Adoption Policy

These Terms of adoption and sale govern the adoption of olive trees and vines and the related online sale of the products on the website torcianoadopt.gift by Azienda Agricola Tenuta Torciano di Giachi Pierluigi, based in San Gimignano, Loc. Ulignano, via Crocetta no. 18, VAT no. 00375840527, tax code GCH PLG 62C30 H875B, hereinafter also the Seller, towards the user.

The user acknowledges that the display of products on the site constitutes an invitation to make an offer. The Parties (Sellers and users) acknowledge and accept that this is an online sales contract with deferred real effects. Therefore the transfer/delivery of the products purchased by the user will take place as soon as the product itself (oil or wine) comes into existence and is ready to be put on sale.

The user’s order and registration on the site

By placing an order, the user completes their purchase proposal to the seller – as identified above – with reference to the selected products. The ordering of the Products takes place in three stages: the user adopts their olive tree(s) or vine(s) and then confirms their order. At that point the user will proceed with the payment for the product. Tenuta Torciano will process the request and collect the price paid by the user.

Purchases can be made as a guest or with a customer account. The other activities the user can carry out on the Site do not require registration.

After the actual collection of the price, the user will receive a message confirming the order and the payment made. This information will be compiled by Tenuta Torciano. The order sent by the Customer will be binding for Tenuta Torciano only if the entire ordering procedure has been completed regularly and correctly without any error message being shown by the Site.

In their email inbox the Customer will receive confirmation of the order placed, with a summary of the products, their prices and the general and specific conditions applicable to the order itself; the Seller will hand the products over to the courier in charge of delivery. Therefore Tenuta Torciano undertakes to have the ordered and paid products delivered to the user once they have come into existence and are ready to be put on sale.

Products

The images of the products on the Site are to be considered purely illustrative and not binding. The price will nevertheless not undergo any change compared to what was indicated at the time of the order.

Sale prices on the site

All prices shown on the Site are inclusive of VAT. They are net of any discounts due to promotion codes. Tenuta Torciano reserves the right to change sale prices at any time and without notice of any kind.

Guaranteed quantity of product

The adoption of one or more olive trees or vines and the consequent purchase of the bottles of oil or wine obtained from their fruit gives the user the right to receive the bottles produced, predominantly, with the fruit of the same adopted olive tree or vine. However, should the adopted olive tree(s) or vine(s) be unable to guarantee the requested quantity of product (due to exceptional circumstances such as, by way of example, diseases of the plant, weather conditions, etc.) the user will in any case receive the requested quantity of product from the seller. In the event of unforeseeable exceptional circumstances (e.g. diseases, weather conditions, etc.) such as to compromise all of the olive trees or all of the vines of Tenuta Torciano, the user will in any case be refunded the entire price paid.

Sales are final

All sales are final. Withdrawal is not accepted.

Product warranties

a) Legal warranty for the Consumer
The user who is a consumer, as defined in art. 3 of the Consumer Code (hereinafter, the “Consumer Code”, Legislative Decree no. 206 of 6 September 2005), is entitled to make use of the legal warranty provided for by the Consumer Code itself in articles 128 to 132. This Warranty provides that the Consumer, on pain of forfeiture, must report to the seller (as identified above) any lack of conformity found in the purchased product within 2 (two) months of its discovery (art. 132, Consumer Code). Following this report, the user-consumer will be entitled to request the replacement of the Product, without prejudice to the other rights provided for by law in favour of the Consumer. By virtue of the above legal Warranty, the seller (as identified above) is responsible for lack of conformity that becomes apparent within 2 (two) years of delivery of the Product. Beyond this term, the seller will not be responsible for lack of conformity found by the consumer. In the event of replacement of the Product, the terms of the warranty for the replacement Product are the same as for the original product. Therefore, the overall two-year duration of the legal warranty will in any case run from the delivery of the original product. In order to use the warranty we recommend that you show the purchase document. For the rules governing the legal warranty, reference is in any case made to the provisions of the Consumer Code in articles 128 and following.

b) Legal warranty for Customers who are not Consumers
The user who is not a consumer, as defined in art. 3 of the Consumer Code, is entitled to make use of the legal Warranty provided for by the Civil Code. This Warranty provides that the non-consumer user, on pain of forfeiture, must report to the seller (as identified above) any lack of conformity found in the purchased product within 8 (eight) days of its discovery. The above legal Warranty is valid for a maximum term of 12 (twelve) months from delivery of the Product. Beyond this term, the seller (as identified above) will not be responsible for lack of conformity found by the non-Consumer customer. In order to use the warranty we recommend that you show the purchase document.

Force majeure

Tenuta Torciano cannot be held responsible for delays or failure to deliver caused by circumstances beyond its reasonable control. Such circumstances include strikes, wars, natural disasters and any other event that makes the production, transport or delivery of the products impracticable.

Disclaimer

The information provided on this website is of a general nature and for purely informative purposes, and cannot in any case replace the advice of a qualified doctor (that is, a medical graduate qualified to practise), or, in specific cases, of other health professionals (dentists, nurses, pharmacists, physiotherapists, and so on). The notions and any information on the physical benefits due to the consumption of the products described within the site have a solely illustrative and informative purpose. None of the individual contributors, system operators, developers, sponsors of Tenuta Torciano or other parties connected to Tenuta Torciano can be held responsible for the results or consequences of any use or attempted use of any of the information or misinformation present within this website.

Methods of payment and invoicing

Payment is made on the secure payment page of Fabrick, our payment provider, with the payment methods Fabrick makes available there.

Shipping costs and methods

Products are shipped only when shipping is included in the adoption package chosen. When it is, shipping and delivery follow the terms and practices of Tenuta Torciano set out in the Terms and Conditions of Sale.

Privacy Policy

Information provided pursuant to articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679 (GDPR)

The joint controllers of the processing of personal data are:

  • TENUTE GIACHI SRL, with registered office in Poggibonsi (SI), Strada Provinciale 1 per San Gimignano no. 24, tax code and VAT no. 01097400525, registered in the Siena Register of Companies under REA no. SI-120351, share capital € 119,000.00, in the person of its legal representative pro tempore;
  • GIACHI PIERLUIGI, born in San Gimignano (SI) on 30/03/1962, tax code GCHPLG62C30H875B, as owner of the sole proprietorship TENUTA TORCIANO AZIENDA AGRICOLA GIACHI PIERLUIGI, with registered office in San Gimignano (SI), Via Crocetta no. 18, Loc. Ulignano, VAT no. 00375840527, REA no. SI-106075;
  • FLY TO WINE SRL, with registered office in Poggibonsi (SI), Strada Provinciale 1 per San Gimignano no. 24, tax code and VAT no. 01460730524, registered in the Siena Register of Companies under REA no. SI-149613, share capital € 10,000.00, in the person of its legal representative pro tempore.

As joint controllers of the processing of your personal data under EU Regulation 2016/679 (hereinafter “GDPR”), they inform you that this legislation protects data subjects with regard to the processing of personal data, and that the processing will be based on the principles of fairness, lawfulness and transparency and on the protection of your privacy and your rights, in compliance with article 5 of the GDPR.

Pursuant to articles 13 and 14 of the GDPR, we therefore provide you with the following information.

Object of the processing

Each data controller processes personal identification data (for example: first name, surname, telephone number, email address, user ID and password, etc.) provided by you or obtained from other sources. When you use and browse our website, some personal data may be collected automatically through so-called “cookies”: for example the user’s IP address and other information on the time spent on the website or on the preferences expressed by the user in choosing the services offered by the site. This information and data are collected directly and automatically by the website as part of its operation. For further details, please read our Cookie Policy.

Purposes and legal basis of the processing

Your personal data are processed:

A) for the following purposes, connected to legal and contractual obligations or legitimate interests:

  • replying to requests, comments and reports you send;
  • preparing quotes (legitimate interest);
  • customer assistance and management;
  • exercising the rights of each controller, for example the right of defence in court, debt collection and creditworthiness assessment (legitimate interest);
  • use of the site (access and browsing);
  • measuring customer satisfaction;
  • fulfilling obligations under the law, regulations, EU legislation or an order of the authorities;
  • ensuring network and information security (legitimate interest);
  • direct marketing of products and/or services similar to those purchased (recital 47 GDPR; legitimate interest);
  • fraud prevention (legitimate interest).

Processing for the purposes above takes place without your express consent, pursuant to article 6(1)(b), (c) and (f) GDPR.

The joint controllers do not ask the data subject to provide “special categories” of data, that is, under article 9 GDPR, data revealing “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”. Should the processing concern such data, it would take place only with your specific and separate consent.

Given the purposes described above, providing the data is mandatory: failure to provide them, or providing them partially or incorrectly, may make it impossible to fulfil the contractual obligations.

B) only with your specific and separate consent, pursuant to article 6(1)(a) GDPR, for the following additional purposes:

  • sending you (by email, post, text message, telephone, etc., also through specialised companies) newsletters, commercial communications and/or advertising material on products or services other than those offered by the joint controllers, as well as invitations and registrations to events;
  • sending you (by email, post, text message, telephone, etc.) newsletters and commercial and/or promotional communications from third parties (for example, other related companies or other business partners);
  • carrying out statistical surveys and market research, directly by the joint controllers or through specialised companies;
  • assessing customers’ appreciation of the products and/or services offered in relation to their habits or purchasing choices.

Providing data for these purposes is optional: refusing does not affect the continuation of the relationship or the adequacy of the processing itself. Your consent to the use of your personal data for marketing purposes may be withdrawn at any time.

If the person providing the data is under 14 years of age, the processing is lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility, whose identification data are collected.

Processing methods

Your personal data may be processed with manual and/or electronic and telematic tools. All processing is carried out in accordance with articles 6 and 32 of the GDPR and with appropriate security measures.

Data retention

In accordance with article 5(1)(e) of the GDPR, we keep your data only for as long as necessary for the purposes for which they are processed. If we process the data for several purposes, they will be deleted, or kept in a form that does not allow us to draw any direct conclusion as to your identity, as soon as the last specific purpose has been fulfilled. In accordance with the obligations to keep accounting records and with the general rules on the ordinary limitation period for contractual claims, data relating to the contractual relationship will be deleted after the ten-year period established by law. Where data are processed for marketing purposes, the information will be kept for no longer than necessary to achieve the purposes for which it was collected and processed. As a guideline, for most of the processing carried out this period corresponds to the ten-year retention period.

Communication, transfer and dissemination

Your data will be processed only by personnel expressly authorised by the joint controllers, in particular by the following categories of staff: agents, marketing staff, administrative staff, and other employees or collaborators duly authorised in accordance with article 29 GDPR. Your data may be disclosed to third parties appointed as data processors, in particular: consultants and freelancers (including in associated firms), banks and credit institutions, providers (website, electronic payment services, cloud, etc.), suppliers, hardware and software technicians, shippers and carriers, etc. They may also be communicated to public administrations and bodies to which disclosure is mandatory by law, regulation or EU legislation.

Personal data are managed and stored mainly in Europe, on servers of the joint controllers and/or of third-party companies duly appointed as data processors. As a rule, data are not transferred to countries outside the EU, except for some information communicated for management purposes to a subsidiary based in the USA. The transfer of personal data from EU countries to “third” countries (outside the EU or the European Economic Area) is prohibited (article 25(1) of Directive 95/46/EC) unless the country concerned guarantees an “adequate” level of protection. The adequacy decision on a country’s level of protection, which allows data to be transferred abroad, is taken by the European Commission (article 25(6) of Directive 95/46/EC) and takes into account the specific elements set out in article 45. The USA is one of the countries for which the Commission has issued a positive opinion. In no case are personal data disseminated.

The updated list of data processors and persons authorised to process data is kept at the registered office of each data controller.

Adoption map

Some pages of this website show a map of the olive trees and vines available for adoption and already adopted. The map is loaded only when you click “Show the map”. When you do, your browser requests the map images (tiles) from the tile servers of the OpenStreetMap Foundation (tile.openstreetmap.org), which, like any website, receive your IP address and the address of the page you are visiting. For how the OpenStreetMap Foundation processes these data, see its privacy policy: osmfoundation.org/wiki/Privacy_Policy.

The points on the map show the type of plant, its code, its position and whether it is adopted; for adopted plants they may show the initials of the adopter. They do not show names, email addresses or plaque texts.

Map data © OpenStreetMap contributors, available under the Open Database License (openstreetmap.org/copyright).

Spam protection (Google reCAPTCHA)

To protect the contact form, the newsletter sign-up, account registration and the password reset form from spam and abuse, this website uses Google reCAPTCHA v3, provided by Google Ireland Limited. The reCAPTCHA service is loaded only when you start filling in one of these forms. When you send the form, Google receives technical information about your browser and your interaction with the page and returns a score that tells us how likely the request is to come from a person. We store this score only with contact requests, to review requests marked as spam. For how Google processes these data, see the Google Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms).

Analytics, live chat and website delivery

With your consent to analytics or marketing cookies, this website loads through Google Tag Manager the services described in the Cookie Policy: Microsoft Clarity and Ahrefs Web Analytics, to understand how visitors use the pages, and Zendesk Chat, to let you chat with our staff. If you use the chat, the messages and any contact details you write in it are received by our staff through Zendesk.

The website is delivered through Cloudflare, which receives the technical data of each request (such as IP address and requested page) in order to deliver and protect the site, and adds its Web Analytics script to measure visits. More information: cloudflare.com/privacypolicy.

Rights of the data subject

As a data subject, you may at any time exercise the right:

  • of access to your personal data (to obtain confirmation of whether or not personal data concerning you exist, even if not yet recorded, and to have them communicated in intelligible form);
  • to obtain their rectification or erasure (right to be forgotten), or the restriction of the processing concerning you (where the conditions required by law are met);
  • to object to the processing;
  • to data portability;
  • to withdraw consent, where applicable (withdrawal does not affect the lawfulness of processing based on consent before its withdrawal);
  • to lodge a complaint with the supervisory authority (Garante per la protezione dei dati personali; contact details: garanteprivacy.it).

Contacts

For information requests and to exercise your rights you may contact any of the controllers:

  • by telephone: +39 0577 950055;
  • by post, writing to the address given at the top of this document.

Please note that this notice will be updated periodically, and updates will be clearly highlighted.

Cookie Policy

How this website uses cookies, and how to manage them, is explained in the Cookie Policy.

Customer Information Notice

Information provided pursuant to articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679 (GDPR)
Data subjects concerned: customers (including prospective customers) and their contact persons.

The joint controllers of the processing of personal data are:

  • TENUTE GIACHI SRL, with registered office in Poggibonsi (SI), Strada Provinciale 1 per San Gimignano no. 24, tax code and VAT no. 01097400525, registered in the Siena Register of Companies under REA no. SI-120351, share capital € 119,000.00, in the person of its legal representative pro tempore;
  • GIACHI PIERLUIGI, born in San Gimignano (SI) on 30/03/1962, tax code GCHPLG62C30H875B, as owner of the sole proprietorship TENUTA TORCIANO AZIENDA AGRICOLA GIACHI PIERLUIGI, with registered office in San Gimignano (SI), Via Crocetta no. 18, Loc. Ulignano, VAT no. 00375840527, REA no. SI-106075;
  • FLY TO WINE SRL, with registered office in Poggibonsi (SI), Strada Provinciale 1 per San Gimignano no. 24, tax code and VAT no. 01460730524, registered in the Siena Register of Companies under REA no. SI-149613, share capital € 10,000.00, in the person of its legal representative pro tempore.

As joint controllers of the processing of your personal data under EU Regulation 2016/679 (hereinafter “GDPR”), they inform you that this legislation protects data subjects with regard to the processing of personal data, and that the processing will be based on the principles of fairness, lawfulness and transparency and on the protection of your privacy and your rights, in compliance with article 5 of the GDPR.

Pursuant to articles 13 and 14 of the GDPR, they therefore provide the following information.

Object of the processing

The joint controllers process personal identification data (for example: first name, surname, identity document, telephone number, tax code, VAT number, email address, bank details, etc.) provided by you (by sending them directly, by signing contracts or forms, or by entering them in online forms) or obtained from other sources.

Purposes and legal basis of the processing

Your personal data are processed:

A) for the following purposes, connected to legal and contractual obligations or legitimate interests:

  • fulfilling obligations under the law, regulations, EU legislation or an order of the authorities (for example in tax and accounting matters, anti-money laundering, etc.);
  • contract management and provision of any services requested;
  • preparing quotes (legitimate interest, balanced against the rights of the data subject);
  • after-sales assistance and customer management;
  • exercising the rights of each controller, for example the right of defence in court or debt collection (legitimate interest, balanced against the rights of the data subject);
  • measuring customer satisfaction;
  • fraud prevention (legitimate interest, balanced against the rights of the data subject);
  • direct marketing of products and/or services similar to those purchased (recital 47 GDPR; legitimate interest, balanced against the rights of the data subject).

Processing for the purposes above takes place without your express consent, pursuant to article 6(1)(b), (c) and (f) GDPR.

Given the purposes described above, providing the data is mandatory: failure to provide them, or providing them partially or incorrectly, may make it impossible to fulfil the contractual obligations. You may object freely and at any time to the use of your personal data based on legitimate interest.

If the information you provide includes special categories of data (sensitive data), that is data revealing “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”, processing for the purposes above will take place only with your specific and separate consent pursuant to article 9 GDPR.

B) only with your specific and separate consent, pursuant to article 6(1)(a) GDPR, for the following additional purposes:

  • sending you (by email, post, text message, telephone, etc., also through specialised companies) newsletters, commercial communications and/or advertising material on products or services other than those offered by each controller, as well as invitations and registrations to events;
  • sending you (by email, post, text message, telephone, etc.) newsletters and commercial and/or promotional communications from third parties (for example, other related companies or other business partners);
  • carrying out statistical surveys and market research, directly or through specialised companies;
  • assessing customers’ appreciation of the products and/or services offered in relation to their habits or purchasing choices.

Providing data for these purposes is optional: refusing does not affect the continuation of the relationship or the adequacy of the processing itself. Your consent to the use of your personal data for marketing purposes may be withdrawn at any time.

If the person providing the data is under 14 years of age, the processing is lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility, whose identification data are collected.

Processing methods

Your personal data may be processed with manual and/or electronic and telematic tools. All processing is carried out in accordance with articles 6 and 32 of the GDPR and with appropriate security measures.

Data retention

In accordance with article 5(1)(e) of the GDPR, we keep your data only for as long as necessary for the purposes for which they are processed. If we process the data for several purposes, they will be deleted automatically, or kept in a form that does not allow any direct conclusion as to your identity, as soon as the last specific purpose has been fulfilled. In accordance with the obligations to keep accounting records and with the general rules on the ordinary limitation period for contractual claims, data relating to the contractual relationship will be deleted after the ten-year period established by law. If you have consented to processing for marketing purposes, the information will be kept for no longer than necessary to achieve the purposes for which it was collected and processed. As a general rule, for all the processing carried out this period corresponds to the ten-year retention period.

Communication, transfer and dissemination

Your data will be processed only by personnel expressly authorised by the joint controllers, in particular by the following categories of staff: agents, marketing staff, administrative staff, and other employees or collaborators duly authorised in accordance with article 29 GDPR. Your data may be disclosed to third parties appointed as data processors, in particular: consultants and freelancers (including in associated firms), banks and credit institutions, providers (website, electronic payment services, cloud, etc.), suppliers, hardware and software technicians, shippers and carriers, etc. They may also be communicated to public administrations and bodies to which disclosure is mandatory by law, regulation or EU legislation.

Personal data are managed and stored mainly in Europe, on servers of the controller and/or of third-party companies duly appointed as data processors. As a rule, data are not transferred to countries outside the EU, except for some information communicated for management purposes to a subsidiary based in the USA. The transfer of personal data from EU countries to “third” countries (outside the EU or the European Economic Area) is prohibited (article 25(1) of Directive 95/46/EC) unless the country concerned guarantees an “adequate” level of protection. The adequacy decision on a country’s level of protection, which allows data to be transferred abroad, is taken by the European Commission (article 25(6) of Directive 95/46/EC) and takes into account the specific elements set out in article 45. The USA is one of the countries for which the Commission has issued a positive opinion. In no case are personal data disseminated.

The updated list of data processors and persons authorised to process data is kept at the registered office of each data controller.

Rights of the data subject

As a data subject, you may at any time exercise the right:

  • of access to your personal data (to obtain confirmation of whether or not personal data concerning you exist, even if not yet recorded, and to have them communicated in intelligible form);
  • to obtain their rectification or erasure (right to be forgotten), or the restriction of the processing concerning you (where the conditions required by law are met);
  • to object to the processing;
  • to data portability;
  • to withdraw consent, where applicable (withdrawal does not affect the lawfulness of processing based on consent before its withdrawal);
  • to lodge a complaint with the supervisory authority (Garante per la protezione dei dati personali; contact details: garanteprivacy.it).

Contacts

For information requests and to exercise your rights you may contact any of the controllers:

  • by telephone: +39 0577 950055;
  • by post, writing to the address given at the top of this document.

Please note that this notice will be updated periodically, and updates will be clearly highlighted.

Supplier Information Notice

Information provided pursuant to articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679 (GDPR)
Data subjects concerned: suppliers (including prospective suppliers) and third parties, and their representatives.

The joint controllers of the processing of personal data are:

  • TENUTE GIACHI SRL, with registered office in Poggibonsi (SI), Strada Provinciale 1 per San Gimignano no. 24, tax code and VAT no. 01097400525, registered in the Siena Register of Companies under REA no. SI-120351, share capital € 119,000.00, in the person of its legal representative pro tempore;
  • GIACHI PIERLUIGI, born in San Gimignano (SI) on 30/03/1962, tax code GCHPLG62C30H875B, as owner of the sole proprietorship TENUTA TORCIANO AZIENDA AGRICOLA GIACHI PIERLUIGI, with registered office in San Gimignano (SI), Via Crocetta no. 18, Loc. Ulignano, VAT no. 00375840527, REA no. SI-106075;
  • FLY TO WINE SRL, with registered office in Poggibonsi (SI), Strada Provinciale 1 per San Gimignano no. 24, tax code and VAT no. 01460730524, registered in the Siena Register of Companies under REA no. SI-149613, share capital € 10,000.00, in the person of its legal representative pro tempore.

As joint controllers of the processing of your personal data under EU Regulation 2016/679 (hereinafter “GDPR”), they inform you that this legislation protects data subjects with regard to the processing of personal data, and that the processing will be based on the principles of fairness, lawfulness and transparency and on the protection of your privacy and your rights, in compliance with article 5 of the GDPR.

Pursuant to articles 13 and 14 of the GDPR, we therefore provide you with the following information.

Object of the processing

The data controllers process personal identification data (for example: first name, surname, identity document, telephone number, tax code, VAT number, email address, bank details, etc.) provided by you (by sending them directly, by signing contracts or forms, or by entering them in online forms) or obtained from other sources.

Purposes and legal basis of the processing

Your personal data are processed:

A) for the following purposes, connected to legal and contractual obligations or legitimate interests:

  • fulfilling obligations under the law, regulations, EU legislation or an order of the authorities (for example in tax and accounting matters, anti-money laundering, etc.);
  • contract management and provision of any services requested;
  • exercising the rights of each controller (for example, the right of defence in court or debt collection);
  • activity planning.

Processing for the purposes above takes place without your express consent, pursuant to article 6(1)(b), (c) and (f) GDPR.

Given the purposes described above, providing the data is mandatory: failure to provide them, or providing them partially or incorrectly, may make it impossible to fulfil the contractual obligations.

If the person providing the data is under 14 years of age, the processing is lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility, whose identification data and a copy of whose identity documents are collected.

Processing methods

Your personal data may be processed with manual and/or electronic and telematic tools. All processing is carried out in accordance with articles 6 and 32 of the GDPR and with appropriate security measures.

Data retention

In accordance with article 5(1)(e) of the GDPR, we keep your data only for as long as necessary for the purposes for which they are processed. If we process the data for several purposes, they will be deleted automatically, or kept in a form that does not allow any direct conclusion as to your identity, as soon as the last specific purpose has been fulfilled. In accordance with the obligations to keep accounting records and with the general rules on the ordinary limitation period for contractual claims, data relating to the contractual relationship will be deleted after the ten-year period established by law.

Communication, transfer and dissemination

Your data will be processed only by personnel expressly authorised by each data controller, in particular by the following categories of staff: agents, shippers, marketing staff, administrative staff, and other employees or collaborators duly authorised in accordance with article 29 GDPR. Your data may be disclosed to third parties appointed as data processors, in particular: consultants and freelancers (including in associated firms), banks and credit institutions, providers, suppliers, hardware and software technicians, shippers and carriers, etc. They may also be communicated to public administrations and bodies to which disclosure is mandatory by law, regulation or EU legislation.

Personal data will be managed and stored in Europe, on servers of the joint controllers and/or of third-party companies duly appointed as data processors. Data will not be transferred to countries outside the EU. In no case will personal data be disseminated.

The updated list of data processors and persons authorised to process data is kept at the registered office of each data controller.

Rights of the data subject

As a data subject, you may at any time exercise the right:

  1. of access to your personal data (to obtain confirmation of whether or not personal data concerning you exist, even if not yet recorded, and to have them communicated in intelligible form);
  2. to obtain their rectification or erasure (right to be forgotten), or the restriction of the processing concerning you (where the conditions required by law are met);
  3. to object to the processing;
  4. to data portability;
  5. to withdraw consent, where applicable (withdrawal does not affect the lawfulness of processing based on consent before its withdrawal);
  6. to lodge a complaint with the supervisory authority (Garante per la protezione dei dati personali; contact details: garanteprivacy.it).

Contacts

For any enquiries and to exercise your rights you may contact each of the joint controllers: by telephone on +39 0577 950055, or by post, writing to the address given at the top of this document. Please note that this notice will be updated periodically, and updates will be clearly highlighted.