Privacy Policy
Disclosure and information pursuant to and in accordance with Art. 13, EU REG. 2016/679
Dear Sir/Madam,
Pursuant to Article 13 of the GDPR (EU Regulation 2016/679), the following information is provided, in accordance with the principle of transparency, in order to make the user aware of the characteristics and methods of data processing:
Identity and contact information:
We inform you that the “Data Controller” of the processing are Banfi Società Agricola s.r.l., P.IVA 00841650526, and Banfi S.r.l., P.I. 01094190525, both with registered offices in Castello di Poggio alle Mura, 53024 Montalcino (SI). We also inform you that both Companies have appointed a DPO (Data Protection Officer) who oversees the management of personal data processing carried out by the Companies, so that it takes place in compliance with European and national regulations, who can be contacted at the following email address: dpo@banfi.it
Purpose of processing and legal basis:
The purpose of the processing of personal data is to enable the completion of the reception, preliminary analysis, preliminary investigation and conclusion of the process related to the reporting of offenses under Legislative Decree 24/2023 and referred to in the whistleblowing procedure adopted by Banfi Società Agricola s.r.l. and is therefore based on the fulfillment of a legal obligation.
Subject of processing:
The data that are the subject of this processing are mainly identification, contact and personal data of the data subject.
Recipients and possible categories of recipients of personal data:
The data are processed within the institution by the O.d.V. under the responsibility of the Owner for the purposes stated above.
Data transfer to third country:
The Holder will not transfer data to a third country or to an international organization.
Data retention period:
Personal data will be kept for a period of time strictly necessary for the processing of the report and, in any case, no longer than five years from the date of notification of the final outcome of the reporting procedure.
Complaint:
You are informed that you have the right to lodge a complaint with the supervisory authority, which in Italy is identified with the Garante per la Protezione dei Dati Personali, if you believe that the processing of your personal data is contrary to the applicable law For further information, see v. the institutional website of the Garante privacy www.garanteprivacy.it
Communication of data:
Please note that the disclosure of personal data is a necessary requirement in order to take charge of the report made under the whistleblowing procedure.
Data provision:
The provision of data is mandatory as the reporting of data is a necessary requirement for the conduct of the procedure. Failure to provide the data will not allow the interested party to proceed with the reporting.
Different purpose of processing:
If the data controller intends to further process personal data for a purpose other than the purpose for which it was collected, the data controller shall, prior to such further processing, provide the data subject with information regarding that other purpose and any additional relevant information. 13. Profiling: The data controller does not use automated processes aimed at profiling.
Data rights:
Please note that with regard to your personal data, you may exercise the following rights:
(a) Access to personal data;
(b) deletion or rectification of the data;
(c) data limitation;
(d) obtain notification in case of rectification or erasure of personal data or restriction of processing;
(e) data portability (right applicable only to data in electronic format), as governed by Article 20 of the GDPR.;
(f) Opposition to the processing of the data;
(g) learn about any automated decision-making processes, including profiling;
(h) receive notice of a personal data breach. The Data Controller is obliged to respond to you within one month from the date of receipt of the request, which may be extended up to three months in the case of particular complexity of the request. Please be informed that since the data processing is based on Article 6(1)(a) or Article 9(2)(a) of EU Regulation 2016/679 you have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before the withdrawal. Regarding how to exercise the above rights, the data subject may write to: privacy@banfi.it.
The Data Controllers
Banfi Società Agricola s.r.l.
Banfi S.r.l.
11
Different purpose of processing:
If the data controller intends to further process personal data for a purpose other than the purpose for which it was collected, the data controller shall, prior to such further processing, provide the data subject with information regarding that other purpose and any additional relevant information. 13. Profiling: The data controller does not use automated processes aimed at profiling.
The Data Controllers
Banfi Società Agricola s.r.l.
Banfi S.r.l.
11
Data provision:
The provision of data is mandatory as the reporting of data is a necessary requirement for the conduct of the procedure. Failure to provide the data will not allow the interested party to proceed with the reporting.
10
Data Communications:
Please note that the disclosure of personal data is a necessary requirement in order to take charge of the report made under the whistleblowing procedure.
8
Data rights:
Please note that with regard to your personal data, you may exercise the following rights:
(a) access to personal data;
(b) the deletion or rectification of the data;
(c) the limitation of the data;
d) to obtain notification in the event of rectification or erasure of personal data or restriction of processing;
e) the right to data portability (right applicable only to data in electronic format), as governed by Article 20 of the GDPR.;
(f) to object to the processing of the data;
(g) to become aware of any automated decision-making processes, including profiling;
h) to receive notification of a personal data breach. The Data Controller is obliged to respond to you within one month from the date of receipt of the request, which period may be extended to up to three months in the case of particular complexity of the request. Please note that since the data processing is based on Article 6(1)(a) or Article 9(2)(a) of EU Regulation 2016/679 you have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on your consent prior to the revocation. On how to exercise the aforementioned rights, the data subject may write to:
privacy@banfi.it.
9
Complaint:
You are informed that you have the right to lodge a complaint with the supervisory authority, which in Italy is identified with the Garante per la Protezione dei Dati Personali, if you believe that the processing of your personal data is contrary to the applicable law For further information, see v. the institutional website of the Garante privacy www.garanteprivacy.it
7
Data retention period:
Personal data will be kept for a period of time strictly necessary for the processing of the report and, in any case, no longer than five years from the date of notification of the final outcome of the reporting procedure.
1
Identity and contact information:
We inform you that the "Data Controller" of the processing is Banfi Società Agricola s.r.l., P.IVA 00841650526, and Banfi S.r.l., P.I. 01094190525, with registered office in Castello di Poggio alle Mura, 53024 Montalcino (SI). We would also like to inform you that the Company has appointed a DPO (Data Protection Officer) who supervises the management of the processing of personal data carried out by the Company so that it is carried out in compliance with European and national regulations, who can be contacted at the following email address dpo@banfi.it
2
Purpose of processing and legal basis:
The purpose of the processing of personal data is to enable the completion of the reception, preliminary analysis, preliminary investigation and conclusion of the process related to the reporting of offenses under Legislative Decree 24/2023 and referred to in the whistleblowing procedure adopted by Banfi Società Agricola s.r.l. and is therefore based on the fulfillment of a legal obligation.
3
Subject of processing:
The data that are the subject of this processing are mainly identification, contact and personal data of the data subject.
4
Recipients and possible categories of recipients of personal data:
The data are processed within the institution by the O.d.V. under the responsibility of the Owner for the purposes stated above.
6
Data transfer to third country:
The Holder will not transfer data to a third country or to an international organization.
