PRIVACY POLICY

​

Data subjects: users of the site www.boscodemediciwinery.com, hereinafter referred to as "The Site".

Data controller: Bosco De' Medici - Wine Resort

Registered office: based at Via Antonio Segni, 42 - 80045 Pompei (NA) - C.F. and P.IVA: 0307788 1211

Which will be indicated below as owner

 

Mail reference: info@boscodemediciwinery.it

 

As the Data Controller of the processing of your personal data pursuant to and for the purposes of EU Reg. 2016/679, the Privacy Code novated by Legislative Decree 101/18 and the provisions and guidelines of the Supervisory Authorities, hereby informs you that the aforementioned legislation provides for the protection of persons with respect to the processing of personal data and that such processing will be based on the principles of fairness, lawfulness and transparency and the protection of your privacy and your rights. The information and personal data provided by you or otherwise acquired in the context of the use of the site will be processed in accordance with the legislative provisions of the aforementioned legislation and the confidentiality obligations provided therein.

​

The Data Protection Officer (DPO) is the owner with the email reference.

Type of data processed

Browsing data

The computer systems and software procedures used to operate the application acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses, or domain names used by users connecting to the site, addresses in URI (Uniform Resource Identifier) notation of requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained, etc.

These data are used for the sole purpose of obtaining anonymous and aggregate statistical information on the use of the site and to check its correct functioning, and reside permanently on third party servers (hosting providers). The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

​

Cookies

The website uses only necessary cookies, with the purpose of improving the functioning of the system and ensuring its security; you always have the possibility to view the Cookie Policy, containing all the ways of manifestation and denial of consent.

Consent to the use of cookies is given at the beginning of your browsing experience by activating or leaving deactivated with a simple tick the individual unwanted cookies (opt-in) listed in the brief information in the specific banner

 Relative to the optional provision more information is made regarding the cookies on the site in the cookie policy document also accessible from the short notice.

​

METHODS OF THE PROCESSING FOR WHICH THE DATA ARE INTENDED

Personal data are subject to electronic processing.

However, the Processing will be based on the principles of fairness, lawfulness and transparency and will be carried out with the help of tools and procedures that avoid the risk of loss, unauthorized access, unlawful use and dissemination.

​

ACCESS TO DATA

Personal data may be accessible, for the purposes indicated:

- to employees, collaborators and administrators of the Data Controller, in their capacity as persons authorized to process the data;

- third party companies or other entities performing outsourced activities on behalf of the Data Controller, in their capacity as Data Processors.

The list of Data Processors is constantly updated and is available by writing to the reference email.

​

DATA COMMUNICATION AND TRANSFER

Without the need for express consent - art. 6 lett. b) and c) GDPR - the Data Controller may communicate personal data, for the purposes set out, to: Inspection Bodies, Judicial Authorities, Commercial Information Companies, Credit Insurance Companies, as well as to those subjects to whom the communication is mandatory by law. These subjects will process the data in their capacity as autonomous Data Controllers.Your data is transferred outside the European Union.

The hosting provider of the site is provided by Wix.com Ltd., a company based in Israel, which is deemed by the European Commission to offer an adequate level of protection of Personal Information of residents of EU Member States. In any case, we inform you that the transfer of your data outside the European Union may entail possible risks for the protection of your data.

​

RIGHTS OF THE DATA SUBJECT

In relation to the processing of personal data you have the right:

-to be informed about: data and location of the Data Controller; the purposes and methods of processing; data and location of the Data Processor;

-to obtain, from the Data Controller or the Data Processor, without delay:

1) the confirmation of the existence of a processing of personal data concerning him/her and the communication in an intelligible form of the same data and their origin, as well as and the purposes on which the processing is based;

2) the deletion of personal data concerning him/her, when: i) the data are no longer necessary in relation to the purposes for which they were collected, ii) the data have been processed in violation of the law, iii) the data subject has objected to the processing and there is no overriding legitimate reason to proceed with the processing iv) the data controller is under a legal obligation to delete the personal data;

3) the updating, rectification or, if interested, the integration of data;

4) certification that the operations referred to in numbers 2) and 3) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves a manifestly disproportionate use of means compared to the protected right;

- to object on grounds relating to his or her particular situation, to the processing of personal data concerning him or her, pursuant to Article 6 (1) (e) or (f);

- to object to the processing of personal data concerning him/her, for the purpose of direct marketing;

- to lodge a complaint with a supervisory authority;

- to receive in a structured, machine-readable format personal data concerning him or her and to transmit such data to another Data Controller without hindrance from the Data Controller to whom he or she originally provided it. In exercising his or her rights regarding data portability, the data subject has the right to obtain the direct transmission of personal data from one Data Controller to another, if technically feasible;

- not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or which is likely to affect him or her in a similar significant way.

The Controller shall provide a copy of the personal data being processed; in the event of further copies requested by the data subject, the Controller may charge a fee based on the actual administrative costs incurred.

​

METHOD OF EXERCISE OF RIGHTS.

You may at any time exercise the above rights by sending to the attention of the Data Controller:

- a registered letter with return receipt to the address below.

- an e-mail to the reference address.