The address of our website is: http://www.oleificiobartolomei.it
Pursuant to Article 13 of Legislative Decree 196/2003 and of art. 13 of EU Reg. 679/2016 (GDPR), this document illustrates the methods and purposes of the processing of personal data which we receive and collect when the services/websites of Oleificio Bartolomei are used, as well as some of the measures we take to protect such data.
In compliance with current legislation, the processing carried out by Oleificio Bartolomei will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and conservation, minimization of data, accuracy, integrity and confidentiality.
The data controller is: Al Vecchio Frantoio F.lli Bartolomei S.a.s. (hereinafter “Data Controller”), with registered office in Montecchio (TR), Via Cagnano n.6, P.I. 01261160558, email: firstname.lastname@example.org
Personal data subject to processing
Processing of personal data means any operation or set of operations performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, retention, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
The personal data subject to processing, which may vary according to the requested services, consist of: name and surname, email address, telephone number, tax code/VAT number, location data, an online identifier, purchases made, and other data suitable to make the user identified or identifiable (hereinafter “Personal Data”). The personal data processed through the Website are as follows:
When the user visits the controller’s website, the servers automatically record information such as the URL, IP addresses, browser type, browser language, date and time of the request made. The transmission of this information is implicit in the use of web communication protocols.
This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
These data are solely used to compile anonymous statistics on the use of the Website and to verify its correct operation. The data could be used to ascertain responsibility in case of computer crimes against the server. With the exception of this eventuality, these data are kept for 30 days.
Data provided voluntarily by the user
On the website of the Data Controller the user has the possibility of transmitting personal data by filling in forms or sending e-mail messages. The provision of these data takes place on an optional, explicit and voluntary basis, and involves the subsequent acquisition of the email address of the sender, which is necessary to respond to requests, as well as any other personal data entered for the purposes of the service and those further granted by the user. Specific summary information is present on the pages which provide the forms, with the possible indication of the obligatory provision of the data necessary to use the specific service.
The user assumes the responsibilities for the personal data of third parties published or shared by the website and guarantees that he/she has the right to disclose or disseminate such data, releasing the Data Controller from any liability to third parties.
Data with interaction with social networks
In addition to filling in the specific registration form, the user can be allowed to register for the Services, if they have a Facebook profile, by simply clicking on the “Login with Facebook” button. In this case, Facebook will automatically send the website some personal data, specified in the appropriate “pop-up” window which is displayed at the time of the request, and there will be no need to fill out other forms by the user.
Among the technical cookies, which do not require consent for their use, the Italian Authority for the Protection of Personal Data, also includes:
- “analytics cookies”, where used directly by the site operator to collect information, in aggregated form, on the number of users and how they visit the site itself;
- browsing or session cookies (to authenticate the user);
- functionality cookies, which allow users to browse the website based on the selected criteria (e.g. language, products selected for purchase) in order to improve the service provided to them.
- “Profiling cookies”, vice versa, which are those used to create user profiles and to send advertising messages in line with the preferences expressed by users when browsing the website, require the user’s prior consent.
The registration on the website and the services offered are aimed at adults: for this reason, the Controller does not knowingly collect data from people under 18 years of age.
The pages which the user visits may contain links to external websites, to offer useful information to users. This information does not apply to sites not managed by the Controller; therefore the user must investigate the procedures relating to the protection of privacy in the external websites themselves.
Purpose of processing
The processing of data, subject to specific consent when required by law, takes place for the following purposes:
- registering on the website of the Data Controller
- using the services/products offered by the Data Controller
- for purposes of checking, research and analysis to manage and improve the technologies and services of the Data Controller
- receiving answers to requests addressed to the Controller
- receiving information relating to services/products offered by the Data Controller
- to fulfil its pre-contractual, contractual, and tax obligations deriving from existing relationships with the Controller
Subject to specific and separate consent from the aforementioned, personal data is collected to:
- send newsletters, commercial communications and/or advertising material regarding products and/or services offered by the Data Controller.
Legal basis of the processing
Oleificio Bartolomei processes the user’s personal data should one or more of the following conditions occur:
- the user has given consent for one or more specific purposes
- the processing is necessary for the execution of a contract or to carry out pre-contractual operations
- the processing is necessary to fulfil legal obligations to which the Controller is subject
- the processing is necessary for a legitimate interest of the Controller or of third parties
The data subject can however request the concrete legal basis of each treatment.
Optional and compulsory consent to provide personal data
The data subject is free to provide personal data requested from time to time; their lack of, partial or incorrect conferment could make it impossible to use the services requested.
The acquisition of consent to the processing of personal data is necessary for all the processing indicated above which is connected to and/or necessary to fulfil legal obligations, to the community legislation, to perform obligations arising from a contract to which the data subject is a party or for to fulfill, before the conclusion of the contract, specific requests of the contract.
Recipients of personal data
For the purposes described in par. 3 of this information, the user’s personal data may be shared with:
a) subjects who typically act as data processors, i.e.: persons, companies or professional offices who provide assistance and consultancy services to Oleificio Bartolomei in accounting, administrative, legal, tax, financial matters relating to the provision of the Services; subjects with whom it is necessary to interact for the provision of the Services (for example the Hosting Provider), subjects delegated to carry out technical maintenance activities on the servers which host the websites of the Controller;
b) subjects, entities or authorities to whom it is mandatory to communicate the user’s personal data pursuant to legal provisions or orders of the authorities (for example, during criminal investigations, Oleificio Bartolomei may receive requests from the authority judicial system to provide telematic traffic logs);
c) persons authorised by Oleificio Bartolomei to process personal data necessary to carry out activities strictly related to the provision of the Services, which are committed to confidentiality or have an adequate legal obligation of confidentiality, such as the employees/collaborators of the Controller;
d) commercial partners for their own purposes, autonomous and distinct, only if the user has given specific consent.
Place of data processing
The processing of personal data takes place at the headquarters of Oleificio Bartolomei and is handled by technical, administrative and commercial personnel for the pursuit of the purposes described in paragraph 3.
Server providers are located in the European territory.
Further information can be requested from the Controller.
Personal data will be processed for the time necessary to achieve the purposes referred to in par. 3 or until the previously expressed consent is revoked.
In any case, the possibility for Oleificio Bartolomei to keep personal data up to the time permitted by Italian law to protect its interests is reserved. Further information on the retention period of personal data and/or the criteria used to determine this period may be requested from the Data Controller in writing.
Oleificio Bartolomei adopts adequate security measures to protect data from any unauthorised access, modification or disclosure or its destruction. These measures include internal controls on data collection, storage and processing methods and on security measures to protect the systems on which personal data are stored from unauthorised access.
Rights of interested parties
The user has the right to ask the Data Controller, at any time, access to his personal data, the correction or cancellation of the same or to oppose their treatment in the cases provided for in Article 20 of the Regulation, he has the right to request the limitation of the treatment in the cases provided for by art. 18 of the Regulation, as well as to obtain in a structured format, commonly used and readable by automatic device, the data concerning it (portability), in the cases provided for by art. 20 of the Regulations, writing to: Al Vecchio Frantoio F.lli Bartolomei S.a.s. (hereinafter “Controller”), with registered office in Montecchio (TR), Via Cagnano n.6, P.I. 01261160558, email: email@example.com