Privacy Policy

Privacy Policy

Please read our Privacy Policy carefully, which applies whenever you access the website www.zehnhof.it (hereinafter also the “Site”) and decide to browse it and use its services. 

Below, we are pleased to provide you with the necessary information regarding the processing of your personal data, particularly regarding the purposes and methods of processing, as well as the scope of communication and dissemination of the same, the nature of the data in our possession, their provision, and the retention period.

This document is intended to accurately describe the methods used to manage the processing of your personal data collected while browsing the Site or using the services it offers. This information does not apply to other websites that may be accessed via links on the Data Controller’s website, and the Data Controller is in no way responsible for third-party websites.

Titolare del trattamento

The Data Controller for data collected through this Website is the agricultural company ‘Cantina ZEHNHOF di Rossi Giacomo’, with registered office in Via Antonio Rosmini, 52A, Roverè della Luna (TN) Italy, VAT number 00510610223 (hereinafter referred to as ‘Cantina Zehnhof’): the Data Controller independently decides on the purposes and methods of processing, as well as on the security procedures to be applied to ensure the confidentiality, integrity and availability of the data.

Subject of the processing

The Data Controller processes personal, identifying and non-sensitive data (in particular, name, surname, email address, telephone number – hereinafter referred to as ‘personal data’ or ‘data’) that you provide when requesting information and/or to use the newsletter service offered by the Data Controller.

Browsing data, personal data whose transmission is implicit in the use of internet communication protocols (such as IP addresses, browser type, operating system, domain name and website addresses from which access or exit was made, information on the pages visited by users within the Website, time of access, time spent on each page, internal path analysis and other parameters relating to the user’s operating system and IT environment), acquired by the IT systems and software procedures used to operate the Data Controller’s Website. In this regard, the Website uses cookies that collect your personal data. We invite you to read the Cookie Policy escribing the cookies used by the Website and the purposes for which they are used.

Methods and storage of your data

Il trattamento dei Suoi dati personali è realizzato per mezzo delle operazioni indicate all’art. 4 n. 2) GDPR e nel rispetto dei principi di liceità, correttezza e trasparenza e degli altri principi indicati all’art. 5 GDPR.

Personal Data will be processed and stored for the time necessary to pursue the purposes of processing for which it was collected.

1) Personal Data collected to respond to your requests for information and to enable you to navigate the Website correctly will be stored for as long as necessary to fulfil these purposes.

2) Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied.

3) When the processing is based on the user’s consent, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, upon expiry of this period, the right of access, deletion, rectification and the right to data portability can no longer be exercised.

Personal data will be managed and stored on servers located within the European Union owned by the Data Controller and/or third-party companies appointed and duly designated as Data Processors. In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers to Italy and/or the European Union and/or non-EU countries. In this case, the Data Controller hereby guarantees that the transfer will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided for by the European Commission.

Purpose of processing and legal basis for processing

Personal data voluntarily provided will be processed for the following purposes:

1) browsing the Website;
2) respond to your requests for information;
3) fulfil the obligations laid down by law, regulations, EU legislation or an order issued by the Authority;
4) prevent or detect fraudulent activities or abuses harmful to the website;
5) exercise the rights of the Data Controller, such as the right to defence in court;
6) Your identification is necessary in order to purchase the Data Controller’s products and to enable the proper development of activities in your support;
7) completion of the order and management of payment collection with the necessary control and security measures for the transaction;
8) preparing and delivering orders;
9) managing order invoicing and completing the related administrative and tax processes;
10) after-sales service and management of support and contact requests;
11) with your consent, for the development of marketing activities and to analyse and understand our customers, to improve our service (including the user interface experience) and optimise the selection of products offered.

For the purposes referred to in points 1 to 10, data processing is necessary i) to enable correct navigation on the Website; ii) to implement pre-contractual and contractual measures adopted at the user’s request; iii) to fulfil a legal obligation to which the Data Controller is subject; and, finally, iv) to pursue the legitimate interests of the Data Controller, such as the right to defend itself in court and to prevent or detect fraudulent activities or abuses that are harmful to the website.

For the purposes referred to in point 11, data processing is lawful only if the data subject has given their consent.

The processing of your data will not be subject to profiling and/or automated decisions in any way.

Optional or mandatory nature of data provision; need for consent and consequences of failure to consent.

Apart from what has been specified for navigation data, you are free to provide your personal data.

The provision of personal data for the purposes referred to in points 1 to 10
is optional but necessary in order to use the services requested from the Data Controller and to complete specific functions. Failure to provide such data may make it impossible to obtain what has been requested or to use the services of the Data Controller.

Consent to the processing of data for the purposes referred to in point 11 – i.e. for promotional, commercial communication and/or marketing purposes in general by the Data Controller – is always optional. In the absence of such consent, the Data Controller may still provide the services referred to in points 1 to 10 and you will still be able to use the other features and enjoy the services provided by the Data Controller. You may therefore decide not to give your consent to the processing of your data for this purpose or to subsequently and at any time withdraw consent to the processing of data already provided for the purposes referred to in point 11, but the withdrawal shall not affect the lawfulness of processing based on consent before withdrawal. The right to object to processing for the purposes referred to in point 11 , may be carried out at any time through automated means of contact.

Subjects or categories of subjects to whom your data may be disclosed

Your data will only be disclosed to third parties with your express consent, except in cases where disclosure is required by law or necessary for purposes provided for by law for which the consent of the data subject is not required; in such cases, the data may be made available to third parties who will process it independently and solely for the aforementioned purposes (for example, in the case of a request made by the police or the judiciary or other competent bodies, or to fulfil obligations arising from the contract concluded with you). Your data will not be disclosed in any way.

Soggetti che possono trattare i Suoi dati personali

Titolare potrà avvalersi di soggetti terzi per il trattamento dei Suoi dati personali, per determinate attività. I soggetti terzi che svolgono queste operazioni sono stati adeguatamente selezionati e risultano dotati di esperienza, capacità e affidabilità e offrono idonea garanzia del pieno rispetto delle vigenti disposizioni in materia di trattamento, ivi compreso il profilo della sicurezza dei dati.

Tali soggetti terzi saranno all’uopo nominati “Responsabili del Trattamento” e svolgeranno la loro attività secondo le istruzioni impartite da Titolare e sotto il suo controllo. Periodicamente verifichiamo che i Responsabili abbiano assolto puntualmente i compiti loro affidati e che continuino a prestare idonee garanzie del pieno rispetto delle disposizioni in materia di protezione dei dati personali. L’elenco aggiornato dei Responsabili potrà sempre essere richiesto al Titolare. I Suoi dati sono poi trattati dai nostri Incaricati preposti ai singoli servizi.

Security measures
The Data Controller adopts appropriate security measures to minimise the risks of destruction or loss – even accidental – of data, unauthorised access or processing that is not permitted or does not comply with the purposes of collection indicated in our Privacy Policy.
However, the Data Controller
cannot guarantee its users that the measures taken for the security of the Website and the transmission of data and information on the Website limit or exclude any risk of unauthorised access or dispersion of data by devices belonging to the user: We recommend that you ensure that your computer is equipped with adequate software to protect the transmission of data over the network, both incoming and outgoing (such as up-to-date antivirus systems) and that your Internet service provider has taken appropriate measures for the security of data transmission over the network (such as firewalls and anti-spam filters).

Links to other websites

Il nostro Sito può contenere dei link ad altri siti web che possono non avere alcun collegamento con noi.

The Data Controller does not control or monitor these websites and their content. The Data Controller cannot be held responsible for the content of these sites and the rules they adopt, including with regard to your privacy and the processing of your personal data during your browsing operations. We therefore ask you to pay attention when connecting to these sites via the links on our site and to read their terms of use and privacy policies carefully. Our Privacy Policy does not apply to third-party websites. Our website provides links to these sites solely to facilitate the user’s search and navigation and to facilitate hypertext links on the Internet to other sites. The activation of links does not imply any recommendation or notification by the Data Controller for access and navigation on these sites, nor any guarantee regarding their content, services or goods provided and sold to Internet users.

The rights of data subjects

Nella Sua qualità di interessato, può esercitare i diritti di cui agli artt. da 15 a 22 GDPR, in particolare il diritto di accesso ai dati, di rettifica o di cancellazione degli stessi, di richiedere la limitazione o di opporsi al trattamento, oltre al diritto alla portabilità dei dati.

Interested parties who believe that the processing of personal data relating to them carried out through this website or its services is in violation of the provisions of the GDPR have the right to lodge a complaint with the Supervisory Authority or to take appropriate legal action.

In the event of a breach of the data subject’s personal data, taking into account the provisions of Article 34 of the GDPR, the Data Controller shall notify the data subject of the breach.

Contact details for exercising your rights
You may exercise your rights under current legislation by sending an e-mail to privacy@zehnhof.it.

This Website and the Owner’s Services are not intended for minors under the age of 18, and the Owner does not intentionally collect personal information relating to minors. In the event that information on minors is unintentionally recorded, the Owner will delete it promptly upon request by users.

Social plugins and social networks

Our web pages contain plug-ins from social networks (e.g. Facebook, LinkedIn, Instagram, etc.). If you access one of our web pages equipped with such a plug-in, your internet browser connects directly to the social network’s servers and the plug-in is displayed on your screen thanks to the connection with your browser. If a user of a social network visits our web pages while logged into their social network account, their personal data may be associated with their social network account. Even if you use the plug-in functions, the information will be associated with your social network account. Further information on the collection and use of data by social networks in general, as well as on the rights and methods available to protect the privacy of the data subject in this context, can be found on the social network account pages on data protection. If the data subject does not wish to associate their visit to our web pages with their social media account, they must log out of the social network before visiting them.

Personal data is collected for the following purposes and using the following services: Interaction with social networks and external platforms. These services allow interaction with social networks or other external platforms. Interactions and information acquired are in any case subject to the user’s privacy settings for each social network. If a service for interaction with social networks is installed, it is possible that, even if users do not use the service, it may collect traffic data relating to the pages on which it is installed.

Changes and updates to this Privacy Policy

The Data Controller may modify or simply update, in whole or in part, the Privacy Policy of the website, also in consideration of changes in the laws or regulations governing this matter and protecting your rights. Changes and updates to the Privacy Policy will be notified to users on the Home Page as soon as they are adopted and will be binding as soon as they are published on the website. We therefore ask you to regularly access this section to check the publication of the most recent and updated Privacy Policy.