1.General information

This information is provided pursuant to article 13 of Legislative Decree 30.06.2003 n. 196 (hereinafter, “Privacy Code”) and art. 13 of EU Regulation no. 2016/679 (hereinafter, “GDPR”), Personal Data Protection Code, to users of Latteria San Fedele.

The Data Controller processes personal, identifying and non-sensitive data (for example but not limited to, name, surname, company name, address, telephone number, e-mail address – hereinafter, “personal data” or even “data”) communicated by you when registering via the website, at trade fairs, database acquisitions, contractual obligations, participating in opinion and satisfaction surveys, filling out registration forms via the Site for events organised by the owner, requesting clarifications or requests for support online and sending newsletters.

2.Data controllers

The processing relating to the portal services takes place mainly at the headquarters of Latteria San FedeleThey are carried out by identified and expressly appointed personnel based on the specific purposes of the services requested and subscribed to.

For the treatments in question, Latteria San Fedele and may avail itself of the help of external companies, consultants, consortia, software and service providers operating, through identified and appointed personnel, within the scope of the intended purposes and in a way that guarantees maximum security and confidentiality of the data.

3.Types of data processed

3.1 Consultation of the portal: navigation data

The IT systems and application procedures used to operate the portal Latteria San Fedele acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols.

This information is used to obtain anonymous statistical information on the use of the portal and to check its correct functioning and is not associated with identified users; however, by their nature and through associations with data held by third parties, they could allow the identification of the interested parties. This category includes, for example, the IP address of the system used to connect to the portal.

This data is removed from the systems after the statistics have been processed and is stored off-line exclusively for the purpose of determining liability in the event of computer crimes and can only be consulted upon request by the judicial authority.

3.2 Data provided voluntarily by the user when using online services

For the use of online services that require authentication, registration or sending emails, personal data provided freely by users are used in different ways:

3.2.2 Registration on the portal and online services for external parties Latteria San Fedele
Natural or legal persons external to Latteria San Fedele can register on the portal to request specific online services. During registration on the portal, some personal data are requested that are used to identify the registered subject. During subscription to online services, additional data, including sensitive data, may be requested depending on the specific service chosen. The purposes of processing are different depending on the service and are described in detail on the relevant subscription pages.

3.2.3 Sending emails to addresses indicated on the portal
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on the site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message and the processing of personal data concerning him for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.

4.Optional nature of data provision

Some data required for registration are mandatory and failure to provide them will make it impossible to register on the portal.

Similarly, failure to communicate certain data that may be required for the subscription to online services may make it impossible to use the chosen service.

Registration and subscription data are provided voluntarily.

The person who registers freely gives consent to the processing of data, aware that in the absence of such consent the registration and subscription to the services cannot take place.

5. Methods of treatment

The processing of your personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR and specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and/or automated processing. The Data Controller will process the personal data for the time necessary to fulfill the purposes set out above and in any case for no more than 5 years from the termination of the relationship for the Service Purposes and for no more than 2 years from the collection of data for the Other Purposes.

6. Rights of interested parties

In your capacity as interested parties, you have the rights set forth in art. 7 of the Privacy Code and art. 15 of the GDPR and specifically the rights to:

• obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
• obtain the indication: a) of the origin of the personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) of the identification details of the owner, the managers and the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or persons in charge;
• obtain: a) the updating, rectification or, when interested, the integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data were communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected;
• to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator by e-mail and/or through traditional marketing methods by telephone and/or post. Please note that the interested party's right to object, set out in the previous point b), for direct marketing purposes by automated methods extends to traditional ones and that in any case the possibility for the interested party to exercise the right to object even only in part remains intact. Therefore, the interested party can decide to receive only communications by traditional methods or only automated communications or neither of the two types of communication.

Where applicable, you also have the rights set forth in Articles 16-21 GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

The rights can be exercised by making a request to the Data Controller Cristian Rumi – SAN FEDELE DAIRY SRL, VAT: 04061840130, +39 334 733 0002, VIA RUBINI 6 – 22100 – COMO (CO).

7.Minors

This Site and the Owner's Services are not intended for minors under 18 years of age and the Owner does not intentionally collect personal information relating to minors. In the event that information on minors is inadvertently recorded, the Owner will delete it promptly, upon request of users.

The Owner is not responsible for updating all the links that can be viewed in this Policy, therefore whenever a link is not functioning and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by that link.