Privacy policy

Società Agricola PROGRESS COUNTRY & WINE HOUSE S.S. in its capacity of Data Controller, informs that pursuant to art. 13 Regulation (EU) no. 679/2016 (“GDPR”)  the personal data relating to commercial and marketing activities carried out on the national territory and abroad shall be processed with the following methods and for the following purposes:

1. PURPOSE OF PROCESSING

This information notice concerns the following type of data processing:

• Preliminary collection through our websites and/or the most popular social networks of personal data for sending commercial and marketing communications at the request of the data subject, with the aim of establishing a business relationship for the supply of our products

Since the contractual phase is undefined, these data must be processed in compliance with European Privacy Regulation 679/2016 and in this case they mostly concern the name and surname of the data subject, personal e-mail address, personal telephone numbers and job.

1. DATA CONTROLLER

The updated list of data processors and processing officers is kept at the registered office of the Data Controller. 

1. PURPOSES AND LEGAL BASIS OF PROCESSING

The User's data are collected to allow the Data Controller to provide their commercial and marketing information, to inform the data subject, who has requested it freely through our websites, of the technical characteristics of our products and services, as well as of any events the data subject might be interested in. The processed data are guaranteed by professional secrecy on direct and indirect information. Your personal data are processed in compliance with the law under Art. 6 Regulation (EU) 679/2016, with regard to:

• Marketing activities with the aim of establishing a commercial relationship for the supply of our products and services, by sending emails, surface mail and/or by telephone contacts, newsletters, commercial communications and/or advertising material on products offered by the Data Controller

The personal data that do not need to be kept for the purposes indicated herein shall be erased or transformed into anonymous form as specified in point IX below. It should also be noted that you need to confirm your mandatory consent, as, otherwise, we shall not be able to continue sending you commercial and marketing communications relating to products and/or informing you on events organised by the Data Controller similar to those which you may have already taken part in.  The data collected by the Data Controller do not undergo an automated decision-making process, including profiling as per art. 22 paragraphs 1 and 4

1. RIGHTS OF THE DATA SUBJECT
   Art. 15 of Regulation (EU) 679/2016 governs the information that the data subject may obtain from the Data Controller

The data subject may decide not to provide any data or to withhold their consent to processing data already provided for said purposes at a later date. In that case you shall not be able to receive newsletters, commercial communications and advertising material concerning the services, events and products offered by the Data Controller, except for data processed according to item III, letter a;

The data subject has the right to request the Data Controller, when interested, to access their personal data or to correct or erase them or restrict processing of data concerning them or to object to their processing, in addition to the right to data portability

The data subject has the right to revoke consent at any time. However, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal (Ref. Art. 6 paragraph 1, lett. a and Art. 9, paragraph 2 lett. a of Regulation (EU) 679/2016)

The data subject has the right to receive information from the Data Controller prior to any action by the Data Controller aimed at a type of processing other than that for which the data were collected;

Where applicable, the data subject also has the rights under articles 16-21 GDPR (right to be forgotten, right to object);

The data subject has the right to lodge a complaint with a control authority;

1. PROCESSING METHODS

Your personal data are processed by means of the operations indicated in art. 4 paragraph 2 of Regulation (EU) 679/2016, namely: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Your personal data undergo both paper and electronic processing. The processing is carried out by officers and employees specifically appointed within the scope of their respective functions and in accordance with the instructions received, always and only for the achievement of the specific purposes, strictly complying with the principles of confidentiality and security required by applicable regulations.

1. DATA ACCESS

Your data may be made accessible for the purposes set out in this information notice to the employees and associates of the Data Controller in their capacity of officers and/or internal processors and/or system administrators.

• DATA COMMUNICATION
  
  Without the need for express consent, the Data Controller may communicate your data, for the purposes and according to the methods set out in this information notice, to Supervisory Bodies, Judicial Authorities as well as to all other subjects to whom communication is mandatory by law for the fulfilment of the aforementioned purposes. Otherwise, your data shall not be disclosed.
• DATA TRANSFER

Your data are not subject to transferring outside the European Union. However, it is understood that the Data Controller, where required, may be entitled to transfer the data to other subsidiaries within the European Union and/or to countries outside the EU.  In that case, the Data Controller ensures as of now that the transfer of data outside the EU shall take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that ensure an adequate level of protection and/or adopting the standard contractual clauses provided for by the European Commission.

1. DATA RETENTION

The Data Controller shall use the data for the time strictly necessary for the fulfilment of the purpose and according to the methods described in this information notice, for a period of time equal to 3 months, after which they shall be destroyed.

All the personal data provided shall be stored and processed in compliance with the principles of lawfulness, fairness, pertinence and proportionality, stored in hard copy, or with IT and electronic archiving methods. It is pointed out that the information systems used for the management of the information collected are originally set up so as to reduce to the minimum the use of said personal data.

1. METHODS TO EXERCISE YOUR RIGHTS

Please note that every data subject may exercise their rights on the matter of Privacy at any time by sending an e-mail to: privacy@progresscountrywinehouse.com

CONSENT and AUTHORISATION FORMULA

Articles 4,6,7 Regulation (EU) 679/2016

The data subject, whose data have been freely entered in the pop-up provided, by flagging the appropriate field, declares to have read and understood the information provided pursuant to Article 13 of EU Regulation 679/2016 and to be aware, in particular, that the processing shall concern your "personal data" referred to in Article 4, paragraph 1 of the aforementioned Regulation, namely “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”, therefore gives their free, specific consent, supported by an informed and unequivocal intention, to authorise processing, also with IT and/or computerised tools, of personal data for the purposes and in the manner provided for in this information notice, referred to under Point I.

The aforementioned consent is extended to all subjects of the data Controller’s organisation identified as “Processors”, while the Data Subject is entitled to the right to object at any time according to art. 21 of Regulation (EU) 679/2016.