PRIVACY NOTICE
and Cookie Policy
IN ACCORDANCE WITH EU REGULATION 679/2016 (GDPR) FOR THE PROCESSING OF PERSONAL DATA
LEGAL BASIS OF PROCESSING
Contractual Basis: The processing of data for "Contractual Purposes" is mandatory as it is necessary for the provision of purchased products or requested services, including the creation of a user account.
Legal Basis: Providing data for "Legal Purposes" is also mandatory as required by applicable regulations, such as tax compliance or defending the rights of the Data Controller or third parties in legal proceedings.
Consent Basis: Processing data for specific purposes such as newsletter subscription, use of contact forms, or for marketing purposes is optional and is only allowed with your consent (which can be revoked at any time). Masseria Torre del Diamante cannot proceed with services or requests from the user without this consent.
Legitimate Interest of the Controller: The Controller may process collected data for their legitimate interest within the limits of the Regulation.
Users can oppose the processing for legitimate interest purposes at any time, subject to legal limitations.
TYPES OF PROCESSED DATA
To provide services or products on the website, we collect and process only "identifying personal data," such as name, surname, date and place of birth, email, and navigation data collected through cookies (see cookie policy).
The Controller does not collect or process special categories of personal data, i.e., sensitive data, health data (including genetic or biometric data), and criminal data.
METHODS AND PURPOSES OF PROCESSING
The processing of personal data is necessary to manage relationships with website users, including the purchase of products and/or services. The collected data are processed through computer, telematic, and paper methods, protected by suitable security measures to ensure confidentiality, integrity, and recovery. Organizational and procedural measures (e.g., role distribution among staff, internal and external data processing representatives) and technical measures (e.g., backup, antivirus, firewall) are adopted.
We collect and process personal data for various purposes, strictly relevant to each requested or used service, including:
-
Contact/Information Forms: Data provided through this service are used exclusively to respond to your specific requests. The provided data will be stored only for the time necessary to fulfill your request and will be deleted from our systems afterward.
-
Customer Support: The Controller provides customer support services to assist customers before, during, and after the purchase of products/services. Some cases may require the collection of personal data to handle inquiries related to purchases, shipments, returns, legal warranty, payments, loyalty programs, etc.
-
Purchase of Products/Services: Provided data will be used for processing purchase orders and related activities (product shipment, invoicing, payment processing, etc.). The completion of the electronic sales contract will be the legal basis for processing personal data, stored for the time necessary to fulfill legal obligations related to sales activities.
-
Account Registration: With your consent, we use your personal data to allow you to create a reserved area on our website for purchases and participation in customer promotions.
DATA RECIPIENTS
Personal data are communicated to third parties only when necessary and functional to the achievement of the processing purposes related to the purchased product or requested service. The communication is carried out only after informing you and obtaining your consent if required. In general, data collected through individual services may be communicated to the following categories of subjects:
- Any Public Authority to which access to such data is granted by law;
- Data processing and IT services companies (e.g., web hosting, infrastructure and IT services management and maintenance, web agencies, etc.);
- Companies and consulting firms providing services to comply with legal requirements or protect the legitimate interests of the Controller.
Specific services provided through our website may involve communication to additional categories of subjects, such as:
- Purchase of products: Banks for payment instrument management, Paypal, shipping companies, postal and correspondence sending services.
Some navigation data may be collected by third parties like social networks when the user decides to use the respective interaction button and, in some cases, even without using the interaction service. The processing of such data is subject to the privacy policies of each third party.
DATA TRANSFER TO OTHER COUNTRIES
Personal data collected through the website are stored and kept within the national territory or in other European Union countries. Data are not transferred to non-EU countries or international organizations. If the user wishes to know the location of data storage, they can obtain this information by making a specific request to the Data Controller.
DATA RETENTION PERIOD
Data provided are kept, with appropriate security measures, for the time necessary to achieve the purposes for which they were collected, including:
- Data collected and processed for legal purposes are kept for the period required by the individual legal provision;
- Data collected to fulfill a contract are kept for the necessary time to cover the warranty period required by law and to comply with all obligations imposed by additional legal provisions.
- Data collected for user account creation are kept until the user decides to delete it.
NATURE OF DATA PROVISION
Mandatory Provision: Providing required data is always mandatory when necessary to fulfill a contract or legal purposes. In such cases, failure to provide data will prevent the Controller from fulfilling the received requests. Mandatory data entry fields in the forms on the website are marked with an asterisk.
Optional Provision: The non-provision of optional data in collection forms does not affect the obtaining of the requested service.
Voluntary Submission: When you voluntarily send an email to one of the email addresses indicated on our websites, we acquire the sender's address and any other personal data you have included in the message and attachments. Email boxes corresponding to the addresses indicated on our websites, and any other email box of the company, do not have personal nature even when they contain the name and/or surname of a natural person. They belong to the Data Controller and have the primary purpose of facilitating effective work activities within the company. By sending an email to the email addresses indicated on the website, you declare that you have read and accepted the processing conditions contained in this notice.
RIGHTS OF THE DATA SUBJECT
At any time, you can exercise the rights recognized by Regulation (EU) No. 679/2016. In particular, you can exercise, by contacting the Data Controller or the Data Processor (a list of external Data Processors can be obtained by making a specific request to the Controller):
- Right of Access (Article 15): Obtain confirmation from the data controller whether or not personal data concerning you are being processed, and, in this case, obtain a copy of the data undergoing processing.
- Right to Rectification (Article 16): Obtain the rectification of inaccurate personal data concerning you.
- Right to Erasure (Article 17) (Right to be Forgotten): Obtain the erasure of personal data concerning you.
- Right to Restriction of Processing (Article 18): Obtain the restriction of processing in certain circumstances.
- Right to Object (Article 21): Object to the processing of personal data concerning you.
- Right to Data Portability (Article 20): Receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller.
- Right to Withdraw Consent: Withdraw your consent at any time. To exercise this right, you can write to
This email address is being protected from spambots. You need JavaScript enabled to view it. . - Right to Lodge a Complaint with the Supervisory Authority: You may lodge a complaint with the competent supervisory authority for the protection of your rights, as guaranteed by Legislative Decree 196/2003 and European Regulation 679/2016 (www.garanteprivacy.it).
DATA CONTROLLER
The data controller for the personal data of users browsing the torredeldiamante.com website is Società agricola Torre del Diamante S.a.s. Contrada Sovereto, SN - 72015 Fasano (BR) - VAT: 02192010748. The Data Controller can be contacted at the registered office or by email:
We care about the protection of personal data and commit to respecting it for all visitors or customers using the torredeldiamante.com website. This notice provides concrete details on the management of the website concerning the processing of personal data of users connecting to it. Data processing is always carried out following the principles of lawfulness, transparency, and correctness, with suitable security measures to guarantee protection. Additional and specific information on the processing of personal data can be obtained by sending a request to the Data Controller using the contact form.
COOKIES POLICY
Please note that we use cookie technology on the website www.torredeldiamante.com to make the browsing experience more enjoyable for all users.
Cookies are small files that the User's visited site sends to the browser, where they are stored and then retransmitted to the same site during the next visit by the User.
Cookies are used for different purposes, including computer authentication, session monitoring, storing information on specific configurations for users accessing the server.
These allow the Site to remember user data for the duration of the visit or for subsequent visits, enabling efficient navigation, storing preferences, allowing interaction with social networks such as Facebook, Google, Instagram, and providing Google Maps services.
The processing of data is carried out with the help of electronic, or in any case, automated, computer, or telematic tools, with logics strictly related to the purposes mentioned above, and in a way that guarantees the security and confidentiality of the data.
Technical Cookies (DO NOT require Your consent)
According to current Italian regulations, express user consent is not always required for the use of cookies. In particular, technical cookies, used for the sole purpose of transmitting a communication over an electronic communications network, or as strictly necessary to provide a service explicitly requested by the user, do not require such consent. These are cookies essential for the operation of the site or necessary to perform activities requested by the user.
Among technical cookies, which do not require express consent for their use, the Italian Data Protection Authority also includes:
- Analytics cookies when used directly by the site manager to collect information in aggregated form about the number of users and how they visit the site;
- Navigation or session cookies (e.g., for user authentication, for making a purchase, etc.);
- Functionality cookies, which allow the user to browse according to a series of selected criteria (e.g., language, products selected for purchase) to improve the service provided.
Profiling Cookies (REQUIRE Your CONSENT): Our site also uses so-called profiling cookies that we can install only with your prior consent.
Profiling cookies are intended to create user profiles and are used to send advertising messages in line with the preferences expressed by the user while browsing the network. These cookies are used to present content more suitable for users and their interests. They can be used to display targeted advertising or to limit the number of times you see an ad. Due to their particular invasiveness that these devices can have within the privacy of users, European and Italian regulations provide that the user must be adequately informed about their use and express their valid consent. Profiling cookies require the acquisition of the user's prior free informed consent, which the Site acquires through the banner that appears on the first visit as well as through the extended information that allows the user to give or deny consent for specific categories of cookies.