{"id":1714,"date":"2026-04-23T10:36:53","date_gmt":"2026-04-23T08:36:53","guid":{"rendered":"http:\/\/conventinomonteciccardo.retinatest.it\/?page_id=1714"},"modified":"2026-07-13T10:34:24","modified_gmt":"2026-07-13T08:34:24","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/conventinomonteciccardo.retinatest.it\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n
\n

Privacy Policy<\/h1>\n\n\n\n

Home \/ Privacy Policy<\/p>\n<\/div>\n\n

\n

Personal Data Processing Notice pursuant to Articles 13 and 14 of EU Regulation 679\/2016(GDPR)<\/h4>\n\n\n\n

1. DATA CONTROLLER AND PERSON RESPONSIBLE FOR PROCESSING<\/h4>\n\n\n\n

Data controller: Societ\u00e0 Agricola il Conventino di Monteciccardo sasdi Marcantoni Francesca, VAT number: 02342680416, email: info@cmbio.it, website: https:\/\/conventinomonteciccardo.bio(hereinafter the \u201cwebsite\u201d).The data controller reserves the right to appoint data processors pursuant to Art. 28GDPR.<\/p>\n\n\n\n

2. PURPOSE OF PROCESSING<\/h4>\n\n\n\n

Data is collected and processed exclusively for the following purposes:A. Managing the contact form on the website;B. Direct marketing (newsletter);<\/p>\n\n\n\n

3. TYPES OF PERSONAL DATA PROCESSED<\/h4>\n\n\n\n

The data collected and processed to fulfil the purposes referred to in point 2 belong to thefollowing categories:\u2022 simple personal data (Art. 4 GDPR), such as: email addresses,telephone numbers, identification, registry and billing data, data relating to the sector of activity, to thename, the type of activity carried out and the purposes pursued.<\/p>\n\n\n\n

4. LEGAL BASIS FOR PROCESSING (Art. 6 GDPR)<\/h4>\n\n\n\n

<\/h4>\n\n\n\n

The legal basis for data processing, with regard to the purpose listed in point 2 A, is thecontract entered into between the data controller and the data subject and the performance ofpre-contractual measures taken at the data subject’s request. With regard to the purpose in point 2,letter B, the legal basis for processing is the legitimate interest of the datacontroller, consisting of the sale of products and services similar to and\/or improved compared to those alreadyoffered by the data controller and used by the data subject. For types of processing notfalling within the aforementioned legitimate interest, the data controller will proceed only on the basis of thedata subject’s consent.<\/p>\n\n\n\n

5. RECIPIENTS OF THE PROCESSING<\/h4>\n\n\n\n

The personal data collected and processed will be disclosed to third parties other than the datacontroller and the data processors only where strictly necessary topursue the purposes set out in point 2 or where required by law.Such recipients process Customers’ data as data controllers, data processors, or persons in charge ofprocessing, depending on the circumstances.To carry out its work and the tasks assigned to it, the data controller makes useof collaborators who act as data processors and providesufficient guarantees to implement appropriate technical and organisational measures in compliance with theobligations under the GDPR.<\/p>\n\n\n\n

5. a) CATEGORIES OF RECIPIENTS<\/h5>\n\n\n\n
<\/h5>\n\n\n\n

Recipients within the meaning of point 5 include, by way of example: cloud service providers,lawyers, employment consultants, accountants, and public authorities.<\/p>\n\n\n\n

6. TRANSFER OF DATA ABROAD<\/h4>\n\n\n\n

<\/h4>\n\n\n\n

Should it prove necessary to transfer data outside Italian territory, the data controllerundertakes to limit such transfer to within the European Union.<\/p>\n\n\n\n

6. a) The transfer of data to Third Countries outside the European Union will take place only wherestrictly necessary and only to providers offering adequate guarantees forthe protection of personal data.<\/p>\n\n\n\n

7. DURATION OF PROCESSING<\/h4>\n\n\n\n

<\/h4>\n\n\n\n

The data collected will be kept until the purposes indicated in point 2 are achieved and,in any case, for no longer than 10 years from their achievement, for accounting and legal defencepurposes, pursuant to Articles 2220 and 2946 of the Italian Civil Code.<\/p>\n\n\n\n

8. RIGHTS OF THE DATA SUBJECT<\/h4>\n\n\n\n

<\/h4>\n\n\n\n

The data subject may exercise the following rights by contacting the data controller directly:\u2022 right of access pursuant to Art. 15 GDPR;\u2022 right to rectification pursuant to Art. 16 GDPR;\u2022 right to erasure (right to be forgotten) pursuant to Art. 17 GDPR;\u2022 right to restriction of processing pursuant to Art. 18 GDPR;\u2022 right to data portability pursuant to Art. 20 GDPR;\u2022 right to object pursuant to Art. 21 GDPR;\u2022 right to withdraw consent at any time pursuant to Art. 7 GDPR, withoutaffecting the lawfulness of processing based on consent given before its withdrawal;The rights listed may be exercised by sending a communication to the data controllerusing the contact details given in point 1.The rights listed may be subject to limitations in the cases expressly provided for by Art. 2-undeciesof Legislative Decree 196\/2003.<\/p>\n\n\n\n

9. RIGHT TO OBJECT (Art. 21 GDPR)<\/h4>\n\n\n\n

<\/h4>\n\n\n\n

The data subject has the right to object at any time, on grounds relating to their particularsituation, to the processing of personal data concerning them pursuant to Article 6(1),points (e) or (f). The data controller shall refrain from further processing the personal data, unlessit demonstrates compelling legitimate grounds for the processing whichoverride the interests, rights, and freedoms of the data subject, or for the establishment,exercise, or defence of a legal claim.<\/p>\n\n\n\n

10. OBLIGATION TO NOTIFY IN THE EVENT OF RECTIFICATION OR ERASURE OF<\/h4>\n\n\n\n

PERSONAL DATA OR RESTRICTION OF PROCESSING (Art. 19 GDPR)<\/h4>\n\n\n\n

<\/h4>\n\n\n\n

The data controller shall notify each recipient to whom personaldata have been disclosed of any rectification, erasure, or restriction of processing carried out pursuantto Article 16, Article 17(1), and Article 18 GDPR, unless this provesimpossible or involves disproportionate effort. The data controller shall informthe data subject of these recipients if requested to do so.<\/p>\n\n\n\n

11. COMMUNICATIONS<\/h4>\n\n\n\n

<\/h4>\n\n\n\n

The Data Controller undertakes to notify any breaches concerning thedata subject’s personal data to the Italian Data Protection Authority and, where the breach islikely to result in a high risk to the rights and freedoms of individuals, to thedata subject, pursuant to Articles 33 and 34 GDPR.<\/p>\n\n\n\n

12. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY (Art. 77 GDPR)<\/h4>\n\n\n\n

<\/h4>\n\n\n\n

Without prejudice to any other administrative or judicial remedy, a data subject who believesthat the processing of data concerning them infringes the GDPR has the right to lodge a complaint with thesupervisory authority for the protection of personal data, specifically in the Member State of theEuropean Union in which they habitually reside, work, or in the place where the allegedinfringement occurred.<\/p>\n\n\n\n

13. RIGHT TO AN EFFECTIVE JUDICIAL REMEDY (Art. 19 GDPR)<\/h4>\n\n\n\n

Without prejudice to any other available administrative or extra-judicial remedy, including the right tolodge a complaint with a supervisory authority pursuant to Article 77 GDPR, every data subject has theright to an effective judicial remedy where they believe their rightshave been infringed as a result of processing.Proceedings against the data controller or the data processor shall bebrought before the courts of the Member State in which the data controller orthe data processor has an establishment. Alternatively, such proceedings may bebrought before the courts of the Member State of the European Union in whichthe data subject habitually resides, unless the data controller or thedata processor is a public authority of a Member State acting in the exercise of public powers.<\/p>\n\n\n\n

14. TECHNICAL COOKIES<\/h4>\n\n\n\n

<\/h4>\n\n\n\n

The website uses technical cookies, which are necessary for browsing within it,as they enable the execution of essential functions. Technical cookies cannot bedisabled, as this would cause the site to malfunction.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Privacy Policy Home \/ Privacy Policy Personal Data Processing Notice pursuant to Articles 13 and 14 of EU Regulation 679\/2016(GDPR) 1. DATA CONTROLLER AND PERSON RESPONSIBLE FOR PROCESSING Data controller: Societ\u00e0 Agricola il Conventino di Monteciccardo sasdi Marcantoni Francesca, VAT number: 02342680416, email: info@cmbio.it, website: https:\/\/conventinomonteciccardo.bio(hereinafter the \u201cwebsite\u201d).The data controller reserves the right to appoint […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-1714","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/conventinomonteciccardo.retinatest.it\/en\/wp-json\/wp\/v2\/pages\/1714","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/conventinomonteciccardo.retinatest.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/conventinomonteciccardo.retinatest.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/conventinomonteciccardo.retinatest.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/conventinomonteciccardo.retinatest.it\/en\/wp-json\/wp\/v2\/comments?post=1714"}],"version-history":[{"count":17,"href":"https:\/\/conventinomonteciccardo.retinatest.it\/en\/wp-json\/wp\/v2\/pages\/1714\/revisions"}],"predecessor-version":[{"id":3099,"href":"https:\/\/conventinomonteciccardo.retinatest.it\/en\/wp-json\/wp\/v2\/pages\/1714\/revisions\/3099"}],"wp:attachment":[{"href":"https:\/\/conventinomonteciccardo.retinatest.it\/en\/wp-json\/wp\/v2\/media?parent=1714"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}