PRIVACY POLICY FONTANELLE ESTATE
Information notice pursuant to art. 13 Regulation (EU) 2016/679 (GDPR)
Pursuant to Regulation (EU) 2016/679 ("GDPR"), this page describes how personal data are processed. This information notice is provided pursuant to art. 13 GDPR and is not valid for other websites of third parties, which may be consulted through links on the present website. The Data Controller is not responsible for the websites of third parties.
In particular, in the area “Wine” of this website there are links to the website of “Cantina Vallepicciola”, that will provide its privacy policy. There is no transfer of data.
Processable personal data
Personal Data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Recital 26, 27, 30 GDPR).
Data relating to Contracting parties/Users
Navigation data
Computer systems and software procedures used to the operation of this website acquire, during their normal operation, some personal data whose transmission is implicit in the internet communication protocols. This information is not collected to be associated with identified data subject, but by their nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data will be used to foreseek liabilities in case of computer criminal offences against this site.
Personal data provided by data subjects
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the filling in data collection forms and/or the provision of personal data during exhibition and events results in the acquisition of the sender’s address, necessary to reply to requests, as well as any other personal data provided.
Information on the processing of personal data by way of the social media platforms
As for the processing of personal data that is carried out by the social media platforms used by the Data Controller, please consider the information provided by those platforms through their privacy policies. The Data Controller processes the personal data provided by users through the social media pages in order to handle user interactions (comments, public posts, etc) in full compliance with the applicable legislation.
Specific information notices
Specific information notices may be present on the pages of this site in relation to particular services or processing of personal data provided.
Cookies
For more information on the cookies used by this website see the cookies policy at the following link.
1. DATA CONTROLLER AND CONTACT DETAILS
The Data Controller is HOTEL LE FONTANELLE SRL, with registered office in Via Roma no. 11 - – 53017 Radda in Chianti (SI), Italy, in person of its Legal Representative, email privacy@fontanellestate.com
2. PURPOSES OF THE PROCESSING | LEGAL BASIS OF THE PROCESSING | DATA RETENTION | NATURE OF PROVISION OF PERSONAL DATA
PURPOSES OF THE PROCESSING
i) Website browsing. The broswing data will be processed also for the following purposes: • statistical information on the use of the services (most visited pages, number of visitors and time range, origin, etc.); •check of the correct functioning of the services. The data will be used to foreseek liabilities in case of computer criminal offences against this site.
ii) Use of cookies and comparable technologies. See the cookies policy in the footer of the site
LEGAL BASIS OF THE PROCESSING
i) Data processing is necessary for the purposes of pursuing the legitimate interests of the data controller or a third party, provided that the interests or the fundamental rights and freedoms of the data subject which require the protection of personal data do not prevail, having regard to the reasonable expectations of the data subject based on his/her relationship with the data controller. Activities strictly necessary for the operation of the site and the provision of the navigation services. (Art. 6, par. 1 lett. F and Recital 47 of the GDPR). Balancing test available upon request.
ii) For non-technical cookies and similar technologies, the processing is based on consent (art. 6 par. 1 lett. A and Recital 42, 43 of the GDPR). Consent is expressed through the banner and the cookie policy of this website
DATA RETENTION
i) Until the duration of the browsing session and, in any case, no longer than seven days (except where judicial authorities need such data for establishing the commission of criminal offences).
ii) See the cookie policy in the footer of the site.
NATURE OF PROVISION OF PERSONAL DATA
i) The provision of data data is necessary for the browsing on this website.
ii) See the cookie policy in the footer of the site.
Your personal data will also be processed for the following purposes:
PURPOSES OF THE PROCESSING
A) CONTACTS:
- through contact details / collection form on this website: collect and fulfil any user requests.
B) EXHIBITIONS AND EVENTS
- for exhibition and events attended by the Data Controller: contacts and communications concerning institutional news, updates on Fontanelle Estate, invitations to events, presentations, press conferences, to keep you updated on Fontanelle Estate's news and strengthen the relationship with you.
You have the right to object at any time with reference to the abovementioned communications.
C) DIRECT MARKETING:
- upon consent and until withdrawal, for direct marketing and promotional purposes, commercial and marketing communications through subscription to the newsletter/mailing list service.
D) MANAGEMENT OF YOUR REQUESTS pursuant to art. 15 and seq. GDPR (data subject’s rights)
E) APPLICATION TO PERSONNEL SELECTION:
- research and selection of personnel with a view to the possible establishment of a working relationship, also for any positions other than those for which the data subject has spontaneously applied; conservation of personal data also for future selections; management of applications in response to job offers published on our website; interviews and any video interviews (data processing including image/audio).
LEGAL BASIS OF THE PROCESSING
A) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Recital 44) - art. 6 par. 1 lett. b) of the GDPR.
B) Data processing is necessary for pursuing the legitimate interest of the data controller to send these communications in other to strengthen the relationship with you, having regard to your reasonable expectations related to your relationship with the data controller on the basis of your role/activity (Recital 47) - art. 6 par. 1 lett. f) of the GDPR.
C) Consent (Art. 6, par. no. 1 lett. a GDPR).
D) The processing is necessary for compliance with a legal obligation, to which the Data Controller is subject to (Recital 45) - Art. 6 par. 1 lett. C of the GDPR).
E) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (art. 6 par. 1 lett. b) GDPR
DATA RETENTION
A) 1 year
B) Until objection. You can also exercise, at any time, the right to the erasure of your personal data
C) Until withdrawal of consent (opt-out)
D) 5 years from the closure of the request, except disputes
E) 24 months.
NATURE OF PROVISION OF PERSONAL DATA
A) The communication of the data is necessary for the contract. The non provision of personal data may result the impossibility to obtain from the Data Controller the requested information.
B) The provision of data is necessary to send you such communications. You have the right to object at any time to the processing of your data for the indicated purpose and you will no longer receive such communications. The subsequent objection to these communications will not affect any contractual relationship with the Data Controller nor the other purposes.
C) Personal data provision is optional. The non-provision of personal data may result the impossibility to process your data for the present purpose, without prejudice for the other purposes.
D) The communication of personal data is necessary, because essential for the present legal Obligations. The non provision of personal data may result the impossibility to obtain from the Data Controller the requested information.
E) The provision of data is necessary. The non provision of personal data may result the impossibility to participate to the selection process
3. RECIPIENTS OR CATEGORIES OF RECIPIENTS
Your personal data will be communicated to subjects who will process the data as Data Processor (art. 28 GDPR) and/or as individuals acting under the authority of the Data Controller and Data Processor (art. 29 GDPR), for the purposes listed above. In particular, the data may be communicated to recipients belonging to the following categories:
- Subjects -based in Italy- that provide services for the website and communication networks, including e-mail, and website management;
- providers of hosting services (based in Germany)
- freelancers, firms or companies providing assistance and advice;
- For the sole purpose of research and selection of personnel (see the specific section), any third parties and labor consultants and companies for the purposes of personnel selection;
- Competent authorities for compliance with legal obligations and/or provisions of public bodies, upon request.
The list of Data Processors is constantly updated and available by writing to privacy@fontanellestate.com or at the registered office of the Data Controller.
4. DATA TRANSFER TO THIRD COUNTRIES AND/OR INTERNATIONAL ORGANIZATION
Personal data provided will not be transferred outside the European Economic Area (EEA). In particular, data will be stored in Italy for the management, development and maintenance of this website, while the hosting is in Germany.
5. EXISTENCE OF AUTOMATED PROCESS
Personal data will be processed by electronic and automated means, but the Data Controller does not use decision-making processes based on a fully automatic elaboration.
6. DATA SUBJECT’S RIGHTS
You may exercise your rights as expressed in articles 15 seq. of the GDPR, by contacting the Data Controller at the email address privacy@fontanellestate.com. You have the right, at any time, to request the data Controller to access (art. 15), rectify (art. 16), cancel your personal data (art. 17) or limit their processing (art. 18). The controller shall communicate (art. 19) any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data have been disclosed. The controller shall inform the data subject about those recipients if the data subject requests it. In the cases provided for, you have the right to the portability of your data (art. 20) and in this case the Data Controller will provide you with a structured, commonly used, and readable form of your personal data electronically. In addition, you have the right to object (art. 21), at any time, to the processing of your data. In particular you have the right to object at any time with reference to the communications indicated in purpose B and you will no longer receive such communications. You have the right to withdrawal your consent without affecting the lawfulness of the processing based on the consent before withdrawal. To stop receiving automated direct marketing communications (e.g. e-mail, newsletter) you can send an e-mail at any time to privacy@fontanellestate.com with the subject “cancellation from automated” or use our automatic cancellation systems provided for e-mails only. Without prejudice to any other administrative and judicial remedy. if you believe that the processing of data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (https://www.garanteprivacy.it/web/guest/home_en).
7. CHANGES OF THE PRIVACY POLICY
The Data Controller reserves the right to modify, update, add or remove portions of the current Privacy Policy at his discretion and at any time. For this reason, this privacy policy contains an indication of the last update.
Last update: November 8, 2023