PRIVACY POLICY

updated to EU Reg 2016/679

(European Regulation on the protection of personal data)

1) Introduction

Azienda Agricola Terr'e soi takes the user's privacy seriously and undertakes to respect it. This privacy policy ("Privacy Policy") describes the personal data processing activities carried out by Azienda Agricola Terr'e soi through the website www.designplex.it and the relative commitments undertaken in this regard by the Company. Azienda Agricola Terr'e soi may process the user's personal data when they visit the Site and use the services and functions present on the Site. A specific information is normally published in the sections of the Site where the user's personal data are collected. pursuant to art. 13/15 of EU Reg. 2016/679. Where required by EU Reg. 2016/679, the user's consent will be required before proceeding with the processing of your personal data. If the user provides personal data of third parties, he must ensure that the communication of the data to Azienda Agricola Terr'e soi and the subsequent processing for the purposes specified in the applicable privacy policy complies with EU Reg. 2016/679 and applicable legislation. .

2) Identification details of the owner, manager and the Privacy Officer

Terr'e soi Farm Via Casa del Frate 40 Santadi (SU) tel. +39 348 12 14 589, email info@terresoi.com

3) Type of data processed

Visiting and consulting the Site does not generally involve the collection and processing of the user's personal data except for navigation data and cookies as specified below. In addition to the so-called "navigation data" (see below), personal data voluntarily provided by the user may be processed when they interact with the functionality of the Site or request to use the services offered on the Site. In compliance with the Privacy Code, Azienda Agricola Terr'e soi may also collect the user's personal data from third parties in carrying out its business.

4) Cookies and navigation data

To find out what cookies are, which cookies our site uses and how to disable them, visit the page for more information.

5) Retention of personal data

Personal data are stored and processed through IT systems owned by Azienda Agricola Terr'e soi and managed by Azienda Agricola Terr'e soi or by third party suppliers of technical services; for more details, please refer to the section "Accessibility of personal data" below. The data is processed exclusively by specifically authorized personnel, including personnel assigned to carry out extraordinary maintenance operations.

6) Purposes and methods of data processing

Azienda Agricola Terr'e soi may process the user's common personal data for the following purposes: use by users of services and features on the Site, management of requests and reports from its users, sending newsletters , management of applications received through the Site, etc. Furthermore, with the additional and specific optional consent of the user, Azienda Agricola Terr'e soi may process personal data for marketing purposes, i.e. to send the user promotional material and / or commercial communications relating to the Company's services, at the contact details indicated, both through traditional methods and / or means of contact (such as, paper mail, telephone calls with operator, etc.) and automated (such as, communications via internet, fax, e-mail, sms, applications for mobile devices such as smartphones and tablets -cd. APPS-, social network accounts -for example via Facebook or Twitter-, phone calls with automatic operator, etc.). Personal data are processed both in paper and electronic form and entered into the company information system in full compliance with EU Reg. 2016/679, including the security and confidentiality profiles and inspired by the principles of correctness and lawfulness of processing. In accordance with EU Reg. 2016/679, the data are kept and stored for 10 (ten) years.

7) Security and quality of personal data

Azienda Agricola Terr'e soi undertakes to protect the security of the user's personal data and complies with the security provisions provided for by the applicable legislation in order to avoid data loss, illegitimate or illicit use of data and non-access authorized to them, with particular reference to the Technical Regulations regarding minimum security measures. In addition, the information systems and computer programs used by Azienda Agricola Terr'e soi are configured in such a way as to minimize the use of personal and identification data; these data are processed only for the achievement of the specific purposes pursued from time to time. Azienda Agricola Terr'e soi uses multiple advanced security technologies and procedures to promote the protection of users' personal data; for example, personal data are stored on secure servers located in places with protected and controlled access. The user can help Azienda Agricola Terr'e soi to update and keep their personal data correct by communicating any changes to their address, qualification, contact information, etc.

8) Scope of communication and data access

The user's personal data may be disclosed to:

• all the subjects to whom the right of access to such data is recognized by virtue of regulatory provisions;
• to our collaborators, employees, as part of their duties;
• to all those natural and / or legal persons, public and / or private when the communication is necessary or functional to the performance of our business and in the manner and for the purposes illustrated above;

9) Nature of providing personal data

The provision of some personal data by the user is mandatory to allow the Company to manage communications, requests received from the user or to contact the user himself to follow up on his request. This type of data is marked with the asterisk symbol [*] and in this case the provision is mandatory to allow the Company to follow up on the request which, failing that, cannot be processed. On the contrary, the collection of other data not marked with an asterisk is optional: failure to provide it will not entail any consequences for the user.

The provision of personal data by the user for marketing purposes, as specified in the "Purpose and methods of processing" section is optional and refusal to provide them will have no consequence. The consent given for marketing purposes is extended to the sending of communications made through both automated and traditional methods and / or means of contact, as exemplified above.

10) Rights of the interested party - 10.1 Art. 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679

The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and the following information:

a) the purposes of the processing;

b) the categories of personal data in question;

c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients of third countries or international organizations;

d) the retention period of the personal data envisaged or, if this is not possible, the criteria used to determine this period;

e) the existence of the right of the interested party to ask the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;

f) the right to lodge a complaint with a supervisory authority;

g) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.

11) Right pursuant to art. 17 of EU Reg. 2016/679 - right to cancellation ("right to be forgotten")

The data subject has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay, if one of the following reasons exists : a) the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;

b) the interested party revokes the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for processing;

c) the interested party opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21, paragraph 2;

d) the personal data have been unlawfully processed;

e) personal data must be deleted to fulfill a legal obligation under Union law or the law of the Member State to which the data controller is subject;

f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1 of EU Reg. 2016/679

12) Right pursuant to art. 18 Right to limitation of treatment

The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:

a) the accuracy of the personal data is contested by the data subject, for the period necessary for the data controller to verify the accuracy of such personal data;

b) the processing is unlawful and the interested party opposes the deletion of personal data and requests instead that its use be limited;

c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;

d) the interested party opposed the processing pursuant to article 21, paragraph 1, EU Reg. 2016/679 pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested.

13) Right referred to in Article 20 Right to data portability

The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments on the part of the data controller

14) Revocation of consent to processing

The interested party has the right to withdraw consent to the processing of your personal data by sending a registered letter with return receipt to the following address: Azienda Agricola Terr'e soi Via Casa del Frate 40 Santadi (SU), accompanied by a photocopy of his document identity, with the following text: <>. At the end of this operation, your personal data will be removed from the archives as soon as possible.

If you wish to have more information on the processing of your personal data, or to exercise the rights referred to in point 5 above, you can send a registered letter with return receipt to the following address: Azienda Agricola Terr'e soi Via Casa del Frate 40 Santadi (SU). Before we can provide you, or change any information, you may need to verify your identity and answer some questions. An answer will be provided as soon as possible.