Pursuant to Article 13 of the “European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data” (hereinafter referred to as “GDPR”), Costa D’Oro S.p.A. (hereinafter referred to as COSTA D’ORO), headquartered at Via Crispino Merini, 1 – 06049 – Spoleto – (PG), in its capacity as Data Controller, is required to provide users connecting to the domain https://oliocostadoro.com (regardless of the connection purposes) with certain information related to the processing of personal data conducted therein. This document constitutes the “Privacy Policy” (subject to future updates) of this site. For the purposes of this notice, unless otherwise defined in Article 4 of the GDPR, the following terms are defined as follows:
Domain oliocostadoro.com: the domain accessible via the World Wide Web service of the internet, at the address https://oliocostadoro.com, consisting of data, applications, technological resources, human resources, organizational rules, and procedures assigned for the acquisition, storage, processing, exchange, retrieval, and transmission of information.
The processing of personal data will adhere to principles of lawfulness, fairness, and transparency. Personal data will be collected for specific, explicit, legitimate purposes (purpose limitation) and will be adequate, relevant, and limited to what is necessary for the purposes for which they are processed (data minimization). They will always be accurate and kept up to date and will be retained for a period not exceeding what is necessary to achieve the contractual purposes, except for compliance with legal and fiscal obligations that establish longer retention periods (storage limitation). Personal data will be processed adopting all appropriate security measures to ensure their integrity, confidentiality, and inaccessibility by unauthorized third parties (integrity and confidentiality). Unless expressly indicated, the provision of personal data through the collection points on the site is reserved for adults.
The processing operations, which we will describe to you in detail, are legally grounded in the norms that regulate your right to the protection of your personal data, your right to privacy, and those that allow you to express or withdraw, at any time, your informed consent to the processing operations, namely: The EU General Regulation 679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data; Informed consent, expressed in accordance with current legal provisions (Art. 6 GDPR); Compliance with obligations or orders to which the Data Controller is subject by law or order of the Authority (Art. 6 GDPR).
III.1. – The optional, explicit, and voluntary sending of emails to the addresses indicated on this site results in the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific brief notices will progressively be displayed or viewed on the pages of the site prepared for particular on-demand services. In any case, where required by law, your consent for the processing of your personal data will be requested from time to time. Only after your consent, where necessary, the following categories of personal data that concern you may be processed for the purposes indicated.
(a). Common personal data, identifying data.
Such as Name and Surname, Email Address, and Phone Number.
(b). Technical treatments.
The IP number and the type of browser used to connect to the domain https://oliocostadoro.com (non-identifying data) are also subject to processing, automatically recorded by the logical protection and access control devices to the domain (LOG FILES). These personal data will be used exclusively for network traffic control towards the domain sistemae.it. They are not collected to be associated with identified data subjects, but through processing and association with data held by third parties, they could identify users. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this possibility, the web contact data do not persist for more than seven days.
(c). Cookies.
Additionally, COSTA D’ORO processes data anonymously and performs analysis procedures related to the pages of the domain https://oliocostadoro.com visited by you, recorded through cookie files. Using these technologies (which allow understanding your navigation preferences by verifying the areas of the domain https://oliocostadoro.com previously visited), COSTA D’ORO can customize its services to your needs without making unnecessary registrations. (A cookie is a set of data that a website sends to the browser. This data can also be stored on the computer via an anonymous tag that identifies the computer but not the user. Some pages of COSTA D’ORO use cookies sent by COSTA D’ORO or third parties, and other technologies to offer better website navigation. You can set the browser to receive a warning before a cookie is received, providing the option to accept it or not. You can also completely disable cookies. Disabling cookies may cause some websites to not function properly). For more detailed information on the use of cookies on the site https://oliocostadoro.com, you can consult the Cookies Policy available here.
(d). Special categories of personal data.
In the event that special categories of personal data are collected through the domain COSTA D’ORO under Article 9 of the EU Regulation 679/2016, you will be informed in advance and put in a position to express – in the manner prescribed by law – the relevant consent.
The provision of your personal data is generally not mandatory, but in some cases, it is necessary and therefore mandatory to allow you to benefit from the services and features of the site.
IV.1. – Data whose provision is necessary.
IV.1.1. – The provision of certain personal data is necessary and therefore mandatory to fulfill your specific requests; you are always free not to provide your personal data, but in that case, it may be impossible for the Data Controller to meet your requests, address your needs, or enable you to use all the features available on the site. These identifying data will be processed both in paper and electronic form and will be retained by COSTA D’ORO exclusively for the necessary time. After these retention periods, the identifying personal data will be automatically deleted.
IV.1.2. – Data sources.
We will collect your data directly from you through your interactions with the site https://oliocostadoro.com.
COSTA D’ORO, in addition to the necessary processing in relation to legal, regulatory obligations, or orders from the Authority, will carry out, exclusively with your consent if necessary, the operations necessary to enable you to benefit from the services and features of the site https://oliocostadoro.com and the services indicated therein.
For all the purposes indicated in the previous paragraphs, your personal data will be processed electronically and in paper form and processed by specific computer procedures to personalize the services that COSTA D’ORO can offer you. The data processing will be carried out in such a way as to ensure their logical and physical security and confidentiality, and may be carried out through manual, computerized, and telematic tools designed to store, transmit, and share the data themselves. The logic of the processing will be closely related to the purposes pursued.
VI.1. – Data Security and Retention.
VI.1.1. – Your personal data will be stored within the European Union, and the related security policies are reviewed in accordance with Best Practices in the field.
VI.1.2 – Profiling, Automated Decision Making.
In addition to what is necessary to allow us to perform the services that enable you to use the services offered on the site, except as specified in our cookie policy, we do not perform profiling operations in relation to the data collected through this website.
VII.1. – Data Processors and Authorized Personnel.
Within COSTA D’ORO, qualified personnel may become aware of personal data, each limited to their competencies and tasks and based on assigned duties and instructions given. Outside COSTA D’ORO, third parties, also specifically designated as Data Processors or authorized personnel, whom COSTA D’ORO uses for various services and exclusively to perform such services, may also become aware of personal data, each limited to their competencies and tasks and based on assigned duties and instructions given.
VII.2. – Communication (to specific external entities) of data.
For ordinary management, accounting, and administrative activities, COSTA D’ORO may communicate your personal data, subject to obtaining your consent as required by law, in compliance with security measures, to third-party service providers solely to perform the requested service, such as: – postal service companies, – legal and notary firms, – consultants, also in associated form, – other service companies, as well as to further entities in compliance with any legal obligations (such as insurance institutions, police forces, judicial authorities, etc.). The list of such entities to whom the data may be communicated is available at the Data Controller’s headquarters.
VII.3. – Transfer of personal data abroad.
COSTA D’ORO does not independently transfer personal data abroad. However, some third-party service providers may have their servers physically located abroad (such as email providers). In such cases, the transfer of data abroad will take place solely within and in compliance with the EU Regulation 679/2016 Art. 44 et seq.
VII.4. – Dissemination (to undetermined external entities) of data.
In no case may personal data be disseminated.
Articles 15 to 22 of the GDPR grant data subjects specific rights. Article 15 of the GDPR grants data subjects the right to access their personal data and obtain a copy. The right to obtain a copy of the data must not adversely affect the rights and freedoms of others. With the access request, the data subject has the right to obtain from COSTA D’ORO confirmation of whether or not personal data processing is taking place and to know the purposes and categories of data processed, the third parties to whom the data are communicated, and if the data are transferred to a non-EU country with adequate guarantees. The data subject also has the right to know the retention period of their personal data and the right to request the correction of inaccurate data and the integration of incomplete data, deletion (right to be forgotten) under the conditions indicated in Art. 17, GDPR, restriction of processing, revocation of consent, data portability, and the right to object, at any time and without having to provide justifications, to the processing for direct marketing purposes. Rights can be exercised via email to the COSTA D’ORO address, or by regular mail to the address below. The Data Controller may need to identify the Data Subject by requesting a copy of their identity document. If the data subject believes that the processing of their personal data violates the GDPR provisions or national regulations on data protection, they have the right to lodge a complaint with the Data Protection Authority based in Rome, pursuant to Art. 77 GDPR, and/or to take legal action. For the exercise of these rights, or to obtain any other information regarding them and, more generally, the processing of their personal data, requests can be sent via email to the following address: privacy@oliocostadoro.com; or by regular mail to COSTA D’ORO, Via Crispino Merini, 1 – 06049 – Spoleto – (PG).
If you have any questions or wish to obtain more information about the processing of your personal data or to exercise the rights referred to in the previous point, you can send an email to the web administrator of COSTA D’ORO, writing to privacy@oliocostadoro.com. You can also contact us at the same address for answers regarding the management of information by COSTA D’ORO. Before COSTA D’ORO can provide you with or modify any information, it may be necessary to verify your identity and answer some questions. A response from us will be provided as soon as possible.
The Data Controller is COSTA D’ORO, headquartered at Via Crispino Merini, 1 – 06049 – Spoleto – (PG).
