• Home
• Company
• Location
• Bagno Vignoni & the Events
• Price List
• Privacy policy

PRIVACY

Information on the processing of personal data

As required under art. 13 of EU Regulation 2016/679, “concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data and which repeals Directive 95/46 / EC”

Welcome to cosepreziose.eu. Please read carefully our Privacy Policy, which applies in any case when you access the website and decide to browse within it and use its services regardless of the purchase of products. Please also read the General Conditions of Use of cosepreziose.eu because they contain important information on privacy and on the security systems adopted by the website. Our privacy and cookies regime is adapted to the GDPR EU Reg. 2016/79 and to the relative implementation rules.

Holder of the processing of personal data

Cose Preziose, sole proprietorship by Livia Scognamiglio, with registered office in San Quirico d'Orcia (SI), via dei Mulini n. 20, fraz. Bagno Vignoni (tax code SCGLVI57R47L259T - VAT number: 00844440529) as Data Controller (hereinafter, "Owner" or "Cose Preziose"), informs you that, pursuant to art. 13 EU Regulation 2016/679, will use your personal data (the "Data") in a lawful, correct and transparent manner in accordance with the provisions of current legislation, in the manner and for the following purposes:

A) Purpose of the processing

1. The data you communicated will be acquired - within the normal activity of Cose Preziose - for the following purposes:
1.1.2) without your express consent, for the following Service Purposes:

• to conclude contracts for the services provided by the Data Controller;
• fulfill the appropriate requirements by law, by a regulation, by community legislation or by an order of the Authority (with regard to money laundering);
• exercise the rights of the owner, for example the right to defense in court;

1.1.3) only with your specific and distinct consent (ex art. 7 of the GDPR), to send you by e-mail communications, information and advertising material concerning events and services promoted by Cose Preziose.

B) Treatment of special categories of personal data

The Data Controller, in respect of what is necessary for the pursuit of the purposes referred to paragraph A), may also become aware of data that the Regulation defines as particular (e.g. data suitable for detecting racial and ethnic origin, religious beliefs or philosophies, trade union membership, as well as genetic data, biometric data, data relating to the health or sexual life or sexual orientation of the person). These special data may be processed with the explicit consent of the person concerned, or, even in the absence of this explicit consent: i) if the processing is necessary to protect the vital interests of the interested parties or of another person, if the interested party is physically or legally incapable of giving his / her consent; ii) if the processing concerns personal data made manifestly public by the interested party; iii) to ascertain, exercise or defend a right in court; iv) if the processing is necessary for reasons of significant public interest on the basis of Union or Member State law, which must be proportionate to the intended purpose, respect the essence of the right to data protection and provide for appropriate and specific actions to protect the fundamental rights and interests of the data subject; v) if the processing is necessary for the purposes of preventive medicine or medicine, diagnosis, health or social assistance or therapy, or management of health or social systems and services on the basis of Union or Member State law or in accordance with the contract with a health professional, subject to the conditions and guarantees referred to in paragraph 3 of the GDPR on privacy; (vi) where the processing is necessary for reasons of public interest in the public health sector, such as protection from serious cross-border threats to health or the guarantee of high standards of quality and safety of healthcare and medicines and devices doctors, on the basis of Union or Member State law which provides for appropriate and specific measures to protect the rights and freedoms of the data subject, in particular professional secrecy; vii) if the processing is necessary for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89, paragraph 1 of EU Regulation 2016/679, on the basis of Union or national law, which it is proportionate to the purpose pursued, respects the essence of the right to data protection and provides for appropriate and specific measures to protect the fundamental rights and interests of the data subject. In any case, any particular data acquired will be processed in full compliance with what is established in this field by the Regulation, as well as in compliance with the provisions (general and particular) adopted on the subject by the Privacy Guarantor and, in any case, with the utmost confidentiality. The particular data will not be disseminated and may be disclosed to the recipients referred to in paragraph C) exclusively for the pursuit of the stated purposes and in compliance with the confidentiality obligations indicated above.

C) Methods of data processing

All processing operations will be carried out by Cose Preziose in order to guarantee the integrity, confidentiality and availability of personal data. This treatment may be carried out using manual, IT and telematic tools, with full respect for the current legislation.

D) Transfer of data

The personal data of the interested party will not be disseminated (except for the above) and will not be transferred to any foreign country. These data will be stored in databases protected with appropriate security measures at the Data Controller (and any Manager where appointed) of the Treatment who has provided adequate guarantees, as required by art. 46 EU Regulation 2016/679.

E) Nature of the provision

Without prejudice to the personal autonomy of the person concerned, the indication of the name, place and date of birth, address, telephone number of the latter is necessary to achieve the purposes referred to in paragraph A), point 1.1.2) above. The provision of data for the purposes referred to in paragraph A), point 1.1.3) is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive text messages, newsletters, commercial communications and advertising material relating to the Services offered by the Data Controller. However, you will continue to be entitled to the Services referred to in paragraph A), point 1.1.2.

F) Consequences of failure to provide data

Failure to provide the data marked as mandatory will result in: the inability to establish or continue the relationship, or to carry out some operations, if the data are necessary for the realization; the impossibility of carrying out some operations that require the communication of data to subjects functionally connected to the execution of the same; failure to communicate data to subjects who carry out other activities, even if not functionally related to the execution of the relationship.

G) Data retention period

The data provided will be kept for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 (ten) years from the termination of the relationship, provided that the informed consent of the interested party has been validly acquired for the aforementioned purposes. After this deadline, the data will be deleted or transformed into anonymous form, unless their further conservation is necessary to fulfill legal obligations or to comply with orders given by Public Authorities and / or Supervisory Bodies.

H) Rights of the interested party

The interested party can exercise the rights referred to in Articles 15, 16, 17, 18, 20 and 21 EU Regulation 2016/679 and, more precisely: the right of access (to be aware of the existence or not of an ongoing processing of personal data); the right to rectification (to obtain the modification, updating and / or correction of their personal data from Cose Preziose Individual Company); the right to cancellation, i.e. the so-called "Right to be forgotten" (obtain the total or partial cancellation of their personal data, as long as the processing is no longer necessary or if by law the Data Controller no longer has the right / duty to continue processing them); the right to limit the processing (ask to limit the use that Cose Preziose Ditta Individuale will make of personal data); the right to data portability (ask for a copy of personal data); the right to object (propose opposition to the processing of personal data). These rights can be exercised by written communication to be sent to the pec cosepreziose@mypec.eu.

I) Right to withdraw consent

The interested party also has the right to revoke any consent given to the processing of personal data at any time: the revocation, however, takes effect from the moment the Data Controller becomes aware of it and does not affect the lawfulness of the treatment based on consent. previously loaned. The interested party also has the right to lodge a complaint with a supervisory authority. In all cases described, the exercise of rights by the interested party will be brought to the attention of those to whom the personal data have been disclosed, except for the cases of exemption provided for by EU Regulation 2016/679. In some cases (cancellation, limitation, opposition) the exercise of these rights could preclude, in whole or in part, the provision of the activities provided in favor of the interested party.

J) Data Controller.

The data controller is: Cose Preziose Ditta Individuale di Livia Scognamiglio, in the person of the pro tempore legal representative, domiciled at the headquarters of the aforementioned individual company in via dei Mulini n. 20, fraz. Bagno Vignoni, 53027 San Quirico d'Orcia (SI), (tax code SCGLVI57R47L259T - VAT number: 00844440529) certified email address: cosepreziose@mypec.eu; e-mail address: info@cosepreziose.eu. The updated list of any Managers and persons in charge of processing is kept at the registered office of the Data Controller. The Owner has not appointed a Data Protection Officer, perched not obliged. We therefore invite you to express your consent (by clicking of the checkbox “I read and accept the privacy-policy text”, when you compile the order) to the aforementioned processing (s) and to the consequent possible communications, as well as your commitment to promptly notify us of any changes in the data in our processing (s) and to the consequent possible communications, as well as your commitment to promptly notify us of any changes in the data in our possession, sending us to cope with the signed possession for acceptance and confirmation.