INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA pursuant to EU Regulation 679/2016 (GDPR)
IMPORTANT INFORMATION: As of 25 May 2018, European Regulation 679/2016 (GDPR), establishing the general regulations for personal data protection, has become fully applicable. This represents an important step which imposes the same rules regarding the processing of personal data on all countries in the European Union. Farchioni Olii S.p.A. considers the protection of the personal data of natural persons to be a fundamental principle, and respect for this is a primary objective which management must be based upon.
CONTACT DETAILS OF THE CONTROLLER Farchioni Olii S.p.A., with registered office in Giano dell’Umbria (PG), Via B. Buozzi, No. 10, Postcode 06030
Tel. 0039 074292951 – Fax: 0039 0742929595
email address: farchioni@farchioni.com
certified email address: farchionioliispa@legalmail.it
1) RIGHTS OF DATA SUBJECTS AND HOW TO EXERCISE THEM
The Regulation recognises the following rights of data subjects, which the latter may exercise in respect of and against the controller and all joint controllers.
- Right of Access: Article 15 of the EU Regulation grants you the right to obtain from the controller confirmation as to whether or not data concerning you are being processed, and, where that is the case, access to the data.
- Right to Rectification: Article 16 of the EU Regulation grants you the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- Right to Erasure: Article 17 of the EU Regulation grants you the right to obtain from the controller without undue delay the erasure of personal data concerning you, if any of the grounds provided for in the legislation applies.
- Right to Restriction: Article 18 of the EU Regulation grants you the right to obtain from the controller restriction of processing where one of the grounds provided for in the legislation applies.
- Right to Object: Article 21 of the EU Regulation grants you the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to point e) or f) of article 6, paragraph 1, including profiling based on those provisions.
- Right to Data Portability: Article 20 of the EU Regulation grants you the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from the controller to which you provided the personal data, in accordance with the conditions set out in the legislation.
- Right to Withdraw Consent: Article 7 of the EU Regulation grants you the right to withdraw your previously granted consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
- Right to Lodge a Complaint: Article 77 of the EU Regulation grants you the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the Regulation.
A full version of the above-cited legal articles is available from the IT Office. This office will also be able to provide data subjects with all of the explanations they may need regarding the exercise of their rights. Requests may be sent in writing, together with a valid identification document, to the following address: Ufficio IT Via Madonna del Puglia, 1, 06035 Gualdo Cattaneo (PG), Italy.
PRIVACY POLICY
The processing of the personal data communicated through this website by visitors to FARCHIONI OLII S.P.A. shall be conducted as follows. FARCHIONI OLII S.P.A. is the Data Controller of the personal data communicated to it by visitors to this website. These data shall be used by FARCHIONI OLII S.P.A. for the purposes for which the data subject whom they regard has provided consent. Anybody who provides their personal data to FARCHIONI OLII S.P.A., authorising the processing thereof for a specific purpose, may, at any time, exercise their rights pursuant to EU Regulation 679/2016 regarding personal data protection (“GDPR”), art. 13 (below), by contacting the following address: FARCHIONI OLII S.P.A., Servizio Consumatori – Via Madonna del Puglia, 1, 06035 Gualdo Cattaneo, Perugia, Italy. FARCHIONI OLII S.P.A. derives anonymous information and data through this website (browser type, geographic location, time and date), which it processes — also using cookies — to ensure the best management and optimisation of the website, as well as for statistical purposes and to gather more information on its products and their consumption. This information may be stored on servers located in Italy or on FARCHIONI OLII S.P.A. central servers located overseas, but shall not in any case be disclosed by the data controller or by its processors to third parties, or used to contact visitors to the website unless they have requested or consented to such. The communication of personal data regarding a minor must be carried out by a parent or by a person with parental responsibility for the minor.
1. DATA CONTROLLER — The party with responsibility for deciding the purposes and methods used in processing personal data is Farchioni Olii S.p.A., with registered office in (06030) Giano dell’Umbria (PG) Italy, Via B. Buozzi, No. 10, VAT No. 00522110543.
2. JOINT CONTROL – ENTRUSTMENT TO THIRD PARTIES — Where joint control exists, the controller ensures that the principles below are respected by means of a joint control agreement. Where personal data processing activities are entrusted to third parties, the controller ensures that the principles below are respected by means of a service agreement.
3. ORGANISATION — The data controller shall organise its resources and the processing of personal data in a way that ensures respect for the requirements of the GDPR and national legislation in the field. Specifically: a) within the company:
- The organisation in terms of privacy reflects operational organisation – responsibilities are consistent with the operational tasks, powers and authorities connected with them.
- The natural persons entrusted with responsibilities and tasks of particular importance (considering the quantity and categories of personal data and the risks to the rights and freedoms of natural persons) are chosen, identified and appointed on the basis of objective criteria which define the company’s requirements in terms of expertise, capability and experience. In the absence of specific qualifications, the requirements and weightings for assessment shall be pre-defined.
- The persons who process the data operate under the direct authority of the controller or a processor appointed by the controller. Employees are duly trained and instructed according to a continuous training programme which takes into account the different needs related to the different roles filled.
- -The controller directs and supervises all those who process personal data on its behalf.
b) outside the company:
- parties entrusted with personal data processing activities are chosen, identified and appointed on the basis of a transparent, prearranged process that guarantees: objectivity in the selection; the supplier’s possession of the necessary capabilities and professionalism required by the organisation; the supplier’s possession of sufficient guarantees to put in place adequate technical and organisational measures so as to ensure processing meets the requirements of the GDPR and guarantees the protection of the rights of the data subject.
- Relationships with third parties who process data on behalf of the controller are always formalised in writing. The contract in question meets the minimum requirements set out in article 28 of the GDPR.
- The controller directs and supervises all those to whom it delegates processing activities.
4. STAKEHOLDERS— The controller processes the personal data of the following a) categories of natural persons:
- fornitori
- employees
- self-employed professionals
- users
- suppliers
b) categories of indirectly impacted subjects:
- family members of employees or users
- creditors of employees
- beneficiaries of employees
c) institutions / entities impacted:
- trade unions
d) other
5.COMPANY PRIVACY CULTURE — For Farchioni Olii S.p.A., the ability to protect personal data is not so much a mere legal obligation as it is a competitive asset and requirement to prioritise. In line with the accountability principle imposed by the GDPR, the company ensures the compliance of its processing of personal data with the GDPR by taking an approach based on the risks and how they are handled. For the company, respect for the rights, freedoms and data of natural persons is an irrefutable ethical imperative, which drives all of its the activities.
6.LAWFULNESS — Farchioni Olii S.p.A. carries out personal data processing exclusively when founded on one of the legal bases given in article 6 of the GDPR (consent, performance of contractual obligations, vital interests of the data subject or of third parties, compliance with a legal obligation to which the controller is subject, public interest or the exercise of official authority, overriding legitimate interests of the controller or of third parties to whom the data have been communicated). The company processes special personal data (specifically, those which may reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, and data concerning the health, sex life or sexual orientation of a natural person) only in the case that one of the circumstances provided for in article 9.2 of the GDPR applies. The company processes personal data relating to criminal convictions and offences or to related security measures only on one of the legal bases given in article 6.1 of the GDPR, and only under the supervision of a public authority or when the processing is authorised by a Union or Member State law which provides appropriate safeguards for the rights and freedoms of data subjects.
7. FAIRNESS — The company processes personal data exclusively for specified, explicit and legitimate purposes, without unfairness or deception towards data subjects, abiding strictly within the limits of the legal basis which legitimises the processing.
8. TRANSPARENCY — The company shall take appropriate measures to provide the data subject with all the information referred to in articles 13 and 14 and the notifications as per articles 15 to 22 and article 34 relating to processing in a concise, transparent, intelligible and easily accessible form, using clear, simple language. Specifically, for every processing activity that the company carries out, it notifies data subjects of the ways in which personal data concerning them are collected, used, consulted or otherwise processed and to what extent the personal data are or will be processed. Information and notifications regarding the processing of such personal data must be easily accessible and comprehensible.
9. PURPOSE LIMITATION — Farchioni Olii S.p.A. processes personal data for specified, explicit and legitimate purposes, and ensures that processing is not incompatible with these purposes.
10. DATA MINIMISATION — The personal data processed by Farchioni Olii S.p.A. are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
11. ACCURACY — The personal data processed by Farchioni Olii S.p.A. are accurate and, where necessary, kept up to date, with every reasonable measure taken to ensure that data which are inaccurate with regard to the purposes for which they are processed shall be erased or rectified without delay.
12. STORAGE LIMITATION — Farchioni Olii S.p.A. stores personal data in a form which permits the identification of the data subjects for no longer than is necessary for the purposes for which the personal data are processed.
13. INTEGRITY AND CONFIDENTIALITY — Farchioni Olii S.p.A. processes personal data in a way that ensures adequate security for them, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, through appropriate technical or organisational measures.
14. DATA PROTECTION BY DESIGN AND BY DEFAULT — Farchioni Olii S.p.A. takes a methodological approach to all projects, in accordance with which the protection of personal data must be considered even during the planning stage. Therefore, for any project, whether structural or conceptual, the protection of personal data must be taken into consideration from the moment of planning, and solutions for such protection must be put in place. The company implements appropriate technical and organisational measures for ensuring that, by default, only the personal data which are necessary for each specific purpose of the processing are processed. In particular, the technical and organisational measures implemented aim to ensure that, by default, the personal data are processed in accordance with the specific purpose of the processing.
15. OBLIGATORY NATURE — Failure to abide by the principles contained in this document, or by any directives, instructions, requests or orders which may be issued by the company with regard to the protection of personal data and compliance with current legislation constitutes a serious breach.
16. REVISIONS — This document has been approved by the Board of Directors and drafted by the Data Controller, who is responsible for updating and disseminating it.
3. VISITOR ACCESS TO THIS WEBSITE IS SUBJECT TO THE FOLLOWING CONDITIONS
Visitor access to this website is subject to the following conditions. The information, logos, graphic elements, sounds, images, trademarks and anything else published and/or reproduced on this website are the property of (or have been granted by third parties for the use of) FARCHIONI OLII S.P.A. or to companies of the FARCHIONI OLII S.P.A Group. The reproduction of any website contents is permitted exclusively with the written authorisation of FARCHIONI OLII S.P.A. Therefore, it is forbidden to alter, copy, reproduce, disseminate, broadcast or spread the contents of this website without authorisation. In particular, it is forbidden to copy the computer programs (software) which ensure the running of this website, to create similar programs, and to trace and/or use the source code of these programs. FARCHIONI OLII S.P.A. and the other companies of the FARCHIONI OLII S.P.A. Group do not guarantee that the information contained on this website shall be constantly updated, nor may they be held liable for any damages, including infection by computer viruses, which visitors’ devices may suffer as a result of accessing and/or connecting with this website or from downloading its contents. The links present on this website may lead visitors to web pages located on sites other than this one. In such cases, FARCHIONI OLII S.P.A. accepts no liability in relation either to the content of the material published on such websites and the use that third parties may make of it, or to any damage that may be caused or triggered upon accessing such websites, connecting to them or downloading their content. All personal information sent to the FARCHIONI OLII S.P.A. website shall be processed in compliance with privacy laws. All non-personal information communicated to FARCHIONI OLII S.P.A. through this website (including suggestions, ideas, designs, plans, etc.) shall confer upon this company and all the companies of the FARCHIONI OLII S.P.A. Group the exclusive, unlimited and irrevocable right to use, reproduce, display, execute, alter, broadcast and disseminate said non-personal information. By communicating such information, it is automatically transferred free of charge, exclusively and with the broadest range of rights and powers to FARCHIONI OLII S.P.A. and to the companies of the FARCHIONI OLII S.P.A. Group. The legislation in force in the Italian Republic applies to this website.
4. THE USE OF COOKIES ON THIS WEBSITE
General information, deactivating and managing cookies Cookies are data files sent from websites and stored by the internet browser on the user’s computer or other device (for example, tablets or smartphones). Technical Cookies and third-party cookies may be installed by our website or by related subdomains. In any case, users can manage cookies — i.e. request the general deactivation or deletion of cookies — by altering the settings of their internet browser. However, such deactivation may slow down or prevent access to certain parts of the website. The settings to manage or deactivate cookies may vary depending on the internet browser being used. Therefore, for further information on how to carry out these actions, we advise users to consult the manual for their device or the “Help” function of their internet browser. The following links are provided for users to learn how to manage or deactivate cookies for the most commonly used internet browsers:
- Internet Explorer https://support.microsoft.com/en-gb/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
- Google Chrome: https://support.google.com/chrome/answer/95647
- Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
- Safari: https://support.apple.com/kb/PH19255
Technical cookies
Technical cookies are cookies necessary to send communications via electronic communications networks, i.e. cookies strictly necessary to allow the supplier to perform the service requested by the client. Their use allows our website to be utilised securely and efficiently. Session cookies may be installed to allow access to and navigation within the restricted area of the portal as an authenticated user. Technical cookies are essential to enable our website to operate correctly, and are used for the purpose of allowing users to navigate normally and avail themselves of the advanced services available on our website. The technical cookies used can be divided into session cookies, which are stored exclusively for the duration of the browsing session, until the browser is closed; and permanent cookies, which are stored in the memory of the user’s device until they expire or are deleted by the user him/herself. Our website uses the following technical cookies:
- Technical navigation or session cookies, used to ensure the user can be authenticated and navigate normally;
- Technical functional cookies, used to memorise the customised settings chosen by the user such as, for example, language;
- Technical analytics cookies, used to gather information on how users behave on our website, in order to assess and improve its performance.
Third party cookies
Third-party cookies may be installed. These are analytics cookies and profiling cookies from Google Analytics, Google Doubleclick, Criteo, Rocket Fuel, Youtube, Yahoo, Bing and Facebook. These cookies are sent to our website by the websites belonging to the above external third parties. Third-party analytics cookies are used to gather information about how users behave on the website. The information is gathered anonymously, for the purpose of monitoring website performance and improving its usability. Third-party profiling cookies are used to create user profiles, for the purpose of displaying advertising messages which reflect the choices expressed by individual users. The use of these cookies is governed by the rules established by the third parties themselves. Therefore, users are advised to view the privacy policies and instructions for managing or disabling cookies published on the following web pages:
For Google Analytics cookies:
– privacy policy: https://policies.google.com/privacy?hl=en
– instructions for managing or disabling cookies: https://support.google.com/accounts/answer/61416?hl=en
For Facebook cookies:
– privacy policy: https://www.facebook.com/privacy/explanation
– instructions for managing or disabling cookies: https://www.facebook.com/help/cookies/
For Youtube cookies:
-privacy policy: https://about.youtube/#community-guidelines
– instructions for managing or disabling cookies: https://support.google.com/accounts/answer/61416?hl=en
Per cookie di Google Analytics:
– privacy policy: https://www.google.com/intl/it/policies/privacy/
– indicazioni per gestire o disabilitare i cookie: https://support.google.com/accounts/answer/61416?hl=it
Per cookie di Facebook:
– privacy policy: https://www.facebook.com/privacy/explanation
– indicazioni gestire o disabilitare i cookie: https://www.facebook.com/help/cookies/
Per cookie di Youtube:
-privacy policy: https://www.youtube.com/intl/it/yt/about/policies/#community-guidelines
– indicazioni per gestire o disabilitare i cookie: https://support.google.com/accounts/answer/61416?hl=it
Profiling cookies
The Data Controller may use so-called web analytics software to install profiling cookies, which are used to prepare detailed analysis reports in real time related to the following information: visitors to a website, the search engines that led them there, the key words used, the language used, the most-visited pages.
These cookies may gather information and data such as the IP address, nationality, city, date/time, device, browser, operating system, screen resolution, source navigated from, pages visited and number of pages, length of the visit, number of visits made.
These data may be used by the Data Controller in compliance with and within the limits prescribed by current legislation and the provisions of the Policy.