PRIVACY POLICY
provided by Società Agricola Bussoletti Leonardo s.s.
pursuant to art. 13 of Regulation (EU) 679/2016
leonardobussoletti.it
Società Agricola Bussoletti Leonardo s.s. (hereinafter, the Company), as Data Controller, informs you that the processing of your personal data, voluntarily provided through the forms on the website https://www.leonardobussoletti.it (the Portal) in order to use dedicated services, is based on principles of fairness, lawfulness and transparency, protecting your privacy and your rights.
Processing is also carried out in accordance with the principles of minimisation, relevance and non-excess.
All information is provided to you, as the Data Subject, pursuant to art. 13 of EU Regulation 2016/679 (GDPR). Additional notices may be present on specific pages where necessary.
This notice does not apply to other websites, pages or online services accessible via links/buttons/banners that may be published on the Portal.
The Data Controller does not process personal data relating to minors. Should any such information be inadvertently processed, the Data Controller guarantees its deletion within a reasonable timeframe.
- DATA CONTROLLER
The Data Controller is:
Società Agricola Bussoletti Leonardo s.s.
Strada delle Pretare, 62 – 05035 Narni (TR)
Tax Code/VAT No. 01453230557
Email: info@leonardobussoletti.it
- PURPOSES AND LEGAL BASIS OF PROCESSING
Your personal data will be processed for the following purposes:
- a) Managing contact requests
To manage requests for information, winery visit and tasting bookings, accommodation requests and any other communication sent through the contact forms on the Portal.
Legal basis: processing is necessary for the performance of pre-contractual measures taken at the request of the Data Subject (Art. 6.1. lit. b GDPR) and the legitimate interest of the Data Controller (Art. 6.1. lit. f GDPR).
Data retention: up to 12 months from the last communication, subject to any requirements for the investigation of offences by the judicial authorities.
- b) Newsletter
To send the newsletter in order to keep the Data Subject informed about winery activities and to provide information on wines, tastings, events and dedicated services.
Legal basis: the Data Subject has given specific consent to receive the newsletter (Art. 6.1. lit. a GDPR).
Data retention: until consent is withdrawn.
- PERSONAL DATA PROCESSED
To fulfil the above purposes, the following personal data are processed:
Personal details: first name and surname;
Contact details: email address, telephone number.
- PROVISION OF DATA
The provision of personal data for the purposes set out in point a) is necessary: if data is not provided, the Company will be unable to process the request.
The provision of data for the purpose set out in point b) is optional: therefore, if the Data Subject decides not to give free and separate consent to the processing for that purpose, such refusal will have no consequences with respect to the other processing purposes.
The Data Subject may at any time withdraw any consent given. Such withdrawal will not affect the lawfulness of processing carried out on the basis of consent given prior to withdrawal.
- PROCESSING METHODS AND SECURITY MEASURES
Data processing will be carried out primarily using computerised and electronic systems and partly in paper form.
The Data Controller adopts appropriate security measures to prevent data loss, unlawful or incorrect use and unauthorised access.
- RECIPIENTS OF DATA
In pursuing the purposes described above, personal data, in addition to being processed by the Data Controller’s staff — who act on the basis of specific instructions and have been authorised to process data (art. 29 GDPR) — may be disclosed to the following entities:
– bodies and entities with legal access to such data under applicable law;
– natural or legal persons, public or private, where disclosure is necessary or functional to our activities (e.g. IT service providers and email marketing providers);
– professionals and consultants within the scope of assistance and advisory relationships.
An updated list of data processors handling personal data may be requested from the Data Controller.
Under no circumstances will personal data provided be disclosed or sold to third parties.
- RIGHTS OF THE DATA SUBJECT
Arts. 15 et seq. of the Regulation grant the Data Subject the right to obtain:
– confirmation of whether or not personal data concerning them exist, even if not yet recorded, and their communication in an intelligible form;
– information on the origin of personal data, the purposes and methods of processing, the logic applied in the case of processing carried out with the aid of electronic instruments, and the identifying details of the Data Controller;
– the updating, rectification, integration, deletion, anonymisation or blocking of data processed in violation of the law;
– confirmation that such operations have been brought to the attention of those to whom the data have been communicated, except where this proves impossible or involves a disproportionate effort relative to the right being protected.
You also have the right:
– to withdraw at any time any consent given to the processing of personal data (without prejudice to the lawfulness of processing based on consent given prior to withdrawal);
– to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of collection;
– to object, in whole or in part, to the processing of personal data concerning you for the purposes of sending advertising material or direct selling, or for market research or commercial communication;
– to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) in the cases provided for by the Regulation;
– to data portability within the limits of article 20 of the Regulation.
- HOW TO EXERCISE YOUR RIGHTS
To obtain the detailed and constantly updated list of parties to whom personal data may be disclosed, and to exercise the rights under articles 15 et seq. of the GDPR, the Data Subject may contact the Data Controller at the following email address: info@leonardobussoletti.it
The Data Controller is required to provide a response within one month of the request, extendable to two months in cases of particular complexity.
- COOKIE POLICY
The Portal uses technical cookies necessary for the functioning of the website and, subject to the Data Subject’s consent, profiling and analytical cookies. For detailed information on the use of cookies, please refer to the Cookie Policy available in the relevant section of the Portal leonardobussoletti.it.
Società Agricola Bussoletti Leonardo s.s.
Strada delle Pretare, 62 – 05035 Narni (TR)
Tax Code/VAT No. 01453230557
leonardobussoletti.it
info@leonardobussoletti.it
