The policy is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding cookies and by the Provision issued by the Italian Data Protection Authority for the protection of personal data regarding cookies.
1. DATA CONTROLLER
The data controller is
Consorzio Tutela Aceto Balsamico di Modena
with registered office in Via Ganaceto, 134 – 41121 Modena
in person of the pro-tempore legal representative that can be contacted at the following contact details:
Tel. + 39 059 208621
Fax + 39 059 208623
2. TYPOLOGY OF PERSONAL DATA COLLECTED
La navigazione su questo sito web e/o l’accesso ad alcune sezioni del sito possono comportare la raccolta e il trattamento di dati personali.
Data acquired during navigation
The information systems and software procedures used to operate the Website acquire, during their standard operation, some personal data whose transmission is implicit to the use of the Internet communication protocols.
This information is not collected to be associated to identified data subjects, but because of its nature, through processing and association to data held by third parties, such information may enable the identification of users.
This category of data includes IP addresses or domain names of the computers used by the users that connect to the website, URI (Uniform Resource Identifier) addresses of the resources requested, request time, method used to submit the request to the server, size of the response file, numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system and the user’s IT environment.
Data voluntarily provided by the user
The optional, explicit and voluntary sending of e-mails to the addresses given on this website implies the subsequent acquisition of the sender’s address that is necessary to answer the requests, as well as any other personal data contained in the request.
The optional, explicit and voluntary registration through web forms present on the website implies the subsequent acquisition of all the data contained in the boxes filled out by the user and processing is carried out exclusively to provide the service requested.
Specific policies are present on the website pages regarding special services provided and are displayed before collecting data.
3. PURPOSE OF PROCESSING AND LEGAL BASIS
The personal data collected will be processed by CONSORZIO TUTELA ACETO BALSAMICO DI MODENA in compliance with the conditions of Art. 6 Reg. EU 2016/679, for the following purposes:
1. The data acquired during navigation are processed to enable the operation of the Website.
2. The personal data provided by the users sending requests are used with the exclusive purpose of following up the request sent.
3. The personal data provided for possible administrative-accounting purposes are used to comply with the contract obligations.
4. RECIPIENTS OR CATEGORIES OF DATA RECIPIENTS
For the purposes described above, the personal data collected may be communicated to recipients that will process data as data processors and/or as natural persons acting under the authority of the Data Controller and the Data Processor:
– Subjects that provide services for the management of the website, information system and communication networks;
– Professional firms, firms for consultancy or assistance purposes to the Data Controller;
– Authorities responsible for enforcement of compliance with the law and/or provisions of public bodies, upon request.
The updated list of the Data Processors can be requested by writing to email@example.com or getting in touch with the contact details specified in point 1 of this information.
5. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES AND SAFEGUARDS
Within the scope of the purposes described above, the personal data collected may be transferred to Information Systems in EU or non-EU countries in compliance with the regulation, Article 44 – General principle for the transfer; Article 45 – Transfer on the basis of an adequacy decision; Article 46 – Transfer subject to appropriate safeguards.
The data subject can obtain information about data transfer safeguards by writing an e-mail to
6. PROCESSING PROCEDURES
The processing will be carried out by automated or manual means, with methods and tools aimed at guaranteeing maximum security and privacy, by subjects specifically appointed to do so in compliance with the security measures established by GDPR 2016/679.
7. STORAGE PERIODS
In compliance with the provisions of Art. 5, paragraph 1, letter e) of Reg. UE 2016/679 personal data collected will be stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data were collected and other purposes allowed and associated, or in compliance with the provisions of the applicable legislation.
– The data processed for purpose 1 of art. 3 above are stored for the duration of the navigation session.
– The data processed for purpose 2 of art. 3 above are stored for the period of time required to follow up the request sent from time to time.
– The data processed for purpose 3 of art. 3 above are stored in compliance with the law.
8. RIGHTS OF THE DATA SUBJECTS
Data subjects can assert their rights as established by EU Regulation No. 679/2016 by contacting the Data Controller, sending an e-mail to firstname.lastname@example.org or writing to the headquarters of the Data Controller indicated above.
Data subjects have the following rights:
– The right, at any time, to obtain from the Data Controller access to your personal data (Article 15), to modify them (Article 16) or erase them (Article 17), or to limit processing (Art. 18) or oppose data processing based on legitimate interest (Article 21).
– The right to withdraw consent: if the treatment is based on consent, data subjects have the right to withdraw consent at any time without prejudice to the lawfulness of processing based on the consent given prior to its withdrawal.
– The right to lodge a complaint with a supervisory authority.
To object to data processing and to exercise other rights, you can write to the Controller to the address: email@example.com or to the addresses given in point 1 of this information.
Apart from that specified for navigation data, users are free to provide their personal data.
Failure to provide personal data will make it impossible, for certain services, to use the services offered by the Data controller.
Last updated: 13/12/2018