(art. 13 Reg. UE 2016/679)

THE SITE

The Site is owned by the Masseria Tenuta Deserto, a simple company of Riccardo Delfino (also "Data Controller") with registered office in Carovigno, Contrada Deserto s.n.c. 72012 (BR), VAT number and Tax Code 02215360740.

Navigation data
The computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data of the User, whose transmission is implicit in the use of Internet communication protocols. This is information that, by its very nature, could, through processing and association with data held by third parties, allow Users to be identified. This category of data includes the IP addresses and domain names of the computers used by the Users who connect to the Site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters concerning the operating system and the IT environment used by the User. These data are processed, for the time strictly necessary, for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its regular operation. The data could be used to ascertain responsibility in case of possible computer crimes against the Site.

Cookie
All information on cookies on this site is available on the Cookie Policy page

1. The purposes of the processing:
The data provided by the User on the Site will be processed to respond to user requests. It is the processing of data necessary to respond to requests for information and / or contact.

2. The legal basis of the treatments

a. The processing of personal data referred to in point 1 (requests) is permissible as it is necessary to satisfy requests for contact and / or information.

b. The personal data of the Interested Parties may also be processed lawfully to fulfill obligations under laws, regulations or laws, both national and EU, or to respond to the requests of legitimate public and private Authorities. Applying these final aims, the applicable legislation does not require an explicit consent of the interested party.

3. The type of data processed
Data of interested parties mainly allow the identification of the interested party as a client, such as personal data; contact details, etc.

4. Treatment modalities
The treatments are mainly carried out by collecting, recording, organizing, storing, selecting, extracting, using, comparing, communicating, canceling and, under special conditions, dissemination. The processing of data is carried out mainly with the help of electronic tools equipped with appropriate IT procedures, as well as on paper. The aforementioned electronic instruments, the relative databases and the systems through which they operate are suitable for storing, managing and transmitting the data, with such logics and methods as to ensure adequate and preventive security measures for data protection. Specific technical and organizational security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access, if in the presence of data processors. The data processing can take place either by telephone or computer contacts, also via the web or by sending via the postal service.

5. Storage times
The data collected relating to the registration referred to in paragraph 1 above are kept for the entire duration of the contractual relationship that gives rise to the processing.
The rights of defense exercisable by the Data Controller and / or the Data Subject as well as the evasion of requests received from public Authorities or respondents to reasons of justice that could extend the indicated terms of conservation are reserved.

6. The nature of the provision and its effects
The provision of data for the aforementioned purposes is a necessary requirement for the execution of the treatments described, however it is left to the free will of the interested party. When the data are considered necessary for the purposes referred to in point 1., the processing of the same is marked by a special symbol (*). The refusal to provide the data requested with this symbolism (or subsequent complete and / or partial opposition to their treatment) will determine the impossibility to proceed with the satisfaction of the request and / or information. When the data are not marked with any symbol, the same are merely optional and any failure to complete the fields assigned to them will not lead to any consequence.

7. The places of treatment
Data processing essentially takes place through the website and at the places where the external Managers' servers are located.
In some specific cases the data could also be transferred abroad, to subjects acting as external Data Processors, also based in countries outside the European Union (use by "cloud" services with suppliers with own servers located abroad, processing abroad of data used for marketing and profiling purposes, sending e-mails via e-mail providers whose servers are located abroad, mostly in European countries and the United States). In this case, the transfer of data abroad will take place exclusively in the context and in compliance with the applicable laws or contractual provisions to protect the rights of the interested party.

8. Data recipients
The personal data subject to processing will not be disclosed without the prior consent of the same. Personal data may be disclosed to subjects:
• who act as internal and / or appointed managers authorized by the Data Controller for the purposes indicated above;
• who act as autonomous Data Controllers if this complies with a legal obligation (for example, Public Authorities or Supervisory Body);
• who act as external data processors, that is, contractually authorized parties who operate in the name and on the account of the Data Controller engaged in the correct and regular pursuit of the purposes described.

9. The rights of the interested party
If permitted by applicable law, the interested party has the right to:
• access your personal data and know the origin, the purposes and the purposes of the processing, the data of the data controller, the data controller and the subjects to whom they may be disclosed;
• withdraw consent at any time, if this constitutes the basis of the processing. In any case, the revocation of the consent does not affect the lawfulness of the treatment based on the consent before the revocation;
• update or correct your personal data so that they are always accurate;
• delete your personal data from the data banks and / or the archives of the data controller if they are no longer necessary for the purposes indicated above;
• limit the processing of your personal data in certain circumstances, for example where it has disputed its accuracy, for the period necessary for the data controller to verify its accuracy;
• obtain your personal data in electronic format;
• object to the processing of your personal data or request to interrupt it for each of the purposes indicated above. Following this request, the Data Controller will no longer be able to process personal data, except in cases where the laws and regulations allow it.
• submit a complaint to the supervisory authority in charge of data protection and in particular in the Member State where he habitually resides, or of the place where the alleged violation occurred
The Data Subject may exercise his / her rights by contacting the Data Controller, by means of a written communication to be sent mainly to the e-mail address as indicated below, while the Data Protection Officer, is the point of contact, both for the Control authority with respect to the Data Subjects, for matters related to the processing of personal data.

10. Identity and contact details of the data controller and the person responsible for the protection of personal data
For any communication concerning the processing of personal data, the interested party must know that: The Data Controller is the company Masseria Tenuta Deserto, a simple company in the person of its legal representative, contactable at the registered office in Carovigno (BR), Contrada Deserto s.n.c. 72012 and email info{at}tenutadeserto.it

It is hereby specified that this information may be supplemented, orally or in writing, with additional elements and indications, in order to best meet any of your cognitive needs in the matter of "Privacy" and to comply with regulatory changes.
This text replaces the previous paper or electronic versions.