Wines

Privacy policy

POLICY PURSUANT TO ARTS.12 AND 13 OF EU REGULATION NO. 679/2016 AND CONSENT TO THE PROCESSING OF PERSONAL DATA

Introduction

EU Regulation no. 679/2016 (hereafter also GDPR) establishes rules concerning the protection of natural persons with regard to the processing of personal data, as well as rules concerning the free circulation of personal data.In order to protect the fundamental rights and freedoms of individuals, the Regulation therefore imposes on the data controllers the obligation to provide the interested parties with the information referred to in arts. 12, 13 and 14, and the specific indication of the rights of the interested party, provided for in articles 15 to 22 of the GDPR.

Please refer to the interpretation of art. 4 of the GDPR - "Definitions", for the possible specification and deepening of the meanings of the terms used below.

***

Information pursuant to art. 13, para.

Data Controller and contacts

The data controller is Azienda Vinicola Palladino S.r.l., located at Piazza Cappellano 9, Serralunga d'Alba - 12050 (CN) Italy, VAT no. 00305860041 - Tel:+39 0173 613108 - Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

Azienda Vinicola Palladino S.r.l.We inform you that your personal data will be processed:

- pursuant to arts. 12 and 13 of EU Regulation no. 679/2016 (General Data Protection Regulation, hereinafter referred to as "GDPR"), by specifically-authorised subjects, limited to the purposes and with the methods that will be specified below with reference to the functionalities of the web portal www.palladinovini.com.

Data Protection Officer contact details

The activity carried out for the purposes referred to in this statement by Azienda Vinicola Palladino Srl does not fall within the hypotheses provided for by art. 37 of EUReg. no. 679/2016.

  1. Object, purpose of the processing

Azienda Vinicola Palladino Srl, as Data Controller, informs you that it will process your personal data, specifically, your common personal data, ie name, surname, e-mail address, telephone number and identifiers and IP addresses or domain names

Your data, as described above, will be processed in the ways and in the forms prescribed by the GDPR, for the performance of the website's own functionalities, with particular - but not exhaustive - reference to the procedures described here of data collection through the contact form, contact directly by telephone, by fax or by email.

In particular, the personal data you have provided to the Data Controller will be processed for the following purposes:

- to follow up the specific requests made by you to the Controller through the Website and its communication tools (contact area and similar);

- for communications of an informative nature relating to the services of the same Controller, following your request for information by e-mail, completing the contact form and other communication tools such as by telephone or fax;

- for any subscription to the newsletter, if present on the site, and the consequent sending of commercial communications and various information concerning the sector in which the Data Controller operates, with the appropriate consent provided by you through the selection of the relative box;

- for sending newsletters, commercial offers, reporting of advertising events, sending promotional communications for a similar service, management of direct relationships and company/client-user contacts, through e-mail and then for direct marketing activities with special consent given by you by selecting the appropriate box;

- for any operation within the Chat, where it is active, and the consequent sending of commercial communications and various information concerning the sector in which the Data Controller operates, with the appropriate consent given by you;

- for other accessory purposes or purposes connected to those indicated above and in any case falling within the scope of the Website's activities;

The processing of data given in general will be carried out, even following automatic collection during navigation, for the sole purpose of verification and control of access to the Website.This also applies to any technical cookies, to be understood as session cookies, functionality cookies or analytics cookies that meet the requirements specified by the Guarantor.In particular, with regard to the latter, it is clarified that they can be assimilated to technical cookies where these are made and used directly from the Website.In any case, for these analytics cookies, the Website, also in compliance with the clarifications of the Guarantor, has provided for the anonymisation of the IP addresses and the data processing amendment; the collection and use of the aforementioned browsing data (without prejudice to the anonymisation of the IP addresses) allow the monitoring of the Website's performance and allow us to improve the service offered, offering the User a better browsing experience. Please refer to the appropriate Cookie Information for further information.

This information is effective only with reference to the aforementioned web portal www.palladinovini.com, but not with reference to other and different portals or websites that may be consulted through the links therein, of which the Company Vinicola Palladino Srl is in no way the owner.

Lawfulness of processing

Apart from that specified for navigation data, the communication from you to the Data Controller of the personal data specified above, has as a basis for the lawfulness of the processing, the following legal bases:

  • Art. 6 para.1, letter a) of the GDPR, concerning your express free, specific, informed and unequivocal consent, for this purpose we inform you that the aforementioned consent can be issued only if you have reached the age of 16 (sixteen), otherwise you cannot proceed but only and exclusively the holder of parental responsibility can.
  • Art. 6 para.1, letter b) of the GDPR, concerning the execution of a contract of which the data holder is a party or the execution of pre-contractual measures adopted at the request of the same.

Both the above legal bases therefore have a purely optional and non-compulsory nature, as they have no other consequence other than the impossibility for the Controller to carry out the aforementioned direct communication or contractual/pre-contractual execution services properly.And, in any case, the consent you may have provided may be revoked by you at any time, with immediate effect on the aforementioned business activities and services.

  1. D) the treatment is not based on art. 6 para. 1 let f)
  1. E) recipients and categories of recipients of the collected data and F) data transfer

In particular, in relation to the purposes indicated above, the data may be disclosed to the following persons and/or categories of persons indicated below, or may be disclosed to companies and/or persons, who provide services, including external services, on behalf of the Data Controller.Among these are indicated for greater clarity, by way of example but not exhaustively: subjects - internal or external to the company - that provide computerised and telematic services for the management of the information system used by the Data Controller and the telecommunications networks (including the post office and electronic management of web portals and internet sites - hosting), subjects that in the eventuality that the Controller reserves the right to appoint the person responsible for the treatment; financial administrations and other companies or public bodies in fulfilment of regulatory obligations; competent authorities and/or Supervisory Bodies for the fulfilment of legal obligations; companies and consulting firms; companies and law firms for the protection of contractual rights; subjects that carry out control, revision and certification of the activities carried out by the controller who act as external data processing managers pursuant to art. 28 of the GDPR, or in total autonomy as separate Data Controllers.

This site may share some of the data collected with localised services both intra-EU and non-EU (in the latter case it will be exclusively those subject to the Privacy Shield protocol). The transfer is authorised on the basis of specific decisions of the European Union and of the Guarantee for the safeguarding of personal data, in particular the decision 1250/2016 (Privacy Shield - here the informative page of the Italian Guarantee), for which no consent is required.In particular, the following are indicated:

Google Analytics with anonymised IP (Google Inc.)Google Analytics is a web analysis service provided by Google Inc.(“Google”).Google uses personal data collected for the purpose of tracking and analysing use of this online space, creating reports and sharing them with other services developed by Google.

Processing location: USA - Privacy Policy - Opt Out

Information pursuant to art. 13, para.2

  1. A) duration of data retention

We point out that, in compliance with the principles of lawfulness, limitation of purposes and the conservation and minimisation of data, pursuant to art. 5 of the GDPR, the retention period of your personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed, or for the entire duration of the fulfilment of the aforementioned purposes.

  1. B) rights of the data subject

- Right to Access and Rectification

Pursuant to art. 15 of the GDPR, in your capacity as Data Subject you have the right to obtain from the Controller confirmation of the existence or otherwise of processing of personal data concerning you, to obtain access to them and to all the information referred to in the same art. 15, paragraph 1, letters (a) to (h), by issuing a copy of the data processed in a structured format, in common use, readable by an automatic and interoperable device.

Pursuant to art. 16 of the GDPR, in your capacity as data subject you have the right to obtain from the Data Controller the correction and/or integration of the data being processed if they are not updated and/or accurate and/or complete.

- Right to cancellation and Right to Limitation

Pursuant to art. 17 of the GDPR, in your capacity as Data Subject, you have the right to obtain, without undue delay, from the Data Controller, exclusively in the cases referred to in art. 17, paragraph 1, letters from (a) to (f), of the GDPR, the deletion of data concerning you - with the exception of the hypotheses specifically provided for by art. 17 paragraph 3.

Pursuant to art. 18 paragraph 1, letters from (a) to (d), of the GDPR, in your capacity as Data Subject you have the right to request and obtain from the Data Controller, the limitation of the processing of your personal data, or that such data are not subjected to further treatments and can no longer be modified.The Data Controller ensures that the limitation of the processing is implemented through appropriate technical devices that guarantee its inaccessibility and immodifiablity.

- Right to Portability

Pursuant to art. 20 of the GDPR, in your capacity as data subject, you have the right to receive from the Data Controller personal data concerning you, which is processed by automated means, in a structured format, commonly used and readable by an automatic device, and you also have the right to transmit such data to another data controller, or to obtain from the Data Controller, where technically feasible, the direct transmission of such data to another Data Controller specifically identified.

- Right to Opposition

Pursuant to art. 21 of the GDPR, in your capacity as data subject you have the right to object at any time to the processing of personal data concerning you, for reasons connected with your particular situation, in cases where the processing of your data is necessary (1) for the execution of a task of public interest and/or connected to the exercise of public authority vested in the Controller; (2) for the pursuit of a legitimate interest of the owner or of a third party; (3) for the profiling activity, if performed by the Controller, on the basis of the previous points.You also have the right to object to the processing of your personal data for reasons related to your particular situation if they are processed for scientific or historical research purposes or for statistical purposes in accordance with article 89 (1) of the GDPR, except in the case where the processing is necessary for the performance of a task of public interest.

You have the right to object to the processing even if your personal data are processed by the owner for the purposes of direct marketing and/or profiling activities linked to direct marketing.In such cases Azienda Vinicola Palladino Srl, Data Controller, having received your communication in the manner indicated below, will refrain from further processing your personal data.

How to exercise the rights mentioned above

 You may exercise the rights listed above by request to be sent to the email address This email address is being protected from spambots. You need JavaScript enabled to view it. to the ac of Azienda Vinicola Palladino S.r.l.; or by registered mail with the address of Azienda Vinicola Palladino S.r.l., located in Piazza Cappellano 9, Serralunga d'Alba - 12050 (CN) Italy.

The Controller will confirm the receipt of your request and provide you with information on the action taken, with reference to the exercise of your rights under articles 15 to 22 of the GDPR, within 1 (one) month from receipt of the request.If necessary, and taking into account the complexity and the number of requests, the Controller may extend this term to 2 (two) months, subject to a reasoned communication to be sent within 1 (one) month from receipt of the request.

The Data Controller will communicate any correction, cancellation or restriction of opposition to all recipients, as identified by art. 4, paragraph 1, no. 9 of the GDPR, to whom such data have been transmitted, unless this proves impossible and/or involves a disproportionate effort.

Following the sending of your request for rectification, cancellation, restriction or opposition, if the Controller has reasonable doubts about your identity they will request more information to confirm it. These communications will be sent by e-mail from the address This email address is being protected from spambots. You need JavaScript enabled to view it.This email address is being protected from spambots. You need JavaScript enabled to view it. and will be processed by the person specifically authorised for the purpose.

In the event that the Controller fails to comply with your request within the period of 1 (one) month from receipt of the request, the latter will inform you of the reasons for the non-compliance, informing you from now on your right of to make a complaint to the Authority of Control (Guarantor for the protection of personal data), as specified in accordance with art. 13, paragraph 2, letter (d) and governed by articles 77 et seq. of the GDPR.

  1. C) revocation rights

Pursuant to art. 6 para. 1 let. a) you have given consent to the processing of your data for the purposes specified above and therefore your express consent is purely optional and not mandatory, having no other consequence, if not the impossibility for the owner to properly perform the aforementioned direct communication services.And, in any case, the consent you may have provided may be revoked by you at any time, with immediate effect on the aforementioned business activities and services.It should be noted that this revocation will not affect the lawfulness of the processing based on the consent given prior to the revocation.

  1. D) right to complain

Pursuant to art. 77 of the GDPR, in your capacity as Data Subject you have the right to propose a complaint to a supervisory authority according to the modalities indicated in the article itself.

  1. E) consequences of failure to communicate your data

The communication of your data is not a legal obligation.But as previously specified, it is based on the lawfulness of the processing, or your express, free, specific, informed and unequivocal consent or, possibly, the execution of a contract of which you are part or the execution of pre-contractual measures adopted by you.

Both the above legal bases therefore have a purely optional and non-compulsory nature, as they have no other consequence other than the impossibility for the Controller to carry out the aforementioned direct communication or contractual/pre-contractual execution services properly.And, in any case, the consent you may have provided may be revoked by you at any time, with immediate effect on the aforementioned business activities and services.

  1. F) Automated decision-making and profiling

The Data Controller informs you that, for the purposes of processing your personal data, it does not make use of automated decision-making processes, ie those aimed at making decisions based solely on technological means based on predetermined criteria (ie without human involvement), or carrying out profiling activities, that is those aimed at using your personal data to analyse or predict aspects of professional performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or travel etc.

Processing methods

The processing of personal data communicated by you is carried out by means of the operations indicated in art. 4 no. 2) of the GDPR, namely:"collection, registration, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, communication, cancellation and destruction of data".

The personal information you provide are processed automatically for the time strictly necessary to achieve the purposes for which they were collected, with technical and organisational procedures adopted to prevent the loss of data, illegal or incorrect use and unauthorised access, and so, therefore, to guarantee a level of security appropriate to the risk pursuant to art. 32 of the GDPR, by persons specifically authorised, in compliance with the provisions of art. 29 of the GDPR, or employees and/or collaborators of the controller in their capacity as authorised entities and/or system administrators, who can carry out consultation, use, processing, comparison and any other suitable operations in compliance with the legal provisions necessary to guarantee, inter alia, the confidentiality and security of data as well as the accuracy, updating and relevance of the data in accordance with the stated purposes and methods.

It should be noted, in particular, that the personal data you provide will be processed only at the registered office of the data controller, unless otherwise specified, and will not be disseminated, and, pursuant to art. 13, paragraph 1, lett. (e), they may be processed only by authorised parties and/or by external processors (in the case of individual professionals and/or complex professional associations), among which is explicitly the hosting company and/or by technical personnel in charge of the management and/or maintenance of the website, but only and exclusively for the purposes expressly and specifically indicated above.