Source: http://www.enorossi.it/en/privacy-policy-2/
Timestamp: 2019-04-24 00:48:54+00:00

Document:
II. Reference standards and legal basis of processing.
III. Nature of the data being processed.
(a). – Common personal data, identification data.
(d). – Particular categories of personal data.
IV. Nature of the provision, data sources.
IV.1. Data for which transfer is necessary.
V. Purpose of the Processing.
VI. Methods of processing your personal data.
VI.1.2 Profiling, automated decision making.
VII. Recipients of data and transfers abroad.
VII.1. Managers and persons in charge of data processing.
VII.2. Communication (to certain external subjects) of the data.
VII.3. Transfer of personal data abroad.
VII.4. Dissemination (to undetermined third parties) of the data.
IX. Withdrawal of Consent Questions On Privacy Access and Feedback.
XI. Manager for the Protection of Personal Data.
Domain enorossi.it: the domain, accessible via the world wide web service of the Internet, at https://www.enorossi.it/, consisting of data, applications, technological resources, human resources, organizational rules and procedures designated for the acquisition, storage, processing, exchange, retrieval and transmission of information.
The principles of lawfulness, fairness and transparency will apply to the processing of personal data. Personal data will be collected for specific, explicit, legitimate purposes (limitation of purpose) and will be suitable, relevant and limited to the purposes for which it is processed (data minimization). It will current and accurate and stored for a period of time not exceeding that necessary for execution of the Contract, without prejudice to the fulfillment of legal and tax obligations that establish longer storage periods (limitation of conservation). Personal data will be processed by adopting all appropriate security measures to ensure the integrity, confidentiality and non-access by unauthorized third parties (integrity and confidentiality). If not expressly indicated, the provision of personal data through the collection points on the site applies to those of legal age only.
The processing operations, which are explained below in detail, have their legal basis in the rules governing your right to the protection of your personal data, privacy, and the right to express or revoke, at any time, informed consent to processing operations. These rights are contained in: The General EU Regulation 679 of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free movement of such data; The Informed Consent, in accordance with the current provisions of law (Article 6 GDPR). Fulfillment of obligations or orders to which the Data Controller is bound by law or order of the Authority (Article 6 GDPR).
III. – Nature of the data being processed.
indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request. In any case – where the law provides – from time to time you will again be asked for consent for the processing of yours personal data. Only after giving your consent, where necessary, the following categories of personal data concerning you will be or may be processed for the purposes indicated.
The IP number and the type of browser used by you for the connection to the domain https://www.enorossi.it/ (non-identifying data), automatically recorded by the logical protection and access control devices at the domain (LOG FILES). Such personal data will be used exclusively for the purposes of control of network traffic to the sistemae.it domain. This information is not collected to be associated with identified data subjects, which by its very nature could, through processing and association with data held by third parties, allow you to identify users. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes to the detriment of the site: with this exception, at present, data for web contacts does not persist for more than seven days.
If particular categories of personal data pursuant to art.9 Reg. UE 679/2016 are collected through the Enorossi domain, you will be informed in advance and able to express relative consent in a legal manner.
IV. – Nature of the provision, data sources.
The provision of your personal data is not normally mandatory but, in some cases, it is necessary, and therefore required so you can benefit from the services and functionalities of the site.
IV.1. – Data for which transfer is necessary.
The provision of certain personal data is necessary, and therefore mandatory, to execute specific requests; you always have the choice to not provide your personal data. Non-provision may make it impossible for the Data Controller to meet your requests, your needs or permit you to use all the features available on the site. This identification data will be processed both on paper and via electronic media, and will be kept by Enorossi exclusively for the necessary time. Once these retention times have elapsed, the personal identification data will be deleted automatically.
In addition to necessary processing pursuant to legal obligations, regulations, or deriving from the Authority’s order, Enorossi will carry out, with your consent, the operations required to allow you to benefit from the services and functionalities of the http site. : //www.enorossi.it/ita/home/ and the services indicated therein.
VI. – Methods of processing your personal data.
In relation to all the purposes indicated in the previous paragraphs, your personal data will be processed electronically and on paper and by specific IT procedures in order to personalize the services that Enorossi offers. The data will be processed in such a way as to guarantee its logical and physical security and confidentiality, and may be carried out using manual, computerized and telematic tools designed to store, transmit and share the data. Processing logistics will be strictly related to the purposes.
VI.1. – Security and data retention.
– Your personal data will be stored within the European Union, the related security policies are reviewed in accordance with the relevant Best Practices.
VI.1.2. – Profiling, automated decision making.
VII. – Recipients of data and transfers abroad.
VII.1. – Managers and persons in charge of data processing.
The following may become aware of the personal data referred to in this information, as Managers or Persons in charge of processing: within Enorossi, qualified personnel, each limited to their duties and duties and based on the assigned duties and instructions given. outside Enorossi third parties, also specifically designated as Managers or in charge of processing – of which Enorossi makes use for various services and exclusively to perform these services – each limited to their expertise and duties and on the basis of assigned tasks and instructions given.
VII.2. – Communication (to certain external subjects) of the data.
For standard management, accounting and administrative activities, Enorossi may communicate your personal data, subject to acquisition of your consent in accordance with the law, where required, and in compliance with security measures, to third party service providers for the sole purpose of services requested by you. These include: – postal service companies, law firms and notaries, consultants, also in partnership, other service companies, as well as other entities in compliance with any legal obligations (such as insurance institutions, police forces, judicial authorities, etc.). The list of such subjects to whom the data may be communicated is available at the Data Controller offices.
VII.3. – Transfer of personal data abroad.
Enorossi does not transfer personal data abroad on its own initiative. However, some third parties, service providers, may have their servers physically located abroad (as in the case of an e-mail provider). In such cases, the transfer of data abroad will take place exclusively within the scope and in compliance with EU Reg. 679/2016 Art. 44 ss.
VII.4. – Dissemination (to external undetermined subjects) of the data.
VIII. – Rights of the interested party.
Articles 15 to 22 of GDPR confer the exercise of specific rights by the interested parties. Article. 15 GDPR recognizes the right of individuals to access their personal data and to obtain a copy thereof. The right to obtain a copy of the data must not affect the rights and liberties of others. Via a request for access, the interested party has the right to obtain from Enorossi confirmation as to whether data is being processed and to ascertain the purposes and categories of data processed, third parties to whom it is communicated and if the data is transferred to a non-EU country with adequate guarantees. The interested party also has the right to ascertain the storage time for personal data, the right to request the correction of inaccurate data and the integration of incomplete data, the cancellation (right to be forgotten) under the conditions indicated in Art.17 of the GDPR, the limitation of processing, the revocation of consent, the portability of data and the right to object, in any time and without having to provide justification, to the treatment for direct marketing purposes. The rights may be exercised in writing to Enorossi’s e-mail, or by ordinary mail to the address indicated below. The Data Controller may need to identify the Data Subject by requesting to provide a copy of his/her ID. The interested party who believes that the processing of their personal data violates the provisions of the GDPR or of the internal regulations regarding the protection of personal data has the right to propose a complaint to the Authority for the Protection of Personal Data based in Rome, pursuant to Art. 77 of the GDPR and / or to appeal to the judicial authority. To exercise these rights, or to obtain any other information regarding them and, more generally, to the processing of personal data, requests may be sent via e-mail to the following address: privacy@enorossi.it ; – by ordinary post to Enoagricola Rossi SpA. – Via Cortonese, 36 – 06019 – Umbertide – (PG).
IX. – Withdrawal Of Consent Questions On Privacy Access and Feedback.
If you have questions or would like more information on the processing of your personal data or exercise the rights referred to in the previous n. VI, you can send an e-mail to the administrator of the Enorossi website at privacy@enorossi.it.You can also contact us at the same address for answers regarding the management of information by Enorossi. Before Enorossi can provide or modify any information, you may need to verify your identity and answer some questions. Our response will be provided as soon as possible.
The owner of the processed data is Enoagricola Rossi SpA. Via Cortonese, 36 – 06019 – Umbertide – (PG).
XI. – Manager for the Protection of Personal Data.
Enorossi has not appointed the person responsible for the protection of personal data as it is not required to do so pursuant to Art. 37 of the EU Reg. 679/2016.
The complete list of data processors is available at our offices. This mandatory information is subject to updating, depending on possible modifications to the applicable legal provisions.

References: V. 
 art.9
 Art. 44
 Art.17
 Art. 77
 Art. 37