Privacy policy pursuant to Articles 13–14 of the European General Data Protection Regulation (GDPR)

Information on the processing of personal data

This page describes the methods of managing the website with reference to the processing of personal data of users who consult it, as well as the methods and purposes of the processing of personal data.
This information is also provided pursuant to Articles 13-14 of EU Regulation 2016/679 to those who interact with the web services accessible electronically from the address: borgovecchioneive.it

This site is owned by borgovecchioneive, which manages and maintains this site with the aim of providing information and communications related to the products or services offered.
This information notice is provided only for the site in question and not for any other websites that may be consulted through our links, for which borgovecchioneive assumes no responsibility.
borgovecchioneive, as the Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679 – GDPR, hereby informs you that the aforementioned regulation provides for the protection of individuals with regard to the processing of personal data and that such processing will be based on the principles of fairness, lawfulness, transparency, and protection of your privacy and your rights.
Your personal data will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations provided therein.

TYPES OF DATA PROCESSED

Browsing Data

The IT systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.), and other parameters relating to the user's operating system and IT environment. These data are used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

Data voluntarily provided by the user

The optional, explicit and voluntary sending of emails to the addresses indicated on this site, as well as the filling in of forms for the submission of specific requests, entails the subsequent acquisition of the sender’s address, which is necessary to respond to the requests, as well as any other personal data included in the message or in the form.
Specific summary information is reported or displayed on the pages of the site prepared for particular on-demand services.

Profile data

These data, provided at the time of registration in the customer area, include your first and last name, date of birth, gender, the email address used for registration and the related password, as well as contact details.

Purchase data

At the time of the order, we collect your purchase data, including the order number, details of the subscription subject to the purchase, and payment method data.

Payment data

For the execution of the payment, we collect the payment data you have provided, including IBAN and BIC or account number and bank code, credit card data, and creditworthiness information. We receive additional payment data from external payment processing services and credit information services with whom we cooperate for the purpose of managing payments and verifying creditworthiness. We transmit only the data necessary for the payment to our payment processing services. Any information relating to debit or credit cards is not stored by our systems when an order is placed. Providing such data is mandatory in order to execute the requested order.

CONSEQUENCES OF REFUSAL TO PROVIDE DATA

Apart from what is specified for navigation data, the user is free to provide the personal data indicated in the request forms, newsletter subscriptions, participation in events or otherwise indicated in contacts to request the sending of informative, technical or commercial material or other communications. Failure to provide such data will have no consequences, except the impossibility of obtaining what has been requested.

METHODS OF PROCESSING

The data is mainly processed using electronic and computer tools and stored on both IT and paper supports as well as any other suitable type of support, in compliance with the methods referred to in Articles 6 and 32 of the GDPR and through the adoption of appropriate security measures to prevent data loss, unlawful or incorrect use, and unauthorised access.
We inform you that, in order to provide a complete service, our portal may contain links to other websites not managed by us. We are not responsible for errors, content, cookies, publication of content that is morally illicit, advertisements, banners, or files that do not comply with current regulatory provisions, or for compliance with Privacy regulations by the sites not managed by us to which reference is made. To improve the service offered, we appreciate immediate notification of malfunctions, abuses, or suggestions to the following email address: amministrazione@borgovecchioneive.it
Your data will be processed only by personnel expressly authorised by the Data Controller.

PURPOSE OF THE PROCESSING

The data will be processed for the following purposes:
- to allow access to public and/or restricted areas of the website;
- to activate and maintain any online subscribed services or send newsletters;
- to enable purchases and the provision of the service;
- to process requests for information, quotations, technical support;
- to provide information on services and products offered and on changes to products or services;
- to comply with legal or regulatory obligations;
- to protect the Data Controller in legal proceedings;
- to allow constant monitoring of the effectiveness of the service offered.

SUBJECTS TO WHOM PERSONAL DATA MAY BE DISCLOSED

Personal data relating to the processing in question may also be disclosed to parties who are entitled to access your personal data under statutory provisions or secondary and/or EU regulations. Your data may be disclosed exclusively to competent and duly appointed parties for the performance of services necessary for the proper management of the relationship, with safeguards in place to protect the rights of the data subject. Furthermore, some data may be disclosed and shared with internet operators used by borgovecchioneive for the management of its domains.
Your personal data will not be disclosed in any way.
Your data will not be transferred to third countries.

DATA RETENTION PERIOD

We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation pursuant to Article 5 of the GDPR, the retention period of your personal data is established for a period necessary to carry out the requested services and in accordance with the regulations in force concerning the retention of tax, fiscal and contractual documentation.

RIGHTS OF THE DATA SUBJECTS

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning them exists, even if not yet recorded, and to receive communication of such data in an intelligible form.
2. The data subject has the right to obtain information on:
a. the source of the personal data;
b. the purposes and methods of the processing;
c. the logic applied in the case of processing carried out with the aid of electronic tools;
d. the identification details of the controller, the processors and the representative designated pursuant to Article 5, paragraph 2;
e. the entities or categories of entities to whom the personal data may be communicated or who may become aware of it as designated representatives within the territory of the State, or as processors or persons in charge.
3. The data subject has the right to obtain:
a. the updating, rectification or, where interested, integration of the data;
b. the erasure, anonymisation or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
c. certification that the operations referred to in points a) and b) have been notified, also regarding their content, to those to whom the data was communicated or disclosed, unless this requirement proves impossible or involves a use of means
d. manifestly disproportionate to the right being protected;
e. data portability.
4. The data subject has the right to object, in whole or in part:
a. for legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of the collection;
b. to the processing of personal data concerning them for the purpose of sending advertising materials or direct selling or for carrying out market research
c. or commercial communication
Furthermore, if the data subject believes that the processing of their personal data is contrary to current legislation, they may lodge a complaint with the supervisory authority for the protection of personal data pursuant to Art. 77 of Regulation 2016/679.

THE DATA CONTROLLER

The data controller is borgovecchioneive, with registered office at Via Rocca, 13, 12052 Neive CN, represented by its legal representative pro tempore.
The user has the right to obtain from the controller the erasure (right to be forgotten), restriction, updating, rectification, portability, and objection to the processing of personal data concerning them. In general, they may exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.
To exercise the above rights, the data subject must make a written request via e-mail. The e-mail should be addressed to: amministrazione@borgovecchioneive.it