This Privacy Notice is provided in accordance with Articles 13 and 14 of EU Regulation 2016/679 (hereinafter referred to as the “GDPR”) and the applicable national legislation on personal data protection.
Data Owner:
Corilanga Società Agricola Cooperativa
Località San Giuseppe 4/D
12050 Rocchetta Belbo (CN) – Italia
E-mail: info@corilanga.it
Phone: +39 331 6142910
(Hereinafter, “Corilanga” or the “Data Controller”)
1. Purpose of the Notice
This Policy describes the methods of collection, use, storage, and protection of personal data concerning users (hereinafter referred to as “Users” or “Data Subjects”) who interact with the website www.corilanga.it (hereinafter the “Site”).
2. Types of Data treated
2.1 Navigation Data
The IT systems and software procedures used to operate the Site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category includes IP addresses, domain names of the computers used to connect to the Site, URI addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server’s response status, and other parameters related to the operating system and the user’s IT environment. These data are used solely to gather anonymous statistical information about the use of the Site, to monitor its proper functioning, and to identify anomalies or abuses.
2.2 Data Provided Voluntarily by the User
The optional, explicit, and voluntary sending of messages to the email addresses provided on the Site, as well as the completion of any contact forms, results in the acquisition of the sender’s contact data (such as name, surname, email address, phone number, etc.) necessary to respond, as well as any additional personal data potentially included in the communications.
2.3 Cookies and Tracking Tools
The Site uses technical cookies necessary for the operation of the Site itself and, currently, statistical analysis tools provided by third parties, specifically Google Analytics 4 (GA4). These cookies and tracking tools collect information anonymously, where possible, for the purpose of analyzing the use of the Site and improving the user experience. You can manage your cookie preferences through your browser settings, and you can disable Google Analytics by installing the add-on available at: https://tools.google.com/dlpage/gaoptout.
Any third-party cookies other than GA4 (e.g., social media sharing buttons, embedded videos from external platforms) will be indicated in a specific Cookie Policy, if available, which will provide detailed information on the purposes, duration, and management of such cookies.
3. Purposes and Legal Bases of Processing
Personal data will be treated for the following scopes:
a) Provision of Website Services and Management of Requests
- Purpose: Allow navigation on the Site, provide information on products and services, respond to requests made by the User.
- Legal basis: Execution of pre-contractual or contractual measures (art. 6.1(b) GDPR).
b) Statistical Analysis and Improvement of the Offer
- Purpose: To perform anonymous statistical analysis on the use of the Site in order to improve its functionality and understand user preferences (Google Analytics 4).
- Legal basis: Legitimate interest of the Data Controller to improve its services (Article 6.1(f) GDPR), adopting anonymization measures where possible.
c) Compliance with legal obligations and defense of rights
- Purpose: To comply with legal obligations, regulations, and EU laws, as well as to assert or defend a right in judicial proceedings.
- Legal basis: Compliance with a legal obligation (art. 6.1(c) GDPR) and/or legitimate interest (art. 6.1(f) GDPR).
Direct marketing (if it were to be implemented in the future): If the Company decides to send commercial communications, newsletters, or promotional materials, the User will be informed in advance, and where required by law, the relevant consent will be collected (art. 6.1(a) GDPR). Currently, this purpose is not operational. If it becomes active, the Data Controller will update this privacy notice.
4. Nature of Data Provision
The provision of data for the purposes mentioned above is, in part, necessary to allow the use of the Site and to receive a response to user requests. Failure to provide the data may result in the inability to use certain features or obtain the desired information.
The provision of data for statistical analysis via Google Analytics is optional. The user can object to this processing by disabling Analytics cookies.
5. Methods of Processing and Security Measures
The data is processed using IT and telematic tools, adopting technical and organizational measures adequate to ensure a level of security proportional to the risk, as per Article 32 of the GDPR. These measures aim to prevent data loss, illegal or incorrect use, and unauthorized access.
6. Recipients of Personal Data
The data may be communicated to third parties, such as technical service providers, hosting providers, IT companies, legal or tax consultants, always within the scope of pursuing the purposes described and in compliance with privacy laws. These parties typically act as Data Processors, specifically appointed by the Data Controller, or as independent Data Controllers (in the latter case, the Data Controller ensures that these parties process the data in accordance with applicable law).
The updated list of Data Processors can be requested from the Data Controller by writing to info@corilanga.it.
7. Transfer of Data Outside the EU
The use of Google Analytics may result in the transfer of some data outside the EEA (e.g., to the United States). Such transfer is made on the basis of standard contractual clauses approved by the European Commission or other equivalent safeguards, in accordance with applicable law.
For more information: https://policies.google.com/privacy.
8. Data Retention Period
Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected and, in any case, within the applicable legal terms. Once the need for retention has ended, the data will be deleted or anonymized. For data related to Google Analytics, please refer to Google’s policies for the relevant retention periods. Where possible, anonymization measures are adopted.
9. Rights of the Data Subject
The Data Subject has the right to:
- Access their personal data (Art. 15 GDPR).
- Obtain the correction of inaccurate data or the completion of incomplete data (Art. 16 GDPR).
- Obtain the deletion of personal data (Art. 17 GDPR).
- Obtain the restriction of processing (Art. 18 GDPR).
- Object to the processing of personal data (Art. 21 GDPR).
- Receive personal data in a structured, commonly used, and machine-readable format (data portability, Art. 20 GDPR).
- Withdraw consent, where given, at any time, without affecting the lawfulness of processing based on consent before the withdrawal.
To exercise these rights, the Data Subject can contact the Data Controller at the email address info@corilanga.it.
The Data Subject also has the right to file a complaint with the Data Protection Authority (www.garanteprivacy.it) if they believe that the processing of their personal data is contrary to the applicable law.
10. Linking to Third Parties Websites
The Site may contain links to third-party websites over which the Data Controller has no control. The Data Controller cannot be held responsible for the content or the personal data processing policies of these third-party sites. Users are encouraged to review the respective privacy policies.
11. Changes to this Privacy Policy
This Privacy Policy may be subject to updates and changes, for example, in case of regulatory changes or modifications to the features of the Site. Therefore, users are encouraged to periodically review this page to stay informed of any updates.