Information concerning the handling of personal data

Documento informativo ai sensi e per gli effetti di cui all’articolo 13 Regolamento (UE) 2016/679 (GDPR)

WHY THIS INFORMATION
Accordingly to Regulation (EU) 2016/679 (hereinafter "GDPR"), this page describes how we process personal data. This information is provided pursuant to Article 13 GDPR. The information does not apply to other third-party websites that may be consulted via links on this website, for which no liability is accepted.

Personal data that can be processed
Personal data shall mean any information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30 GDPR).

Contractor/user data.
Browsing data
The computer systems and software procedures used to operate this site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment.

Data communicated voluntarily
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the filling in of data collection forms entails the subsequent acquisition of the sender's address, which is necessary to reply to requests, as well as any other personal data entered.

Information about the processing of personal data carried out through social media platforms
With regard to the processing of personal data carried out by the managers of the Social Media platforms used by the Controller, please refer to the information provided by them through their respective privacy policies. The Owner processes the personal data provided by users through the pages of the dedicated Social Media platforms, in order to manage interactions with users (comments, public posts, etc.) and in compliance with the regulations in force.

Specific disclosures
Specific information may be present on the pages of the Site in relation to particular services or processing of the data provided.

Cookies and other tracking systems. What are they? What are they used for?
For Cookies and other tracking systems see the cookies policy in the site footer and at the following link.

1. WHO IS THE DATA CONTROLLER? HOW TO CONTACT HIM?
The data controller is Acetificio Mengazzoli snc di Mengazzoli Giorgio & C. with registered office in Via della Costituzione, 41-43 - 46010 - Levata di Curtatone (Mantova) Partita Iva 01693940205 in the person of its pro-tempore Legal Representative, who may be contacted for any information by e-mail at: privacy@mengazzoli.it

2. PURPOSE OF PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD AND NATURE OF PROVISION OF DATA

PURPOSE OF THE PROCESSING	LEGAL BASIS	DATA RETENTION PERIOD	PROVISION OF DATA
User navigation on this website , response to enquiries and contact	The processing is necessary for the purposes of pursuing the legitimate interests of the data controller or a third party, provided that the interests or the fundamental rights and freedoms of the data subject requiring the protection of personal data are not overridden, having regard to the reasonable expectations of the data subject and the activities strictly necessary for the operation of the site and navigation itself (Art. 6(1)(f) and C47 of the GDPR)	Browsing data will be stored for the duration of the browsing session on the site.	The provision of data is necessary for normal navigation on the Controller's site.

3. TO WHOM WILL PERSONAL DATA BE DISCLOSED? RECIPIENTS OF THE DATA
Personal data will be communicated, also on the basis of the purposes envisaged in specific areas, to subjects who will process the data as autonomous Data Controllers, or Data Processors (art. 28 GDPR) and processed by natural persons (art. 29 GDPR) acting under the authority of the Data Controller and Data Processors on the basis of specific instructions given regarding the purposes and methods of processing, for specific purposes on the basis of the area of reference. The data will be communicated to recipients belonging to the following categories

Subjects based in Italy, who provide services, including e-mail, host and website management;
Freelancers, firms or companies in the context of assistance and consultancy relationships;
Authorities responsible for fulfilling legal obligations and/or provisions of public bodies, upon request

The list of Data Processors is available by writing to privacy@mengazzoli.it or to the other addresses indicated above.

5. WILL DATA BE TRANSFERRED TO NON-EEA COUNTRIES?
Personal data will not be transferred to non-EEA countries.

6. IS THERE AN AUTOMATED PROCESS?
Personal data will be subject to traditional manual, electronic and automated processing. Please note that no fully automated decision-making processes are carried out.

7. WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?
You may exercise your rights as expressed in Art. 15 et seq. GDPR, by contacting the Data Controller at the e-mail address privacy@mengazzoli.it, or at the contacts listed above or. You have the right, at any time, to request access to your personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18). The data controller shall inform (art. 19) each of the recipients to whom the personal data have been transmitted of any rectification or erasure or restriction of processing carried out. The controller shall inform the data subject of these recipients if the data subject so requests. In the cases provided for, you have the right to the portability of your data (Art. 20), in which case they will be provided to you in a structured, commonly used and machine-readable format. You have the right to object (Art. 21), at any time, to the processing of your data based on legitimate interest, and in cases where the legal basis is consent, you have the right to revoke the consent given without prejudice to the lawfulness of the processing based on the consent before revocation.
In the event that he/she considers that the processing of personal data carried out by the Controller is in breach of the provisions of Regulation (EU) 2016/679, the data subject has the right to lodge a complaint with the Supervisory Authority, in particular in the Member State in which he/she normally resides or works or in the place where the alleged breach of the Regulation occurred (Garante Privacy https://www.garanteprivacy.it/), or to take appropriate legal action.

8. CHANGES TO THE INFORMATION NOTICE
The Data Controller reserves the right to modify, update, add or remove parts of this policy. In order to facilitate verification and modification of the text, the information notice will contain the date of update.