COOKIE POLICY

Browsing on the website www.varnelli.it (hereinafter also referred to as the "Website") involves sending cookies and similar tools to the User's terminal.

Therefore, as provided for by current legislation (art. 13 of the General Data Protection Regulation, hereinafter also referred to as RGPD, and art. 122 of the Privacy Code), Distilleria Varnelli S.p.A.  (hereinafter also referred to as the "Owner" or "Company") provides users browsing the website with information about the cookies used or allowed to be installed.

WHAT ARE COOKIES?

A "cookie" is a small text file created on the User's computer when the User accesses a website, with the purpose of storing and transporting information. Cookies are sent by a web server (which is the computer running the website the User is visiting) to the User's browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and stored on the User's computer; they are then sent back to the website on subsequent visits.

During browsing, the User may also receive cookies from different sites (so-called "third party" cookies), set directly by the managers of these websites and used for the purposes and in the manner defined by them.

WHAT KIND OF COOKIES IS USED?

The Website uses technical cookies and third-party cookies.

The cookies used and their specific purposes are indicated in detail below.

First Party Cookies

The website uses technical cookies, for which, according to current legislation, no consent is required from the User.

More precisely, the website uses:

Third Party Cookies

Google Analytics cookies

The Website uses “Google Analytics/Google Tag Manager” with IP anonymization (for full details see the following link: https://developers.google.com/tag-platform/gtagjs/install). Through this service, cookies are deposited on the User's computer to allow statistical analysis in aggregate form regarding the use of the website visited.

As expressly specified by the Privacy Guarantor with the "Clarifications regarding the implementation of the legislation on cookies" dated 5 June 2015, the websites that use analytical cookies made and made available by third parties, for mere statistical purposes, are not subject to the obligations and fulfillments provided by the legislation if appropriate tools are adopted to reduce the identifying power of the analytical cookies they use (for example, through the masking of significant portions of the IP address) and provided that the use of such cookies is subject to contractual obligations between sites and third parties, in which there is express reference to the commitment of the third party or to use them exclusively for the provision of the service, to store them separately and not to "enrich" or "cross-reference" them with other information available to them.

The Company has therefore decided to make use of the function of anonymization of users' IPs provided by Google (described at the following link:

https://support.google.com/analytics/answer/2763052?hl=it and has accepted the Amendment on data processing made available by Google Analytics, by which Google undertakes to process the data according to the requests of the Client-owner of the website and not to share them with other additional services unless the Client himself requests it, through the settings of the services. On this point, we inform the User that the Owner of this website has not connected Google Analytics to any additional service and that no advertising or data sharing option with Google has been activated.

In light of the measures taken, the Google Analytics service, used by this website for purely statistical purposes, is activated upon landing, and no consent is required from the User for the release of the relevant cookies.

At the following link https://tools.google.com/dlpage/gaoptout?hl=it  there is the browser add-on for deactivating Google Analytics.

The retention time has been set as follows:

Google Maps Widget:

The website incorporates the Google Map widget with the map of the activity and this service involves the installation of cookies by Google.
No information is shared by the website where the widget is embedded.

WHAT HAPPENS IF I AVOID INSTALLING COOKIES?

With the exception of the technical cookies required for browsing, if the User blocks the installation of other technical cookies or does not authorize the installation of non-technical cookies, the User can still browse the website.

HOW TO DISABLE COOKIES?

Notwithstanding the above regarding the technical cookies required for browsing, the User can remove the other cookies through the methods indicated in this policy, in the part where the cookies used are listed, or directly through the User’s browser.

Each browser has different procedures for managing the settings. The User can obtain specific instructions through the links below.

• Microsoft Windows Explorer
• Google Chrome
• Mozilla Firefox

• Safari

With regard to users browsing the web from mobile phones, it should be noted that the system configurations to exclude the storage of cookies or to delete them vary depending on the brand and/or model of the device used and it is therefore necessary to consult the instructions provided by the device manufacturer.

For information on the cookies stored on the User’s terminal and disable them individually, please refer to the link: http://www.youronlinechoices.com/it/le-tue-scelte.

WHAT ARE THE USER’S RIGHTS?

The law recognizes the User’s right to ask the Owner of data processing to access to the personal data and their rectification or cancellation or the limitation of processing that concerns the User or to oppose to their processing, besides the right to data portability.

The User may exercise the User’s rights at any time, without formalities, by contacting the Owner through the email address indicated. The Owner shall respond within 30 days of receipt of the request, as required by law.

The following are details of the rights recognized by the current legislation on the protection of personal data.

• The right of access, which means the right to obtain from the holder managing the processing of data the confirmation whether or not a personal data treatment is in progress and, in this case, to gain access to personal data and to following information: a) processing purposes; b) categories of the concerned personal data; c) recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations; d) where possible, period of preservation for the personal data provided or, if not possible, for the criteria used to determine this period; e)  right for the interested party to involve the holder processing the data for adjusting or deleting his personal data or for limiting this treatment or for opposing it; f) right to lodge a complaint with a supervisory authority; g) if the data are not collected from the interested subject, all information available on their origin; h) existence of an automated decision-making process, including profiling and, at least in such cases, crucial information on the used logic, as well as the importance and the expected consequences of such processing of data for the subject. If personal data are transferred to a third country or to an international organization, the interested subject shall have the right to be informed about the existence of adequate guarantees related to the transfer.
• The right to correction, which means the right to obtain from the holder processing the data the correction of inaccurate personal data about him without undue delay. Taking into account the purposes of the processing, the subject has the right to obtain the integration of their incomplete personal data, also by providing an additional declaration.
• The right to erasure, which means the right to obtain from the holder processing the data the deletion of his personal data without undue delay if: a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) the interested party revokes the consent which is basis of the treatment and if there is no other legal basis for the processing; c) the interested party opposes the processing carried out because it is necessary for the execution of a task of public interest or connected to the exercise of public authority investing the holder or for the pursuit of legitimate interest and there is no legitimate prevailing reason to proceed with processing, or they oppose to the processing for direct marketing purposes; d) personal data have been processed unlawfully; e) personal data must be deleted to fulfil a legal obligation under Union or Member State law to which the holder who processes the data is subject; f) personal data have been collected in relation to the provision of services from the society of information to children. However, the request for deletion cannot be accepted if the treatment is necessary: ​​a) for the exercise of the right to freedom of expression and information; (b) for the fulfilment of a legal obligation requiring treatment under Union or Member State law to which the holder is subject or for the performance of a task carried out in the public interest or in the exercise of official authority investing the holder who processes the data; c) for reasons of public interest in the public health sector; d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, as far as the deletion risks to make it impossible or seriously prejudices the achievement of the tasks for such treatment; or e) for the assessment, exercise or protection of a right in court.
• The right of limitation, which means the right to obtain that the data are processed, except for storage, only with the consent of the interested party or for the assessment, exercise or protection of a right in court or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or a Member State if: a) the data subject disputes the accuracy of personal data for the period necessary to the controller to verify the accuracy of such personal data; b) the treatment is illegal and the interested party opposes the deletion of personal data requesting instead the limitation of its use; c) although the holder processing the data no longer needs them for processing purposes, personal data are necessary for the interested party  to ascertain, exercise or defend a right in court; d) the interested party has opposed the treatment, because this is necessary for the management of a public task or it is related to the exercise of public authority involving the owner or for the pursuit to legitimate interests of the holder who processes the data or of third parties, waiting for the confirmation stating a possible prevalence of the legitimate reasons for the holder in comparison with those of the interested party.
• The right to portability, which means the right to receive, in a structured, commonly and automatically readable form, their personal data provided to the holder and they have the right to transmit such data to another holder without obstacles created form the holder managing them, as well as the right to obtain the direct transmission of personal data from one holder to another, if technically possible, if the processing is based on consent or on a contract and the processing is done by automated means. This right is without prejudice to the right of deletion.
• The right of opposition, which means the right of the interested party to oppose at any time, for reasons connected with their particular situation, their personal data processing, because this is necessary for the management of a public task or it is related to the exercise of public authority for which the holder is involved or for the pursuit to legitimate interests of the holder processing the data or of third parties. If personal data are processed for direct marketing purposes, the interested party has the right to oppose at any time to the processing of their personal data for such purposes, including profiling, as far as it is related to such direct marketing.

We also inform the User that, if the User considers that the processing of the User’s personal data is in violation of the provisions of the RGDP, the User has the right to complain to the Guarantor, as provided for in art. 77 of the Regulation or to take appropriate legal action (art. 79 of the Regulation).

WHO IS THE OWNER AND HOW TO GET IN CONTACT WITH THE OWNER

The Data Owner is Distilleria Varnelli S.p.A. with registered office in Piazza Vittorio Veneto, 13-Loc. Pievebovigliana, 62031 Valfornace (Macerata - Italy), VAT No. 00093050433.

It is possible to get in contact with the Data Owner through the email address varnelli@varnelli.it or by telephone on (++39) 0737647000.

FURTHER INFORMATION ON DATA PROCESSING

Further information on the processing of personal data is available in the website users’ privacy policy which can be accessed from the footer of the website.