Why I believe and the protection of personal data
Why I believe in it by De Lorenzo Enrico & C s.a.s. [hereinafter PCC] cares about the protection of the personal data of the individuals with whom it interacts, aware that they constitute the personal and confidential assets of each individual, allowing them to exercise their freedoms and fundamental rights. Considering privacy as a fundamental value, CVT constantly strives to treat information concerning individuals with correctness, lawfulness, and transparency, always protecting their privacy and their rights in accordance with the General Regulation on the Protection of Personal Data EU 2016. / 679 GDPR and the Legislative Decree 196/2003 of the Privacy Code and other applicable provisions regarding the protection of personal data
For this reason, PCC undertakes to safeguard and protect the personal data of the people with whom it comes into contact on a daily basis (shareholders, employees and collaborators, customers and suppliers and third parties in general, collectively identified as Data Subjects pursuant to art. GDPR).
Below is the Information [1] to the interested parties, provided pursuant to art. 13 GDPR, relating to the processing of personal data of users who, by browsing the internet, consult and use the services offered by the site https://www.perchecicredo.com.
1. Data Controller
The data controller is De Lorenzo Enrico based in Lecce (LE) at via F. Ribezzo, 1 - 73100.
You can contact the Data Controller at the following addresses:
at the telephone number +39 0832 359287
by writing to the registered office at the above address
by sending an e-mail to the address: info@perchecicredo.com.
2. Purpose of the treatment
The Data Controller processes Users' personal data for the following purposes:
allow navigation on the site through the use of technical navigation cookies, and therefore the data will be processed in anonymized form.
manage requests made by Users - by filling in the appropriate form and spontaneously sending their personal and contact data - with reference to the purchase of products made by PCC;
manage the expressions of interest formulated by Users - by filling in the appropriate form and spontaneously sending their personal and contact data as well as any curricula vitae - with reference to the possibility of collaborating with the PCC organization.
3. Types of data processed
The treatments relating to the purposes specified above generally contemplate the management of common personal data. In particular:
as regards the personal data referred to in letter a) of paragraph 2, they relate to the technical navigation data that the computer systems and applications dedicated to the functioning of the Website detect, during their normal operation and whose transmission is implicit in the use of internet browsing protocols. These data are not associated with directly identifiable Users, they are not collected to identify Users nor are they subject to profiling activities. The collected data includes the IP addresses and domain names of the computers used by users who connect to the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system and the IT environment used by the User. These data are processed, for the time strictly necessary, for the sole purpose of obtaining anonymous statistical information on the use of the Website and to check its regular functioning. The aforementioned navigation data are deleted immediately after processing.
For more information on this, please consult the cookie policy.
as regards the personal data referred to in letters b) to e) of paragraph 2, they relate to personal data provided voluntarily by Users in order to allow the satisfaction of their requests.
The personal data referred to in letter d) of paragraph 2 may contain particular categories of data referred to in art. 9 GDPR.
Judicial personal data or related to criminal convictions and offenses referred to in art. 10 GDPR.
4. Nature of the provision of data and consequences of any refusal to provide personal data
The provision of data by users is mandatory for the performance of the purposes specified above.
Any refusal to provide the requested personal data may result in the inability to respond to requests made by completing the contact forms as well as in the inability to use the services offered by the Website.
5. Legal bases of the treatments performed
For the purposes referred to in point 3, letter a), the legal basis is represented by the legitimate interest of the Owner in the effective provision of the Website services, pursuant to the provisions of art. 6 co 1, lett. f) of the GDPR.
For the purposes referred to in point 3, letters b), c) and d), the legal basis is represented by the execution of pre-contractual measures requested by users, pursuant to the provisions of art. 6 co 1, lett. b) of the GDPR.
For the purposes referred to in point 3, letters e), the legal basis is represented by consent, pursuant to the provisions of art. 6 co 1, lett. a) of the GDPR.
6. Retention period
Users' browsing data are deleted immediately after processing and used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning.
Users' data, provided spontaneously and relating to communications sent by filling in the forms made available on the Website, are processed for the time necessary to perform the services requested, within the scope of the purposes listed above, and in any case kept for a period not more than 2 years from the last contact received. User data contained in any attachments transmitted for the purposes of collaboration with the Winery are kept for a period not exceeding 6 months.
7. Subjects to whom the personal data may be communicated or who can learn about them as managers or agents, and scope of dissemination of the data
Both the navigation data and the data provided voluntarily by Users will be processed by the Owner and by subjects belonging to the organization of the Owner and authorized to do so. The same data may also be processed by subjects external to the organization of the Data Controller (generally IT service providers linked to the management and operation of the Website and / or freelancers) however linked to the Data Controller by contractual relationships that provide for its appointment as Data Processors pursuant to art. 28 GDPR.
The data will not be disclosed to other subjects, nor will it be disseminated in any way.
8. Transfer of data abroad
The management and storage of personal data will take place on servers located within the European Union. The servers are currently located in Italy.
9. Rights of Users
Users may exercise the rights expressly recognized by articles 15 and following of the GDPR towards the Data Controller, using the contact details of the Data Controller indicated in this Notice. In particular, they can:
obtain confirmation of the existence or not of personal data concerning them, even if not yet registered, and their communication in an intelligible form;
obtain the indication: a) of the origin of the personal data; b) the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the Data Controller, of the Managers appointed pursuant to art. 28 GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as managers or authorized subjects;
request and obtain - in the event that the legal basis is a contract or consent - that the data be transmitted in a structured and readable format by an automatic device, also in order to communicate such data to a new data controller (so-called right to portability);
obtain: a) updating, rectification or, when there is interest, integration of data; b) cancellation (so-called right to be forgotten), transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently treated; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is proves impossible or involves the use of means that are manifestly disproportionate to the protected right;
proceed: a) to object, in whole or in part, for legitimate reasons, to the processing of personal data provided, even if pertinent to the purpose of the collection; b) the request to be informed about the existence of a decision-making process aimed at sending advertising material or carrying out market research or commercial communication. once the opposition to the processing has been received at the address indicated in the epigraph, the personal data will no longer be processed, except to the extent permitted by applicable laws and regulations;
limit the processing of data, i.e. allow their processing within the limits of conservation, for the assessment, exercise or defense of a right in court or to protect the rights of another natural or legal person or for reasons of interest relevant public of the union or of a member state, in the cases provided for by the GDPR.
Lastly, Users have the right to complain to the Supervisory Authority, which can be exercised:
by registered letter with return receipt addressed to the Guarantor for the Protection of Personal Data, Piazza Venezia n. 11 - 00187 Rome;
by e-mail to the address: garante@gpdp.it, or protocol@pec.gpdp.it; fax to the number: 06 / 69677.3785.
[1] the processing of personal data means any operation or set of operations carried out with or without the aid of automated processes and applied to personal data, such as the collection, registration, organization, structuring, storage, '' adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, pseudonymisation, cancellation or destruction .