PRIVACY POLICY

In accordance with the current legislation regarding the protection of personal data, Distilleria Varnelli S.p.A. with its legal office in P.zza Vittorio Veneto, 13 – 62031 Valfornace (MC) and operating office in Via Girolamo Varnelli, 10 - 62034 Muccia (Mc), in the person of its legal representative pro tempore, (referred to as "company" or "owner "), provides users who wish to receive information on the goods and services offered by the company through the appropriate form on the website www.varnelli.it (hereinafter also the "website "), information relating to the processing of data.

WHICH DATA ARE PROCESSED, WHAT ARE THE PURPOSES, AND WHAT ARE THE LEGAL BASES FOR PROCESSING?

Browsing data: purposes and legal bases 

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. 

This information is not collected in order to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users who connect to this site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user's computer environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of this website, for the purposes of site protection and to monitor the correct functioning of the website, and could be used to ascertain the responsibility in case of any computer crimes against this website.

The legal basis of the processing of such data is the legitimate interest of the owner and, in the case of requests by the authorities, a legal obligation.

COOKIES: REFER TO THE COOKIE POLICY

For further information regarding cookies and similar tools used by this site, please refer to the cookie policy.

DATA PROVIDED DIRECTLY BY THE USER: PURPOSES AND LEGAL BASES 

The personal data provided voluntarily by the user (for example when requesting information by phoning the numbers indicated on the website or writing to the e-mail addresses present therein or by filling out "contact" or "request an estimate" forms) are used only to process any requests made and to implement the legal obligations and/or pre-contractual obligations and/or contractual obligations arising from the legal relationship in a given case.

The legal bases of the processing of such data are therefore: the legal obligation to which the holder is subject and the performance of obligations arising from the contract or for the purpose of reaching its conclusion.

In the areas of the site dedicated to particular services, specific information may be reported, which the user must review before giving the said data. At which point all the information in the data processing is indicated in detail.

COMMUNICATION

Without prejudice to what is indicated in the information contained in the pages of the site dedicated to specific services, the data will not be disclosed. The data may be disclosed to third parties (licensed authorities, consultants, or companies providing IT supply and assistance services) if the communication is necessary to fulfill legal obligations or obligations deriving from the relationship existing with the person concerned or to follow through on specific requests or if the third parties (included in one of the categories previously indicated) operate as controllers.

Notwithstanding to what is indicated in the information contained in the pages of this site that is dedicated to specific services, the data will not be disclosed. The data may be disclosed to third parties (competent authorities, consultants or companies providing IT supply and assistance services) if the communication is necessary to fulfill legal obligations or obligations deriving from the relationship existing with the person concerned or to give a course to its specific requests or if the third parties (included in one of the categories indicated) operate as controllers.

The user can ask the owner for a list of the subjects that carry out their activity on behalf of the owner who is responsible for the processing.

METHODS OF TREATMENT, STORAGE TIMES, AND PLACE OF TREATMENT 

The collected data are processed with computer tools and only peripherally using paper methods. Appropriate security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.

The data will be processed only by authorized parties and kept only for the necessary time to process the requests of the interested party and, in any case, always in compliance with the terms of the law.

For the data processing related to the services of this website, the owner uses servers located within the European territory. 

THE NATURE OF THE DATA PROVISION

Except for the navigation data needed to implement the IT and telematic protocols, the provision of data by users through the various methods made available is free and optional. However, failure to provide the data will result in the impossibility of being able to respond to the requests made and taking advantage of the services of interest.

RIGHTS OF THE INVOLVED PARTY

The law grants to the involved party the right to request the data controller to access personal data and to correct or cancel it, or limit the processing of data, or to oppose its processing, in addition to the right to data portability. 

More precisely, the involved party has:

• The right of access, which means the right to obtain from the holder managing the processing of data the confirmation whether or not a personal data treatment is in progress and, in this case, to gain access to personal data and to following information: a) processing purposes; b) categories of the concerned personal data; c) recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations; d) where possible, period of preservation for the personal data provided or, if not possible, for the criteria used to determine this period; e)  right for the interested party to involve the holder processing the data for adjusting or deleting his personal data or for limiting this treatment or for opposing it; f) right to lodge a complaint with a supervisory authority; g) if the data are not collected from the interested subject, all information available on their origin; h) existence of an automated decision-making process, including profiling and, at least in such cases, crucial information on the used logic, as well as the importance and the expected consequences of such processing of data for the subject.
• If personal data are transferred to a third country or to an international organization, the interested subject shall have the right to be informed about the existence of adequate guarantees related to the transfer.
• The right to correction, which means the right to obtain from the holder processing the data the correction of inaccurate personal data about him without undue delay. Taking into account the purposes of the processing, the subject has the right to obtain the integration of their incomplete personal data, also by providing an additional declaration.
• The right to erasure, which means the right to obtain from the holder processing the data the deletion of his personal data without undue delay if: a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) the interested party revokes the consent which is basis of the treatment and if there is no other legal basis for the processing; c) the interested party opposes the processing carried out because it is necessary for the execution of a task of public interest or connected to the exercise of public authority investing the holder or for the pursuit of legitimate interest and there is no legitimate prevailing reason to proceed with processing, or they oppose to the processing for direct marketing purposes; d) personal data have been processed unlawfully; e) personal data must be deleted to fulfil a legal obligation under Union or Member State law to which the holder who processes the data is subject; f) personal data have been collected in relation to the provision of services from the society of information to children. However, the request for deletion cannot be accepted if the treatment is necessary: ​​a) for the exercise of the right to freedom of expression and information; (b) for the fulfilment of a legal obligation requiring treatment under Union or Member State law to which the holder is subject or for the performance of a task carried out in the public interest or in the exercise of official authority investing the holder who processes the data; c) for reasons of public interest in the public health sector; d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, as far as the deletion risks to make it impossible or seriously prejudices the achievement of the tasks for such treatment; or e) for the assessment, exercise or protection of a right in court.
• The right of limitation, which means the right to obtain that the data are processed, except for storage, only with the consent of the interested party or for the assessment, exercise or protection of a right in court or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or a Member State if: a) the data subject disputes the accuracy of personal data for the period necessary to the controller to verify the accuracy of such personal data; b) the treatment is illegal and the interested party opposes the deletion of personal data requesting instead the limitation of its use; c) although the holder processing the data no longer needs them for processing purposes, personal data are necessary for the interested party  to ascertain, exercise or defend a right in court; d) the interested party has opposed the treatment, because this is necessary for the management of a public task or it is related to the exercise of public authority involving the owner or for the pursuit to legitimate interests of the holder who processes the data or of third parties, waiting for the confirmation stating a possible prevalence of the legitimate reasons for the holder in comparison with those of the interested party.
• The right to portability, which means the right to receive, in a structured, commonly and automatically readable form, their personal data provided to the holder and they have the right to transmit such data to another holder without obstacles created form the holder managing them, as well as the right to obtain the direct transmission of personal data from one holder to another, if technically possible, if the processing is based on consent or on a contract and the processing is done by automated means. This right is without prejudice to the right of deletion.
• The right of opposition, which means the right of the interested party to oppose at any time, for reasons connected with their particular situation, their personal data processing, because this is necessary for the management of a public task or it is related to the exercise of public authority for which the holder is involved or for the pursuit to legitimate interests of the holder processing the data or of third parties. If personal data are processed for direct marketing purposes, the interested party has the right to oppose at any time to the processing of their personal data for such purposes, including profiling, as far as it is related to such direct marketing.

The interested party can assert their rights at any time, without formalities, by contacting the holder who processes the data, at the email address varnelli@varnelli.it.

The interested party is then informed that the law provides them with the possibility to assert their rights through an appeal to the Privacy Guarantor or before a judicial authority.

WHO IS THE DATA HOLDER AND HOW IS IT POSSIBLE TO CONTACT THEM?

The data holder is Distilleria Varnelli S.p.A. with legal headquarters in P.zza Vittorio Veneto, 13 - 62031 Valfornace (MC) and operations headquarters in Via Girolamo Varnelli, 10 - 62034 Muccia (MC). It is possible to contact the data holder by email at varnelli@varnelli.it or by fax at the number 0737-647107.