INFORMATION ON CUSTOMER PERSONAL DATA PROCESSING
Art. 13 European Regulation No.2016/679 GDPR
we wish to inform you that the personal data you provided or acquired in relation to your purchase request, or related services (assistance, maintenance, etc.) and in the course of any subsequent reports, will be processed by our Company Agricola Greppo - Biondi Santi - S.r.l., by the Data controller, for purposes related to sale and supply of products and services requested by you.
Purpose of data processing
The acquisition of the aforementioned personal data is necessary to pursue the aforementioned purposes and, in their absence, it would not be possible to provide the requested products and services. These data will be processed by the company's authorized staff, also using electronic instruments, and as well as trusted third parties who are officially helping us to provide the aforementioned products and services (law firm, lawyer, business consultants). In addition, your data may be disclosed to individuals, public and private, who may access these data under statutory or regulatory provisions and within the limits imposed by these standards.
Furthermore, subject to your consent, freely given by ticking the checkbox hereunder, some personal data may be processed by our Company for the following purposes:
- contacts or sending of communications, with automated (e-mail, fax, sms) and conventional (mail, telephone with operator) methods, for commercial, promotional and advertising activities, market research, direct sales of products and services of our Company;
For the aforementioned purposes, the disclosure of your data and your consent are nonetheless optional and do not affect the supply of goods and services requested, which can be useful for improvements and to give you updates on the products offered by our Company.
Data processing procedures
Data processing will be carried out through instruments and procedures designed to ensure safety and confidentiality, both in paper and electronically.
The data will be kept for the time necessary for the fulfillment of legal obligations with respect to the purposes of the processing. When the aforementioned legal obligations no longer exist, your data will be deleted or anonymised.
- invoices and receipts: 10 years for tax obligations
- Marketing and promotional messages: 3 years
Data Subject's rights
You may exercise at any time, pursuant to Art. 7 of Legislative Decree No. 196/2003 and articles 15 to 22 of EU Regulation No. 2016/679, the right to:
a) obtain confirmation as to whether or not personal data concerning him/her exist;
b) obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data has been or will be communicated and, where possible, the retention period;
c) request rectification and erasure of personal data;
d) request restriction of processing;
e) data portability, i.e. to receive personal data from data controller in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance;
f) oppose processing at any time, even for direct marketing purposes;
g) object to an exclusively automated decision-making process on individuals, including profiling;
h) ask the Data Controller to have access and rectify or delete personal data or to limit data processing concerning data subject, or to oppose data processing, besides the right to data portability;
i) withdraw consent at any time, without affecting the lawfulness of any processing based on consent given prior to revocation;
j) file a complaint with a supervisory authority.
You can exercise your rights by sending a written request to Data Controller, to the registered office address Frazione Greppo, Montalcino (SI), or to the email address: firstname.lastname@example.org
Consent to consumer data processing
Having read the above information, the undersigned, by affixing the following signature, declares to consent to the processing of personal data by the data controller, for the purposes, with the procedures and within the limits specified in the aforementioned information.