Privacy

Who we are and what we do with your personal data?

Antichi Orti S.r.l. Agricultural Company, as the Data Controller, protects the privacy of personal data and ensures the necessary protection against any event that may put them at risk of violation. Therefore, the Data Controller adopts policies and practices regarding the collection and use of personal data, as well as the exercise of rights granted to you under applicable regulations. The policies and practices adopted will be updated when necessary due to regulatory or organizational/business changes that affect the processing of your personal data. For everything related to the processing of your personal data, you can contact the Data Controller at the address info@antichiortiassisi.com . The Data Controller has also appointed a Data Protection Officer (DPO) who can be contacted for information or requests at the email address avvocati.aiello@gmail.com .

How do we collect and process your data?

The Data Controller collects and/or receives your personal identifying data, such as name, surname, email address, phone number, etc., which are provided during the navigation on the website www.antichiortiassisi.com  through the direct completion of online forms for requesting information about the activities of Antichi Orti S.r.l. Agricultural Company or through online contact request and booking forms. Such data are necessary for the Data Controller to follow up on your requests and may be communicated to third parties who have contractual relationships with the Data Controller or affiliated companies and/or business partners (Bartending S.r.l.), as well as external collaborators and, in general, to all entities to whom the communication of such data is necessary for the timely, exhaustive, and comprehensive fulfillment of your requests.

The Data Controller also collects and/or receives information about you, such as IP address and cookies, released through the navigation on the website www.antichiortiassisi.com . Such data are used for the management of the website itself and for the collection of aggregated information. The communication of this data primarily occurs to third parties and/or recipients whose activities are necessary for the completion of the aforementioned purposes, as well as to comply with any legal obligations. Your personal data will not be disclosed or divulged to undetermined subjects in any way.

What happens if you do not provide your data?

The personal data concerning you, which identify you, are necessary for the fulfillment of the requests you submit through the "Contacts" section or through other forms on the website - such as online booking. If you do not provide them, it will be impossible for the Data Controller to fulfill your requests.

As for the matter of cookies, please refer to the information mentioned above regarding the deselection of individual cookies and their consequences.

How, where, and for how long are your data stored?

Data processing is carried out through computerized procedures by internally authorized and trained individuals. They are allowed access to your data to the extent necessary for the processing activities concerning you. Your data is treated separately from others, also by means of pseudonymization or aggregation methods that do not allow easy identification.

The Data Controller periodically verifies the tools through which your data is processed and the security measures provided for them, including regular updates. The Data Controller also ensures, through the authorized individuals involved in the processing, that personal data that does not require processing is not collected, processed, stored, or retained. The data is stored with the guarantee of integrity, authenticity, and their use for the purposes of the actual processing activities.

The data is stored in computerized and telematic archives located within the European Economic Area.

The data is stored for the time necessary to fulfill the information requests and send communications that the Data Controller carries out following your request. In any case, the data is not retained for a period exceeding ten years, unless events occur that require the intervention of competent authorities, also in collaboration with third parties/recipients responsible for the Data Controller's data security activities, to carry out any investigations into the causes that led to the event. Regarding data from internet traffic and cookies, please refer to the previously mentioned retention terms.

What are your rights?

Your rights under the new EU Regulation 2016/679 allow you to have continuous control over your data through the following rights:

• Access
• Rectification
• Erasure
• Restriction of processing
• Objection to processing
• Data portability

Therefore, at any time and free of charge, you can:

• Obtain confirmation of the processing carried out by the Data Controller
• Access your personal data and know their origin (when the data is not obtained directly from you), the purposes and objectives of the processing, the recipients to whom they are communicated, the storage period of your data, or the criteria used to determine it
• Update or rectify your personal data to ensure they are always accurate and precise
• Delete your personal data from the databases and/or archives, including backups, of the Data Controller in cases where they are no longer necessary for the processing purposes or if their processing is deemed unlawful, provided that the conditions required by law are met; and in any case, if the processing is not justified by another equally legitimate reason
• Restrict the processing of your personal data in certain circumstances, such as when you have contested their accuracy, for the period necessary for the Data Controller to verify their accuracy. You must be informed within a reasonable period of time when the suspension period has expired or when the cause for the restriction of processing no longer exists, and the restriction itself has been revoked
• Obtain your personal data, if received or processed by the Data Controller with your consent and/or if their processing is carried out based on a contract and by automated means, in electronic format, also for the purpose of transmitting them to another Data Controller.
• The Data Controller must proceed in this regard without delay and, in any case, no later than one month from the receipt of your request. The deadline may be extended by two months if necessary, taking into account the complexity and number of requests received by the Data Controller, and you may be informed of the reasons for the extension.
• For further information and any requests, you can contact the Data Controller at the following address: info@antichiortiassisi.com.
• How and when can you object to the processing of your personal data? For reasons related to your specific situation, you can object to the processing of your personal data at any time if it is based on legitimate interest by sending your request to the Data Controller at the address: info@antichiortiassisi.com.
• You have the right to have your personal data erased if there is no overriding legitimate reason for the processing that gave rise to your request.
• Who can you lodge a complaint with? Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority, or the authority that performs its tasks and exercises its powers in Italy, where you have your habitual residence or work, or in the Member State where the violation of EU Regulation 2016/679 occurred.
• Any updates to this information will be promptly communicated to you through appropriate means, and you will also be informed if the Data Controller proceeds with the processing of your data for additional purposes other than those described in this information, before carrying out such processing, and in time to give your consent if necessary.

The Data Controller must proceed in this regard without delay and, in any case, no later than one month from the receipt of your request. The deadline may be extended by two months if necessary, taking into account the complexity and number of requests received by the Data Controller, and you may be informed of the reasons for the extension.

For further information and any requests, you can contact the Data Controller at the following address: info@antichiortiassisi.com .

How and when can you object to the processing of your personal data?

For reasons related to your specific situation, you can object to the processing of your personal data at any time if it is based on legitimate interest by sending your request to the Data Controller at the address: info@antichiortiassisi.com .

You have the right to have your personal data erased if there is no overriding legitimate reason for the processing that gave rise to your request.

Who can you lodge a complaint with?

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority, or the authority that performs its tasks and exercises its powers in Italy, where you have your habitual residence or work, or in the Member State where the violation of EU Regulation 2016/679 occurred.

Any updates to this information will be promptly communicated to you through appropriate means, and you will also be informed if the Data Controller proceeds with the processing of your data for additional purposes other than those described in this information, before carrying out such processing, and in time to give your consent if necessary.