In implementation of EU regulation 2016/679 and current regulations, we provide you with the following information relating to the processing and protection of your personal data.

Data Controller
The data controller is Tommasi Viticoltori s.s. agricultural, Via Ronchetto 4, 37029 Pedemonte di Valpolicella – Verona, which can also be reached by calling +39 045 7701266 or by email at privacy@tommasi.it

Source of personal data:
Personal data is collected directly from the interested party when completing this form for the purpose of purchasing the products offered, even without the need to create a specific account.

Purpose of the treatment
The personal identification data collected from the interested party, user of the site, are subject to processing and are processed and used directly for the following purposes:
a) Satisfy users’ purchase requests and register their personal account. Any incorrect or insufficient communication of the requested data may lead to the total or partial impossibility of following up on the requests of the interested party.

  • consent is not required for account registration.
  • storage time 10 years from registration

b) the stipulation and execution of the contract aimed at the purchase. When sending products on this site. The provision of data is mandatory to proceed with the purchase

  • consent, since it is a contractual purpose, is not required
  • storage time 10 years from purchase

c) For administrative / accounting purposes.

  • purpose and storage time as required by law

d) defensive purposes or credit recovery.

Consent, for legitimate interest, is not required

  • storage time 10 years from the last purchase

e) for the improvement of our services, any customer satisfaction on the products or services provided directly and/or indirectly by the Owner

  • being an integral part of the contract itself, consent is not required
  • storage time 3 years from any request

f) to send communications on future commercial and promotional initiatives; announcements of services and offers of the owner and for sending information and promotional messages relating to its activity, as well as for the purposes connected to this and also instrumental for statistical purposes.

  • The sending is subject to your express consent and the data will be kept until the consent is revoked

Recipients
The data collected will not be disclosed.
They will be communicated to third parties to whom the communication is necessary to fulfill fiscal or administrative obligations, or subjects that the Data Controller makes use of for carrying out instrumental and/or ancillary activities for the fulfillment of its obligations deriving from the conclusion of contracts and/or in any case connected to the services offered (by way of example, your data will be communicated to the transport company in charge of delivering the purchased products, legal offices, any customer satisfaction agencies, payment circuits such as Nexi). Also to subjects whose authority is recognized by provisions of the law or by orders of the authorities.

Processing methods
The processing of your personal data will be consistent with the principles of correctness, lawfulness and transparency, protecting your privacy and your rights. They will be processed with the help of current IT systems or paper supports by specially authorized personnel trained in confidentiality and the obligation to use the data only for the purposes identified by the Data Controller. The Data Controller will implement technical and organizational measures appropriate to the level of risk. Once the storage terms indicated above have elapsed, all data will be destroyed or made anonymous, compatibly with the technical cancellation and backup procedures.

Transfer of data outside the EU
The data of the interested party will not be transferred to non-European countries. Should the Data be transferred to non-European countries or international organizations in the future, all the provisions of Chapter V (EU Regulation 2016/679) will be respected in order to ensure an adequate level of protection.

Rights of the interested party
You have the right to ask the data controller for access to your personal data, rectification, cancellation of the same or possibly the limitation of treatment. You can always request a complete specification of the processing and your rights by writing to the contacts made available by the Data Controller and indicated at the beginning of the information.

Revocation of Consent
You can interrupt the processing referred to in point c) of this information at any time, by writing your intentions to the Data Controller, without however affecting the operations lawfully carried out up to that moment. If you also believe that the processing that concerns you violates the GDPR EU-2016/679 Regulation, you have the right to lodge a complaint with the Guarantor for the protection of personal data at the addresses available on www.garanteprivacy.it

Right of Complaint
If you believe that the processing that concerns you violates the GDPR EU-2016/679 Regulation, you have the right to lodge a complaint with the Personal Data Protection Authority through the contacts available on the website https://www.garanteprivacy.it/