Pursuant to Regulation (EU) 2016/679 General Data Protection Regulation

With this policy Sant’Orsola Società Cooperativa Agricola intends to provide users visiting the website ruri.santorsola.com (hereinafter, the “Website”) with a summary description of the methods and purposes of the processing of personal data. The processing will take place in compliance with Regulation (EU) 2016/679, General Data Protection Regulation (hereinafter, the “Regulation”) as well as with Legislative Decree 30June 2003, No. 196 bearing the “Code on the Protection of Personal Data”, as amended by Legislative Decree 10 August 2018, No. 101.

The Regulation provides that “Personal data” means any information relating to an identified or identifiable natural person (hereinafter, “Data Subject”). “Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Pursuant to Articles 12 of the Regulations, we provide you with the following information on the processing of Personal Data.

1. DATA CONTROLLER

The Data Controller is Sant’Orsola Società Cooperativa Agricola, with registered office in 38057 – Cirè di Pergine Valsugana (TN), Via Per Trento n. 11/E., C.F. e P.IVA 00477190227 (hereinafter also the “Data Controller“).

2. PURPOSE AND LEGAL BASIS OF THE PROCESSING

Navigation on the website is free and does not require any registration, with the exception of areas where the user can freely and expressly provide certain data about himself. The processing of Personal Data is carried out for the following purposes:

1. activities strictly related and instrumental to the navigation of the website and to the use of its services, with particular reference to the restricted areas of the website. The user provides some Personal Data by filling the data collection forms available in the different sections of the website. The Data Controller processes such Personal Data in order to manage: (i) requests for information and reports; (ii) spontaneous applications aimed at recruitment through the “Work with us” section; (iii) applications to join Sant’Orsola Società Cooperativa Agricola as a Producer Member through the “Become a Producer Member” section;
2. fulfillment of the obligations provided for by laws, regulations, EU legislation or the Authority;
3. with specific consent, sending newsletters and commercial and/or promotional communications about the services, events, products of the Data Controller. This processing includes marketing and advertising communication activities carried out through automated contact methods (e.g. e-mail).

The provision of Personal Data by users is optional. However, in certain cases (e.g. sending a spontaneous application, subscribing to the newsletter) the failure to provide the Personal Data may result into the impossibility to access the specific services or to obtain what may be requested.

The Processing of Personal Data for the purposes referred to in letters a) and b), being necessary for the execution of a request formulated by the Data Subject and for the fulfilment of pre-contractual, contractual and legal obligations, can take place without the need for consent, in accordance with the provisions of Article 6, paragraph 1, letters b) and c) of the Regulation. The legal basis for the processing of Personal Data described in letter c) will be the consent, which can always be freely revoked (even with reference to a single processing purpose) by sending a communication to info@santorsola.com or by selecting the option ‘You can unsubscribe from the mailing list at any time’ at the bottom of each newsletter received.

3. METHOD OF PROCESSING

The Processing of Personal Data provided through the Website is carried out in an automated way through the use of IT and telematic tools, with organization and processing logics strictly related to the purposes and, in any case, ensuring their security, integrity and confidentiality. Specific security measures have been adopted to minimize the risks of data loss, illicit and incorrect use and unauthorized access.

4. DATA RETENTION PERIOD 

Personal Data will be kept onlyt for the time strictly necessary to achieve the purposes for which they were collected and processed.

With reference to the purposes referred to in letters a) and b) of paragraph 2, Personal Data will be stored for the sole purpose of correctly providing the services. Personal Data voluntarily provided by the user through the ‘Work with us’ section and through the ‘Become a Producer Member’ section will be stored for 12 months and then deleted. With regard to the purposes under letter c), Personal Data will be processed until the consent is revoked and in any case for a maximum period of 24 months from their registration.

Once the purposes of Processing have been exhausted, or in the event of exercising the right to object to the Processing of Personal Data, the Data Controller will in any case be obliged and/or entitled to retain Personal Data for the periods prescribed by law and/or to assert or defend a right in court.

5. COMMUNICATION OF PERSONAL DATA

Personal Data will not be disseminated.

Within the scope of the aforementioned purposes, Personal Data will be accessible (limited to their respective competence) to the Data Controller’s designated processing staff, as well as to external companies, which collaborate with the Data Controller (for example for the maintenance service of the Website or companies in charge of managing the newsletter), expressly appointed as Data Processors.

6. PLACE OF PROCESSING DATA AND TRANSFER OF DATA ABROAD

The processing of personal data connected to use of the Site takes place at 38057 – Cirè di Pergine Valsugana (TN), Via Per Trento n. 11/E.

Personal data may be transferred to extra-UE countries, for the purposes described in paragraph 2. In the event of transfer of Personal Data outside the European Union, in the absence of an adequacy decision by the European Commission, the Data Controller undertakes to take appropriate measures to ensure adequate protection to Personal Data. The Data Controller guarantees the compliance with the requirements for the transfer of personal data to extra-UE countries, in accordance with the provisions of art. 46 of the Regulation. The Data Subject is entitled to request the Data Controller the complete and updated list of companies located in third countries to which personal data may be transferred, by e-mail at the address info@santorsola.com.

7. RIGHTS OF THE DATA SUBJECT

At any time, the Data Subject may exercise the rights granted by art. from 15 to 22 of the Regulation. In summary, the Data Subject has always the right to request: access, updating, rectification or integration of the data. Moreover, the Data Subject has the right to cancel or transform data into anonymous form or limit the processing of his Personal Data and to be informed of any corrections, cancellations or limitations of the processing of his Personal Data. The Data Subject has the right to object, at any time, to the processing of data as well as to receive Personal Data in a structured format, commonly used and readable by automatic devices.

Furthermore, the Data Subject has the right to lodge a complaint with the Italian Data Protection Authority in accordance with the provisions of art. 51 of the Regulation, if he believes that the processing of his Personal Data is violating the provisions of the Regulation.

The Data Subject will remain free to revoke the consent given at any time without prejudice to the lawfulness of the treatment based on the consent before the revocation.

As reagards the exercise of the above rights, the Data Subject may contact the following addresses:

Email: info@santorsola.com.

Address: 38057 – Cirè di Pergine Valsugana (TN), Via Per Trento n. 11/E

Fax number: +39 0461 518131