With this information notice, provided pursuant to Article 13 of the EU Regulation 2016/679 (GDPR), we provide the Data Subject with the information required by current legislation regarding the processing of his or her personal data. Please note that this information applies exclusively to data collected and processed through the website www.argiano.net.

1) Data Controller

The Data Controller of personal data collected through the website www.argiano.net is Argiano S.r.l. Società Agricola (P.I. and C.F. 00518460522), with registered office in (53024) Montalcino (SI), Località Sant’Angelo in Colle snc, e-mail address: argiano@argiano.net (hereinafter referred to as “Data Controller”).

Appointment of a Data Protection Officer (DPO) was not made, as it was not legally required.

2) Type of data processed

The Data Controller processes the following personal data of the Data Subject, namely:

– Navigation data: the computer systems and software procedures used to operate the www.argiano.net website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.

– Personal data provided voluntarily by the Data Subject: the optional, explicit and voluntary transmission of personal data to the Data Controller, by means of e-mail messages to the addresses indicated on the website www.argiano.net and/or by filling in forms on the aforesaid website, entails the acquisition of the sender’s e-mail address as well as any further personal data requested by the Data Controller, in order to reply to any specific requests, such as name, surname, home address, nationality, landline and/or mobile telephone number, tax code.

On the other hand, personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to a person’s health or sex life or sexual orientation will not be processed, pursuant to Article 9 of the GDPR. Should the service requested from Argiano S.r.l. Società Agricola requires the processing of the aforementioned data, the data subject will be provided with specific information in advance and will be requested to give his explicit consent.

3) Purpose of Data Processing

The data subject’s personal data will be processed, within the scope of the Controller’s normal activity, for the following purposes:

a) fulfilment of legal obligations, both national and European, as well as orders/dispositions of Public Authorities and/or Supervisory Bodies;

b) fulfilment of obligations arising from a contract concluded with the Data Subject and/or necessary for the conclusion of a contract, including the management and fulfilment of specific requests received from the Data Subject, as well as other activities connected with and instrumental to the execution and management of the relationship;

c) direct marketing activities and therefore, purely by way of example, for market research, sending e-mails containing information, advertising and promotional material relating to products or services provided by Argiano S.r.l. Società Agricola;

d) customer profiling activities and thus in order to be able to send personalised commercial and promotional information to the Data Subject by e-mail;

e) pursuit of the legitimate interest of the Data Controller (e.g. debt collection; reporting and auditing; monitoring and verification of service quality; dispute management; exercise or defence of a right in extrajudicial and judicial proceedings, etc.);

f) use of newsletters and thus for sending communications and promotional, commercial and advertising material or relating to initiatives and events of the data controller via newsletters;

g) statistical activities and therefore to perform statistical analysis on aggregated and anonymous data in order to verify the proper functioning of the websites and improve the products and services provided by the Data Controller. More information on this purpose can be found in the section “Personal Data Processing Details”.

4) Details of personal data processing

The following tools provided by third parties are also used to process the data subject’s personal data:

Google Analytics 4 (GA4)

Google Analytics is a statistics service provided by Google LLC or Google Ireland Limited, depending on how the Data Controller manages the processing of the Data, (“Google”). Google uses the personal data collected for the purpose of tracking and examining the use of the website www.argiano.net, compiling reports and sharing them with other services developed by Google. Google may use personal data to contextualise and personalise ads in its advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in any data centre or server. To learn more, you can consult Google’s official documentation.

To find out about the use of data by Google, please consult the Google Partner Policy.

Personal data processed: Usage Data; Tracking Tools.

Place of processing: Stati Uniti – Privacy Policy – Opt Out ; Irlanda – Privacy Policy – Opt Out .

Meta Ads Conversion Monitoring (Meta Pixels)

The Meta ads conversion tracking (Meta pixel) is a statistics service provided by Meta Platforms Inc. or Meta Platforms Ireland Limited, depending on how the Data Controller handles the data, which links data from the Meta ad network with actions taken within the www.argiano.net website. The Meta pixel monitors conversions that can be attributed to Facebook, Instagram and Audience Network advertisements.

Personal data processed: Usage Data; Tracking Tool.

Place of processing: Stati Uniti – Privacy Policy – Opt out; Irlanda – Privacy Policy – Opt out.

5) Nature of provision of data and legal basis for processing

With reference to the purposes referred to in Article 3), letter a): i) the provision of data is necessary, given that if it is not provided, the Data Controller will not be able to perform the activity requested by the Data Subject, which presupposes the fulfilment of a legal obligation on the part of the Data Controller; ii) the legal basis of the processing is the fulfilment of a legal obligation.

With reference to the purposes referred to in Art. 3), letter b): i) the provision of data is necessary, given that if it is not provided, the Data Controller will not be able to conclude the contract and/or follow up the requests of the Data Subject; ii) the legal basis of the processing is the contract or the management of activities necessary for the conclusion of a contract.

With reference instead to the purposes set out in Article 3, letters c), d), f) and g): i) the provision of personal data is optional and failure to provide such data will make it impossible for Argiano S.r.l. Società Agricola to carry out the activities mentioned therein; ii) the legal basis of the processing is the consent given by the data subject to the processing itself.

On the other hand, with reference to the purposes referred to in Article 3(e): i) the provision of data is necessary for the pursuit of the legitimate interest of the Data Controller, in order to be efficient and respond to the requests of the Data Subject; ii) the legal basis for the processing is the legitimate interest of the Data Controller, taking into account the balancing of the rights of the latter and the Data Subject.

6) Modalities of Data Processing

The processing of personal data collected and/or received through the www.argiano.net website is based on the principles of lawfulness, correctness and transparency, as well as on the principles of integrity and confidentiality, in accordance with current legislation.

The Data Controller processes personal data by adopting appropriate security measures aimed at preventing unauthorised access, disclosure, modification or destruction of personal data. The processing is carried out by means of computer and/or telematic and/or manual tools, with organisational methods and logics strictly related to the purposes indicated above.

7) Communication and access

In addition to the Data Controller, the personal data may be accessed, in the capacity of persons authorised to process the data and only for the data required to perform the tasks assigned to them, by employees of Argiano S.r.l. Società Agricola (e.g. administrative, sales, marketing personnel) or external parties (e.g. third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies, professionals, consultants), also appointed, if necessary, as Data Processors by the Controller. The updated list of Data Processors can always be requested from the Data Controller.

Personal data may also be disclosed to third parties (e.g. administrative, judicial, supervisory and control authorities) where required by law, regulation or EU legislation.

Where the recipients of personal data are established outside the EU, in countries lacking an adequate level of protection for personal data, the Data Controller will take all necessary measures to ensure that the transfer of data outside the EU is adequately protected as required by the applicable privacy legislation.

The Respondent’s personal data will not be subject to dissemination.

8) Data retention period

Without prejudice to legal obligations, the data subject’s personal data are kept for a period of time not exceeding the fulfilment of the purposes for which they are processed. In particular:

– with regard to purposes connected with a contractual relationship, the personal data of the data subject will be stored for the entire duration of the contractual relationship, for the performance of the related and consequent fulfilments, for compliance with applicable legal and regulatory obligations, as well as for any own or third-party defence purposes;

– with regard to marketing/commercial promotion purposes, the personal data of the Data Subject shall be retained for a period of twenty-four (24) months from the date on which consent was given, without prejudice, in any case, to the right to withdraw the consent given;

– with regard to the purposes of profiling, the personal data of the Data Subject shall be retained for a period of twelve (12) months from the date on which consent was given, without prejudice in any event to the right to withdraw the consent given;

– with regard to other purposes where the processing is based on the consent of the data subject, the personal data of the data subject will be retained until such consent is withdrawn;

– with regard to the purposes attributable to the legitimate interest of the Data Controller, the personal data of the Data Subject will be retained until such interest is satisfied. The Data Subject may obtain further information on the legitimate interest pursued by the Controller by contacting the Controller.

The personal data of the Data Subject may, however, be stored for a longer period if necessary to fulfil a legal obligation or by order of an authority.

At the end of the retention period, personal data will be deleted or stored in a form that does not allow the identification of the Data Subject within 30 days of the end of the retention period.

9) Rights of the Data Subject

The Data Subject, in the manner and within the limits provided for by EU Regulation 679/2016 (GDPR) and current legislation, has the right to:

– withdraw their consent at any time, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal;

– obtain from the Data Controller confirmation as to whether or not personal data relating to him are being processed and, if so, to obtain access to the personal data and information referred to in Article 15 of the GDPR;

– obtain from the Data Controller the rectification of inaccurate personal data concerning him/her without undue delay, as well as the integration of incomplete personal data, also by providing a supplementary declaration;

– obtain from the data controller the deletion (so-called ‘right to be forgotten’) of personal data concerning him/her without undue delay, if one of the grounds set out in Article 17 of the GDPR applies and provided that the processing is not necessary for the purposes set out in Article 17(3) of the GDPR;

– obtain from the data controller the restriction of the processing of one’s personal data, when one of the cases referred to in Article 18 of the GDPR occurs;

– request the Data Controller to inform the recipients to whom any rectification or erasure or restriction of processing carried out has been transmitted, unless this proves impossible or involves a disproportionate effort;

– to receive in a structured, commonly used and machine-readable format the personal data concerning him/her that he/she has provided to the Data Controller and, in the cases provided for in Article 20 of the GDPR, to have them transmitted to another Data Controller without hindrance by the Data Controller to whom he/she has provided them (so-called “portability”). The data subject, if technically feasible, also has the right to obtain the direct transmission of personal data from one Data Controller to another;

– object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her in accordance with Article 6(1)(e) or (f);

– where personal data are processed for direct marketing purposes, object at any time to the processing of personal data concerning him/her carried out for such purposes, including profiling insofar as it is related to such direct marketing;

– file a complaint with the Privacy Guarantor, as the data protection supervisory authority;

– as well as, more generally, to exercise all the rights granted to him by the applicable legal provisions.

The aforementioned rights may be exercised by written communication to be sent by e-mail to argiano@argiano.net or by registered letter with return receipt to the registered office of Argiano S.r.l. Società Agricola, located in (53024) Montalcino (SI), Località Sant’Angelo in Colle snc.

10) Cookies

The www.argiano.net website makes use of cookies. For further and more detailed information, interested parties can consult the Cookie Policy.

11) Amendments to the Policy

The Data Controller reserves the right to amend and/or update this information notice at any time. In order, therefore, to facilitate consultation of the text as amended and/or updated, the notice will contain the date of the update.

Privacy Policy updated December 2024