This information is provided in accordance with Article 13 of the Community Regulation (EU) 679/2016 to those who use the website www.fattoriarossi.com and is related to all personal data that the company collects and holds on its users and their account, while it does not apply to data collected from other websites that may be consulted by the user through links to external pages of third parties. The term “personal data” means any information that allows the identification of a natural person. The company may amend, supplement or update this Policy periodically, also in view of any changes in the legislation, national and European applicable or measures of the Guarantor for the protection of personal data.
Changes and updates will be binding as soon as they are published on the shop, any interested user is therefore invited to access the site regularly to check the updated Privacy Policy.

– Data Controller –

The Data Controller is Fattoria Rossi Società Agricola based in Quattro Castella (RE), Via G.Leopardi, 18 email address: info@fattoriarossi.com phone +39 0522886213

– What are the Data Processed by the Company –

PERSONAL DATA COLLECTED BY THE SHOP

Data provided directly by the user (to browse, to proceed with online purchases or for any other reason) or that is otherwise provided to the company in any manner.
Any data subject, within the limits of the law, may decide not to allow the processing of all or part of his or her data, although such exclusion may limit or exclude the use of part of the company’s services. Examples of data provided directly by data subjects are: name; address and telephone number; credit card information (processed limited to the time necessary for purchase); names of order recipients, if different from the purchaser.
More generally, all data provided to enable the placing of a purchase order, the conducting of product searches on the site, the facilitation of product delivery with the communication of data relating to contact numbers or addresses (e.g., telephone, email, addresses), etc. The user who communicates to the Owner Personal Data of third parties is directly and exclusively responsible for their origin, collection, processing, communication or dissemination.

DATA AUTOMATICALLY COLLECTED DURING THE USE OF THE SITE

Computer systems and software procedures responsible for the operation of the website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is generally not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI/URL notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment. This data is mainly used to obtain statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
Personal data about the User’s use of the SHOP may also be collected, such as pages visited, actions taken, features and services used.Geolocation data: The SHOP may collect personal data about the User’s location, which may be GNSS (Global Navigation Satellite System, e.g. GPS data) data, as well as data identifying the nearest cell tower, Wi-Fi and Bluetooth hotspots, communicated when enabling location-based products or features.
Personal data collected through cookies or similar technologies: the Site uses cookies, web beacons, unique identifiers and other similar technologies to collect personal data about the pages, links you visit and other actions you take when using our services. They are stored to be retransmitted the next time the same User visits.

– Place, Mode of Data Processing and Persons to Whom Personal Data May Be Disclosed –

The Processing of Data takes place at the company’s operational offices and in all places where the parties involved in the processing are located. Personal Data are processed by the company or and/or by third parties carefully selected for reliability and competence, to whom they may be communicated insofar as this is necessary or appropriate in order to carry out activities, also instrumental or ancillary, pertaining to the purposes of Data Processing indicated in this statement, the main one of which consists in the provision of goods or services requested by the data subject (e.g.: postal service companies, couriers, data entry companies, internal administrative staff, etc.). In any other case, except as required by law, personal data will not be transferred and/or communicated to third parties.
Personal data are collected in compliance with the obligations and guarantees provided by the Regulations and are processed, mainly, by automated electronic and telematic means, for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. As soon as the personal data are no longer necessary for the purposes for which they were collected, the company shall arrange for their deletion, unless the law provides for archiving obligations.

– Purposes of the Processing of Personal Data –

The data collected may be used for the performance of contractual, pre-contractual and legal obligations and for the following purposes: processing and delivery of orders placed through the shop support and contact with the user Monitoring, analysis and tracking of the user’s behavior on the shop The processing is necessary for the performance of a contract with the user, in accordance with Article 6(1)(b) of the GDPR.
Data for sending promotions will be processed, upon explicit consent, when creating an account. Failure to provide the data will result in the impossibility of following up the requested service.

– Rights of Interested Persons –

Pursuant to Articles 15-22 of the Regulation, the following rights may be exercised:
– revoke at any time the consent given to the processing of personal data
– object, in whole or in part, for legitimate reasons, to the processing of one’s personal data
– lodge a complaint with the Garante per la protezione dei dati personali in the cases provided for in the Regulation
– access one’s personal data, verify them, request rectification, restriction of processing, deletion

– Contacts –

To exercise rights write via e-mail to: info@fattoriarossi.com specifying in the subject line: Change Privacy

– Protection of Children’s Privacy –

This website is intended for a general audience; however, its services are intended for people 18 years of age and older. We do not request, collect, use, or disclose personal data provided by persons under the age of 18 online. Should we discover that we have personally collected data from a minor, we will delete it immediately.

– Data Retention Period –

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected (usually 10 years for administrative and accounting matters, 5 years for marketing purposes, unless consent is renewed by the user). They will be retained for the duration of the contractual relationship, for the performance of the obligations inherent and consequent thereto, for compliance with applicable legal and regulatory obligations, as well as for their own or third party defensive purposes.
Where the processing of personal data is based on the User’s consent, the Controller may retain the same until the consent is revoked. Personal data may be kept for a longer period if necessary to fulfill a legal obligation or by order of an authority. All personal data will be deleted or retained in a form that does not allow the User to be identified within the legal terms of the retention period. After the expiration of this period, the right of access, deletion, rectification and the right to portability of personal data can no longer be exercised.