Contacts
Address
Social
SP4 Volterrana, 27
Gambassi Terme (Florence)
VAT IT01509350524
50050
Italy
© Agriturismo Poggio Leone
Terms and Conditions
PRIVACY POLICY
1.Object of the processing.
Information pursuant to art. 13 of EU Regulation 679/2016.
Pursuant to Article 13 of EU Regulation 679/2016, containing provisions for the protection of individuals and other subjects with regard to the processing of personal data, we wish to inform you that the personal data you provide will be processed in compliance with the aforementioned regulation.
2.Data Controller.
The data controller is Poggio Leone Società Agricola S.r.l., with registered office at SP4 Volterrana 27, 50050 Gambassi Terme (FI), Tax Code and VAT No.: 01509350524 (hereinafter, "Controller").
Poggio Leone Società Agricola S.r.l. carries out agricultural activities, animal breeding, agritourism, and related activities.
3.Type of data processed
In relation to such professional activities, your common data will necessarily be processed (by way of example and not limited to: name, surname, place of birth, tax code, place of residence, etc.). This data will be processed by the data controller solely for the performance of the requested professional activity in compliance with the current data protection regulations.
4. Personal data of your family members
For the management of the professional assignment received, the Data Controller may also process personal data of your family members in order to issue the correct billing information for the payment of the service provided by the company. In this regard, you undertake to inform your family members of such processing, also by providing them with this information notice.
5.Purposes of processing
Poggio Leone Società Agricola S.r.l. collects and processes the personal data of:
• Clients and potential clients
•Family members of clients and potential clients
•Service applicants
•Companies and suppliers
Your personal data is processed without express consent (art. 24 lett. a, b, c Privacy Code and art. 6 lett. b, e GDPR), for the following purposes:
a)to proceed with the provision of the requested services;
b) for the purposes of outgoing and incoming invoicing and to obtain payment of the amounts that are owed to us;
c) fulfill the legal obligations imposed on the company by civil, tax, and accounting regulations (including the obligation to keep accounting records);
6.Legal basis of processing
The Data Controller processes personal data lawfully, where the processing:
•is necessary for the execution of a contract to which you are a party or in the event that there is the consent of the data subject pursuant to Legislative Decree 81/2008. The provision of your data is mandatory in order to provide the company's services and any refusal to provide such data may result in the failure or partial continuation of the relationship;
•it is necessary to fulfill a legal obligation incumbent on the Data Controller.
7. Methods of processing and duration of processing
The processing of data is carried out by means of the operations indicated in art. 4 no. 2) GDPR and specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data.
Your personal data may be processed by means of both paper and electronic archives (including portable devices) and processed in ways strictly necessary to fulfill the purposes indicated above.
The Data processed for the purposes indicated above will be stored in our archives for the entire duration of the contractual relationship; at the end of the same, the Data will be kept for a further period of 10 years in order to comply with inspections by the competent authorities, current legal obligations in civil, tax, and accounting matters, as well as for the purpose of exercising or defending our rights in court. Your Data may also continue to be stored and processed as long as the legitimate interest pursuant to art. 47 GDPR persists.
In the event of a dispute, your Personal Data will be processed for as long as necessary in relation to said dispute.
8. Place of processing.
The data is processed and stored at the registered office in SP4 Volterrana 27, 50050 Gambassi Terme (FI).
9.Data communication.
We also inform you that the data collected will never be disclosed and will not be communicated without your explicit consent, except for necessary communications that may involve the transfer of data to public bodies, consultants, or other parties for the fulfillment of legal obligations.
10. Nature of data provision and consequences of refusal to respond.
The provision of your data for the purposes indicated above is mandatory as it is necessary for the conclusion and/or execution of contractual and/or legal obligations; failure to provide the data will therefore make it impossible to fulfill such obligations.
11.Subjects to whom personal data may be communicated
Without your consent, the Data may be communicated to third parties appointed as data processors pursuant to Article 28 of the Regulation and in particular to banking institutions, companies operating in the insurance sector, service providers, individuals and/or legal entities that provide the service and/or manage the asset you have requested from the Controller, consultants, and all parties where this is necessary for fiscal, administrative, contractual reasons or for needs protected by current regulations in the matter.
The processed data may also be shared with authorities, entities and/or subjects to whom they must be communicated by virtue of legal provisions or orders from authorities, and will not be disseminated nor is there any intention on the part of the Data Controller to transfer the data to a third country or to an international organization.
12. Profiling and Data Dissemination
The personal data provided are not subject to dissemination nor to any fully automated decision-making process, including profiling; furthermore, they will not be disclosed or transferred to a third country or an international organization.
13. Rights.
Among the rights granted to you by the GDPR are the following:
•request from the Data Controller access to your personal data and information relating to them (art. 15 GDPR); the rectification of inaccurate data or the integration of incomplete data (art. 16 GDPR); the deletion (so-called "right to be forgotten") of personal data concerning you (upon the occurrence of one of the conditions indicated in art. 17, paragraph 1, GDPR, and in compliance with the exceptions provided for in paragraph 3 of the same article); the restriction of the processing of your personal data (in the event of one of the cases indicated in art. 18, paragraph 1 GDPR);
•request and obtain from the Data Controller – in cases where the legal basis for processing is the contract or consent, and the processing is carried out by automated means – your personal data in a structured, machine-readable format, also for the purpose of transmitting such data to another data controller (so-called right to data portability, art. 19 GDPR);
•object at any time to the processing of your personal data in the occurrence of particular situations concerning you (art. 21 GDPR);
•revoke consent at any time (art. 7, paragraph 3, GDPR), limited to cases where the processing is based on your consent for one or more specific purposes and concerns ordinary personal data (for example, date and place of birth or place of residence), or special categories of data (for example, data revealing racial origin, political opinions, religious beliefs, health status or sexual life). Processing based on consent and carried out prior to its revocation, however, retains its lawfulness;
•lodge a complaint with a supervisory authority (Data Protection Authority – www.garanteprivacy.it).
The exercise of the aforementioned rights can be carried out by written communication to the Data Controller to be sent via email to the following address: agricolapoggioleone@libero.it
-------------------------------------------------------------------------------------------------------------------------------------------------------------
PRIVACY POLICY
1. Object of the treatment.
Information pursuant to art. 13 of EU Regulation 679/2016.
Pursuant to art. 13 of EU Regulation 679/2016, containing provisions for the protection of persons and other subjects regarding the processing of personal data, we wish to inform you that the personal data you provide will be processed in compliance with the aforementioned legislation.
2. Owner.
The data controller is Poggio Leone Società Agricola S.r.l., with registered office in SP4 Volterrana 27, 50050 Gambassi Terme (FI), C.F. and VAT number: 01509350524 (hereinafter, "Owner").
Poggio Leone Società Agricola S.r.l., carries out agricultural activities, animal breeding, agritourism and related activities.
3. Type of data processed
In relation to these professional activities, your common data will necessarily be processed (by way of example and not limited to: name, surname, place of birth, tax code, place of residence, etc.). These data will be processed by the data controller solely for carrying out the required professional activity in compliance with current legislation on data protection.
4. Personal data of your family members
For the management of the professional assignment received, the Data Controller may also process personal data of your family members in order to proceed with the issue of the correct header of the invoice for the payment of the service provided by the company. In this sense, you undertake to inform your family members of such treatments, also by providing them with this information.
5. Purpose of the treatment
Poggio Leone Società Agricola S.r.l. collects and processes the personal data of:
• Customers and potential customers
• Family members of customers and potential customers
• Service Requesters
• Companies and suppliers
Your personal data is processed without express consent (art. 24 letter a, b, c Privacy Code and art. 6 letter b, e GDPR), for the following purposes:
a) follow up on the provision of the requested services;
b) for active and passive billing purposes and to obtain payment of the amounts that will be due to us;
c) fulfill the legal obligations affecting the company by virtue of civil, tax and accounting regulations (including the obligation to keep accounting records);
6. Legal basis of the processing
The Data Controller processes personal data lawfully, where the processing:
• it is necessary for the execution of a contract of which you are a part or in the event that there is the consent of the interested party pursuant to Legislative Decree 81/2008. The provision of your data is mandatory in order to be able to provide the company's services and any refusal to provide such data could lead to the failure or partial continuation of the relationship;• it is necessary to fulfill a legal obligation incumbent on the Owner himself.
7. Methods of treatment and duration of treatment
The data processing is carried out by means of the operations indicated in the art. 4 no. 2) GDPR and precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.
Your personal data may be processed by means of both paper and computerized archives (including portable devices) and processed in ways strictly necessary to meet the aforementioned purposes.
The data processed for the purposes indicated above will be kept in our archives for the entire duration of the contractual relationship; at the end of the same, the Data will be kept for a further period of 10 years in order to comply with inspections by the competent authorities, with the current legal obligations in civil, tax and accounting matters, as well as for the purpose of exercising or defending our rights in court. Your Data may also continue to be stored and processed as long as the legitimate interest pursuant to art. 47 GDPR.In the event that a dispute arises, your Personal Data will be processed for as long as necessary in relation to said dispute.
8. Place of treatment.
The data is processed and archived at the registered office in SP4 Volterrana 27, 50050 Gambassi Terme (FI).
9. Data communication.
We also inform you that the data collected will never be disclosed and will not be communicated without your explicit consent, except for the necessary communications which may involve the transfer of data to public bodies, consultants or other subjects for the fulfillment of the obligations of law.
10. Nature of providing data and consequences of refusing to answer.
The provision of your data for the purposes indicated above is mandatory as it is necessary for the conclusion and / or execution of contractual and / or legal obligations, failure to communicate the data therefore makes it impossible to fulfill these obligations.
11. Persons to whom personal data may be disclosed
Without your consent, the Data may be disclosed to third parties appointed as data controllers pursuant to article 28 of the Regulation and in particular to banks, companies active in the insurance field, service providers, natural and/or legal persons who provide the service and/or who manage the asset requested by you from the Owner, consultants and all subjects where this is necessary for fiscal, administrative, contractual reasons or for needs protected by current regulations on the matter.
The data processed may also be shared with authorities, bodies and/or subjects to whom they must be communicated pursuant to legal provisions or authority orders and will not be disclosed nor is there any intention on the part of the Data Controller to transfer the data to a third country or to an international organization.
12. Profiling and dissemination of data
The personal data provided is not subject to disclosure or to any fully automated decision-making process, including profiling, furthermore it will not be disclosed and will not be transferred to a third country or to an international organization.
13. Rights.
Among the rights granted to you by the GDPR are those of:
• ask the Data Controller for access to your personal data and information relating to them (Article 15 of the GDPR); the rectification of inaccurate data or the integration of incomplete ones (art. 16 GDPR); the cancellation (so-called "right to be forgotten") of personal data concerning you (upon the occurrence of one of the conditions indicated in article 17, paragraph 1, GDPR, and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (in the event of one of the hypotheses indicated in article 18, paragraph 1 of the GDPR);• request and obtain from the Data Controller - in cases where the legal basis of the processing is the contract or consent, and the same is carried out by automated means - your personal data in a structured format and readable by automatic device, also for the purpose of communicate such data to another data controller (so-called right to the portability of personal data, art. 19 GDPR);
• oppose at any time the processing of your personal data in the event of the occurrence of particular situations that concern you (art. 21 GDPR);
• withdraw consent at any time (art. 7, paragraph 3, GDPR), limited to cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (for example data revealing racial origin, political opinions, religious beliefs, health status or sex life). The processing based on consent and carried out prior to the revocation of the same, however, retains its lawfulness;• propose a complaint to a supervisory authority (Authority for the protection of personal data – www.garanteprivacy.it).The exercise of the aforementioned rights can be exercised by written communication to the Data Controller to be sent via email to the address indicated below: agricolapoggioleone@libero.it