Vitroplant

Privacy

Privacy Policy

In accordance with Article 13 of Guidelines 2016/679 (GDPR) and pursuant to Article 13 of Legislative Decree No. 196/2003 (Code on Personal Data Protection), this policy relates to all personal data processed according to the following procedure.

Data controller

The data controller is:
Vitroplant Italia srl Soc. Agricola
Via Loreto, 170 - 47521 Cesena (FC)
Email

Collected data

Processed personal data are collected either as directly provided by users or automatically supplied.

a) Data directly provided by users include all personal data entered to use the site or provided to the Data Controller in any manner.

b) Automatically collected data include browsing data. During their ordinary operation, certain computer systems and software procedures for the website acquire personal data whose transmission is implied in the use of Internet communication protocols. Such information is not collected to be linked to identified users but, due to its very nature, could allow user identification through processing and association with data held by third parties or by the Data Controller. The category of acquired data includes IP addresses or domain names of computers used by users who log in, addresses in URI notation, request times, methods used to submit requests to the server, numerical codes indicating the status of the request provided by the server (successful, error, etc.), and other parameters related to the operating system and users' computer environment. The data are used solely to gather statistical and anonymous information on site usage and to verify its correct functioning. These data could be used to establish liability in case of cybercrimes against the site or other users.

In particular, the following personal data are collected and processed:

  • E-mail address
  • Surname, name, telephone number

Automatically collected data include browsing data. Although not gathered to be associated with identified users, these data could indirectly allow identification through processing and association with data collected by the Data Controller. Specifically:

  • IP Address
  • Surfing browser and device

Recipients

Personal data provided will be communicated to appropriately appointed recipients who will process the data as data supervisors and/or persons in charge of processing, in order to fulfill agreements or related purposes

Legal Basis and Purposes of Processing

Data are exclusively processed for the following purposes:

  • To respond to users' specific requests.
  • Only with explicit user consent, to allow subscription to specific and additional services such as the transmission of future information and promotional materials via email or electronic means.

The provision of the data listed in the "Collected Data" section for the above-mentioned purposes is mandatory to allow users to access the service. For this reason, consent is required, and refusal to provide, inaccurate provision, or partial provision of data could prevent proper service delivery.

The provision of data for newsletters aimed at promotional, informational, or research purposes is optional. Refusal to consent to processing will prevent users from receiving updates on business initiatives and promotional campaigns, offers, or other promotional materials, as well as customized offers.

We reaffirm that the Data Controller does not share user information with third parties without user consent, except as required by law.

The data will not be disseminated or transferred outside the EU.

Withdrawal of Consent

Users can withdraw their consent to receive promotional and business material at any time by sending a request to the Data Controller’s email address or by clicking the unsubscribe link in the footer of each promotional and business email received.

Processing methods

Data are processed using automated tools for no longer than strictly necessary for the purposes for which they were collected, with an annual review of stored data to delete outdated records unless the law requires longer retention.

Data processing generally takes place at the company headquarters, carried out by staff or external contractors appointed for this purpose. The full list of data supervisors and individuals in charge of personal data processing can be obtained by sending a specific request to the Data Controller’s email address.

Specific security measures are implemented to prevent data loss, unlawful or incorrect use, and unauthorized access.

Users' rights

Pursuant to Article 7 of the Privacy Code and Article 13 of the GDPR, all users have the right to be informed whether their personal data are being processed and to receive an intelligible communication of such data.

In particular, users have the right to obtain from the Data Controller information regarding:

  1. The source of their personal data.
  2. The purposes and methods of processing.
  3. The logic applied in case of processing carried out by electronic/computer systems.
  4. The identification details of the Data Controller, data supervisors, and appointed representatives.
  5. The recipients or categories of recipients to whom their data may be disclosed or who may have access to them as appointed representatives, supervisors, or data processors.

Furthermore, users have the right to request from the Data Controller:

  1. Updates, rectification, or integration of their data.
  2. The erasure, anonymization, or blocking of data processed in violation of the law.
  3. Access to their data, i.e., confirmation of whether personal data processing is in progress.
  4. Restriction of processing.
  5. Data portability, i.e., the right to receive their personal data in a structured format.
  6. The right to lodge a complaint with the Supervisory Authority.

Finally, users, in whole or in part and for legitimate reasons, have the right to object to the processing of their personal data, even if aimed at collection purposes. Specifically, users have the right to object to the processing of their personal data for direct marketing, market research, or commercial communication. Requests regarding these rights must be sent to the Data Controller’s email address.

Updating and amendments

The Data Controller reserves the right to regularly modify, supplement, or update this Privacy Policy in compliance with applicable regulations and guidelines issued by the Data Protection Authority.

The aforementioned amendments or additions will be communicated to users via a link to the Privacy Policy page on the website and directly notified via email.

WWe encourage users to regularly review our Privacy Policy for updates and to determine whether they wish to continue using our services.