Privacy Policy
TERRANOSTRA SOC. AGRICOLA a r.l. | loc. STRACCIASACCO – 81037
Sessa Aurunca (Caserta)
Italy
Hereinafter referred to as the “Company” or “the Company”.
The Company is required to provide certain information regarding the processing and storage of data freely provided by those who browse the website www.terrranostrasrl.it, as required by EU Regulation 679/2016, containing provisions relating to the protection of natural persons with regard to the processing of personal data (hereinafter “GDPR”).
Therefore, before communicating any personal data, we invite you to carefully read this Privacy Policy because it contains important information regarding the protection of your personal data.
This notice is valid exclusively for www.terrranostrasrl.it and for the services offered therein, and does not apply to other websites that may be consulted by the user through links on the pages of the Site. When consulting other websites, we recommend reviewing their respective privacy policies.
Data Controller
The Data Controller of your data is TERRANOSTRA SOC. AGRICOLA a r.l.
Personal data subject to processing
Browsing the Site and submitting a contact request to the Data Controller may involve the collection and subsequent processing of your personal data such as – by way of example and not limitation – name, surname, email address, IP address, etc. (hereinafter “Personal Data”).
Purposes and legal bases of processing
Your data are processed for the following purposes:
Performance of the contract and/or fulfilment of contractual obligations:
manage and maintain the website;
manage a contact/information request from the user;
allow registration on the website;
allow the user to purchase products and manage all obligations connected with the performance of the contractual relationship, including pre-contractual and post-contractual activities;
carry out the operations necessary to process the user’s order.
Fulfilment of legal obligations:
comply with obligations provided for by laws, regulations, national and EU legislation, orders and instructions issued by the competent Authorities;
manage administrative, accounting, civil-law and tax obligations;
maintain accounts and fulfil related obligations.
Pursuit of a legitimate interest of the Data Controller:
prevent fraudulent activities or activities harmful to the Site;
exercise the rights of the Data Controller, such as the right of defence in court;
manage and control risks and prevent possible fraud, insolvency or non-performance;
manage further needs relating to guarantees or non-conformities, complaints or any other requirement arising after performance of the contract;
if you are already our customer, send commercial and/or promotional communications to the email address provided regarding products/services of the Data Controller similar to those already used;
subject to your consent, send commercial communications by newsletter relating to the Company’s services to the address provided. The user’s consent is optional and does not in any way affect browsing the Site. The user may withdraw consent at any time by sending an email to info@terranostrasrl.it.
Processing carried out before withdrawal will remain valid.
Recipients of personal data
Your personal data are processed by specifically appointed Company personnel acting as authorised persons, who are given appropriate instructions regarding measures, precautions and operating procedures, all aimed at the effective protection of personal data.
The Company works with companies, consulting firms and professional practices that provide support for various activities, including, by way of example, management and maintenance of the Company’s IT infrastructure, consultancy and assistance services, and ensuring a better service for the user. Third parties working with the Company have been designated as “Data Processors” pursuant to Article 28 of the GDPR and have been assigned precise tasks and instructions to ensure respect for the user’s rights while carrying out their duties.
Methods of data processing
Personal data are processed in paper and electronic form, using systems that implement security measures designed to protect your confidentiality. Specific security measures are also observed to prevent data loss, unlawful or incorrect use and unauthorised access. Personal data will not be subject to any further processing beyond that declared in this document unless, where necessary, your consent has first been requested.
Transfer of personal data
The Data Controller may use, including through its Data Processors, electronic communications service companies and, in particular, email service providers, which may acquire and transfer users’ data and personal information also to countries outside the European Union. These external processors have been selected on the basis of specific reliability and security criteria, in full compliance with the obligations imposed by applicable legislation, since any transfer takes place only to countries, or sectors thereof, that have been the subject of an adequacy decision and therefore ensure an adequate level of personal data protection, or on the basis of standard contractual clauses validated by a European supervisory authority and compliant with the models proposed by the Commission under Decision 2010/87/EU. In particular, with regard to the United States, any transfer of data is carried out exclusively to certified companies in accordance with the applicable data transfer framework.
Data retention period
Personal data are stored in a form that allows identification of the data subject for the period necessary to achieve the specific purposes for which they are processed from time to time and, in any case, for no longer than 10 years from collection. Data processed for the sending of advertising communications and commercial information will be stored for no longer than 24 months.
Rights of the data subject
At any time, the data subject may exercise the rights provided for under Articles 15–22 of the GDPR against the Company by email at info@terranostrasrl.it or by writing to the address of the Data Controller.
To ensure the proper exercise of rights, the data subject must be unambiguously identifiable. In particular, the data subject may exercise:
Right of access, consisting in the possibility of requesting verification of the use of personal data and, if applicable, obtaining access to and a copy of such data in an intelligible form;
Right to rectification, allowing data subjects to request the correction of inaccurate personal data;
Right to erasure where the data no longer need to be processed for the original reason for which they were collected or subsequently processed;
Right to object to processing and the obligation to erase arising from a legal obligation or from unlawful processing;
Right to restriction of processing;
Right to data portability, which grants the right to obtain data in a structured, commonly used and machine-readable format for transmission to another Data Controller without hindrance from the previous Data Controller.
In any case, the data subject may withdraw any consent given to the processing of personal data for the purpose of sending commercial and advertising communications and may lodge a complaint with the competent Supervisory Authority (Italian Data Protection Authority), pursuant to Article 77 of the Regulation, if they believe that the processing of their data is contrary to the legislation in force.
Changes
The Data Controller reserves the right to amend or simply update the content of this Privacy Policy, in whole or in part, including as a result of changes to applicable legislation.
The Company therefore invites its users to visit this section regularly in order to remain up to date on the data collected and how the Data Controller uses it.