Information Notice pursuant to Article 13 of the GDPR
Olio Locci Srl Società Agricola (VAT No. 03610560546), with registered office at Piazza del Comune 15, 06036 Montefalco (PG), Italy, pursuant to Article 13 of the European Regulation (EU) No. 2016/679 of 27 April 2016 (hereinafter “GDPR”) and in relation to the personal data that the company may acquire for the fulfillment of contractual obligations, provides the following information to its clients.
Data Controller
The Data Controller is Olio Locci Srl Società Agricola (VAT No. 03610560546), with registered office at Piazza del Comune 15, 06036 Montefalco (PG), Italy, represented by its legal representative pro tempore. The Data Controller can be contacted by e-mail at info@agricolalocci.it, by certified e-mail (PEC) at olioloccisrl@pec.it, or by phone at (+39) 331 1930419.
Data Processors
Any external parties appointed pursuant to Article 28 of the GDPR (such as tax consultants, website managers, IT service providers), whose names are available upon request.
Purpose of Data Processing
The processing of personal data is aimed at the proper performance of the contractual services, as well as for compliance with fiscal, accounting, and other legal obligations to which the company is subject, in accordance with current regulations.
Personal data may be processed using both paper and electronic archives (including portable devices) and with methods strictly necessary to achieve the above-mentioned purposes.
Legal Basis for Processing
Pursuant to Article 6 of the GDPR, data processing takes place only in the following cases:
- The data subject has given consent to the processing of their personal data for the specific purpose stated in the contract;
- The processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the data subject’s request;
- The processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- The processing is necessary for the legitimate interests pursued by the Data Controller or by third parties.
Consequences of Failure to Provide Personal Data
With regard to personal data required for the execution of the contract or for compliance with legal obligations (e.g. accounting and tax requirements), failure to provide such data will make it impossible to establish or continue the contractual relationship.
Data Retention
Personal data processed for the purposes described above will be retained for the duration of the contractual relationship and, subsequently, for as long as the company is required to retain them for fiscal or other legal obligations.
Data Communication
Personal data may be disclosed to:
1. Professionals providing services related to the purposes mentioned above and for the management of the website www.agricolalocci.it;
2. Banks and insurance companies providing services related to the above purposes;
3. Entities processing data in fulfillment of specific legal obligations;
4. Judicial or administrative authorities, to comply with legal obligations.
Rights of the Data Subject
Under the GDPR, data subjects are entitled to request from the Data Controller and the Data Processors the following rights:
- Access to their personal data and related information;
- Rectification of inaccurate data or completion of incomplete data;
- Erasure of personal data (where one of the conditions set out in Article 17(1) GDPR applies and in compliance with the exceptions provided in paragraph 3 of the same Article);
- Restriction of processing (where one of the circumstances referred to in Article 18(1) GDPR occurs);
- In cases where the legal basis for processing is a contract or consent, and the processing is carried out by automated means, to receive their personal data in a structured, commonly used, and machine-readable format, and to transmit those data to another controller.
The data subject also has the right to:
- Object at any time to the processing of their personal data on grounds relating to their particular situation;
- Withdraw consent at any time, limited to cases where processing is based on consent for one or more specific purposes, and where it concerns common personal data (e.g. date and place of birth or address) or special categories of data under Article 9 GDPR.
Processing based on consent and carried out before its withdrawal remains lawful;
- Lodge a complaint with the Supervisory Authority for Personal Data Protection (Garante per la Protezione dei Dati Personali).