WEBSITE PRIVACY POLICY
This privacy policy pursuant to Article 13 of Regulation (EU) 2016/679 (the “Regulation” or “GDPR”) is provided to those who browse the website below:
(the “Website”)
The policy describes the management procedures of the Website as regards the processing of personal data of users who browse it. It should also be noted that this Policy concerns only the Website, to the exclusion of any website to which the visitor may be redirected via any links available in the Website itself. For these reasons, in order to know the details regarding the processing of personal data in these external websites, please refer to the related privacy policies.
1. WHO IS THE DATA CONTROLLER?
Angelini Wines & Estates Società Agricola a r.l., with registered office in Via Roma n. 117, 60031, Castelpiano (AN), in person of its legal representative for the time being is the Controller of the processing of your personal data. (“Angelini” or the “Data Controller”), which can be contacted at the following e-mail address: angeliniwinesandestatessocagrarl@legalmail.it.
2. HAS THE CONTROLLER APPOINTED A DATA PROTECTION OFFICER?
The Controller has appointed a Data Protection Officer (“Data Protection Officer” or “DPO”). The DPO can be contacted by e-mail at dpo@angeliniwinestates.com or by writing to the following address:
Data Protection Officer
c/o Angelini Wines & Estates Società Agricola a r.l.
Via Roma n. 11, 60031
Castelpiano (AN)
3. WHAT IS PERSONAL DATA?
“Personal Data” means any information capable of directly or indirectly identifying a natural person, in this case, you browsing the Website (“Data”).
Specifically, the Data processes the Data indicated below for the purposes of managing the website and defending rights in court:
- i. IP address, domain name and URL of the device being used;
- ii. geolocation data, browser type, and operating system type;
- iii. browsing data (e.g., number of visits to the Website and time spent on the Website);
- iv. browsing history;
The Controller also processes the Data indicated below for the purposes of registration to the reserved area (Link to “Reserved Area” section):
- i. identification data (name, surname);
- ii. company and any position held;
- iii. country;
- iV. contact details (e-mail, telephone no.).
When you visit the Website, the Controller may collect your Data both indirectly (e.g., by tracking the IP address and URL of your device in order to monitor your use of the Website) and directly (e.g., if you submit a request to the Controller).
4. PURPOSES AND LEGAL BASIS OF PROCESSING
4.1 Website management
The Controller collects and processes your Data to carry out activities concerning the management and administration of the Website. Moreover, the Controller may process your Data in order to improve visitor browsing; such processing is based on the condition of lawfulness pursuant to Article 6(1)(f) GDPR, i.e. the legitimate interest of the Controller.
4.2 Defending rights in court
The Controller may process your Data to assert and defend its rights. Where necessary, processing will be based on the condition of lawfulness pursuant to Article 6(1)(f) GDPR, i.e. the legitimate interest of the Controller. For such purposes. provision of Data is optional. Nevertheless, in the event of failure to provide it, the Controller will not be able to guarantee you browsing on the Website.
4.3 Registration to the “Reserved Area” section
The Controller collects and processes your Data in order to follow up on your request for registration and consequent access to the reserved area that you may have possibly and voluntarily formulated by means of the appropriate link on the Website in the “Reserved Area” section, pursuant to Article 6(1)(b) GDPR. i.e. performance of a contract to which the data subject is party or precontractual measures adopted at the request of the data subject. For such purposes. provision of Data is optional. Nevertheless, in the event of failure to provide it, the Controller will not be able to follow up on your request
5. COOKIES
Cookies are packets of information sent by a web server (e.g., the website) to the user’s Internet browser, automatically stored by the user on the computer and automatically sent back to the server each time the website is accessed. The Controller uses cookies in order to deliver contextualised information to visitors of the Website and to obtain statistics on access and/or use of the portal. By default, almost all web browsers are set to automatically accept cookies. Visitors can set their device’s browser to accept/reject all cookies or display a warning whenever a cookie is proposed so they can consider whether or not to accept them. The user can, in any case, change the default configuration and disable cookies (i.e., block them once and for all) by setting the highest protection level. For any other information on the characteristics, types, usage, and how to remove, delete, or disable cookies on the Website, please refer to the specific “Cookie Policy”.
6. WHERE DO WE TRANSFER YOUR DATA?
The server where the Website is located is within the European Economic Area (EEA). Your Data may be communicated to other companies of the Angelini Group, as well as to third party companies located within the European Economic Area that provide the Controller with maintenance and development services for the Website and, in general, IT services, specifically appointed as data processors pursuant to Article 28 GDPR. Where required by law, your Data may also be disclosed to other companies, Competent Authorities or Public Bodies located within the European Economic Area, which will process it for their own purposes as autonomous data controllers.
7. FOR HOW LONG DO WE RETAIN YOUR DATA?
We process your Data for the time strictly necessary to achieve the above-mentioned purposes. The retention periods of your Data indirectly collected by the Controller via cookies are listed in the appropriate Cookie Policy. For each of the purposes mentioned in paragraph 4, your Data will be retained in accordance with the following:
- Website Management: your Data will be retained for the time strictly necessary to carry out Website management and optimisation activities;
- Defending rights in court: your Data will be retained for the time strictly necessary for the defense of rights in court.
- Registration in the “Reserved Area”: your Data will be retained for as long as you use the account created during registration; thereafter, upon deletion of the account, the Data will not be subject to further retention.
At the end of the period described above, your Data will be permanently deleted or otherwise irreversibly anonymised.
8. WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?
You, as a data subject, have the right to:
- access and request copies of the Data;
- request rectification or updating of Data where inaccurate or incomplete;
- request, under certain circumstances, deletion of the Data or restriction of processing concerning the Data;
- withdraw consent where the processing of Data was based on the aforementioned condition of lawfulness.
- request Data portability (where applicable);
- object to its processing (where applicable);
In order to obtain further information regarding your rights, you may contact the Controller or the DPO at the contact details provided in paragraphs 1 and 2 of this policy. You are free to exercise your rights in any way you choose and it is free of charge.
9. HOW TO LODGE A COMPLAINT
If you wish to lodge a complaint concerning the manner in which your Data is being processed, or concerning the handling of a complaint you have lodged, you may lodge a complaint directly with the Supervisory Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 – Rome, Italy, Telephone +39 06696771, E-mail: protocollo@gpdp.it, www.garanteprivacy.it).
10. FINAL PROVISIONS
The Controller reserves the right to modify and/or update this policy.
[Last update november 2024]