0
0,00 0 items

No products in the cart.

Privacy Policy

ORESTIADI ESTATE

 

PRIVACY POLICY OF PERSONAL DATA COLLECTED FROM THE DATA SUBJECT PURSUANT TO REGULATION UEGDPRN 679/2016.

1) OWNER OF THE TREATMENT. (Article 13, paragraph 1, letter a), GDPR).

The Data Controller of the Personal Data collected on this site is Orestiadi srl in the person of its pro-tempore legal representative, with registered office in Viale Santa Ninfa, Gibellina (TRAPANI – ITALY). PIVA 02309820815, who can be contacted at the telephone number 0924.69124 or at the e-mail address privacy@orestiadisrl.it.

2) PROCESSED DATA. (Article 15, paragraph 1, letter b), GDPR).

Data generated by access to the site.

The data processed by Orestiadi srl are telematic traffic data, namely: cookies, logs, domain names, IP addresses of origin. Cookies are encrypted text strings that can be stored on the computer and do not store Personal Data but only anonymous information on the behavior of the site User. The information saved with the cookies allow us to improve the browsing experience on the site through a quantitative verification of the accesses to the various pages and sections of the web. They can be deactivated at any time by changing the browser settings.

3) PURPOSE AND LEGAL BASIS OF THE TREATMENT (Article 13, paragraph 1, letter c), GDPR).

The processing of data collected through cookies is aimed at allowing us to improve the browsing experience on the site through a quantitative verification of access to the various web pages and sections. They can be deactivated at any time by changing the browser settings. The Processing is also aimed at displaying content from external platforms, statistics, commenting on content. The basis of this Treatment is the consent, optional and revocable at any time.

Learn more about the processing of collected data.

 

- Cookies:

As indicated by the Privacy Guarantor, by closing the brief information banner, continuing to browse the site or clicking on any element of the page, you accept the use of cookies. The User can always decide whether or not to accept cookies using the settings of his browser. If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. They are used for your convenience so that you don't have to re-enter your Data when you leave another comment. These cookies will last for one year. When the User logs in, several cookies will be set to save his login information and his screen display options. Login cookies last for two days and screen options cookies last for a year. When the User selects "Remember Me", his login will persist for two weeks. When the User logs out of his account, the login cookies will be removed.

- Content Comment:

Comment services allow Users to formulate and make public their comments regarding the contents of this website. When visitors leave comments on the website, we collect the Data shown in the comments form as well as the visitor's IP address and browser user agent string to help spam detection. Depending on the settings decided by the Owner, Users can also leave comments anonymously. In the event that the e-mail address is among the Personal Data left by the User, this could be used to send notifications of comments regarding the same content. Users are responsible for the content of their comments. In the event that a comment service provided by third parties is installed, it is possible that, even if the Users do not use the comment service, the same collects traffic data relating to the pages in which the comment service is installed . The comment system of this website is managed directly by the website itself being its property.

 

- Interaction with social networks and external platforms:

This service allows you to interact with social networks or other external platforms directly from the pages of this site. The interactions and information acquired from this site are subject to the User's privacy settings relating to each social network. If an interaction service with social networks is installed, this service could collect data

Facebook button:

The "Like" button and the Facebook social widgets are services allowing interaction with the Facebook social network, provided by Facebook, Inc.. Personal data collected; cookies and usage data. Place of processing: USA – privacy policy.

Instagram button:

The Instagram button and Instagram social widgets are social interaction services with the Instagram social network, provided by Instagram, Inc.. Personal Data collected: cookies and usage data. Place of processing: USA – privacy policy

- Statistics:

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behaviour. Personal Data collected: cookies and usage data. Place of processing: USA – Privacy PolicyOpt Out (please refer to the privacy cookie).

- Viewing content from external platforms:

This type of service allows you to view content hosted on external platforms directly from the pages of this application and to interact with them. In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, the same collects Traffic data relating to the pages in which it is installed.

-Google Fonts (Google Inc.):

Google Fonts is a font style visualization service managed by Google Inc. that allows this Application to integrate content within its pages. Personal Data collected: usage data and various types of data as specified in the privacy policy of the service. Place of processing: USA – Privacy Policy.

- Piùvino.it (Pro.di.ve srl):

Piùvino is an e-shop that allows you to buy Tenute Orestiadi products online. Personal Data collected: Usage data and various types of Data as specified in the privacy policy of the service. Place of Treatment: ITALY – Privacy Policy.

4) SOURCE FROM WHICH THE DATA TO BE PROCESSED COME FROM.

The Data processed are the Data left by Users when they visit the website, accept to download cookies, as defined by the cookies page generated by cookiebot.

5) METHOD AND PLACE OF DATA PROCESSING (Art. 32 GDPR)

The Data Controller adopts the appropriate security measures in order to preserve the confidentiality, integrity and availability of the Personal Data of the interested party. The Data collected from the site are processed using paper, computerized and/or telematic methods, with organizational methods and with logic strictly related to the purposes indicated. The Data collected in this way is processed at the headquarters of the Data Controller, and at the web hosting data-center, i.e. ARUBA SpA, with registered office in Via S. Clemente 53 - 24036 Ponte San Pietro - BG - ITALY, which is responsible of data processing, processing the data on behalf of the Data Controller, and which, being in the European Economic Area, acts in compliance with European standards. Data hosted on foreign servers, such as e.g. the data collected by Google Analytics and the data collected by the e-shop are collected on the servers of these companies. In some cases, other subjects involved in the organization of the Data Controller (administrative manager, commercial manager, system administrators) may have access to Personal Data. The Personal Data necessary for the purchase of our products will be left by the interested parties on the external e-shop platform and will therefore be processed by this. Therefore, for this Treatment it will be necessary to refer to the privacy policy of the e-commerce company in charge.

6) DATA CONSERVATION PERIOD. (Article 13, paragraph 2, letter a), GDPR)

Personal Data will be kept for as long as they are necessary for the legitimate purposes for which they will be collected. The Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

7) RIGHTS OF THE INTERESTED PARTY (Articles 15-20 GDPR).

The interested party is the owner of:
  • right to request access to their Personal Data to the Data Controller;
  • right of rectification of your own inaccurate Personal Data;
  • right of integration of your incomplete Personal Data;
  • right to erasure (right to be forgotten) of their Personal Data if the Personal Data are no longer necessary for the purposes for which they were collected, if the interested party has revoked his consent, if the interested party opposes the processing of Personal Data processed for marketing purposes;
  • right to limitation of the Processing of their Personal Data, which can be exercised in the following cases: the Data Subject disputes the accuracy of their Personal Data, the Processing of the Personal Data of the Data Subject is unlawful and the Data Subject opposes the cancellation of the Personal Data and requests instead that the use is limited, the Personal Data are necessary for the interested party to ascertain, exercise and defend a right in court;
  • right to object to the Processing of Personal Data if such Data is used by the Data Controller for direct marketing purposes;
  • right to the portability of personal data: the interested party has the right to receive their Personal Data from the Data Controller and to transmit them to another Data Controller;
  • right of revocation: the interested party has the right to revoke his consent at any time without this affecting the lawfulness of the treatment carried out before the revocation;
  • right to lodge a complaint: in addition to the right to lodge a judicial appeal, the interested party has the right to lodge a complaint with the competent Authority for the protection of Personal Data (Authority for the Protection of Personal Data).

8) FURTHER INFORMATION ON THE RIGHT TO OBJECT (Art. 21 GDPR).

The interested party, for reasons inherent to his particular situation, may oppose the processing of his personal data at any time if it is based on legitimate interest or if it takes place for commercial promotion activities, by sending the request to the data controller.

Newsletters

linkedin Facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin blank pinterest youtube twitter instagram