Privacy

Ongoing technological development, changes in the legal situation or in our services and other reasons may require corrections to our data protection notice. We therefore reserve the right to change this data protection notice at any time and ask you to keep yourself constantly informed of relevant updates.

Data Controller

GESTIONI BENACENSI S.P.A.
Via Fossalta, 42 - 37017 Lazise (VR)
P.IVA 02219040231

Holder's email address: info@pianidiclodia.it

Types of Data Collected

If you are using this website without registering or otherwise providing information to us, then for informational purposes only, we will only collect personally identifiable information that your browser transmits to our server. If you want to browse through our website, we collect the following data, either independently or via third parties, which we technically need in order to make our website viewable and to ensure its stability and security: email, cookies, Usage Data, surname, first name, address, country, province, postal code, telephone number, various types of Data, city and unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example).

Specific information texts displayed prior to the collection of the data or in the dedicated sections of this privacy policy provide details on each type of data.

Personal Data may be, in the case of User Data, collected automatically during the use of the GESTIONI BENACENSI S.P.A. site(s) or may be freely provided by the User.

Unless otherwise specified, all the Data requested are mandatory. If the User refuses to communicate them, it may be impossible to provide the Service. In cases where some Data are indicated as optional, Users may choose not to communicate such Data, without any consequences on the availability of the Service or its operation.

Should Users have any doubts as to which Data are compulsory, please contact the Controller.

Any use of Cookies - or of other tracking tools - by GESTIONI BENACENSI S.P.A. or by the owners of third party services used by the Company, unless otherwise specified, is for the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared and guarantees that he/she has the right to communicate or disseminate it, relieving the Controller from any liability towards third parties.

Treatment modes

The Data Controller has taken thorough technical and operational security precautions to protect user data from accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are regularly reviewed and updated to keep pace with technological advances.

In addition to the Data Controller, other subjects involved in the organisation (administrative, sales, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers, IT companies, communication agencies, hosting providers) also appointed as Data Processors by the Data Controller, if necessary, may have access to the Data. The Data Controller may be asked for the updated list of Data Processors at any time.

Legal basis for processing

The Controller processes Personal Data relating to the User if one of the following conditions is met:

the User has given consent for one or more specific purposes;

Note: in some jurisdictions, the Controller may be authorised to process Personal Data without the need for the User's consent or any of the other legal bases specified below, as long as the User does not object (‘opt-out’) to such processing. This does not apply where the processing of Personal Data is governed by European legislation on the protection of Personal Data.

Processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures;
processing is necessary for the performance of a legal obligation to which the Controller is subject;
processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the Controller;
processing is necessary for the pursuit of the legitimate interest of the Controller or of third parties.

It is always possible to request the Controller to clarify the concrete legal basis of each processing operation and in particular to specify whether the processing is based on law, required by a contract or necessary to conclude a contract.

Place of processing

For the implementation of the service and for the processing purposes listed in this Privacy Policy, operations relating to the processing of Personal Data are carried out at the Controller's administrative offices and wherever else the parties involved in such processing are located.

As part of the purposes described in this Policy, your Personal Data may be transferred to a country other than the country where you are located.

For further information on the location of the processing, you may refer to the section on details on the processing of Personal Data in this Privacy Policy.

The User has the right to obtain information regarding the legal basis for the transfer of Data outside the EU (European Union) or to an international organisation under public international law or consisting of two or more countries (such as the UN), and also regarding the security measures taken by the Data Controller to protect the Data.

For further information, the User may contact the Controller at the Contact Information indicated in this Privacy Policy.

Storage period

Data are processed and stored for the time required by the purposes for which they were collected.

Therefore, the Data Controller will process the aforementioned Data: for the entire duration of the subscription services and newsletter subscription 10 years for the purpose of keeping accounting documents pursuant to Article 2220 of the Civil Code 10 years marketing, unless consent is revoked and the newsletter is cancelled.

When the processing is based on the User's consent, the Controller may retain the User's Personal Data beyond that period until the said consent is revoked. In addition, the case may occur where the Controller is obliged to retain Personal Data for a longer period, due to a legal obligation or by order of an authority.

At the end of the above defined retention period, the Personal Data will be deleted. Therefore, once this period has been reached, the right of access, cancellation, rectification and the right to Data portability can no longer be exercised.

Purposes of the Processing of Collected Data

User Data is collected to enable the Data Controller to provide its Services and for Statistics, Advertising, Heat mapping and session logging, Interaction with social networks and external platforms, SPAM protection, Content and feature performance testing (A/B testing), Address management and email messaging, Remarketing and behavioral targeting, Contacting the User and Displaying content from external platforms.

You can refer to the relevant sections of this Privacy Policy to obtain details about the purposes of processing and Personal Data for each purpose.

Details of the processing of Personal Data

Personal Data are collected for the following purposes and using the following services:

Contact User

MAILING LIST OR NEWSLETTER (www.pianidiclodia.it)

By expressing consent in accordance with GDPR 2016/679, the User may authorize the sending of the newsletter containing information, including of a commercial and promotional nature, related to the services offered by GESTIONI BENACENSI S.P.A.

For sending the newsletter, the only data required is the User's email address. The User may voluntarily provide additional data and as such marked separately; these will be used for direct communications with the User. After the User's confirmation, his/her email address will be saved in a list of contacts intended for sending newsletters, in accordance with the provisions of the current legislation on the processing of personal data.

You have the right to revoke your consent to receive the newsletter and unsubscribe at any time by clicking on the link provided in each newsletter or by contacting the Data Controller.

CONTACT FORM (www.pianidiclodia.it)

The User, consents to the use of data by filling out forms to provide information, request quotes, or to respond to requests indicated by the form header.

Personal Data collected: zip code, city, first name, last name, email, address, province, country, phone number, and various types of Data.

The aforementioned information is expressly provided on a voluntary basis and with the user's consent, in accordance with Art. 6 par. 1 a of the GDPR. Regarding the information related to communication channels (such as email address or phone number), the user also authorizes us to be able to contact him/her as needed through this communication channel to respond to his/her request. The user may revoke this consent at any time. We will delete the data collected in this scope after saving is no longer necessary, or, if there are legal obligations to retain it, we will limit its processing.

Managing contacts and sending messages

This type of service allows you to control and manage a database of email contacts, telephone contacts or contacts of any other type used to communicate with the User.

These services may allow the collection of data pertaining to the date and time of the User's viewing of messages, and to the User's interaction with them, such as information about clicks on links embedded in messages.

Interaction with data collection platforms and other third parties

These types of services allow Users to interact with data collection platforms or other services from the pages of www.pianidiclodia.it to save and reuse data.

If one of these services is installed, it is possible that, even if Users do not use the service, Usage Data may be collected on the pages where it is installed

Interaction with social networks and external platforms

The website www.pianidiclodia.it uses the vendor's social plug-ins.

Facebook, Instagram (operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, United States)
Twitter (operator: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, United States)
Youtube (operator: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States)

These plug-ins usually collect user data and transmit it to the server of the respective provider. We have taken technical measures to ensure that your privacy is protected, so your data cannot be collected by the providers of the respective plug-ins without your consent. These will initially be deactivated when you visit a site linked to the plug-ins. The plug-ins will not be activated until the user clicks on the respective symbol agreeing to transmit his data to the respective provider. The legal basis for the use of plug-ins is Article 6(1) a and f of the GDPR.

Once activated, plug-ins also collect personally identifiable information, such as the user's IP address, and send it to the respective provider's server, where it is saved. Activated social plug-ins also set a cookie with a unique identifier when the user visits the respective website. This allows the vendor to generate a profile based on behavior as a user. This happens even if the user is not subscribed to the respective vendor's social network. If the user is subscribed to the vendor's social network and logged onto the website during the visit, data and information about his or her visit to the website can be linked to his or her profile on the social network. We have no influence on the exact extent to which the data is collected by the respective provider.

For more information on this, as well as on the nature and purpose of data processing and the rights and setting options for privacy protection, see the data protection information for the respective social network provider.

Protection from SPAM

This type of services studies the traffic of www.pianidiclodia.it, if necessary with Personal Data of Users, in order to filter it from parts of traffic, messages and content recognized as SPAM.

GOOGLE RECAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM protection service provided by Google Inc. Use of the reCAPTCHA system is subject to Google's privacy policy and terms of use.

Personal Data Collected: Cookies and Usage Data.

Place of processing: United States - Privacy Policy. Privacy Shield Adherent.

Remarketing and behavioural targeting

This type of service allows www.pianidiclodia.it and its partners to transmit, optimise and display advertisements based on the User's past use of www.pianidiclodia.it.

This is done through the tracking of Usage Data and the use of Cookies, which transmit information to partners to which the remarketing and behavioral targeting activity is linked.

In addition to the opt-out possibilities offered by the services below, the User may choose to exclude the receipt of cookies relating to a third-party service on the Network Advertising Initiative opt-out page.

FACEBOOK REMARKETING (Facebook, Inc.)

Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. which links the activity of www.pianidiclodia.it with the Facebook advertising network.

Personal data collected: Cookies and Usage Data.

Place of processing: United States - Privacy Policy - Opt Out. Privacy Shield Adherent.

FACEBOOK CUSTOM AUDIENCE (Facebook, Inc.)

Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. which links the activity of www.pianidiclodia.it with the Facebook advertising network.

Personal data collected: Cookies and email.

Place of processing: United States - Privacy Policy - Opt Out. Privacy Shield Adherent.

ADWORDS REMARKETING (Google Inc.)

On our website we use the dynamic remarketing and behavioral targeting function of Google Inc. which links the activity of www.pianidiclodia.it with the Adwords advertising network and the Doubleclick cookie. This technology makes it possible to place automatically generated advertisements oriented towards target groups after a user visits www.pianidiclodia.it. The ads are oriented towards products and services that the user clicked on during his last visit to the website. Google uses cookies to generate interest-based ads. Cookies are small text files stored on your browser when you visit www.pianidiclodia.it. In this process, Google usually saves information such as your web request, IP address, browser type, browser language and the date and time of your request. This information only serves the purpose of mapping your web browser to a specific device. It cannot be used to identify an individual. If you do not wish to receive user-based advertising from Google, you can disable ad placement using Google's ad settings.

Personal data collected: Cookies and Usage Data.

Place of processing: United States - Privacy Policy - Opt Out.

Statistics

The services within this section allow the Data Controller to monitor and analyse traffic data and serve to keep track of the User's behaviour.

GOOGLE ANALYTICS (Google LLC)

www.pianidiclodia.it uses Google Analytics, a web analytics service of Google LLC to collect statistical information, in aggregate or otherwise, on the number of users accessing the Site and how they visit the Site.

The company uses the latest available version of the service, namely Google Analytics 4. In this regard, the data collected will be owned by the company and will be stored for a maximum of 14 months after the last use of our services.

Third-party analytics cookies are installed on the Site only with your prior consent.

Google's privacy policy is available at the following link: https://policies.google.com/privacy.

Opt-out (https://tools.google.com/dlpage/gaoptout?hl=it): Google Analytics supports an optional browser add-on that, once installed and activated, deactivates measurement by Google Analytics for any site visited by a user. This add-on only deactivates the measurement by Google Analytics.

For the provision of the Google Analytics service, the provider of the company, Google Ireland Limited, may transfer the pseudonymous personal data of website users outside the EEA, on the basis of the so-called Standard Contractual Clauses and, in particular, to the United States, taking additional measures to ensure that the transfer takes place in accordance with the GDPR. Further information on the additional security measures applied by Google Ireland Limited for transfers of personal data outside the European Union can be found in the following resources made available by the provider itself: ‘Regarding international data transfers in Google Analytics’ (see link: https://support.google.com/analytics/answer/11609059) and ‘Safeguards for international data transfers with Google's advertising and analytics products’ (see link: https://services.google.com/fh/files/misc/safeguards_for_international_data_transfers.pdf). In view of the scope of the processing, the nature of the data processed and the risks of the processing carried out by the provider, the company considered the additional security measures that the provider guarantees to take to protect the personal data processed on its behalf to be appropriate.

In addition, Google Analytics will also be used as a ‘technical cookie’ for statistical purposes only, to support the Data Controller in understanding how visitors interact with the site by collecting and transmitting information in an anonymous form.

GOOGLE TAG MANAGER (Google Inc.)

For the sake of transparency, we inform the user that www.pianidiclodia.it uses Google Tag Manager. Google Tag Manager does not collect any personally identifiable information. Tag Manager facilitates the integration and management of our tags, small code elements that are used, for example, to measure traffic and user behaviour, record the effects of online advertising and social channels, set up remarketing, focus on target groups and test and optimise websites. If they are deactivated, Google Tag Manager will take them into account. For more information, visit Google Tag Manager.

FACEBOOK ADS CONVERSION MONITORING (Facebook, Inc.)

Facebook Ads conversion tracking is a statistics service provided by Facebook, Inc. which links data from the Facebook ad network with behaviour on www.pianidiclodia.it.

Personal data collected: Cookies and Usage Data.

Place of processing: United States - Privacy Policy. Privacy Shield Adherent.

Displaying content from external platforms

This type of service makes it possible to display content hosted on external platforms directly from the pages of www.pianidiclodia.it and to interact with them.

GOOGLE FONTS (Google Inc.)

Google Fonts is a font display service operated by Google Inc. that allows www.pianidiclodia.it to integrate such content into its pages.

Personal Data collected: Usage Data and various types of Data as specified by the privacy policy of the service.

Place of processing: United States - Privacy Policy. Privacy Shield Adherent.

WIDGET GOOGLE MAPS (Google Inc.)

Google Maps is a map display service operated by Google Inc. which enables www.pianidiclodia.it to integrate such content into its pages.

Personal data collected: Cookies and Usage Data.

Place of processing: United States - Privacy Policy. Privacy Shield Adherent.

WIDGET VIDEO YOUTUBE (Google Inc.)

YouTube is a video content display service operated by Google Inc. which enables www.pianidiclodia.it to integrate such content into its pages.

Personal data collected: Cookies and Usage Data.

Place of processing: United States - Privacy Policy. Privacy Shield Adherent.

Hosting and backend infrastructure

These types of services have the function of hosting data and files that enable www.pianidiclodia.it to function, allow it to be distributed and provide a ready-to-use infrastructure to deliver specific functionalities of this site.

Some of these services operate through servers located geographically in different places, making it difficult to determine the exact location where Personal Data are stored.

User Rights

Users may exercise specific rights with reference to the Data processed by the Data Controller. In particular, the User may:

withdraw consent at any time. The User may revoke his or her consent to the processing of his or her Personal Data expressed earlier.
oppose the processing of your Data. When it takes place on a legal basis other than that expressed in the consent. Further details can be found in the section below.
access to their Data. The User has the right to obtain information on the Data processed by the Controller, on specific aspects of the processing and to receive a copy of the Data processed.
verify and request rectification. The User may verify the correctness of his/her Data and may update or correct it.
obtain restriction of processing. Under specific conditions, the User may request the restriction of the processing of their Data. In this case, the Controller may only retain the Data, without processing them for any other purpose.
obtain the deletion of their Personal Data. Under special conditions, the User may request the deletion of his or her Data by the Data Controller.
receive their Data or have them transferred to another data controller. The User has the right to receive its Data in a structured, machine-readable and commonly used format, to have it transferred without hindrance to another controller, if technically feasible. This is applicable when the Data are processed by automated means and the processing is based on the User's consent, on a contract to which the User is party or on contractual measures related thereto.
propose a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.

Details on the right to object

Where Personal Data are processed in the public interest, in the exercise of public authority vested in the Controller or in pursuit of a legitimate interest of the Controller, Users have the right to object to the processing on grounds relating to their particular situation.

Users are reminded that if data are processed for direct marketing purposes, they may object to the processing without giving reasons.

To find out whether the Controller processes data for direct marketing purposes, please consult the respective sections of this document.

How to exercise rights

To exercise their rights, Users may address a request to the Controller's contact details indicated in this document. Requests are filed free of charge and processed by the Controller as soon as possible, within one month at the latest.

Further information on treatment

Defence in court
The User's Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages of such proceedings to defend against abuse in the use of www.pianidiclodia.it or related Services by the User.

The User declares that he/she is aware that the Data Controller may have to disclose the Data by order of public authorities.

Specific information
At the User's request, in addition to the information contained in this privacy policy, www.pianidiclodia.it may provide the User with further information regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance
To enable operation and maintenance, www.pianidiclodia.it and any third-party services used by it may collect system logs, i.e. files that record interactions and which may also contain Personal Data, such as the User's IP address.

Information not contained in this policy
Further information concerning the processing of Personal Data may be requested from the Data Controller using the contact details at any time.

Responding to ‘Do Not Track’ requests
www.pianidiclodia.it does not support ‘Do Not Track’ requests.

To find out whether any third-party services used support them, the User should consult their respective privacy policies.

Definitions and legal references

PERSONAL DATA (or Data)
Personal data are defined as any information that, directly or indirectly, even in connection with other information, thus including a personal identification number, makes a natural person identified or identifiable.

USAGE DATA
This is the information collected through www.pianidiclodia.it (including by third-party applications integrated into www.pianidiclodia.it), including: IP addresses or domain names of the computers used by the User who connects with www.pianidiclodia.it, URI (Uniform Resource Identifier) notation addresses, the time of the request, the method used to send the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, information on the browser and operating system used by the visitor, the various time connotations of the visit (e.g. the time spent on each page) and details on the path followed within the website. ) the country of origin, information on the browser and the operating system used by the visitor, the various temporal connotations of the visit (e.g. the length of time spent on each page) and the details of the path followed within the Application, with particular attention to the sequence of pages consulted, the parameters relating to the operating system and the User's IT environment.

USER
The individual using www.pianidiclodia.it must coincide with the Data Subject or be authorised by him/her and whose Personal Data is being processed.

DATA SUBJECT
The natural or legal person to whom the Personal Data refer.

DATA CONTROLLER (or Manager)
The natural person, legal entity, public administration and any other body, association or organisation entrusted by the Controller with the processing of Personal Data, in accordance with the provisions of this privacy policy.

DATA CONTROLLER (or Owner)
The natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data and the instruments adopted, thus including the security measures relating to the operation and use of www.pianidiclodia.it.

The Data Controller, unless otherwise specified, is the owner of www.pianidiclodia.it.

www.pianidiclodia.it (or this Application)
Lo strumento hardware o software attraverso il quale sono raccolti e trattati i Dati Personali degli Utenti.

SERVICE
The Service provided by www.pianidiclodia.it as defined in the relevant terms (if any) on this site/application.

EUROPEAN UNION (or EU)
Unless otherwise specified, any reference to the European Union in this document shall be deemed to extend to all current member states of the European Union and the European Economic Area.

COOKIE
Small portion of data stored within the User's device.

Legal references

This privacy policy is drawn up on the basis of multiple legal regulations, including Articles 13 and 14 of Regulation (EU) 2016/679.

Unless otherwise specified, this privacy policy relates exclusively to www.pianidiclodia.it.