PRIVACY POLICY FOR SITE VISITORS

This policy is pursuant to arts. 13 and 122 of Italian Legislative Decree 196/03, as well as in adherence to EU Regulation no. 679/2016 (henceforth “GDPR”) and the provisions of the Personal Data Protection Act, by Molino d’Isella S.r.l., owner of the website www.villanecchi.it, regarding the processing of personal data of those who access the site and make use of its services. This policy applies only to the aforementioned site and does not extend to any other sites consulted by the user via links.

It is to be understood that the processing of personal data will be carried out in accordance with the principles of art. 5 of the GDPR: lawfulness, fairness, transparency, purpose limitation, data minimisation, storage limitation, integrity and confidentiality.

TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

1) Data controller

The data controller is Molino D’Isella S.r.l., with registered headquarters in Milan, Via Lago di Nemi 25, tel. +39 0381.092601, e-mail info@villanecchi.it.

2) Browsing data

During the course of normal use, the computer systems used for the operation of this site acquire certain personal data whose transmission is implicit in the use of the communication protocols of the internet. This information is not collected in order to be associated with identified subjects, but by its nature may, through processing and association with data collected by third parties, allow for the identification of users. Included in this category are the IP addresses or domain names of the computers used by users connected to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the dimensions of the file received by way of response, the numerical code indicating the state of the server’s response and other parameters relative to the operating system and software environment of the user. This data will be used exclusively to gather anonymous statistics on the use of the site and to monitor the correct operation of the site, and will be deleted immediately after processing.

3) Data voluntarily provided by users/visitors

In cases in which a user/visitor accessing this site must provide his or her personal data in order to access specific services or submit requests, this will consist of the acquisition by Molino d’Isella S.r.l. of the email address of the sender and/or any personal data to be processed exclusively for the purposes of responding to the request or providing the service.

4) Methods of processing

Users’ personal data is processed via electronic means only for the length of time strictly necessary for the fulfilment of the purposes for which it was collected. Molino d’Isella S.r.l. employs specific security measures to prevent the loss, illicit or improper use or unauthorized access to the data. Failure to provide personal data may result in the impossibility of obtaining the requested service.

6) Location of data processing

The processing of the personal data of users of the website www.villanecchi.it takes place at the headquarters of Molino d’Isella S.r.l in Milan, Via Lago di Nemi 25, and is handled by specifically authorized personnel. No data deriving from web services shall be disclosed or disseminated to third parties. Personal data provided by users who submit requests for information or the sending of informational material are used for the sole purpose of fulfilling the service or action requested.

7) Rights of the data subject

Pursuant to art. 7 of Italian Legislative Decree 196/03 and to art. 13 of the GDPR the data subject, via the email address info@villanecchi.it, may exercise their rights regarding their personal data and in particular obtain access to their personal data from the data controller, obtain rectification, cancellation or limitation of processing and at any time may obtain information concerning it, verify whether it is accurate, supplement, update or rectify it, oppose its processing and lodge a complaint with the supervisory authority pursuant to art. 77 of the GDPR.