Privacy Policy

Dear Customer, Please be informed that your personal data will be processed lawfully, fairly and in a transparent manner and with due respect for your privacy and your rights. This section describes how to manage the personal data that the user decides to provide by filling out the forms on this websitewww.monasterofratibianchi.it owned by Monastero dei Frati Bianchi Società Agricola srl.
This information is provided in compliance with art. 13 of Regulation 2016/679 (GDPR) and art. 13 of Legislative Decree no. 196/2003 (Personal Data Protection Code) to all those interacting with this website.
This information is provided solely and exclusively for the website at issue and not for any other website that may be accessed by the user using links.

THE DATA CONTROLLER
The data controller of personal data collected through www.monasterofratibianchi.it is:
MONASTERO DEI FRATI BIANCHI SOCIETA’ AGRICOLA SRL
Località Margine – Monte dei Bianchi n. 10
54013 FIVIZZANO (MS)
PI e CF: 01396690453
in the person of its Sole Director and Legal Representative Mr. TAZZARA GIORGIO born in Casola in Lunigiana (MS) on 02/05/1970 and residing in via Volturno n. 69, 54012 Mezzana di Fivizzano (MS).
The data controller may be reached at the following email address: shop@monasterofratibianchi.it.
The list of the persons in charge of the processing is available at the owner's head office upon request to the above e-mail address.
The list of any authorised/empowered persons by the Data Controller is available at the owner's premises upon request to the above email address.
The Data Controller did not appoint a Data Protection Officer.

COLLECTED DATA
By filling in the contact forms, the user provides the Data Controller the following data:
• first and last name
• personal data
• tax code and VAT number
• address of residence/domicile/head office
• telephone and e-mail addresses

The personal data collected as directly provided by the data subject are solely used to respond to the user's requests.
They will be processed without the express consent of the user:
• conclusion of sales and/or supply contracts;
• fulfilment of pre-contractual obligations, as well as contractual and fiscal obligations arising from existing relations with the user;
• fulfilment of obligations provided for by law, a regulation, Community legislation or by an order of the Authority (e.g. anti-money laundering);
• the exercise of the owner's rights (e.g. legal protection).

Only with the express consent of the user, the supplied data will be processed for the following purposes:
• marketing and/or promotional communication by e-mail, text message, app, social media, ordinary mail and/or phone contacts, newsletters, the sending of commercial communications and/or advertising material on products and/or events offered and organised by the owner.

PURPOSE OF THE PROCESSING
The provision of personal data is justified by contractual or pre-contractual requirements or the fulfilment of legal obligations to which the Data Controller is subject. For this reason, any refusal to process, or any lack of, incorrect or partial provision of data may lead to the impossibility of a proper provision of the service or the impossibility for the Data Controller to respond to information requests sent by the data subject.
The provision of data in order to receive newsletters for promotional, commercial, information or research purposes is optional and the refusal to give consent to the processing of data will result in the impossibility to be updated on commercial initiatives and/or promotional campaigns, and to receive offers or other promotional material.

DATA PROCESSING LOCATION AND RECIPIENTS - DATA COMMUNICATION
The data processing related to the web services of this site is carried out at the headquarters of the Azienda Agricola, Data controller, and they are only handled by internal staff authorized to process them or by external personnel (e.g. third party technical service providers, agents, postal couriers, computer companies, consultants and other professionals, banks, debt collection companies, etc..) appointed, if necessary, from time to time, as data processors under Article 4 no. 8) GDPR which defines a data processor as a natural or legal person, public authority, service or other body that processes personal data on behalf of the Data Controller. In any case, the communication is intended to ensure the provision of the services requested by the user, their fulfilment and related services.
Users may always ask the Data Controller for the updated list of data processors by sending an e-mail to shop@monasterofratibianchi.it.
Except for the above cases, the user's personal data are not disclosed to third parties unless:
• the disclosure is essential to provide the service or product requested by the user;
• the disclosure is necessary to third parties working with the Azienda Agricola to provide the service or the product requested by the user (in this case, only the essential data for the provision of the service or the supply of the product will be disclosed and the same and are prohibited from using that data for any other purpose);
• it is required by law.

PROCESSING METHODS
Personal data may be processed (i.e. collected, recorded, organised, structured, stored, consulted, extracted, processed, modified, selected, used, transmitted, compared, interconnected, deleted, destroyed) by means of both paper and computer files and processed by automated decision-making processes, including profiling, in order to fulfil the above-mentioned purposes.
Specific security measures are in place to prevent data loss, unlawful or incorrect use and unauthorised access.
The processing is deemed to be applicable until the user unsubscribes, through the "unsubscribe" option in the footer each email, or after twelve months from the last communication of which the Data Controller has evidence of direct interaction (click, open, reply, etc.).

RETENTION PERIOD The user's personal data processed for the above purposes will be retained for the duration of the contract and, thereafter, for as long as the Data Controller is required to keep them for tax or other purposes required by law or regulation. In particular, with reference to marketing/promotion purposes, the retention period for personal data acquired will be 10 years.

WITHDRAWAL OF CONSENT
The data subject may withdraw his/her consent to receive promotional or commercial communications immediately by sending an e-mail request to shop@monasterofratibianchi.it or by clicking on the unsubscribe link in the footer of each promotional or commercial e-mail sent.

DATA TRANSFERS
Personal data are not transferred to a third country outside the EU.

DATA SUBJECTS' RIGHTS
Pursuant to Articles 15-21 of EU Regulation 2016/679, each data subject is granted a set of rights.
Right of access: Pursuant to Article 15, the data subject has the right to obtain confirmation that his/her personal data are being processed and, where appropriate, to have a copy thereof. He/she also has the right to obtain access to his/her personal data as well as to further information such as the purpose of the processing, the recipients’ categories, the period of data retention and any rights that can be exercised.
Right of rectification: Pursuant to Article 16, the data subject has the right to obtain the rectification or completion of his/her inaccurate personal data.
Right of erasure: the data subject has the right to obtain without delay the erasure of his/her personal data if one of the reasons set out in Article 17 applies. 17.
Right of restriction: the data subject has the right, in the cases provided for in Article 18, to obtain restriction of processing.
Right of data portability: the data subject has the right to receive in a structured, commonly used and machine-readable format the personal data concerning him/her and has the right to transmit such data to another data controller without hindrance, in accordance with Article 20.
Right of objection to processing: the data subject has the right to has the right to object to the processing of personal data relating to him in accordance with Article 2. 21.
The data subject is also entitled to lodge a complaint with the competent supervisory authority, the Italian Data Protection Authority (Garante della Privacy).
Requests referred to above should be addressed in writing to the Data Controller at the following e-mail address: shop@monasterofratibianchi.it. The Data Controller will, within the deadlines laid down by current legislation, provide a timely response to the data subject's requests to exercise his/her rights.
Any clarification or enquiry may be addressed in writing to the Data Controller at the following address: shop@monasterofratibianchi.it.

UPDATES AND MODIFICATIONS The Data Controller reserves the right to rectify, complete or periodically update this information notice pursuant to applicable legislation or the measures adopted by the Italian Data Protection Authority.
The aforementioned amendments or additions will be brought to the attention of those concerned. We invite users to view the Privacy Policy regularly, to check the updated information and decide whether or not to keep using the services offered.