Privacy Policy

[ 3 ]
Purposes of the processing and legal bases

[ A ]
Personal data are processed without the User’s consent (Art. 6(1)(b), (c) and (f) GDPR) for the following Purposes:

• to manage and maintain the Website;
• to prevent or detect fraudulent activities or abuse harmful to the Website;
• to add the contact to our CRM system;
• to handle any reports received through the Website forms.
  Legal basis for the above purposes: protection of a legitimate interest of the Controller.
• to provide the Services requested through the Website forms;
• to allow participation in initiatives organised and published by the Controller on the Website (for example events, conferences, training sessions, etc.);
• to process your contact request;
• to manage the activities connected with the assessment and selection of staff, or to propose other job opportunities consistent with the data subject’s professional profile;
  Legal basis for the above purposes: performance of a contract with the User or of pre-contractual measures taken at their express request, or provision of the service specifically requested.
• to comply with obligations laid down by law, by regulation, by EU legislation or by an order of the Authorities;
• to exercise the Controller’s rights, for example in legal proceedings.
  Legal basis for the above purposes: compliance with a legal obligation.

[ B ]
The User’s personal data are processed only subject to specific and separate consent (Arts. 7 and 9 GDPR), for the following Additional Purposes:

• to send opinion and satisfaction surveys, newsletters and commercial information by email;
• processing of any sensitive data contained in the CVs submitted in the “careers” section.
• Giving consent to the processing of data for the purposes referred to in Art. 3.B) is optional. The User may therefore decide not to give any consent or to subsequently withdraw permission to process data already provided: in such case, the User will not be able to receive opinion and satisfaction surveys, newsletters and commercial information by email, and we will not be able to handle the sensitive information indicated in the CV for recruitment purposes. The User will nevertheless continue to be entitled to the Services referred to in Art. 3.A).
• Giving consent to the processing of data for the purposes referred to in Art. 3.B) is optional. The User may therefore decide not to give any consent or to subsequently withdraw permission to process data already provided: in such case, the User will not be able to receive opinion and satisfaction surveys, newsletters and commercial information by email, and we will not be able to handle the sensitive information indicated in the CV for recruitment purposes. The User will nevertheless continue to be entitled to the Services referred to in Art. 3.A).

[ 4 ]
Processing methods

[ 5 ]
Retention period of the data processed

[ 6 ]
Security measures

[ 7 ]
Access to data

• to employees and collaborators of the Controller, in their capacity as authorised persons and/or internal data processors;
• to the companies of the Controller’s group;
• to third-party companies or other parties carrying out outsourced activities on behalf of the Controller, in their capacity as expressly appointed external data processors.

[ 8 ]
Disclosure of data

[ 9 ]
Data transfer

[ 10 ]
Rights of the data subject

• obtain confirmation as to whether or not personal data concerning them exist, even if not yet recorded, and have such data communicated in intelligible form;
• obtain information on: a) the source of the personal data; b) the purposes and methods of the processing; c) the logic applied where the processing is carried out with the aid of electronic instruments; d) the identification details of the controller, of the processors and of the representative designated pursuant to Art. 5(2) of the Italian Privacy Code and Art. 3(1) GDPR; e) the parties or categories of parties to whom the personal data may be disclosed or who may become aware of them in their capacity as designated representative in the territory of the State, as processors or as authorised persons;
• obtain: a) the updating, rectification or, where they have an interest therein, the integration of the data; b) the erasure, anonymisation or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which they were collected or subsequently processed; c) confirmation that the operations referred to in points a) and b) have been notified, including as regards their content, to those to whom the data were disclosed or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared with the right protected;
• object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning them, even if relevant to the purpose of the collection; b) to the processing of personal data concerning them for the purpose of sending advertising material or direct selling, or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator, by email and/or through traditional marketing methods by telephone and/or paper mail. Please note that the data subject’s right to object, set out in point b) above, for direct marketing purposes by automated means also extends to traditional means, and that the data subject may in any case exercise the right to object only in part. Therefore, the data subject may decide to receive only communications by traditional means, or only automated communications, or neither type of communication.

[ 11 ]
How to exercise your rights

• by sending a registered letter with return receipt to: Società Agricola Idroponica S.r.l., registered office at Largo Augusto 8, 20122 Milan (MI);
• by contacting the details specified in the “Data Controller, Processors and Authorised Persons” section of this privacy policy.

[ 12 ]
Cookies

[ 12.1 ]
Types of cookies used

• Technical cookies (necessary): essential for the proper functioning of the Website and for the provision of the services requested by the User (browsing, authentication, security, storage of consent preferences). They do not require the User’s consent (Art. 122 of Legislative Decree 196/2003; Art. 6(1)(f) GDPR).
• Functional/preference cookies: they allow the choices made by the User (e.g. language, geographical area) to be remembered in order to improve their experience. Where they cannot be treated as technical cookies, they are subject to consent.
• Analytics cookies: they collect information on the use of the Website. If they are third-party cookies and are not anonymised, they require consent; if anonymised and compliant with the requirements of the Italian Data Protection Authority, they are treated as technical cookies.
• Profiling and marketing cookies (including third-party cookies): used to create User profiles and to send advertising messages in line with the preferences expressed. They always require the User’s prior consent (Art. 6(1)(a) and Art. 7 GDPR).

[ 13 ]
Minors

[ 14 ]
Amendments to this Privacy Notice

[ 15 ]
Interaction with social networks and external platforms