INFORMATION PURSUANT TO ARTICLE 13 OF REGULATION (EU) NO 679/2016 (“GDPR”)

AGRINATURA SOCIETA’ AGRICOLA SRL with registered office in Contrada Sant’Agostino 76123 Andria (BT) CF and P.IVA IT06359690721 (hereinafter, “Data Controller”), in its qualitỳ of data controller, informs you pursuant to Art. 13 D.Lgs. 30.6.2003 n. 196 (hereinafter, “Privacy Code”) and Art. 13 EU Regulation n. 2016/679 (hereinafter, “GDPR”) that your data will be processed in the manner̀ and for the purposes̀ below:

1. Purpose of Processing

The Data Controller processes personal, identifying data (hereinafter, “personal data” or also “data”) that you have provided when concluding contracts for services or requesting information.

The Data Controller does not require the Data Subject to provide so-called “special” data, i.e., according to the provisions of the GDPR (art. 9), personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to the person’s health or sexual life or sexual orientation. In the event that the service requested of the Data Controller requires the processing of such data, the Interested Party will receive appropriate information in advance and will be asked to give appropriate consent.

2. Purposes̀ of the processing.

Your personal data are processed:

1. A) without your express consent (art. 24 lett. a), b), c) Privacy Code and art. 6 lett. b), e) GDPR), for the following Purposes̀ of Service:

• activities preliminary and consequent to the purchase of a product, the management of the related order, the production and/or shipment of the purchased product, the related invoicing and payment management, the processing of complaints and/or reports
• assistance and the provision of such assistance, the prevention of fraud as well as the fulfillment of any other obligations arising from
• fulfilling obligations under the law, a regulation, EU legislation or an order of the Authoritỳ (such as anti-money laundering);
• exercise the rights of the Data Controller, such as the right to defense in court;
• Detect the user experience of our websites and ensure the proper functioning of the web pages and their content.
• Send commercial communications regarding promotions and/or offers for which the user may be entitled to benefit. The processing put in place for this purpose is carried out with the specific consent provided by the user, except for commercial communications relating to products and/or services similar to those already purchased and/or subscribed to by the user as provided for in art. 130 of Legislative Decree 196/2003 without prejudice to the fact that, the interested party at any time, will have the opportunity to object to the sending of such communications;

The processing is necessary for the pursuit of the legitimate interest of the data controller in accordance with Art. 6(1)(f) of EU Reg. 679/2016;

1. B) Only with your specific and distinct consent (Art. 7 GDPR), for the following Marketing Purposes̀:

• to send you via e-mail, mail and/or sms and/or telephone contact, newsletters, commercial communications and/or advertising material on products or services offered by the Controller and satisfaction survey on the qualitỳ of services;
• to send you via e-mail, mail and/or sms and/or telephone contacts commercial and/or promotional communications from third parties (e.g. business partners)

3. Modalities̀ of processing

The processing of your personal data is carried out by means of the operations indicated in Art. 4 Privacy Code and Art. 4 No. 2) GDPR and namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data.

3.1 Duration

Your personal data are subject to both paper and electronic and/or automated processing. The Data Controller will process̀ personal data for the time necessary to fulfill the purposes̀ above and in any case for no longer than 10 years from the termination of the relationship for the purposes̀ of Service and for no longer than 2 years from the collection of the data for the purposes̀ of Marketing.

4. Recipients and categories of data recipients and data transfer

Your data may be made accessible for the purposes̀ referred to in Section 2.A) and 2.B):

• to employees and collaborators of the Data Controller in their capacitỳ as appointees and/or internal data processors and/or system administrators;
• – to third̀ party companies or other entities as an indication:
• credit institutions
• professional firms
• consultants
• shipping companies that carry out activities̀ on behalf of the Controller, in their capacitỳ as external data processors

Personal data provided by the user will not be disseminated.

The data will be processed within the European Union and stored on servers located within the European Union.

5. Communication of data

Without the need for your express consent (ex art. 24 lett. a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Data Controller maỳ communicate your data for the purposes̀ referred to in art. 2.A) to Supervisory Bodies, Judicial Authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the fulfillment of the said purposes̀.Said subjects will process the data in their capacitỳ as autonomous data controllers.

6. Data Transfer

Your personal data are stored in paper, computer and telematic archives located in countries where the GDPR is applied (EU countries).

7. Nature of provision of data and consequences of refusal to respond

The provision of data for the purposes̀ mentioned in Article 2.A) is mandatory. In their absence, we will not be able to guarantee you the Services of Article 2.A). On the other hand, the provision of data for the purposes̀ set forth in Article 2.B) is optional. You maỳ then decide not to provide any data or to later deny the possibilitỳ to process data alreadỳ provided: in this case, you will not be ablè to receive newsletters, commercial communications and advertising material related to the Services offered by the Data Controller. You will continuè however to be entitled to the Services referred to in Article 2.A).

8. Rights of the Data Subject

In your capacitỳ as a data subject, you have the rights set forth in Article 7 Privacy Code and Article 15 GDPR and specifically the rights to:

• Obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in intelligible form;
• obtain an indication of: a) the origin of the personal data; b) the purposes̀ and methods̀ of processing; c) the logic applied in the event of processing carried out with the aid of electronic instruments; d) the identification details of the data controller, data processors and the designated representative pursuant to Art. 5, paragraph 2 Privacy Code and Art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or appointees;
• obtain: a) the updating, rectification or, when interested, the integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
• – object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if́ pertinent to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communications, through the use of automated calling systems without the intervention of an operator by e-mail and/or through traditional marketing methods̀ by telephone and/or paper mail. It should be noted that the data subject’s right to object, set forth in point b) above, for purposes̀ of direct marketing by means of automated̀ modalities extends to traditional ones and that, in any case, this is without prejudice to the possibilitỳ for the data subject to exercise the right to object even partially. Therefore, the data subject maỳ decide to receive only communications through traditional̀ modes or only automated communications or neither type of communication.

Where applicable, he or she also has̀ the rights set forth in Articles 16-21 GDPR (Right to rectification, Right to be forgotten, Right to restrict processing, Right to data portabilitỳ, Right to object. The data subject also has the right to lodge a complaint with the Garante (Art. 77 of EU Reg. 679/2016).

9. Ways̀ of exercising rights

You may exercise the above rights by sending a request by registered mail with return receipt to the following address: AGRINATURA SOCIETA’ AGRICOLA SRL Contrada Sant’Agostino 76123 – Andria (BT), or to the email address: info@agrinatura.net.

10. Security

The processing of personal data will also be carried out with the support of computer or telematic means designed to store, manage and transmit the data, however, by means of instruments suitable to ensure their security and confidentiality. In particular, it should be noted that, having become aware of the risks associated with the disclosure of personal data (provided in person, by telephone or through the Internet), no system is totally secure or tamper- or hacker-proof. AGRINATURA SOCIETA’ AGRICOLA SRL has put in place all measures reasonably necessary to prevent and minimize risks due to unauthorized access, unauthorized or unlawful processing, alteration or destruction. For example, the Owner uses technologies to encrypt, during collection or transfer, those information that is particularly confidential.

11. Data Controller and Data Protection Officer.

The Data Controller is AGRINATURA SOCIETA’ AGRICOLA SRL with registered office in Contrada Sant’Agostino 76123 Andria (BT) CF and VAT IT06359690721, PEC: agrinatura@legalmail.it, Email: info@agrinatura.net.

EXTENDED INFORMATION ON THE USE OF COOKIES

Visitors to the site may be sent some very small files called “cookies” to enable proper interaction with the functionality of the site. The use of so-called “cookies” is an industry standard, necessary for the proper functioning of the site and its improvement. “Cookies” are stored on the user’s computer and not on this Site. While using the site, the user may receive cookies sent by third parties.

The cookies used on this site, will be used to manage the following functionality:

• store the preferences entered
• analyze the use of the services provided to optimize the browsing experience
• ensure the security and integrity of the site
• create profiles related to users, in order to propose advertising messages in line with the choices manifested by the users themselves

Characteristics and purposes of the cookies installed by the site

Technical cookies: these are necessary for the proper functioning of the site. They can be provided by this domain or by third parties for integration functions with social networks and similar.

Analytical cookies: are used for creating anonymous statistics, monitoring the proper functioning of the site and improving it. These types of cookies may be provided by this domain or by third parties.

Disabling cookies

You may decide to disable the receipt of cookies by going to change the settings of your browser, please note however that this operation may lead to the malfunctioning of the services offered by this site. Alternatively, we recommend that you enable “incognito browsing” or “anonymous browsing” functionality on your browser.

Below are links to instructions for disabling cookies for the most popular browsers:

• Microsoft Internet Explorer (http://windows.microsoft.com/it-it/windows7/block-enable-or-allow-cookies)
• Google Chrome (https://support.google.com/accounts/answer/61416?hl=it)
• Mozilla Firefox (https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie)
• Apple Safari (https://support.apple.com/kb/PH19214?locale=it_IT)
• Opera (http://help.opera.com/Windows/10.00/it/cookies.html)

THIRD PARTY WEBSITES

This site contains links to websites of third-party companies, whose terms of use and privacy policies may be considerably different from those stated herein, therefore AGRINATURA SOCIETA’ AGRICOLA SRL disclaims any responsibility for them.

VISIBILITY OF THIS DOCUMENT

This page is accessible from all pages of the site, under the heading “Privacy and cookie policy”, in accordance with Article 122 second paragraph of Legislative Decree 196/2003 and following the simplified procedures for information and acquisition of consent for the use of cookies published in the Official Gazette No. 126 of June 3, 2014 and its register of measures No. 229 of May 8, 2014.