PROCESSING OF DATA

This page describes how this website is managed as regards the processing of personal data of users who visit it. This is an information notice pursuant to Article 13 of GDPR 2016/679 - concerning the protection of personal data to those who interact with the services and the web pages of the site accessible electronically starting from the address: https://shop.notedelchianti.com/ corresponding to the home page of the site.

The information is provided exclusively in relation to the site in question and its parts. This is not extendable to other sites or pages consulted by the user via links not belonging to the same site.

THE DATA CONTROLLER

Data relating to identified or identifiable persons may be processed after the simple consultation of this site or interaction with it.

The Data Controller of their processing is NOTE DEL CHIANTI SRL, with registered office in Località Drove 14A Poggibonsi (SI), VAT number /tax code 01463280527, which can be contacted by phone at +39 0577 375108 or by email at info@notedelchianti.com

Processing connected to the web services of this site is performed at the headquarters of the data controller and is only handled by authorised personnel.

SOURCE OF PERSONAL DATA

Personal data held by NOTE DEL CHIANTI srl are collected directly from the interested party when filling in the forms present on the site: specific summary information will be reported or displayed on the pages of the site prepared for particular services on request (form). The user must therefore explicitly consent to the use of the data reported in these forms in order to send the request. Voluntary sending of e-mails to our e-mail addresses does not require further information or requests for consent.

DATA PROCESSING AND LEGAL BASIS

The processing of your data is based on your legal consent and is carried out for the following purpose:

• Carrying out e-commerce business
• Carrying out surveys to verify the degree of user satisfaction towards the offered or requested services;
• Acquiring the data necessary for billing and shipping of the goods.
• To guarantee an efficient service, we also inform you that the data could be used to perform technical and verification tests.

DATA RECIPIENTS

Within the limits pertinent to the indicated processing purposes, your data may be communicated to the collaborators of NOTE DEL CHIANTI SRL appropriately appointed Managers by the Data Controller. Your personal data will not be disclosed in any way. The Managers and Processing managers are promptly identified in the Privacy Policy, which is updated on a regular basis.

TRANSFER OF DATA ABROAD

The data collected are not transferred abroad.

RETENTION PERIOD

The data collected will be kept for a period of time not exceeding the time necessary for the purposes for which they are processed ("conservation limitation principle", Article 5 of the GDPR) or according to the deadlines established by law. Periodic verification of the stored data obsolescence is performed in relation to the purposes for which they were collected.

TYPE OF DATA PROCESSED

Browsing data During their normal operation, computer systems and software procedures used to operate this website acquire some personal data the transmission of which is implicit in the use of internet communication protocols. This information is not collected with the intent of associating it with identified users, but by its very nature could lead to the identification of users through processing and through association with data held by third parties. This category includes IP addresses or domain names of the computers used to connect to the website, URI (Uniform Resource Identifier) addresses of the requested resources, time of the request, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the server response status (successful, error etc.) and other parameters pertaining to the user's operating system and IT environment. This data is used only to obtain anonymous statistical information about website usage and to check its correct functioning; it is deleted immediately after processing. This data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.

Data provided voluntarily by the user Name, mailing/shipping/billing address (including the postal code), contact details, e-mail address, telephone number, payment method when purchasing our products. NOTE DEL CHIANTI srl will never ask you to provide sensitive personal data such as data relating to your medical or health records, political, religious or philosophical beliefs, (presumed or committed) criminal offences, criminal convictions, racial or ethnic origin, trade union membership, sexual orientation, sexual history, behaviour or genetic data. Please refrain from providing us with such sensitive personal information. Specific summary information will be found or displayed on the pages of the website relating to specific on-demand services.

PROCESSING METHOD

While browsing, personal data is processed through automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent the loss of data, unlawful or incorrect use and unauthorised access, the impact assessment document containing the data required by GDPR 2016/679 was drafted for this purpose

Optional provision of data: The provision of data is optional, but it will not be possible to finalise purchases if missing.

RIGHTS OF THE INTERESTED PARTIES

The interested party has the right to obtain from the data controller the rectification of inaccurate personal data or the integration of incomplete data concerning him/her, access to own personal data, cancellation, limitation of processing, right to opposition, right to data portability and right to revoke the consent given.

HOLDERS AND MANAGERS

The data controller of personal data is NOTE DEL CHIANTI srl, which the user can contact at any time to exercise his/her rights towards the data controller by sending an email to info@notedelchianti.it

PROCESSING OF DATA CONTAINED IN THE NEWSLETTERS FORMS

Dear interested party, we wish to inform you that "European Regulation 2016/679 concerning the protection of individuals with regard to the Processing of Personal Data, as well as the free circulation of such data"(hereinafter "GDPR") provides for the protection of persons and other subjects regarding the processing of personal data. NOTE DEL CHIANTI srl, as "Data Controller", pursuant to article 13 of the GDPR, therefore, provides you with the following information:

• CATEGORIES OF DATA: NOTE DEL CHIANTI srl will process only personal data that will be contained in the form.
• SOURCE OF PERSONAL DATA: The personal data held by NOTE DEL CHIANTI srl are collected directly by the interested party when completing this form.
• DATA CONTROLLER: The data controller is NOTE DEL CHIANTI srl, with registered office in Località Drove 14A Poggibonsi (SI), VAT number/ tax code 01463280527, which can be contacted by phone at 0577 - 375108 or by email at info@notedelchianti.it
• PURPOSE OF DATA PROCESSING AND LEGAL BASIS: The processing of your data, collected and stored in relation to the compilation of this form, has your consent as its legal basis and is carried out for the following purposes: subscription to the newsletter service, sending of formative, informative and commercial type communications.
• RECIPIENTS OF DATA: Within the limits relevant to the purposes of processing indicated, your data may be disclosed to partners, consulting firms, private companies, appointed Data Processors by the Data Controller. Your personal data will not be disclosed in any way. The Managers and Processing managers are promptly identified in the Privacy Policy, which is updated on a regular basis.
• TRANSFER OF DATA ABROAD: the data collected are not subject to transfer abroad.
• RETENTION PERIOD: The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed ("principle of limitation of conservation", Article 5 of the GDPR) or until revocation of the consent expressed by the interested party. Periodic verification of the stored data obsolescence is performed in relation to the purposes for which they were collected.
• RIGHTS OF THE DATA SUBJECT: The Data Subject always has the right to request the Data Controller for access to his/her data, the correction or deletion, limitation of the processing or the possibility to oppose to the processing, request data portability, revoke consent to the processing of data asserting these and other rights provided by the GDPR through a simple communication to the Data Controller. The data subject can also lodge a complaint with a supervisory authority.
• COMPULSORINESS OR LESS OF THE PROVISION OF DATA: We inform you that the provision of data is optional for some fields and for others (indicated by an asterisk) it is mandatory and failure to provide the mandatory data involves NOT sending the form.
• MANDATORY CONSENT: Consent to data processing by means of a special tick is essential to proceed with sending the form and registering for the newsletter service.
• DATA PROCESSING METHODS: The personal data you provide will be used for processing operations in compliance with the aforementioned regulations and the confidentiality obligations by which the Data Controller is bound. This data will be processed both with computer tools and on paper and on any other type of appropriate support, in compliance with the adequate technical and organisational security measures provided for by the GDPR.

PROCESSING OF DATA CONTAINED IN THE REGISTRATION FORM

Dear interested party, we wish to inform you that "European Regulation 2016/679 concerning the protection of individuals with regard to the Processing of Personal Data, as well as the free circulation of such data"(hereinafter "GDPR") provides for the protection of persons and other subjects regarding the processing of personal data. NOTE DEL CHIANTI srl, as "Data Controller", pursuant to article 13 of the GDPR, therefore, provides you with the following information:

• CATEGORIES OF DATA: NOTE DEL CHIANTI srl will process only the personal data that will be included in the form.
• SOURCE OF PERSONAL DATA: The personal data held by NOTE DEL CHIANTI srl are collected directly by the interested party when completing this form.
• DATA CONTROLLER: The data controller is NOTE DEL CHIANTI srl, with registered office in Località Drove 14A Poggibonsi (SI), VAT number/ tax code 01463280527, which can be contacted by phone at 0577 - 375108 or by email at info@notedelchianti.it
• PURPOSE OF DATA PROCESSING AND LEGAL BASIS: The processing of your data, collected and stored in relation to the compilation of this form, has your consent as its legal basis and is carried out for the following purposes: to complete the online purchase of products chosen by you and manage delivery/shipping.
• RECIPIENTS OF DATA: Within the limits relevant to the purposes of processing indicated, your data may be disclosed to partners, consulting firms, private companies, appointed Data Processors by the Data Controller. Your personal data will not be disclosed in any way. The Managers and Processing managers are promptly identified in the Privacy Document, which is updated on a regular basis.
• TRANSFER OF DATA ABROAD: the data collected are not subject to transfer abroad.
• RETENTION PERIOD: The data collected will be kept for a period of time not exceeding the time necessary for the purposes for which they are processed ("conservation limitation principle", Article 5 of the GDPR) or according to the deadlines established by law. Periodic verification of the stored data obsolescence is performed in relation to the purposes for which they were collected.
• RIGHTS OF THE DATA SUBJECT: The Data Subject always has the right to request the Data Controller for access to his/her data, the correction or deletion, limitation of the processing or the possibility to oppose to the processing, request data portability, revoke consent to the processing of data asserting these and other rights provided by the GDPR through a simple communication to the Data Controller. The data subject can also lodge a complaint with a supervisory authority.
• COMPULSORINESS OR LESS OF THE PROVISION OF DATA: We inform you that the provision of data is optional for some fields and for others (indicated by an asterisk) it is mandatory and failure to provide the mandatory data involves NOT sending the form.
• MANDATORY CONSENT: Consent to data processing by means of a special tick is optional, but essential to proceed with sending the form and consequent online purchase.
• DATA PROCESSING METHODS: The personal data you provide will be used for processing operations in compliance with the aforementioned regulations and the confidentiality obligations by which the Data Controller is bound. This data will be processed both with computer tools and on paper and on any other type of appropriate support, in compliance with the adequate technical and organisational security measures provided for by the GDPR.