Fazi Battaglia

Information on the processing of personal data

PRIVACY NOTICE PURSUANT TO ARTICLE 13, GDPR

 The Privacy Notice pursuant to article 13 of the GDPR to those who browse the website indicated below:
[https://www.fazibattaglia.com]

(The “Website”)

The Privacy Notice describes the methods used to manage the Website with reference to the processing of personal data relating to visitors who browse it. It should also be noted that this Policy concerns only the Website, with the exclusion of any website to which the visitor may be redirected through links that may be available within the Website. For these reasons, in order to know the details relating to the processing of personal data in the context of these external websites, we invite you to read the relevant privacy policies.

1. DATA CONTROLLER
The Data Controller is Angelini Wines & Estates Società Agricola a r.l., with its registered office in Via Roma n. 117, 60031, Castelpiano (AN) (“Angelini Wines” or “Data Controller”).
The Data Controller can be contacted by email at: angeliniwinesandestatessocagrarl@legalmail.it or in writing at Via Roma n. 117, 60031, Castelpiano (AN) . 

2. DATA PROTECTION OFFICER
The Controller has appointed a Data Protection Officer, who can be contacted directly at the following address: Data Protection Officer - DPO c/o Angelini Wines & Estates Società Agricola a r.l. Via Roma n. 117, 60031, Castelpiano (AN), Italy, email: dpo@angeliniwinestates.com (the “Data Protection Officer” or “DPO”). 

3. CATEGORIES OF PERSONAL DATA PROCESSED
According to GDPR, “personal data” means: “any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person” (“Data”). 

The Data Controller collect and process the following Data to achieve the purposes outlined in paragraph 4. 
Regarding website management and defense of rights in court:

  1. the IP address, domain name and URL of the device used; 
  2. geolocation data, browser type and operating system; browsing data (e.g., number of visits to the Website and time spent on the Website); 
  3. browsing history;

Regarding the “Winery Tours” section:

  1. identification data (name, surname); 
  2. company to which they belong and any role; 
  3. nation; 
  4. contact details (e-mail, telephone).

When you visit the Website, the Owner may collect your Data both indirectly (e.g., by tracking the IP address and URL of your device in order to monitor the use of the Website), and directly (e.g., if you submit a request to the Owner).

4. PURPOSES AND LEGAL GROUNDS OF PROCESSING

4.1 Website management
Purpose: The Data Controller collects and processes your Data to carry out activities concerning the management and administration of the Website. In addition, the Data Controller may process your Data in order to improve visitors' navigation.
Legal ground: legitimate interest of the Data Controller (Article 6 (1) (f) GDPR).

4.2 Defense of Angelini Wines rights in legal proceedings
Purpose: The Data Controller may process your Data to assert and defend its rights. If necessary.
Legal ground: legitimate interest of the Data Controller (Article 6 (1) (f) GDPR).
For this purpose, the provision of Data is optional. However, if you do not provide such data, the Data Controller will not be able to guarantee that you will browse the Website.

4.3 Submit form in the “Contact” section or “Hospitality”
Purpose: The Data Controller collects and processes your Data to follow up on any requests you may voluntarily make through the appropriate "Contacts" and/or "Hospitality" link on the Website.
Legal ground: execution of a contract to which the data subject is party or of pre-contractual measures taken at the data subject's request (Article 6 (2) (b) GDPR).
For this purpose, the provision of Data is optional. However, if you do not provide such data, the Data Controller will not be able to guarantee that you will browse the Website.


COOKIE
Cookies are packets of information sent by a web server (e.g., the site) to the user's Internet browser, automatically stored by the latter on the computer and automatically sent back to the server at each subsequent access to the site. The Data Controller uses cookies in order to provide contextual information to visitors to the Website and to obtain statistics on access and/or use of the portal. By default, almost all web browsers are set to automatically accept cookies. Visitors can set their device's browser to accept/reject all cookies or display a warning each time a cookie is offered, in order to be able to assess whether or not to accept them. The user can, however, change the default configuration and disable cookies (i.e. block them permanently), setting the highest level of protection. For any other information on the characteristics, types, use and methods for removing, deleting or disabling the cookies on the Website, please refer to the specific "Cookie Policy".

6. RECIPIENS OF PERSONAL DATA

Your Data will be shared with internal and external subjects to the Data Controller's organizations only when necessary to achieve the purposes described above. 
Your Data may be communicated to other companies of the Angelini Group, as well as to third-party companies located within the European Economic Area that offer the Data Controller maintenance and development services of the Website and, in general, IT services, specifically appointed as data processors pursuant to art. 28, GDPR. Where required by law, your Data may also be communicated to other companies, competent authorities or public bodies located within the European Economic Area, which will process them for their own purposes as independent data controllers.
The server on which the Website is located is located within the European Economic Area (EEA).

7. DATA RETENTION PERIOD
The Data Controller will process your Data for the time strictly necessary to achieve the purposes indicated and described in the previous paragraph 4 as outlined below:

At the end of the period described above, your personal data will be definitively deleted or irreversibly anonymized.
The data retention period of your Data collected indirectly by the Data Controller through cookies are listed in the appropriate Cookie Policy.

8. RIGHTS OF THE DATA SUBJECT 
Under the Regulation, you have the right to: 

  1. obtain confirmation as to whether or not personal data concerning you is being processed, access your Data and obtain a copy of it; 
     
  2. request the rectification or updating of your Data if inaccurate or incomplete; request the erasure of your Data when, in particular, (i) the Data is no longer necessary for the purposes described above or (ii) you have revoked the consent on which the processing of your Data is based and there is no other legal basis for their processing or (iii) the Data Subject objects to their processing and there is no overriding legitimate grounds for the processing or (iv) the Data has been unlawfully processed or (v) the Data must be erased to comply with a legal obligation; 
     
  3. request that the processing of your Data be restricted, meaning that the Controller retains such Data but cannot use it. This right can only be exercised in the cases provided for by law and, in particular, when (i) the accuracy of the personal data is contested, for the period necessary for the Controller to verify the accuracy of such Data, or (ii) the processing of the Data is unlawful and you request the restriction of their use, rather than their erasure, or (iii) although the Controller no longer needs them for the purposes of processing, the Data is required by the Data Subject for the establishment, exercise or defense of a legal claim or (iv) you have objected to their processing, pending verification as to whether the legitimate grounds of the Controller override those of the Data Subject; 
     
  4. request the Data or transfer it to a third party (“right to data portability”): for data processed by automated means and based on consent or contract (art. 6, para. 1, letter a) or b) GDPR), the Data Subject may request to receive the Data concerning him or her in a structured, commonly used and machine-readable format, in order to transfer it to another controller. Upon request, where technically feasible, the Controller will transfer the Data directly to the third party indicated by the Data Subject; 
     
  5. object to processing at any time (where applicable): the Data Subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of his or her personal data, including profiling, based on the legitimate interests of the Controller or a third party. After evaluating the objection request and subject to the presence of legal obstacles to its acceptance, as provided for by law, the processing to which the Data Subject has objected will be definitively interrupted; 
     
  6. file a complaint with the Garante for the protection of personal data. 

To exercise your rights and/or obtain more information about them, you can contact the Controller or its DPO at any time using the contact details indicated in paragraph 1 of this notice. Before proceeding with a request from the Data Subject, we will identify the person making the request. If the Data Controller has reasonable doubts about the identity of this person, they may request further information necessary to confirm their identity. 

1. How to file a complaint 
If you wish to file a complaint about the methods by which your Data is processed, or regarding the handling of a complaint you have made, you may file a request directly with the supervisory authority (Garante for the protection of personal data, Piazza Venezia 11, 00187 - Rome, Italy, telephone: +39 06696771, e-mail: , www.garanteprivacy.it). 

2. Updates 
In case of any significant updates to this information, made if there is a need to modify some of the characteristics of the processing described above, the Data Controller will provide the Data Subject with the new information before the implementation of such updates and, where necessary, will obtain their consent, in compliance with the applicable legislation.