39 3773580538,
email info@oliosenso.com.
Each purchase transaction will be governed by the provisions of Legislative Decree 185/99, Legislative Decree. 206/05; the information aimed at the conclusion of the contract will be subject to art. 12 of the Legislative Decree. 70/03 and, as regards the protection of confidentiality, will be subject to the legislation referred to in Legislative Decree 196/03.
RESPONSIBLE FOR THE TREATMENT
Tax ID for VAT purposes: 026687909906
Fiscal Code: BBILSN94P01I452H
Identificativo fiscale ai fini IVA: 026687909906
Codice Fiscale: BBILSN94P01I452H
Denomination: Alessandro Ibba farm
Registered office details – Address: via Nievo 3, 07036 Sennori Italy
Contacts: tel +39 3773580538, email info@oliosenso.com
For any clarification, question or need related to your privacy and the processing of your personal data, you can contact the Data Processor at any time by sending an email to info@oliosenso.com inserting “privacy” as the subject.
REGISTERED DATA AND PURPOSE OF THE TREATMENT
The purposes of the processing as better explained in the sections that allow you to adhere – by releasing your personal data – to the services reserved for users of our site, the data of the users concerned are processed in order to respond to requests expressly made by them. Unless otherwise specified, all data requested by this website are mandatory. If the User refuses to communicate them, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation.
Any use of Cookies – or of other tracking tools – by this Website or by the owners of third party services used by this Website, unless otherwise specified, has the purpose of providing the Service requested by the User, as well as for the additional purposes described in this document and in the Cookie Policy.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.
In particular, all data collection and subsequent processing activities are aimed at pursuing the following purposes:
a) registration on the site and account creation (name; surname; email; telephone number; various types of data); In case of authentication to the account through external social networks, we collect from these third parties the data necessary for registration / authentication through Facebook and Google. We also collect information about you from third parties and, in particular, from Facebook and Google+. This information includes the following categories of data: e-mail address
b) subscription to email newsletters (name; surname; email; telephone number; various types of data);
c) contact the user by filling in the contact form
(surname; email; name; telephone number; various types of Data)
d) customer relationship management (CRM);
f) purchase of Company brand products and management of payments and deliveries (Personal Data: name; surname; purchase history; email; telephone number; billing address; delivery address; order history;
The Personal Data collected to complete the payment may be those relating to the credit card, the current account used for the transfer or other payment instruments provided. The payment data collected by this website depend on the payment system used.)
g) participation in any promotional initiatives dedicated to new or already registered customers;
h) purposes of statistical research / analysis on aggregate or anonymous data, therefore without the possibility of identifying the user, aimed at measuring the functioning of the site. (GOOGLE ANALYTICS AND GOOGLE ANALYTICS WITH ANONYMIZED IP; Personal Data: Usage Data; Tracking Tool; Navigation Data)
What is the object of the processing Navigation data:
The computer systems and software procedures used to operate this site acquire, in normal operation, some personal data which are then implicitly transmitted in the use of Internet communication protocols. This is information which by its nature could, through associations and processing with data held by third parties, allow users / visitors to be identified (e.g. IP address, domain names of the computers used by users / visitors who connect to the site, etc.). These data are used only for statistical information and to check the correct functioning of the site. The data on web contacts are not kept, however, for more than seven days, except for any investigations of computer crimes against the site. No data deriving from the web service will be communicated or disseminated.
Types of data processed and optional provision
The forms to be filled in on this site include both data that are strictly necessary to adhere to what is of interest and whose failure to indicate does not allow the request to be processed, and optional conferment data that are not strictly necessary to process the request.
How long are the data stored? The data will be stored until the request for cancellation, without prejudice to the related legal obligations which provide for a longer retention period in compliance with the regulations in force.
What are the rights of the interested parties? The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification (articles 15 and following of the GDPR).
Interested parties who believe that the processing of personal data referred to them is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor (Article 77 of the Regulation) or to take appropriate judicial offices (Article 79 of the Regulation).
LEGAL BASIS OF THE PROCESSING
The Owner processes Personal Data relating to the User if one of the following conditions exists:
the User has given consent for one or more specific purposes; Note: in some jurisdictions the Data Controller may be authorized to process Personal Data without the User’s consent or another of the legal bases specified below, as long as the User does not object (“opt-out”) to such treatment. However, this is not applicable if the processing of Personal Data is governed by European legislation on the protection of Personal Data;
the processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual measures;
the processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
the processing is necessary for the execution of a task of public interest or for the exercise of public authority vested in the Data Controller;
the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.
However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.
PLACE
The Data is processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the place of processing, the User can refer to the section relating to the details on the processing of Personal Data.
The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed by public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.
The User can check if one of the transfers described above takes place by examining the section of this document relating to the details on the processing of Personal Data or request information from the Data Controller by contacting him at the opening details.
STORAGE PERIOD
The Data are processed and stored for the time required by the purposes for which they were collected.
Therefore:
Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed.
Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until this interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.
When the processing is based on the User’s consent, the Data Controller may keep the Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
WHO PROCESS THE DATA
If users / visitors, connecting to this site, send their personal data to access certain services, or to make requests via e-mail, they are aware that this involves the acquisition by the Owner of the sender’s address and / or any other personal data that will be processed exclusively to respond to the request, or for the provision of the service.
Your personal data will be processed by Olio Senso internal staff who are specifically trained and authorized to process the processing. The categories of persons in charge are those of administration, communication, accounting and legal consultants.
Your personal data will also be transmitted to third parties that we use to provide our services; will be communicated to third parties only if the communication is necessary to comply with the requests of the users / visitors themselves or by legal obligation, these subjects have been adequately selected and offer a suitable guarantee of compliance with the rules on the processing of personal data. These subjects have been designated by Olio Senso, carry out their activities according to the instructions given by Olio Senso and under its control.
The third parties in question belong to the following categories: banking operators, internet providers, companies specialized in IT and telematic services; couriers; companies that carry out marketing activities; companies specializing in market research and data processing.
Your data may be transmitted to the police forces and to the judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection from threats to public security, to allow Olio Senso to ascertain , exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
The updated list of managers is available upon simple request at the Company address.
The Data Controller does not transfer personal data to third countries or to international organizations, however, it reserves the right to use cloud services; in which case, the service providers will be selected from those who provide adequate guarantees, as required by art. 46 GDPR 679/16. The data may also be transferred to countries of the European Union or to other countries that the European Commission declares to guarantee an adequate level of protection or with which the Data Controller has signed model clauses provided by the Commission with a decision of 5 February 2010, or which in any case have obtained certification according to the provisions of the Privacy Shield for data transfers between the EU and the US. Pursuant to art. 33 and 34 of the Regulation, whenever a security breach is detected that accidentally or unlawfully involves the destruction, loss, modification, unauthorized disclosure, access to personal data and such breach presents a high risk for rights and the freedoms of natural persons, the data controller will inform both the supervisory authority and the interested party (to whom the data refer) without undue delay and, where possible, within 72 hours from the moment in which he became aware of it. . How we process data All treatments carried out within this site will be carried out with electronic or telematic tools, but they could also be processed with paper / manual tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access in full compliance with the provisions of articles 31 and following of the Privacy Code and the Technical Regulations – Annex B to the Privacy Code – regarding minimum security measures and art. 32 GDPR. The data will be processed with logic related to the purposes for which the data were collected and in compliance with current security regulations, for the purposes indicated above or specified from time to time in any additional information presented to the user.
USER RIGHTS
Users can exercise certain rights with reference to the Data processed by the Data Controller.
In particular, the User has the right to:
withdraw consent at any time. The User can revoke the consent to the processing of their Personal Data previously expressed.
oppose the processing of their data. The user can oppose the processing of their data when it occurs on a legal basis other than consent. Further details on the right to object are indicated in the section below.
access their data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.
verify and request rectification. The User can verify the correctness of their Data and request its updating or correction.
obtain the limitation of the treatment. When certain conditions are met, the User can request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose than their conservation.
obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Owner.
receive their data or have them transferred to another owner. The User has the right to receive his / her data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain its unhindered transfer to another owner. This provision is applicable when the Data is processed with automated tools and the processing is based on the User’s consent, on a contract to which the User is a party or on contractual measures connected to it.
propose a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority or take legal action.
DETAILS ON THE RIGHT OF OBJECTION
When Personal Data are processed in the public interest, in the exercise of public authority vested in the Owner or to pursue a legitimate interest of the Owner, Users have the right to object to the processing for reasons related to their particular situation.
Users are reminded that, if their Data are processed for direct marketing purposes, they can oppose the processing without providing any reasons. To find out if the Data Controller processes data for direct marketing purposes, Users can refer to the respective sections of this document.
HOW TO EXERCISE YOUR RIGHTS
To exercise the User’s rights, Users can direct a request to the contact details of the Owner indicated in this document. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month.
If you believe that the processing of your personal data has been carried out illegally, you can lodge a complaint with one of the competent supervisory authorities for compliance with the rules on the protection of personal data.
In Italy, the complaint can be presented to the Guarantor for the Protection of Personal Data.
More information on the methods of presentation are available on the website of the Guarantor, at http://www.garanteprivacy.it.
CHANGES TO THIS NOTICE
Considering the current state of evolution of the legislation on the protection of personal data, we inform you that this privacy policy may be subject to updates. The updated version of the privacy policy, in any case, will be published on this page, indicating the date of its last update.