Legal and Privacy

INFORMATION ON THE PROCESSING OF PERSONAL DATA pursuant to European Regulation 679/2016 (GDPR)

IMPORTANT ANNOUNCEMENTS:

As of May 25, 2018, European Regulation 679/2016 (RGPD), which defines the general rules for the protection of personal data, became fully applicable.
This is an important step that sets the same rules for all countries of the European Union in the processing of personal data.
Farchioni Olii S.p.A. considers the protection of personal data of individuals to be a founding value and compliance is a primary objective to which management must be guided.

CONTACT DETAILS OF THE OWNER
Farchioni Olii S.p.A., located in Giano dell'Umbria (PG), Via B. Buozzi, No. 10, ZIP 06030
Tel. 0039 074292951 - Fax: 0039 0742929595
email: farchioni@farchioni.com
pec: farchionioliispa@legalmail.it

(1) A DATA SUBJECT’S RIGHTS AND HOW TO EXERCISE THEM

The Regulation gives Data Subjects the following rights which may be exercised towards and against the Controller and any and each Joint Controller.

• Right of access: Art. 15 of the European Regulation gives a Data Subject the right to obtain from the Controller confirmation or otherwise that data concerning the Data Subject is subject to processing and, if so, to obtain access to such data.
• Right of rectification: Art. 16 of the European Regulation gives a Data Subject the right to obtain from the Controller the rectification, without undue delay, of any inaccurate personal data concerning the Data Subject. Taking into account the purpose(s) for which personal data is processed, the Data Subject has the right to have any incomplete personal data supplemented, including by providing a supplemental declaration.
• Right to erasure: Art. 17 of the European Regulation gives a Data Subject the right to obtain from the Controller the erasure, without undue delay, of the personal data concerning the Data Subject if one of the reasons provided for by the Regulation exists.
• Right to restrict processing: Art. 18 of the European Regulation gives a Data Subject the right to obtain from the Controller a restriction on the processing of the personal data concerning the Data Subject when one of the conditions provided for by the Regulation exists.
• Right to object: Art. 21 of the European Regulation gives a Data Subject the right to object, at any time, for reasons connected to the Data Subject’s particular situation, to the processing of the personal data concerning the Data Subject pursuant to article 6(1)(e) or (f), including profiling on the basis of these provisions.
• Right to data portability: Art. 20 of the European Regulation gives a Data Subject the right to receive the personal data concerning the Data Subject provided to a controller in a structured, commonly used and machine-readable format and a Data Subject has the right to have this data transmitted to another controller without hindrance by the Controller to which the Data Subject supplied such data in compliance with the conditions provided for by the Regulation.
• Right to revoke consent: Art. 7 of the European Regulation gives a Data Subject the right to revoke any consent given by the same at any time. Revoking consent does not prejudice the lawfulness of the processing based on consent which may have been done prior to such consent being revoked.
• Right to lodge a complaint: Art. 77 of the European Regulation gives a Data Subject the right, should he or she believe that the data concerning them has been processed in breach of the Regulation, to lodge a complaint with a Supervisory Authority, notably in the EU Member State in which the Data Subject habitually resides or works, or the place where the alleged breach took place.

A complete extract of the legal articles mentioned above is available from the IT Office. This office will be able to provide all the information that a Data Subject might need regarding how to exercise their rights; requests may be made in writing, accompanied by a valid identification document, to the IT Office, Via Madonna del Puglia, 1, 06035 Gualdo Cattaneo (PG), Italy.

2.PRIVACY POLICY

Processing the personal data communicated by visitors to FARCHIONI OLII S.P.A. through this website will be done in the following ways. FARCHIONI OLII S.P.A. is the Controller in terms of processing the personal data communicated to it by visitors to this website. This data will be used by FARCHIONI OLII S.P.A. for the purpose(s) for which the Data Subject, to whom the personal data refers, has given his or her consent. Whoever provides FARCHIONI OLII S.P.A. with his or her personal data, authorising the same data to be processed for a specific purpose, will be able, at any time, to exercise the rights referred to in EU Regulation 679/2016 regarding the processing of personal data (“GDPR”), art. 13 (below) by contacting FARCHIONI OLII S.P.A., Servizio Consumatori [Customer Service] – Via Madonna del Puglia, 1, 06035 Gualdo Cattaneo, Perugia, Italy. FARCHIONI OLII S.P.A., through this website, collects anonymous data and information (type of browser, geographic location, date and time) which the same processes, including through the use of cookies, in order to better manage and optimise the website, as well as for statistical purposes and to collect more information about its products and how they are consumed. This information may be stored on servers in Italy or on FARCHIONI OLII S.P.A.’s central servers located outside of Italy, but this information will not, under any circumstances, by communicated by the Controller or its appointed Processors to a third party, nor will this information be used to contact visitors of the website unless such contact is requested by them or they give their consent to it. Communicating personal data regarding a minor must be done by a parent or guardian.

1. DATA CONTROLLER
The person who determines the purposes and means of the processing of personal data is Farchioni Olii S.p.A., located in (06030) Giano dell'Umbria (PG) Via B. Buozzi, No. 10, P.IVA 00522110543.

2. COTITOLARITY - ASSIGNMENT TO THIRD PARTIES
In case of co-ownership, the owner ensures that compliance with the following principles is guaranteed through the co-ownership agreement. Where personal data processing activities are entrusted to third parties, the owner shall ensure that compliance with the following principles is guaranteed through the service agreement.

3. ORGANIZATION
The owner organizes the resources and processing of personal data so that they meet the requirements of the GDPR and national industry regulations. Specifically:
a)Within

• The privacy organization reflects the operational one; the assignments are consistent with the operational tasks, powers and authority associated with them.
• Individuals assigned significant tasks and responsibilities (given the number and categories of personal data, risks to the rights and freedoms of individuals) are selected, identified and assigned on the basis of objective criteria that define the needs of the entity in terms of knowledge, skills and experience. In the absence of qualifications, requirements and evaluation weights are predefined in advance.
• Those who process personal data act under the Controller’s direct authority, or that of a Processor duly appointed by the same. Personnel are duly trained in accordance with a continuous training programme that takes account of the various needs in relation to the various roles covered.
• The owner directs and supervises all those who process personal data on its behalf.

Externally

• Parties to whom processing activities regarding personal data are entrusted are identified, selected and appointed on the basis of a pre-arranged, transparent process that guarantees objectivity in decision-making; the supplier must possess the ability and professionalism required by the organisation; the supplier must provide sufficient guarantees to implement suitable technical and organisational measures in such a way that processing meets the requirements of the GDPR and ensures that the Data Subject’s rights are safeguarded.
• Relationships with third parties who process personal data on behalf of the Controller are always formalised in writing. The relative contract respects the minimum requirements set out in art. 28 of the GDPR.
• The Controller processes the personal data of the following categories of natural persons:

4. STAKEHOLDERS
a) The owner processes personal data of the following categories of individuals:

• employees
• freelance professionals
• users
• suppliers

b) Categories of parties indirectly involved:

• family members of employees and users
• employee creditors
• employee assignees

c) affected institutions/entities

• trade unions

(d) other

5.THE CULTURE OF PRIVACY
For Farchioni Olii S.p.A. the ability to protect personal data represents not so much and not only a legal obligation but, rather, a preferential requirement, a competitive asset. In keeping with the perspective of accountability required by the GDPR, the Company approaches the compliance of its personal data processing with respect to the GDPR with a risk-oriented approach to the risks and their processing. Respect for the rights, freedoms and data of natural persons for the Company is an imperative ethical imperative that guides all the activities it implements.

6.LICENESS
Farchioni Olii S.p.A. only carries out the processing of personal data that is based on one of the legal bases referred to in Article 6 GDPR (consent, fulfillment of contractual obligations, vital interests of the data subject or of third parties, legal obligations to which the data controller is subject, public interest or exercise of public authority, overriding legitimate interest of the data controller or of third parties to whom the data are disclosed).
The Company processes special personal data, (i.e., data capable of revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as processing genetic data, biometric data intended to uniquely identify a natural person, data relating to a person's health or sex life or sexual orientation), only if one of the cases provided for in Art. 9.2 GDPR.
The Company processes personal data relating to criminal convictions and offenses or related security measures, only on one of the legal bases referred to in Article 6.1 GDPR, and only under the control of the public authority or, if the processing is authorized by the law of the Union or Member States providing appropriate safeguards for the rights and freedoms of the data subjects.

7. CORRECTNESS
The Company processes personal data exclusively for determined, explicit and legitimate purposes, without any impropriety or deception towards the data subjects by strictly adhering within the limits of the legal bases that legitimize their processing.

8. TRANSPARENCY
The Company shall take appropriate measures to provide the data subject with all the information referred to in Articles 13 and 14 and the notices referred to in Articles 15 to 22 and Article 34 relating to the processing in a concise, transparent, intelligible and easily accessible form, in simple and clear language. In particular, the Company for each processing it carries out shall make known to the data subject the manner in which personal data are collected, used, accessed or otherwise processed as well as the extent to which personal data are or will be processed. Information and communications relating to the processing of such personal data must be easily accessible and understandable

9. LIMITATION OF PURPOSE
Farchioni Olii S.p.A. processes personal data for specified, explicit and legitimate purposes, and ensuring that processing is not incompatible with these purposes.

10. DATA MINIMIZATION
Farchioni Olii S.p.A. processes personal data that are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

11. EXACTNESS
Farchioni Olii S.p.A. processes personal data that are accurate and, if necessary, up-to-date; taking all reasonable measures to delete or rectify in a timely manner data that are inaccurate with respect to the purposes for which they are processed.

12. LIMITATION OF STORAGE
Farchioni Olii S.p.A. stores personal data in a form that allows the identification of the data subjects for a period of time not exceeding the achievement of the purposes for which they are processed.

13. INTEGRITY AND CONFIDENTIALITY
Farchioni Olii S.p.A. processes personal data in a manner that ensures adequate security of those data, including protection, through appropriate technical and organizational measures, from unauthorized or unlawful processing and from accidental loss, destruction or damage.

14. DATA PROTECTION BY DESIGN AND BY DEFAULT
Farchioni Olii S.p.A. adopts the methodological approach to any project, according to which the protection of personal data must be evaluated from the design. Therefore, for any project, whether structural or conceptual, the protection of personal data must be considered from the moment of its design and solutions for the protection of personal data must be provided for.
The Company puts in place appropriate technical and organizational measures to ensure that - by default - only the personal data necessary for each specific purpose of processing are processed; in particular, the technical and organizational measures put in place are intended to ensure that - by default - the personal data are processed according to the specific purpose of processing.

15. OBLIGATIONS
Failure to comply with the principles contained in this document, as well as directives, instructions, requests, orders that may be issued by the Company for the protection of personal data and compliance with current legislation constitutes a serious breach.

16. REVIEWS
This document is approved by the Board of Directors and is prepared by the Holder who ensures that it is updated and disseminated.

3. ACCESS TO THIS WEBSITE BY VISITORS IS SUBJECT TO THE FOLLOWING CONDITIONS

Access to this website by visitors is subject to the following conditions. The information, places and graphic elements, sounds, images, trademarks, and everything else published and/or reproduced on this website are owned by (or third parties have granted their use to) FARCHIONI OLII S.P.A. or to the companies in the FARCHIONI OLII S.P.A. GROUP. Reproduction of the website’s content is only permitted with the prior, written authorisation from FARCHIONI OLII S.P.A. It is, therefore, prohibited to modify, copy, reproduce, distribute, transmit or disseminate this website’s content without authorisation. Specifically, it is prohibited to copy software which controls the operation of this website, to create programs similar to such software, to reverse engineer and/or to use the source code of such programs. FARCHIONI OLII S.P.A. and the other companies in the FARCHIONI OLII S.P.A. GROUP do not guarantee that the information published on this website will be constantly updated, nor can they be held liable for any damage, including being infected by a computer virus, that might happen to the visitor’s equipment due to accessing and/or interconnecting with this website or as a result of downloading its content. The hypertext links found on this website may direct a visitor’s search to a web page found on a website other than this one. In this case, FARCHIONI OLII S.P.A. assumes no liability in relation both to the content published on those other websites and to the use that those third parties make of it, nor for any damage caused by or originating from accessing those sites, from connecting with the same, or from downloading their content. Every piece of personal information sent to the FARCHIONI OLII S.P.A. website will be processed in accordance with the law on privacy. Every act of communicating non-personal information to FARCHIONI OLII S.P.A. through this website (including suggestions, ideas, drawings, designs, etc.) grants FARCHIONI OLII S.P.A., and all the other companies in the FARCHIONI OLII S.P.A. GROUP, the exclusive, unlimited and irrevocable right to use, reproduce, display, implement, modify, transmit and distribute the same non-personal information. Communicating this information will automatically entail the transfer of the same, free of charge, exclusively and with the broadest rights and powers, to FARCHIONI OLII S.P.A. and to the companies in the FARCHIONI OLII S.P.A. GROUP. The legislation in effect covering the Italian Republic apply to this website.

1. Information on the processing of candidates' personal data

2. Information on the processing of personal data for "contest"

3. Information on the processing of personal data for the use of the marketing platform