Transparent information, communication and modalities for the exercise of the rights of the data subject

This privacy notice, pursuant to and for the purposes of Regulation EU no. 679/2016 (GDPR), is an instrument of transparency concerning personal data processing and the exercising of rights of data subjects. As envisaged by article 12 of the General Data Protection Regulation (GDPR), UNIONE ITALIANA VINI- SERVIZI SOC. COOP. (which will hereafter be referred to as “UIV”) provides here, all the information set out in articles 13 and 14 and the communications under articles 15 and 22 and article 34 of the GDPR relating to data processing in a concise, transparent, intelligible and easily accessible form, using clear and plain language. This privacy notice has been updated on 25/05/2018.

This privacy notice is provided to users who visit, who choose to register and/or who use the online services of the UIV portal accessible online, starting from the home page http:// www.unioneitalianavini.it/, limited to browsing the said site and has no value for external sites if consulted from links present in the portal and on online websites.

Data controller

The data processing controller is UIV, registered office in Via San Vittore al Teatro 3, 20123 Milan, VAT registration no. 00868400151, and can be contacted at the following email address: privacy@uiv.it

In charge of data processing

Data processing relating to services of the portal is carried out by internal personnel appointed according to the specific purposes of the services requested and subscribed to. For the data processing in question, UIV may use the help of external companies, consultants, consortia, software suppliers and operating services, as part of the foreseen purposes, so as to guarantee the utmost security and confidentiality of personal data.

Data Processing

Visiting the portal may result in personal data relating to identified or identifiable individuals being processed. Registering at a portal and subscribing to online services gives rise to the processing of personal data relating to natural or legal persons. Processing users’ data is based on consent given directly by the user and with the use or consultation of this website by visitors and users who explicitly approve this privacy notice and consent to the processing of their personal data as per the methods and purposes described hereafter, including any disclosure to third parties if necessary for providing a service. UIV processes your personal data:
• to execute the clauses deriving from the signed contract and to manage your requests, including, for example, processing data relating to support and services in the development and any migration of the databases, assistance services and guarantee provided after sales, invoicing of services and relative credit management;
• for its own legitimate interests, such as fraud prevention, credit risk protection, management of any disputes, maintaining security and improving the quality of services;
• to fulfil any obligations provided for by existing laws, by regulations or EU rules, or to meet the requirements of authorities, obligations linked to the correct management of tax and accounting activities that the company is obliged to do;
• to provide further services with respect to the execution of the contract, for example to send you commercial communications. In this case, UIV asks for your express consent which will be optional and can be withdrawn at any time, even after the termination of contractual relations, by writing to privacy@uiv.it
Personal data are collected and used in accordance with the principles of lawfulness, fairness and transparency for specified, explicit and legitimate purposes and will not be further processed in a manner that is incompatible with those purposes; they are adequate, limited and pertinent to what is necessary in relation to the principles of accuracy, storage limitation, integrity and confidentiality and accountability of the controller. You can send us your requests by email or telephone; UIV will handle your requests to offer a better response.
Personal data will be processed within the European Union. If, due to questions of a technical and/or operative nature, it should be necessary to use parties located outside the European Union, or if it should be necessary to transfer some of the data collected to technical systems or cloud managed services which are located outside the European Union, processing will be regulated in accordance with the conditions laid down in Chapter V of the Regulation and authorised on the basis of specific decisions of the European Union.
Personal data are processed manually or by computer for no longer than is strictly necessary in order to achieve the aims for which they have been collected. Once it is no longer necessary to keep the data for the purposes they were provided for and the consequent activities necessary for UIV to fulfil its consequent technical administrative activities, the data will be removed from the system. Specific security measures are observed to prevent data loss, unlawful or improper use and unauthorised access.
The provision of data must be considered compulsory for the processing that UIV must carry out in order to manage contractual relations or requests made by the data subject, in which case any refusal to provide data would entail a failure to establish and/or continue contractual relations. Provision of data for additional purposes, such as commercial communications, is optional. Therefore, you may decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive the newsletter, commercial communications or advertising material and/or anything else regarding the services offered by the data controller. You will continue to have the right to services deriving from the contractual relations with the controller.

How we protect your data

We have a specialised security team who constantly review and improve the measures to protect your personal data from unauthorised access, disclosure or accidental destruction. Internet communications (like emails) are not secure unless they are encrypted. Your communications may pass through a certain number of countries before being delivered, given the nature of the internet. R&S Management does not assume responsibility for any unauthorised access or disclosure of personal data beyond its control. Everyone is responsible for the protection of their own personal information and account and must not share it.

Types of data
Browsing data:

In their normal course of operation, computer systems and application procedures used in the running of the portal acquire some data whose transmission is implicit in the use of communication protocols on the internet. This information is used to obtain anonymous statistical information on the use of the portal and to check its correct functioning, and is not associated with identified users.

Data provided voluntarily by the user:

Natural and legal persons external to UIV can register to the portal to request particular online services. During the registration stage to the portal, some personal data are requested which are needed for the purpose of identifying the individual registered and the company they belong to. When activating online services, some additional (and even sensitive) data might be requested, depending on the specific service chosen. To use online services for which authentication, registration or the sending of emails are necessary, personal data provided voluntarily and explicitly by users are used. Some data requested for registration are compulsory and failure to provide them makes it is impossible to register to the portal. Similarly, failure to communicate some data requested to subscribe to the online services may mean that the service chosen cannot be used. Registration and subscription data are provided voluntarily by the user with their explicit consent. The person who carries out the registration, freely and explicitly gives their consent to their data being processed, aware that in the absence of this consent, registration and subscription to the services cannot take place. Personal data will not be disclosed, but may be communicated, where necessary for providing the service, to appointed third parties (such as suppliers of technical services, couriers, hosting providers, computer companies), if necessary, Data Processors, for tasks of a technical or organizational nature instrumental to providing the services. If we have a contract with a third-party supplier who offers services on our behalf and which can have access to your data, this party may process them only to provide the services requested. These providers are appointed processors of personal data and have signed a specific agreement with UIV.

Sending emails to addresses indicated in the portal

The optional, explicit and voluntary sending of emails to the addresses indicated on the website entails the subsequent acquisition of the sender’s address, necessary for answering requests, as well as any other personal data included in the message. All personal information sent to UIV will be processed in accordance with the existing relative and above-mentioned rules.

Rights of the data subject

To guarantee fair and transparent processing of your personal data by us, we will provide the following further information:
a) Data is kept for the period necessary for achieving the aims for which they were collected: this storage period derives from the needs specified by you; if you do not wish to receive further communications, you simply need to inform UIV, in the ways referred to in point a) of the privacy notice and your data will immediately be deleted;
b) similarly, you can, at any time and with no formalities required, ask UIV for access to personal data, for them to be rectified or deleted or the processing relating to you to be limited or you can simply object to the processing, as well as ask for data portability in accordance with Article 20 of the GDPR;
c) you can, of course, withdraw consent at any time;
d) you can always lodge a complaint with the supervisory authorities;
e) when disclosure of personal data is a necessary requirement for the conclusion of the contract, failure to provide such data means it will be impossible for us to fulfil the contract;
f) our clients are subject to decisions based exclusively on automated processing, including profiling, which produce legal effects or that significantly affect him/her

Use of cookies

As foreseen by the measure of the Supervisor of 8th May 2014, no. 229, UIV provides all the information relating to technical cookies and cookie analytics in a concise, transparent, intelligible and easily accessible form, using clear and plain language, and offers the possibility to choose which specific cookies to authorise and, of course, to refuse consent at the installation of any cookies or to withdraw the consent given. The privacy notice is an instrument of transparency regarding the processing of personal data and exercising rights.
A cookie is a file of memorised text on your device which enables it to be also recognised at a later date. This function is used to remember sessions for statistical purposes. The first ones are considered technical cookies, the second ones are profiling cookies. The cookie can be memorised only if the browser settings allow it, by default almost all browsers are set up to accept them automatically.

1. Session cookies

(Indispensable for using online services or to access reserved areas of the portal). The website www.unioneitalianavini.it uses HTTP cookies to manage the authentication of online services and the reserved areas. The use of session cookies is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary for allowing secure and efficient browsing of the website. Disabling these cookies does not allow the use of online services.

2. Monitoring cookies

UIV uses the Google Analytics service of the Google, Inc company (hereafter “Google”) to generate statistics on the use of the web portal; Google uses cookies (not third party) that do not memorize personal data. The information obtainable by cookies on the user’s use of the website (including IP addresses) will be transmitted from the user’s browser to Google. To consult the privacy notice of the Google company, relating to the Google Analytics service, please visit http://www.google.com/intl/en/analytics/privacyoverview.html. To find out about Google’s privacy rules, go to http://www.google.com/intl/it/privacy/privacy-policy.html. By using UIV’s website, you consent to the processing of your personal data by Google for the above-mentioned ways and purposes.

3. Third-party cookies

Consulting the pages of this website, cookies may be received from other parties (“third-party” cookies). This is because some functions of the website or parts of the pages visited are managed using a code generated by third parties. The presence of these portions of codes entails the transmission of cookies from and to all the services managed by third parties, whose management of the information collected is regulated by the relative privacy notices, which you can refer to. An example of a third-party cookie used by the UIV website is Google Adsense: Adsense uses cookies to improve advertising. Please click on the following link to read the relative privacy notice: https://support.google.com/adsense/answer/7549925?hl=it

4. Disabling cookies

It is possible to adjust the internet browser settings and block the storage of cookies. Given the vast range of devices used to consult websites, operating systems, browsers and the like, and also considering that the functions change very frequently, it is difficult to provide and maintain a complete, detailed and constantly updated list on how to manage cookies for every single possible combination. Therefore, we recommend referring to the specific documentation relating to your browser, operating system and device. However, if the browser does not accept cookies, it will not be possible to access or use all the functions of the website.

Disclaimer

The Portal includes the supporting information, software and hardware made available from https://www.unioneitalianavini.it with the intention of providing up-to-date and accurate information. We decline any responsibility for any errors, inaccuracies or omissions present in the Portal; if any errors should be reported, we will correct them. UIV will not be held liable for damage or loss or any kind that third parties may suffer due to contact made with the Portal, or following the use of what is published in the said Portal, as well as the applications available to users. UIV does not accept any responsibility regarding the material contained in the Portal. This material: - is not necessarily always thorough, complete, accurate or up to date; - is sometimes connected to external websites or managed by external operators over which UIV has no control and for which it takes no responsibility; - the information contained in the Portal does not form a professional or legal opinion. – No responsibility is accepted either in relation to the use that third parties may make of the content published on the Portal, or for any contamination deriving from the access, interconnection, downloading of material and computer programmes from the Portal. External links are presented exclusively to facilitate the user’s search for specialised or public use websites and portals. UIV declines every responsibility for any kind of damage, including direct or indirect damage, deriving from computer viruses, loss of data or other material/immaterial goods deriving from or connected to the use, inability to use, unauthorised use, provision or failure to provide any service from or through the Portal. This clause excluding responsibility does not intend to exclude responsibility in cases where it cannot be excluded in accordance with existing rules.

Limits of use

The content of the pages of the Portal (such as, for example, information, logos, graphic elements, sounds, images, brands) are the intellectual property within the UIV. All rights reserved. The content of this website is protected by law and makes up an intellectual creation of UIV in accordance with law no. 633/1941 and subsequent amendments, against the reproduction, copy, translation, modification, distribution, presentation and communication to the public, and use, in any form or way whatsoever, by third parties or individuals not expressly authorised, except for the possibility to store it on your own computer or to print extracts of the pages of this website exclusively for personal and/or professional use. The domain name www.unioneitalianavini.it and any brand that includes the name UIV cannot be used as internet addresses of other websites, or as part of these addresses, without prior written consent from UIV.