Privacy Policy
Disclosure and information pursuant to and in accordance with Art. 13, EU REG. 2016/679
Dear Sir/Madam,
ai sensi dell’art. 13 del GDPR (regolamento UE 2016/679), si forniscono, in coerenza del principio di trasparenza, le seguenti informazioni al fine di rendere consapevole l’utente delle caratteristiche e modalità del trattamento dei dati:
Identity and contact information:
We inform you that the “Data Controller” of the processing are Banfi Società Agricola s.r.l., P.IVA 00841650526, and Banfi S.r.l., P.I. 01094190525, both with registered offices in Castello di Poggio alle Mura, 53024 Montalcino (SI). We also inform you that both Companies have appointed a DPO (Data Protection Officer) who oversees the management of personal data processing carried out by the Companies, so that it takes place in compliance with European and national regulations, who can be contacted at the following email address: dpo@banfi.it
Purpose of processing and legal basis:
The purpose of the processing of personal data is to enable the completion of the reception, preliminary analysis, preliminary investigation and conclusion of the process related to the reporting of offenses under Legislative Decree 24/2023 and referred to in the whistleblowing procedure adopted by Banfi Società Agricola s.r.l. and is therefore based on the fulfillment of a legal obligation.
Subject of processing:
The data that are the subject of this processing are mainly identification, contact and personal data of the data subject.
Recipients and possible categories of recipients of personal data:
The data are processed within the institution by the O.d.V. under the responsibility of the Owner for the purposes stated above.
Data transfer to third country:
The Holder will not transfer data to a third country or to an international organization.
Data retention period:
Personal data will be kept for a period of time strictly necessary for the processing of the report and, in any case, no longer than five years from the date of notification of the final outcome of the reporting procedure.
Complaint:
You are informed that you have the right to lodge a complaint with the supervisory authority, which in Italy is identified with the Garante per la Protezione dei Dati Personali, if you believe that the processing of your personal data is contrary to the applicable law For further information, see v. the institutional website of the Garante privacy www.garanteprivacy.it
Communication of data:
Please note that the disclosure of personal data is a necessary requirement in order to take charge of the report made under the whistleblowing procedure.
Data provision:
The provision of data is mandatory as the reporting of data is a necessary requirement for the conduct of the procedure. Failure to provide the data will not allow the interested party to proceed with the reporting.
Different purpose of processing:
If the data controller intends to further process personal data for a purpose other than the purpose for which it was collected, the data controller shall, prior to such further processing, provide the data subject with information regarding that other purpose and any additional relevant information. 13. Profiling: The data controller does not use automated processes aimed at profiling.
Data rights:
Please note that with regard to your personal data, you may exercise the following rights:
(a) Access to personal data;
(b) deletion or rectification of the data;
(c) data limitation;
(d) obtain notification in case of rectification or erasure of personal data or restriction of processing;
(e) data portability (right applicable only to data in electronic format), as governed by Article 20 of the GDPR.;
(f) Opposition to the processing of the data;
(g) learn about any automated decision-making processes, including profiling;
(h) receive notice of a personal data breach. The Data Controller is obliged to respond to you within one month from the date of receipt of the request, which may be extended up to three months in the case of particular complexity of the request. Please be informed that since the data processing is based on Article 6(1)(a) or Article 9(2)(a) of EU Regulation 2016/679 you have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before the withdrawal. Regarding how to exercise the above rights, the data subject may write to: privacy@banfi.it.
The Data Controllers
Banfi Società Agricola s.r.l.
Banfi S.r.l.
11
Different purpose of processing:
If the data controller intends to further process personal data for a purpose other than the purpose for which it was collected, the data controller shall, prior to such further processing, provide the data subject with information regarding that other purpose and any additional relevant information. 13. Profiling: The data controller does not use automated processes aimed at profiling.
The Data Controllers
Banfi Società Agricola s.r.l.
Banfi S.r.l.
11
Data provision:
The provision of data is mandatory as the reporting of data is a necessary requirement for the conduct of the procedure. Failure to provide the data will not allow the interested party to proceed with the reporting.
10
Comunicazioni di dati:
Please note that the disclosure of personal data is a necessary requirement in order to take charge of the report made under the whistleblowing procedure.
8
Data rights:
Please note that with regard to your personal data, you may exercise the following rights:
a) d’accesso ai dati personali;
b) alla cancellazione o alla rettifica del dato;
c) alla limitazione del dato;
d) di ottenere notifica in caso di rettifica o cancellazione dei dati personali o limitazione del trattamento;
e) diritto alla portabilità dei dati (diritto applicabile ai soli dati in formato elettronico), così come disciplinato dall’art. 20 del GDPR.;
f) di opposizione al trattamento del dato;
g) di venire a conoscenza di eventuali processi decisionali automatizzati, compresa la profilazione;
h) di ricevere comunicazione di una violazione dei dati personali. Il Titolare è tenuto a risponderle entro un mese dalla data di ricezione della richiesta, termine che può essere esteso fino a tre mesi nel caso di particolare complessità dell’istanza. Si informa che poiché il trattamento dei dati è basato sull’articolo 6, paragrafo 1, lettera a), oppure sull’articolo 9, paragrafo 2, lettera a) del regolamento UE 2016/679 lei ha diritto di revocare il consenso in qualsiasi momento senza pregiudicare la liceità del trattamento basata sul consenso prima della revoca. In merito alle modalità di esercizio dei sopracitati diritti, l’interessato può scrivere a:
privacy@banfi.it.
9
Complaint:
You are informed that you have the right to lodge a complaint with the supervisory authority, which in Italy is identified with the Garante per la Protezione dei Dati Personali, if you believe that the processing of your personal data is contrary to the applicable law For further information, see v. the institutional website of the Garante privacy www.garanteprivacy.it
7
Data retention period:
Personal data will be kept for a period of time strictly necessary for the processing of the report and, in any case, no longer than five years from the date of notification of the final outcome of the reporting procedure.
1
Identity and contact information:
Si informa che il “Titolare” del trattamento sono Banfi Società Agricola s.r.l., P.IVA 00841650526, e Banfi S.r.l., P.I. 01094190525, con sede legale in Castello di Poggio alle Mura, 53024 Montalcino (SI). La informiamo altresì che la Società si è dotata di un DPO (Data Protection Officer) che sovraintende alla gestione del trattamento di dati personali effettuata dalla Società affinché avvenga nel rispetto delle normative europee e nazionali, contattabile al seguente indirizzo email: dpo@banfi.it
2
Purpose of processing and legal basis:
The purpose of the processing of personal data is to enable the completion of the reception, preliminary analysis, preliminary investigation and conclusion of the process related to the reporting of offenses under Legislative Decree 24/2023 and referred to in the whistleblowing procedure adopted by Banfi Società Agricola s.r.l. and is therefore based on the fulfillment of a legal obligation.
3
Subject of processing:
The data that are the subject of this processing are mainly identification, contact and personal data of the data subject.
4
Recipients and possible categories of recipients of personal data:
The data are processed within the institution by the O.d.V. under the responsibility of the Owner for the purposes stated above.
6
Data transfer to third country:
The Holder will not transfer data to a third country or to an international organization.
