Privacy Policy

[title text=”Privacy Policy”]

REGULATION (EU) 2016/679 – GDPR
of the European Parliament and of the Council, of 27 April 2016 relating to the protection of natural persons with regard to the processing of personal data.

INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to article 13 of EU Regulation 2016/679 of 04/27/2016, hereinafter referred to as GDPR,SPIGHE DI GRANO S.N.C. DI MELONI LORENZO E IL MULINO CELIACO S.R.L., VAT number and C.F. 11326171003, as Data Controller of personal data, informs you of the following:

OWNER AND RESPONSIBLE FOR THE TREATMENT
The data controller isSPIGHE DI GRANO S.N.C. DI MELONI LORENZO E IL MULINO CELIACO S.R.L., VAT number and C.F. 11326171003 with registered office in Via di Bravetta 342, 00164 Rome RM.

PURPOSE OF THE TREATMENT
The personal data you provide will be processed exclusively for the following purposes: a) stipulation and execution of the contract and all activities connected to it, such as, by way of example, invoicing, credit protection, administrative, management, organizational and functional services for the execution of the contract; b) fulfillment of obligations established by law, regulations, applicable legislation and other provisions issued by authorities invested by law and by supervisory and control bodies. The processing of personal data for the above purposes does not require your express consent (art. 6 letter b) and e) of the GDPR).

INTELLECTUAL PROPERTY
The content of the Site, which includes any logo, trademark, pictogram, illustration, video or photo, is protected under intellectual property rights, or other applicable legal provision. The Company owns all rights excluding content expressly attributed to others, including with respect to credits. The Company respects the intellectual property rights of third parties, all legal provisions to protect the interests of third parties and takes all possible measures with the means at its disposal to ensure that the Site does not infringe the protected rights. In any case, if violations of their rights are detected by users, the Company may proceed with the removal of the content itself after having received regular written notification from the owner of the copyright at the contacts present on the Site in the appropriate section. Apart from the trademark ofSPIGHE DI GRANO S.N.C. DI MELONI LORENZO E IL MULINO CELIACO S.R.L.all other trademarks present on the Site belong to their respective owners.

MANDATORY OR OPTIONAL NATURE OF THE PROVISION OF DATA AND CONSEQUENCES OF ANY REFUSAL TO PROVIDE PERSONAL DATA
The data requested for the purposes referred to in the previous letters a) and b) must be provided for the fulfillment of legal obligations and/or for the conclusion and execution of the contractual relationship and the provision of the requested services. Therefore, your refusal, even partial, to provide such data would make it impossible for the Organization to establish and manage the relationship itself and to provide what was requested.

DATA PROCESSING METHODS
The processing of personal data is carried out by means of the operations indicated in the art. 4 no. 2) GDPR, for the above purposes, both on paper and electronically, by means of electronic or automated tools, in compliance with current legislation in particular regarding confidentiality and security and in compliance with the principles of correctness, lawfulness and transparency and protection of customer rights. The processing is carried out directly by the owner's organization, by its managers and/or agents.

COMMUNICATION AND DISSEMINATION
Your personal data may be communicated, within the limits strictly relevant to the obligations, tasks and purposes set out above and in compliance with current legislation on the matter, to the following categories of subjects: 1) subjects to whom such communication must be made in order to fulfill or require the fulfillment of specific obligations established by laws, regulations and/or community legislation; 2) companies belonging to the Data Controller's Group or parent companies, subsidiaries or affiliates pursuant to Art. 2359 of the Civil Code, who act as data controllers or for administrative-accounting purposes (purposes connected to the performance of internal organisational, administrative, financial and accounting activities, in particular, functional to the fulfillment of contractual and pre-contractual obligations ); 3) external natural and/or legal persons who provide services instrumental to the Data Controller's activities for the purposes referred to in point 1 above (e.g. suppliers, consultants, companies, bodies, professional firms). These subjects will act as data controllers. Personal data will not be disclosed in any way.

PERIOD OF CONSERVATION OF PERSONAL DATA
The personal data will be kept for the entire duration expressed by the contract stipulated with the Data Controller, after which the data will be kept for the fulfillment of the terms established by law for the conservation of administrative documents, after which they will be eliminated.

DATA TRANSFER
Personal data is stored on an IT infrastructure located within the European Union. In any case, it is understood that the Owner, if necessary, will have the right to move the equipment even outside the EU. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in compliance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.

RIGHTS OF THE INTERESTED PARTY
In your capacity as an interested party, you have the rights referred to in the art. 15 GDPR and precisely the rights of: 1) obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form; 2) obtain indication of: a) the origin of the personal data; b) the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the owner, managers and representative designated pursuant to art. 5, paragraph 2 Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representatives in the territory of the State, managers or agents; 3) obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated, except in the case in which this fulfillment proves impossible or involves the use of means that are manifestly disproportionate to the protected right; 4) object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and/or by traditional marketing methods by telephone and/or paper mail. Please note that the interested party's right of opposition, set out in the previous point b), for direct marketing purposes using automated methods, extends to traditional ones and that in any case the possibility for the interested party to exercise the right of opposition also remains only partially. Therefore, the interested party can decide to receive only communications via traditional methods or only automated communications or neither of the two types of communication. Where applicable, you also have the rights referred to in the articles. 16-21 GDPR (right of rectification, right to be forgotten, right to limit processing, right to data portability, right to object), as well as the right to complain to the Guarantor Authority For the exercise of the rights referred to in the art. 15 of the GDPR or for questions or information regarding the processing of your data and the security measures adopted, you can in any case forward the request to our company at the following address:

SPIGHE DI GRANO S.N.C. DI MELONI LORENZO E IL MULINO CELIACO S.R.L.
VAT number and C.F. 11326171003
Via di Bravetta 342, 00164 Rome RM.
Email: info@sepoarta.info