In compliance with Article 13 of EU Regulation 2016/679 for the protection of personal data, this policy is aimed to those who interact with the web services by electronic means at the address: www.seedsandchips.org
DEFINITIONS
Personal Data: any information relating to an identified or identifiable natural person.
GDPR: EU Regulation 2016/679 on data protection.
Privacy Legislation: the GDPR and any other applicable legislation and regulation for the protection of personal data, including Legislative Decree 196/2003.
Site: the website accessible at the URL www.seedsandchips.org.
Company or Controler: Seeds&Chips S.r.l, with registered office in [Via Varesina, 162 – 20156 Milano MI].
User: the natural person who accesses the Site to consult it and/or to request one or more of the services offered.
DATA CONTROLLER
This Privacy Policy indicates how the Company, as the data controller, uses the Personal Data that it acquires with reference to the User of the services it offers through the Site and the related platform accessible from the aforementioned Site. In the processing of Personal Data, the Company undertakes to comply with the obligations prescribed by the Privacy Legislation.
PURPOSE OF DATA PROCESSING
The Company may use the Personal Data that the User shares through this Site for the following purposes:
- for the management of the User’s subscription to newsletters (legal basis: consent pursuant to Article 6(1)(a) of the GDPR);
- for any marketing and profiling activities (legal basis: consent pursuant to Article 6(1)(a) of the GDPR);
- to provide the services made available to Users by the Company through the Site (legal basis: performance of a contract pursuant to Article 6(1)(b) of the GDPR);
- for the fulfillment of formalities and obligations arising from law or regulations (legal basis: compliance with a legal obligation pursuant to Art. 6 para. 1 lit. c) GDPR).
- to ensure the proper functioning of the Site (legal basis: legitimate interest pursuant to Article 6(1)(f) GDPR).
Where required by law, the Company will ask you to express your express consent to the processing of Personal Data for a specific purpose. It should be noted that the activities referred to in points a) and b) may only be carried out following the specific and express consent of the User. It should also be noted that any consent given may be revoked at any time.
TYPE OF DATA PROCESSED
Through the Site, the following are collected and subsequently processed by the Company:
– navigation data: the latter are nothing more than information processed by computer systems and software procedures that are used for the normal functioning of the Site and which, by their very nature, could allow Users to be identified through certain processing treatments.
– data provided voluntarily by users through the forms on the Site: the data voluntarily communicated by Users will be processed exclusively for the purpose for which they are communicated. Below is an illustrative but not exhaustive list of data: contact details, including company name and VAT number; name and surname and tax code; address; e-mail address; phone number.
– data collected through the so-called cookies: cookies are used to improve the use of the Site and are strings of text containing the user’s data which are stored and then retransmitted to the same site in the event of a subsequent visit by the same user. All information related to cookies can be found in the cookie policy cookie policy.
OPTIONAL NATURE OF THE PROVISION OF DATA
Apart from what is specified for navigation data, the user is free to provide the personal data contained in the request forms on the Site or in any case indicated in contacts with organizations to request the sending of the newsletter, information material or other communications.
Failure to provide the data may make it impossible for the Company to provide certain services.
PROCESSING METHODS
The processing of Personal Data takes place through automated tools for the time strictly necessary to achieve the purposes for which they were collected and is carried out by the Data Controller in such a way as to guarantee the security and confidentiality of the data in accordance with the provisions of the Privacy Legislation.
Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access, in particular all technical, IT, organizational, logistical and procedural security measures provided for by the Privacy Legislation will be adopted.
RECIPIENTS
The Processing will be carried out by the Data Controller and/or external consultants or suppliers of the Data Controller who have entered into a specific agreement with the Data Controller regarding the protection of personal data and therefore act as data processors pursuant to Article 28 of the GDPR.
Personal Data will not be transferred outside the European Economic Area in the absence of the requirements of the Privacy Legislation.
DATA RETENTION PERIOD
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected, including, for example, the provision of services. It should be noted that:
- the data collected for marketing purposes will not be kept for more than 24 months;
- In any case, the data collected for profiling purposes will not be kept for more than 12 months.
It is understood that the User may at any time request the deletion of his/her Personal Data in accordance with the provisions of this policy.
RIGHTS OF THE DATA SUBJECTS
- Right to withdraw consent: You have the right to withdraw your consent to the processing of your Personal Data at any time and to unsubscribe from the service at any time by sending an email to: privacy@seedsandchips.org
- Right of access: You have the right to obtain access to your Personal Data at any time. In the event that personal information is processed in an automated manner as part of a service to you or based on your consent, you also have the right to request a copy of the information in a structured, commonly used and machine-readable format (right to “data portability”).
- Right to erasure: You may ask the Company to erase your Personal Data, in particular when you have withdrawn your consent to the processing of the aforementioned Personal Data or when these are no longer necessary for the purpose for which the Company should have known and/or processed them.
- Right to object: You may object to the processing of your Personal Data.
- Right to rectification: You may ask us to rectify the Personal Data we have collected.
- Right to restriction of processing: You may request the restriction of the processing of your Personal Data.
These rights may be exercised by sending a written communication to the Company:
– by e-mail, attaching a photocopy of an identity document, to the following address: privacy@seedsandchips.org;
– by post, attaching a photocopy of an identity document, to the postal address Seeds&Chips S.r.l, [Via Varesina, 162 – 20156 Milano MI].
The User shall also have the right to lodge a complaint with the competent supervisory authority (Authority for the Protection of Personal Data), pursuant to Article 77 of the GDPR, if he/she believes that the processing of his/her Personal Data is contrary to the regulations in force.
CHANGES TO THE PRIVACY POLICY
The Company seeks to ensure that data collection and further processing activities are always appropriate. You will be informed of any changes to this policy that may result in a change in your rights or the purposes for which your Personal Data is collected.