PRIVACY POLICY
The purpose of this document is to provide you with the maximum transparency regarding the information collected through the Website and how this information is processed, in accordance with the European Regulation 2016/679 (hereinafter “GDPR“), as well as the national legislation in force.
- DATA CONTROLLER
Il Borro S.r.l. – Societá Agricola, Loc. Borro 1 – 52024 San Giustino V.no (hereinafter “Data Controller” or “Company”).
You may contact the Data Controller at its offices or by sending an e-mail to: ilborro@ilborro.it
Dal Borro S.r.l., a company based in
Viale Europa 23, 52024, San Giustino Valdarno P.IVA/CF 01692160516
- TYPE OF DATA COLLECTED AND PROCESSED
The personal data processed are those that you have entered on the Websites, communicated to or legitimately obtained by the Data Controller. A description of the types and methods of data processing relating to the Websites is provided below.
Browsing data/Website operation
The computer and IT systems and software procedures used to operate the websites acquire certain data in the course of their normal operation, the transmission of which is implicit in the use of web communication protocols.
This category of data includes, for example, IP addresses, the date and time of access, the pages visited (URI/URL), the numerical code indicating the status of the response given by the server, the method used in submitting the request to the server, the names of the devices used to connect to the sites and other parameters relating to the user’s operating system and computer environment.
Personal data provided voluntarily by the user
Some sections of the Websites require certain personal data, for example, to enable you to subscribe to the newsletter or register on the Websites.
Browsing data (cookie)
Tracking takes place through a code executed within the websites both at server level (e.g. services, procedures) and at client level (e.g. tags, pixels), also with the support of code installed on your browser (e.g. cookies).
With regard to the purpose and management of tracking consents, please refer to the specific “Cookie Policy” section of the single Website.
Location data
Websites may collect, following your specific authorisation, (approximate) location data provided by your IP address, in order to provide location-based services.
- PURPOSES OF THE PROCESSING, LEGAL BASIS AND DATA RETENTION PERIOD
The Data Controller processes your Personal Data for the following purposes, legal bases and retention periods:
- Website operation and provision of the services offered, in order to obtain anonymous statistical information on the use of the Website and to monitor its proper functioning:
- Legal basis: execution of a contract of which the user is a party of;
- Retention period: for the entire duration of the Website navigation. Please consult the Cookie policy for further information;
- management of purchases of goods and services and management of user requests and support relating, for example, to payments, shipments of purchased products or services, and user registration on the Website or subscription to services offered by the same:
- Legal basis: execution of a contract of which the user is a party of;
- Retention period: for the contractual duration and, after termination, for the ordinary limitation period to a maximum of 10 years.
- account creation and management
- Legal basis: execution of a contract of which the user is a party of;
- Retention period: for the contractual duration and, after termination, for the ordinary prescription period to a maximum of 10 years.
- fulfilment of administrative and accounting legal obligations:
- Legal basis: fulfilment of a legal obligation to which the Data Controller is subject;
- Retention period: data are processed within the terms provided by law (10 years for administrative and accounting purposes);
- marketing purposes, such as, for example, sending promotional and commercial communications relating to services/products offered by the Company or notification of events, as well as carrying out market and statistical analyses:
- Legal basis: your Consent, which is optional, free and revocable at any time;
- Retention period: Personal and contact data are stored until consent is revoked, and data concerning purchase details for up to 24 months after their collection;
- profiling purposes, such as, for example, analysing your preferences, habits, interests, behaviour, products purchased in order to send you commercial communications, offers and services tailored to your needs/preferences, as well as to suggest other products in line with your preferences and previous purchases:
- Legal basis: your Consent, which is optional, free and revocable at any time;
- Retention period: Personal and contact data are stored until consent is revoked, and data concerning purchase details for up to 24 months after their collection;
- prevention and suppression of fraud/abuse/fraudulent activities carried out through the Website:
- Legal basis: legitimate interest of the Data Controller;
- Retention period: Personal data are stored in our systems for the technical time strictly necessary and are subsequently deleted or rendered anonymous;
- ascertain, exercise or defend the rights of the Controller in court:
- Legal basis: legitimate interest of the Data Controller;
- Retention period: Personal data are stored for the duration of the complaint and/or extrajudicial and/or judicial proceedings until the exhaustion of legal remedies and/or appeal proceedings.
All the above-mentioned purposes and the related personal data processing activities are carried out by Il Borro S.r.l., with the exception of the processing operations carried out in pursuit of the purposes referred to in point b), for which Dal Borro S.r.l acts as Data Controller. The purposes referred to in points d) g) and h) may also be pursued by Tuscan Bistro Il Borro S.r.l. as independent data controller.
- NATURE OF THE PROVISION OF DATA
Except for browsing data, which are necessary for the functioning of computer and IT protocols, the provision of personal data by users is free and optional. However, failure to provide the data requested and marked as mandatory will necessarily result in the inability to render the service requested by the user.
- DATA RECIPIENTS
Your Personal Data are processed by employees, collaborators of the Data Controller or external parties, as authorised persons and data processors, who perform tasks of a technical and organisational nature on behalf of the Data Controller, acting on the basis of specific instructions provided by the Data Controller.
- TRANSFER OF PERSONAL DATA TO EXTRA EU COUNTRIES
Personal Data is not transferred outside the European Union.
- DATA SUBJECT RIGHTS
You may contact the Data Controller writing an e-mail to: ilborro@ilborro.it or (°) to request access to the personal data relating to you, their deletion, the rectification of inaccurate data, the integration of incomplete data, the portability of the data, the restriction of processing in the cases provided for by Article 18 GDPR, as well as the objection to processing in cases of legitimate interest of the data controller.
For the management of consents, please read our “Privacy Policy” or the details provided in the “Profile” section of your account.
You also have the right to lodge a complaint with the competent supervisory authority in the Member State where you normally reside or work or in the State where the alleged infringement occurred.
Last Update: 01 August 2022