Data Protection, Privacy & Cookies
It is important to us that all visitors to our website feel comfortable and secure. For that reason, the we take the protection of your data extremely seriously. This document provides extensive information about how your data is processed when using our website and online shop.
When we refer to “your data” we mean personal data. Personal data refers to information that we can use to establish your identity, be that directly or in combination with other data. This includes for instance: your name, your address, your e-mail address, your telephone number, your customer or order number, your user conduct, your IP address.
Statistical data that we collect e.g. during a visit to our website and cannot link to your identity is not covered by the definition of personal data.
Data Controller and Contact Details
The data controller as defined by the EU General Data Protection Regulation (“GDPR”) is
Azienda Agricola Toscanolio di Sackey Ebenezer Mensah
Loc. Tanali 2/A
I - 56032 Buti (PI)
and
Toscanolio Shop di Unverferth Eva
Loc. Tanali 2/A
I - 56032 Buti (PI)
(hereinafter referred to as “Toscanolio”, “we” or “us”)
If you have any questions or requests relating to the protection of your personal data, please contact us via post mail or email.
Your Contact Data and Notifications
You have the opportunity to contact us. In that context we process your telephone number, your mobile number and/or your e-mail address exclusively for the purpose of communicating with you, e.g. in order for us to contact you if we have any questions relating to your order or booking. Providing this information is voluntary, but it makes communication related to orders much easier. If you do not provide this information, we cannot contact you if we have any questions.
The legal basis of the foregoing data processing is processing for the performance of the contract/precontractual steps pursuant to Art. 6 (1) b) GDPR.
Visiting this Website
If you only use the website for information purposes, i.e. if you do not register or otherwise transfer any information to us, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data that we require for technical purposes in order to display our website and guarantee stability and security (the legal basis for the foregoing data processing is a legitimate interest pursuant to Art. 6 (1) sentence 1 f) GDPR):
- IP address
- Date and time of the request
- Time-zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Respective data volume transferred
- Website sending the request
- Browser
- Operating system and its interface
- Language and version of the browser software
The data processing is necessary to enable the visit to the website and to guarantee the ongoing functionality and security of our systems. The specified data is also temporarily stored in internal log files for the above purposes to produce statistical information on the use of our website, to further develop our website in line with our users’ usage habits (e.g. if the proportion of mobile devices used to access the pages increases) and in order to manage our website generally in administrative terms.
The information stored in the log files is stored for 30 days and then archived.
Use of Cookies
We use cookies on various pages in order to make visiting our website an attractive experience and to enable the use of certain functions. Cookies are small text files that are stored on your device and store certain settings and data that are exchanged with our system via your browser.
Which cookies are used on this website?
The individual cookies that we use are described in further detail below.
- Necessary cookies - These cookies are necessary to enable the operation of our website. These include for instance cookies that enable you to log on to the customer area, or to place something in the shopping cart and then to store it.
- Analytical/performance cookies - These cookies enable the collection of anonymised data about our visitors’ usage behaviour. We then analyse this for example to improve the functionality of the website and to present you with interesting offers.
Some of the cookies used by us are deleted again at the end of the browser session, i.e. after closing your browser (known as session cookies). Other cookies remain on your end device and enable us to recognise your browser on the next visit (persistent cookies).
Analysis and Promotional Measures
We use various technologies to analyse the usage behaviour and associated data so we can improve our website. The collected data may include in particular the IP address of the end device, the date and time of the access, the cookie ID, the device ID of mobile devices and technical information about the browser and the operating system. However, the collected data is only saved in a pseudonymised form, meaning that it cannot be directly traced back to the individuals. This data is also processed for marketing purposes and to enable personalised advertising messages to be generated for you. The legal basis for this data processing is a legitimate interest pursuant to Art. 6 (1) sentence 1 f) GDPR.
The following section will explain these technologies and the providers used in that context in further detail.
Google Analytics
Our website uses Google Analytics, a web analytics service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies and similar technologies to analyse and improve our website based on your user behaviour. The data produced in this context may be transferred to and stored on a server in the USA by Google for analysis. Should personal data be transferred to the USA, Google has signed up to the EU-US Privacy Shield. However, before the usage statistics are analysed, your IP address will be shortened, meaning that your identity cannot be traced. To that end, Google Analytics has been expanded with the code “anonymizeIP” on our website to guarantee the anonymised collection of IP addresses. Google uses the information gathered via the cookies to analyse your use of the website, to compile reports relating to website activity for the website operators and to provide further services connected to the use of the website and the Internet. As set out above, you can configure your browser to reject cookies, or you can prevent the collection of the data generated by cookies relating to your use of this website (incl. your IP address) as well as the processing of this data by Google by downloading and installing the Browser Add-on provided by Google. For further information see the Google
privacy policy. Other Recipients of the Data
The data collected by us will only be forwarded if this is required for contractual performance or for the provision of the technical functionality of the website or there is another legal basis for passing the data on.
The data processing may be partially handled by our service providers. As well as the service providers mentioned in this privacy policy, this may include in particular data centres that store our website and databases, IT service providers that maintain our system, consultancy companies, suppliers, hauliers, postal service providers and tailoring partners. If we transfer data to service providers, they may only use the data for the performance of their tasks. The service providers have been carefully selected and retained by us. They are contractually bound by our instructions, have appropriate technical and organisational measures for protecting the rights of the persons affected and are regularly monitored by us.
The legal basis for the foregoing data processing is a legitimate interest pursuant to Art. 6 (1) f) GDPR.
Additionally, data may be forwarded in connection with inquiries from public authorities, court rulings and legal proceedings if this is required for prosecution or enforcement of the law.
Storage Duration
We only ever store personal data for such time as is required for the performance of contractual or statutory obligations for which we have collected the data. Thereafter we delete the data immediately unless we still require the data for evidential purposes under civil law up to the expiry of the limitation period or due to statutory retention periods.
For evidential purposes we are required to store contractual data for a further ten years after the end of the year in which the business relationship with you comes to an end. Any claims in accordance with the standard statutory limitation period shall become time barred at this point at the earliest.
Your Rights
Under the respective statutory preconditions, you have the following statutory data protection rights:
- Right of access (Article 15 GDPR, section 34 BDSG)
- Right to erasure (Article 17 GDPR, section 35 BDSG)
- Right to rectification (Article 16 GDPR, section 34 BDSG)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to withdraw consent (Article 7 (3) GDPR)
- Right to object to certain data protection measures (Article 21 GDPR)
In order to assert your rights described here, you use the above contact details at any time.
You also have the right to complain to the competent data protection authority. Alternatively, you may contact the data protection authority at your place of residence, which will forward the matter to the competent authority.
Data Security
We maintain up-to-date technical measures to guarantee data security, in particular to protect your personal data from risks from data transfers and disclosure to third parties. These are adapted to the respective state of the art at any given time. We use the Standard Secure Sockets layer (SSL) to protect the personal data you specify on the website. This encrypts the data you enter.
Amendments to the Policy
We occasionally update this policy, for example when we amend our website or the legal stipulations change.
© Azienda Agricola Toscanolio – last revised: January 2020