Privacy Policy

Purpose of processing

I. Personal data, freely communicated and acquired by us by reason of the activity carried out by:
Tenuta Frascanera by Marco Giroldi
via Bebbio 5, Carpineti (Reggio Emilia)
VAT Number: IT03033560354
will be processed lawfully and fairly for the following purposes: 

a) to fulfil the pre-contractual and contractual obligations necessary to offer the sales service to the Interested Party, should they have made a purchase, or to offer any further services requested by the Interested Party;

b) carry out all administrative, accounting, and tax activities related to the purpose referred to in the preceding letter a) as well as comply with the provisions of laws and regulations, national and foreign, or execute an order from the judicial authority or other authorities to which the Data Controller is subject;

c) to exercise the Data Subject's rights, with particular reference to the right to legal defence.

Personal data that are not necessary for the purposes of processing described in letters a) b) and c) are indicated as “optional”.

d) To carry out various marketing activities, including the promotion of products and services, distribution of informative, advertising and promotional material, invitations to events, sending newsletters and publications, and to build a contact database to draw upon for promotional and/or informational activities relating to the Data Controller's products and services.

e) carry out analyses – through an automated process – aimed at determining the profile of the Data Subject to adapt marketing activities to the Data Subject’s needs.

The data processed are up-to-date, relevant, complete and not exceeding the aforementioned purposes for which they are collected and subsequently processed. 

The provision of data for the purposes referred to in the letters d) ed e) it is optional, however, any refusal to provide them will not compromise the continuation of the relationship but will exclusively determine the impossibility for the Data Controller to carry out the activities indicated therein.

The legal basis authorising the subsequent processing is consent.

The data subject may also withdraw their consent at any time, with the same ease with which they gave it.

Treatment plan

The same data will be processed, respecting the necessary security and confidentiality, through the following methods: collection of data from the data subject, collection and recording for specific, explicit, and legitimate purposes, used in further processing operations in terms compatible with such purposes, processing carried out with the aid of electronic and automated tools (collection of data electronically, directly from the data subject).

Legal basis for processing

The legal basis for the processing of your personal data is based on your registration on the website https://www.tenutafrascanera.com.
Legitimate interests pursued by the Data Controller:
The legitimate interests pursued by the Data Controller in processing data are given by the need to respect and honour the contractual obligations entered into between the parties. Pursuant to Article 6, the lawfulness of the processing is based on the consent expressly given by the data subject, documented in writing. Mandatory or optional nature of data provision and consequences of any refusal to respond: the nature of the data provision by you is mandatory in order for the data controller to provide the requested services. In case of refusal, it will therefore be impossible to complete the registration process and the System Owner will not be able to fulfil its contractual obligations.

Data Subject Rights

The Data Subject may assert their rights, as recognised by current legislation and in particular by Articles 15 to 22 of the GDPR, such as:

• Right of access: the right to obtain from the Data Controller confirmation as to whether or not personal data is being processed and, if so, to obtain access to the personal data and further information about origin, purpose, categories of data processed, recipients of communication and/or data transfer, etc.
• Right of rectification: the right to obtain from the Controller the rectification of inaccurate personal data without undue delay, as well as the supplementation of incomplete personal data, including by providing a supplementary statement.
• Right to erasure: the right to obtain from the Controller the erasure of personal data without undue delay where:
  • the personal data are no longer necessary for the purposes for which they were processed;
  • consent on which the processing is based has been withdrawn and there is no other legal ground for processing;
  • personal data has been unlawfully processed;
  • personal data must be deleted to fulfil a legal obligation.
• Right to object to processing: the right to object at any time to the processing of personal data which is based on a legitimate interest of the Data Controller.
• Right to restriction of processing: the right to obtain from the Controller the restriction of processing, in cases where the accuracy of personal data is disputed (for the period necessary for the Controller to verify the accuracy of such personal data), if the processing is unlawful and the Data Subject has objected to the processing, if personal data is required by the Data Subject for the establishment, exercise or defence of legal claims, or if pending verification of whether the legitimate grounds of the Controller override those of the Data Subject, following the Data Subject's objection to processing.
• Right to data portability: the right to receive personal data in a structured, commonly used and machine-readable format, and to transmit such data to another controller, only in cases where the processing is based on consent or on a contract and only for data processed by electronic means.
• Right not to be subject to automated decision-making: the right to obtain from the Controller that you are not subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning the Data Subject or significantly affect them, unless such decisions are necessary for the conclusion or performance of a contract or are based on the consent given by the Data Subject.
• Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, the data subject shall have the right to lodge a complaint with a supervisory authority if they consider that the processing of personal data relating to them infringes the GDPR.

At the end of the exercise of the rights provided for by the GDPR, the Data Subject may:

(i) submit your requests to the Data Controller by visiting: https:www.tenutafrascanera.com

or alternatively contact the Data Controller at the following address: info@tenutafrascanera.com, stating “Privacy” in the subject line.

Tenuta Frascanera

Registered Office: Via Bebbio 5 – Carpineti 42033 Reggio Emilia