PRIVACY POLICY
COMPLETE INFORMATION FOR WEBSITE USERS
Pursuant to Art. 13 European Regulation 679/2016 (hereinafter referred to as the "Regulation") and the national legislation, Legislative Decree 196/2003 adjusted by Legislative Decree 101/2018 (hereinafter referred to as "Applicable Legislation").
The company Tenuta Russo registered office in Vecchia Surbo st. no. 44, 73100 Lecce
VAT NO. 05119390754, Telephone number: +39 371 4652056
email: info.tenutarusso@gmail.com
Name of the personal data controller according to the Regulation: MARIALUISA RUSSO (individual company)
INFORMS
all users who connect to the website www.tenutarusso.com, whether registered or not, that personal data collected by the company, acquired from third parties or voluntarily provided by interested parties through the various options present on the site (ie. work with us, newsletters, contests and events, etc..), will be treated lawfully and according to fairness, in accordance with the principles established by the EU and the Italian law.
​
Data subject to processing
Browsing data: IP address, operating system and browser used for surfing, date and time of connection and disconnection , time spent on the site, visited pages, activities carried out, localization
(if the relevant service is active) and anything else made available by your computer, according to the settings of your pc security settings.
Personal data: name, surname, email address, telephone, fax, physical contact details, if available, any IDs
that will be communicated and data present in the CV if submitted via email.
​
Purpose and legal basis of data processing
The collection and any other data processing activity of the interested parties acquired through the website are carried out by the Owner at the company's headquarters, in compliance with the security measures and prescriptions imposed by the Applicable Regulations, or by subjects delegated by it (E.i.specially selected and endowed with the necessary professional competence), with manual and computerized procedures, to allow user to a simple and gratifying browsing experience, to collect useful elements to improve the offer of products and services through the web, to execute specific requests of the person concerned ( I.e. a contact request, or a spontaneous candidacy), for the pre-contractual and contractual fulfilments, for the ordinary administrative, financial and accounting activities, to ensure the correct management of customers during the marketing and sale of products, for after-sales service assistance, for the fulfillment of legal obligations. The treatment is also aimed at the elaboration of statistics in anonymised or pseudonymised form.
The treatment, at the person concerned request or after acquisition of specific consent, may be carried out also through CRM and customer care, to detect the degree of satisfaction, tastes, preferences and habits of the person concerned, to send commercial information or advertising flyiers, preferences and habits of the person concerned, for the sending of commercial information or advertising material , for direct marketing campaigns, for participation in games, competitions or sweepstakes , participation in games, contests or operations with prizes, for the involvement in events and manifestations, for the supply of services, for market researches and other operations directly or indirectly related to marketing activities.
Legal bases of the treatment are the legitimate interest of the owner to manage the user browsing data to improve the product offer, to improve the offer of products and services through the website, the consent given by the interested parties and the fulfilments related to the pre-contractual and contractual phases of the relationship. However, it is always possible to ask the Owner to clarify the legal basis of each treatment and in particular to specify whether the processing is based on the law, provided by a contract or necessary to conclude a contract.
​
Sources and nature of data
The collection of data can take place through the company's website, through analysis of browsing or spontaneous insertion by the interested party, using the forms specifically created.
In respect of the registered user, the owner performs the processing of personal data, contact information, telephone , telematic and bank data eventually communicated for the payments, as well as other data necessary to satisfy the requests of the interested parties or to fulfil the undertaken commitments.
The provision of data is therefore compulsory, not being able, in case of failure to grant consent or revocation of the same to give effect to treatment.
It is necessary to point out that any incorrect or insufficient communication of the data requested may involve the total or partial impossibility to give execution to the requests of the interested party or to the fulfillments connected to the assumed engagements, with consequent possible lack of correspondence of the results of the treatment to the agreements taken or the obligations imposed by rules and regulations.
The other data, however, are collected for the sole purpose of adapting promotional campaigns, offers and, in general, the business activity, to the interests of customers and other subjects involved.
Their conferment, therefore, is not obligatory and the eventual denial to the treatment or revocation of the consent does not prejudice the establishment or the continuation of the main relationship.
​
Under age data
Minors under 16 years of age cannot provide data without the consent of a parent or guardian.
The holder will not be in any way responsible for any false statements that may be provided by minors and, if he/she would verify the falsity of the declaration, he/she will provide to the immediate cancellation of any personal data and any information acquired.
In any case, the consent to the data processing by minors over 16 years old is authorized only for the access to the services of the information society. Minors under the age of 18 cannot, however, approve and sign terms and conditions of the service.
​
Browsing Data
The IT system and the software used for the company's website acquire, during their normal operation, some personal data whose transmission is implicit in the use of communication products of Internet.
This information is not stored in order to identify the interested parties but, due to its nature, can, through processing and association with other data managed by third parties, allow the user's identification.
This category of data concerns the IP addresses and domain names of the computer used by the user to connect to the site, the URL addresses (Uniform Resource Locator) of the requested resource, the time of the request, the method used to send the request to the server, the size of the file received, the numerical code used to indicate the status of the response given by the server (executed or error, etc.) and other parameters related to the operating system and the user's computer.
These data are used only to carry out anonymous statistics on the use of the site and to check its correct functioning. Normally they are deleted immediately after processing. They can be used and provided to law enforcement agencies and the judiciary to verify responsibility in case of damage of the site or illicits committed through the net.
​
Data provided by the user
The compilation of the forms eventually present on the pages of the site involves the acquisition of data in the memory system. The information is protected by an authentication system and can be used only by those in possession of the credentials.
They are also updated and protected in an appropriate way, according to the best available practices.
E-mail inquiries involve the storage of the user's e-mail address, which is necessary to respond to the e-mail inquiry, which is necessary to respond to the sender's request. This includes the data stored in the message. The owner suggests to its customers, to do not transmit the data or personal information of third parties during their requests for services and information, unless it is absolutely necessary.
​
Cookies
As is the case with most websites, we store information regarding your browsing activity on the site for statistical purposes. The collection of information is made possible through the use of cookies. The cookie is a small file that is transferred to your computer's hard drive when you connect to a site.
These data are not of a personal nature, as they do not allow the specific identification of the user. The collected data concern the geographical location of the service provider, the type of browser used, IP address, which pages are visited, etc. The information thus collected makes it possible to monitor the frequency of visits to a site and the activity carried out during surfing.
In this way, over time, it is possible to improve the contents of the site and facilitate its use.
Companies that transmit content to the site or whose sites are accessible via links may also use cookies when the user selects the relevant link.
In these cases, the use of cookies is not under the direct control of the Data Controller. Most browsers automatically accept cookies, but it is possible to reject them or select only some, according to the preferences set by the user. However, if the user blocks the loading of cookies, some components of the site may stop working and some pages may be incomplete.
Essential technical cookies
These cookies are necessary to ensure the proper and smooth operation of the site: they allow the navigation of the pages, the sharing of contents, the memorization of the login credentials to make it faster to enter the site and to keep active preferences and credentials during the surfing and to improve the browsing or purchasing experience. Without these cookies it is not possible to provide, in whole or in part, the services for which users access the site.
​
Statistical cookies
These cookies allow us to understand how users are using the site so that we can then evaluate and improve the functioning of the website and to create content that is more appropriate to users' preferences.
For example, these cookies allow us to know which pages are the most and least visited, how many visitors are visiting the website, how much time is spent on the website by the average user and how visitors reach the website.
This allows you to determine what works best and what content is most popular and how it can be improved and how the content and the functionality of the pages can be improved. All information collected by these cookies is anonymous and not linked to your personal information.
Third-party profiling cookies
These are cookies used by third parties not directly controlled by the Owner. The company can not provide guarantees with respect to the use that will be made of the data, whose treatment is directly operated by a third party . The cookies from these third party operators make it possible to offer advanced functionalities, as well as enhanced information and personal features. This includes the ability to share content through social networks and to have a personalized site experience based on the preferences expressed through the pages you visit.
If you have an account or use the services of other data controllers, they may be able to know that you have visited the Company's site. The use of data collected by such operators through cookies is subject to their privacy policies. Profiling cookies of third parties are identified with the names of their respective operators and can be deactivated.
Cookies management
Through the selection of the ACCEPT button displayed by the banner on the homepage, you authorize the installation of cookies on the device in use by the interested party. You can change the settings of downloaded cookies through the browser features. By doing so it is also possible to prevent the installation of third party cookies and remove the ones installed before, including those containing your cookie preferences.
To adjust or change your browser settings, you should consult the instructions of the software or the application manufacturer. Disabling cookies may result in the malfunction of the site or part of it.
Third Party Sites
The site, even if only periodically, may contain links to third party sites and applications (Google Adwords Widget, Analytics, Youtube, Vimeo, etc.) to provide additional services and information to the user. When the user uses these links, he/she leaves the company site and accesses other resources which are not under the direct control of the Data Controller, who, therefore, will not be responsible for the procedures relating to navigation, security and processing of personal data operated by the other sites, even in the presence of co-branding or exposure of the company logo.
We recommend you to carefully examine the security and privacy procedures of the site you are visiting, which may transmit additional cookies; read the ones already present on the user's hard drive and ask for/or acquire additional personal information.
Interaction with social networks and external platforms
The site, through widgets and buttons, may interact with external platforms and social networks. In this case the information acquired depends on the settings of the profiles used by the user on each social network and not by the administrator of this site.
More information can be acquired from the websites of the companies offering the service. The data are not in this case managed by the website of the data controller, which links these buttons only to offer a additional service to the data subject but has no control over them.
Communication and dissemination
The data processed through the website are exclusively of a common nature and are not intended for dissemination.
The owner does not require and has no interest in collecting and processing data classified by the Regulation as "particular" (health, genetic, biometric, etc..) or "criminal". without prejudice to legal obligations.
The data must be transferred to third parties in the fulfilment of obligations deriving from laws or regulations (Institutions, Police, Judicial Authorities, etc..) or for activities directly or indirectly connected to the established relationship.
By way of example and not exhaustive, we mention Subjects who need to access the data of the interested because of relationship with the owner (credit institutions, financial intermediaries, electronic money institutions and payment management, Credit recovery companies, Customer verification companies, Carriers, etc.);
Consultants, collaborators, service companies, to the extent necessary to carry out the task conferred by the Owner;
Subsidiaries and/or associated companies that can access the data, within the limits strictly necessary to perform tasks entrusted by the Owner.
The data may be communicated to the subjects operating within the European Union, or in countries that guarantee the same level of protection as provided for by the applicable regulations. The updated list of data processors is available at the Data Controller's headquarters.
The data of the interested party may be communicated to subjects operating in non-EU countries where expressly allowed by the interested party.
In any case, the data processing carried out in the various countries will be adjusted to the more restrictive rules, in order to ensure the highest level of protection.
The data may be transferred to third parties, also for a consideration, if the interested party has given express consent, for purposes directly or indirectly related to the activity of the Owner.
​
Data retention period
The data processed by the owner, subject to legal obligations, are kept until the express request for cancellation made by the interested party and in any case it is periodically verified, also with automatic procedures, in order to guarantee the updating and the effective correspondence to the purposes of the treatment.
If the purpose for which they were acquired is no longer met, the data will be deleted, unless they must be treated to protect rights in court, for regulatory obligations or express request of the interested party. At the end of the treatment and following the cancellation, the rights of the interested party will not be exercised anymore.
​
Rights of the data subject
The data subjects are granted by the rights set out in Articles 15 to 22 of the GDPR 679/2016 and in the general Legislation . In particular, the interested party has the right to revoke at any time the consent to the processing of data, to request its correction, updating,transformation into anonymous form, limit even partially its use, ask for its portability and eventual cancellation. The rights are exercised to the extent that the treatment is not required by law or regulation.
Requests relating to the exercise of the rights of the data subject may be addressed to the Data Controller.
If the data subject is not content with the response provided to his/her requests by the Data Controller or the Data Protection Manager, he/she may submit a complaint to the Italian Autorità Garante for the Protection of Personal Data.