Privacy Policy

In compliance with the obligations deriving from the national legislation (Legislative Decree 30 June 2003 No. 196, Code regarding the protection of personal data) and Community law, (European regulation for the protection of personal data No. 679/2016, GDPR ) and subsequent modifications, this site respects and protects the privacy of visitors and users, making every effort possible and proportionate so as not to damage users’ rights.
This privacy policy applies exclusively to the online activities of this site and is valid for visitors / users of the site. It does not apply to any information collected through channels other than this website.
The purpose of the privacy statement is to provide maximum transparency regarding the information the site collects and how it uses it.

Legal basis of the treatment
This site treats the data based on the consent.
With the use or the consultation of the present site the visitors and the users explicitly approve the present privacy information and consent to the processing of their personal data in relation to the methods and purposes described below, including the possible dissemination to third parties if necessary for the provision of a service.
The provision of data and therefore the Consent to collection and processing of data is optional, the User can deny consent, and can revoke consent already given at any time (via email: info@lepoggiola.com ).
However, denying consent may make it impossible to provide certain services and the browsing experience on the site may be compromised.
“Processing” of personal data means any operation or set of operations carried out with or without l use of electronic or automated means concerning the collection, recording, organization, storage, processing, modification, selection, extraction, consultation, comparison, use, interconnection, blocking, communication, dissemination, deletion and destruction of the data.
This site treats some of the data based on the legitimate interests of the data controller.

Data collected and purpose
Like all websites, this site also uses log files in which information collected in an automated manner during user visits is stored.
The information collected may be as follows:

  • internet protocol address (IP);
  • browser type and device parameters used to connect to the site;
  • name of the internet service provider (ISP);
  • date and time of visit;
  • visitor’s web page (referral) and exit;
  • country of origin;
  • possibly the number of clicks.
    The collection of data and information takes place for the following & nbsp; purposes:
  • exclusively in aggregate and anonymous form in order to verify the correct functioning of the site. None of this information is related to the natural person-user of the site, and does not allow it to be identified in any way; such information will be processed according to the legitimate interests of the owner;
  • for security purposes (spam filters, firewall, virus detection), automatically recorded data may also include personal data such as IP address, which it could be used, in compliance with the laws in force on the subject, for the purpose of blocking attempts to damage the site itself or to cause damage to other users, or in any case harmful activities or constituents of crime. Such data are never used for the identification or profiling of the user, nor crossed with other data, nor provided to third parties, but used only for the purpose of protecting the site and its users; such information will be processed according to the legitimate interests of the owner;
  • communicate the data to third parties that perform functions necessary or instrumental to the operation of the service, such as the management of comments on the site, the request for information, site maintenance, subscription request.

If the site allows the inclusion of & nbsp; comments, or in the case of specific services requested by the user (through the Contact section), the site automatically detects and records some user identification data, including the email address or possible nickname. These data are voluntarily provided by the user when the service is provided, and are processed on the basis of consent. By entering a comment or other information the user expressly accepts the privacy policy, and in particular to that the contents inserted are freely viewable also for other visitors.
The data received will be used exclusively for the provision of the requested service and only for the time necessary for the provision of the service.
The information that users of the site will deem to make public through the services and tools made available to them, they are provided by the user knowingly and voluntarily, exempting the owner of the site and the owner of the data processing from any responsibility for any violations of the laws.
It is up to the user to verify that he has the permissions for entering personal data of third parties or contents protected by national and international standards.
The data collected by the site during its operation are used exclusively for the purposes indicated above and kept for the time strictly necessary to carry out the specified activities. & nbsp; In any case, the data eg Personal data collected from the site will never be provided to third parties, for any reason, unless it is a legitimate request by the judicial authority and only in the cases provided for by law. The data, however, may be provided to third parties if this is necessary for the provision of a specific service requested by the User, or for the execution of security controls or site optimization.
The methods of processing the personal data supplied through this website they also provide for the use of manual, IT and telematic tools (including fax, telephone, e-mail and other computer and / or automated communication systems) and are such as to ensure their safety, in compliance with the principles of correctness , lawfulness, transparency and protection of the confidentiality of the data. This personal data is processed by Lisa Barsi for the time strictly necessary to achieve the purposes for which it was collected .
The personal data provided by users who forward requests for information, material or purchase through this website will be processed in order to execute the request from time to time forwarded in order to provide services or execute the contract. undersigned and for which registration is required, as well as for all other purposes indicated in this statement and may be disclosed to third parties in the event that the communication is necessary and functional for these purposes.
In particular as regards the processing of the data concerning the subscription request, copying or specific information as well as any type of contract stipulated with Lisa Barsi.
Prior consent nso of the interested parties, Lisa Barsi may process the personal data provided for commercial purposes and to carry out direct marketing actions , such as sending informative material and commercial communications or to carry out market research.
These data may be processed by staff in charge of processing by Lisa Barsi only if the processing itself is necessary for the performance of their duties, and only carrying out the operations required to carry out their duties.
For this purpose, the data provided, or part of them, may be disclosed to: related companies, persons, companies or professional firms that provide assistance and advice to Lisa Barsi in accounting, administrative, legal, tax and financial matters, subjects who are authorized to access the data a from legal provisions or orders from judicial authorities, third parties responsible for the technical functionality of the website.

Place of treatment
The data collected from the site are processed at the headquarters of the Data Controller, FATTORIA LE POGGIOLA, Via Treggiaia, 13 – 51030 Serravalle P.se (PT ) and at the datacenter of Aruba . Web hosting ( Aruba ), which is responsible for data processing, processing data on behalf of the owner , is located in the European Economic Area and acts in accordance with European standards.

COOKIE DISCLOSURE

As is customary on all websites, this site also uses cookies, small text files that allow you to keep information on visitor preferences, to improve the site’s functionality, to simplify navigation by automating procedures (eg. Login, site language) and for the analysis of the use of the site.

Session cookies are essential to distinguish between connected users, and are useful to avoid that a requested functionality can be provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain personal data and last only for the current session, ie until the browser is closed. They do not need consent.

The functionality cookies used by the site are strictly necessary for the use of the site, in particular they are linked to an express request for functionality by the user (such as Login), for which no consent is required.

By using the site, by continuing to browse the site, or by clicking OK on the banner present at the first access to the site, the visitor expressly consents to the use of cookies and similar technologies, and in particular to the registration of these cookies on its terminal for the purposes indicated above, or to access information about your terminal through cookies.

Disabling cookies
Cookies are connected to the browser used: they can be disabled directly from the browser thus refusing / revoking the consent to the use of cookies. It should be noted that disabling cookies may prevent the correct use of some functions of the site itself.

Third-party cookies
This site also acts as an intermediary for third-party cookies, used to provide additional services and features to visitors and to improve the use of the site itself, such as buttons for social media. This privacy policy does not apply to services provided by third parties, and this site has no control over their cookies, entirely managed by third parties & nbsp; and has no access to information collected through these cookies. The data transfer agreement takes place directly between the user / visitor and the third parties, while this site does not participate in any way in this transfer. As a result, information on the use of these cookies and on the purposes of the same, as well as on the methods for disabling them, are provided directly by the third parties to the pages indicated below.
In particular, this site uses cookies of the following third parties:
– Google (Google Analytics cookies): Google Analytics is a Google analysis tool that through the use of cookies (performance cookies) collects & nbsp; anonymous browsing data (truncated to the last octet) in order to examine the use of the site by users, compiling reports on site activity and providing other information, including the number of visitors and the pages visited. Google may also transfer this information to third parties where this is required by law or where such third parties process the information on Google’s behalf. Google will not associate the IP address with any other data held by Google. The data transmitted to Google is stored on Google’s servers in the United States.
Further information on Google Analytics cookies can be found on the Google Analytics Cookie Usage on Website page.
You may disable (opt-out) selectively collect data from Google Analytics by installing the appropriate component provided by Google on your browser (opt out).
For more information on the use of data and their processing by Google, it is recommended to view the information on the page prepared by Google, and on the page on How Google uses data when using sites or apps of partners.

Data transfer to countries outside the EU
This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook through social plugins and the Google Analytics service. The transfer is authorized based on specific decisions of the European Union and the Guarantor for the protection of personal data, in particular the decision 1250/2016 (Privacy Shield), for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.

Security measures

This site treats users’ data in a lawful and correct manner, taking appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the data. Processing is carried out using IT and / or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In particular, the site management software is constantly updated, and regularly scanned to detect the presence of viruses and dangerous codes.

In addition to the owner, in some cases, the categories of employees involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communication agencies).

User Rights
Pursuant to the European Regulation 679/2016 (GDPR) and to the art. 7 of Legislative Decree 30 June 2003, n. 196, the User may, in the manner and within the limits established by current legislation, exercise the rights holders:

  • object in whole or in part, for legitimate reasons, to the processing of personal data concerning him for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication;
  • request confirmation of the existence of personal data concerning him (right of access);
  • know the origin;
  • receive intelligible communication;
  • have information about the logic, methods and purposes of the processing;
  • request the updating, rectification, integration, deletion, transformation into anonymous form, blocking of data processed in violation of the law, including those that are no longer necessary for the pursuit of the purposes for which they were collected;
  • in cases of treatment based on consent, receive only the cost of any support, your data provided to the holder, in a structured and readable form by a data processor and in a form commonly used by an electronic device;
  • the right to file a complaint with the Control Authority (Privacy Guarantor);
  • as well as, more generally, to exercise all the rights that the are recognized by current legal provisions.

In the event that the data is processed on the basis of & nbsp; legitimate interests & nbsp; the rights of the interested parties to the processing are however guaranteed (except the right to portability which is not provided for by the rules), in particular the right to object to the processing which can be exercised by sending a request to the data controller.
Lisa barsi Please note that failure to provide personal data necessary and therefore marked as mandatory, could make it impossible to execute the contract, while failure to provide the data marked as non-mandatory has no consequences for the execution of the request.
The subjects involved in data processing personal may exercise their rights and request information regarding the processing of personal data by sending a communication to the e-mail address info@lepoggiola.com

Data controller and internal Data Processor
The data controller and Data Processor under the laws in force is the site administrator, Lisa Barsi, at the company’s headquarters FATTORIA LE POGGIOLA, Via Treggiaia, 13 – 51030 Serravalle Pistoiesese (PT), Italy, in the person of legal representative pro tempore, who can be contacted by sending an email to info@lepoggiola.com or by writing to Lisa Barsi, Via Treggiaia, 13 – 51030 Serravalle Pistoiese (PT), Italy.

External data processing manager
In addition to the internal treatment manager Lisa Barsi has nominated the following external data processors as web hosting.
Aruba SpA (p.iva 01573850516), with registered office in Via San Clemente n. 53 – Ponte San Pietro, 24036 (BG), is appointed as data controller, processing the data on behalf of the owner. Aruba SPA located in the European Economic Area and acting in accordance with European standards.
Google is nominated data processor, processing data on behalf of the owner (Google Analytics).

Updates
This privacy policy is updated on April 5th 2019.