logo mipaf
 

Information notice on the processing of personal data pursuant to Articles 13–14 of Regulation (EU) 2016/679

Below are described the methods of processing the personal data of users who consult and use the portal www.agriturismoitalia.gov.it (hereinafter “Site”). The information does not concern other sites, pages or online services reachable through links included within the Site, for which reference is made to the respective privacy policies.

The Site and the services available therein are managed by ISMEA Istituto di servizi per il mercato agricolo alimentare within the scope of a cooperation agreement signed with MASAF.

 

Index

Data controller

Ministry of Agriculture, Food Sovereignty and Forests
Via XX Settembre, 20
00187 Rome – Italy
Tel. 06.46651

 

Contacts of the data protection officer

Lawyer Mario Valentini
e-mail: rpd@masaf.gov.it

 

Supervisory authority

Italian Data Protection Authority
Website: https://www.garanteprivacy.it

 

Categories and sources of personal data and related purposes of the processing

  • Browsing data : the IT systems and software procedures responsible for the functioning of the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. The processing of such data is necessary for the technical management of the Site.
  • Personal data provided by the data subject: personal data provided by the user when contacting the support service and, if registered, for the use of the functionalities and applications present on the Site.

The processing of personal data is carried out for the following purposes:

  1. to allow the provision of the services requested through the Site;
  2. to respond to requests for support or information;
  3. to assert or defend rights in court, in case of abuses in the use of the Site and/or the services or for disputes of a contractual or non-contractual nature.
 

Legal basis of the processing

The legal basis for the processing of personal data for the purposes referred to in letters a) and b) above is Art. 6, paragraph 1, letter b) of EU Regulation no. 679/2016 (“Regulation”) since the processing is necessary for the provision of services or for responding to requests of the data subject.
Providing personal data for these purposes is optional, but failure to provide them would result in the impossibility of activating the services offered by the Site.

The legal basis for the processing of personal data for the purposes referred to in letter c) above is the legitimate interest under Art. 6, paragraph 1, letter f) of the Regulation.

 

Categories of recipients of personal data

ISMEA, as Processor appointed by Masaf, processes personal data through its own staff and its providers of technical and telematic services. No transfer to third countries or international organizations is envisaged.

 

Data retention period

The personal data processed for the above purposes will be retained for the time strictly necessary to achieve those same purposes in compliance with the principles of minimization and storage limitation provided by the Regulation.

Browsing logs are kept for a maximum period of one year.
Personal data acquired through the contact addresses are processed for the time necessary for the requested response and subsequently deleted.

 

Users’ Rights

Data subjects have the right to exercise the rights provided for in Articles 15–22 of the Regulation, namely, to obtain access to their personal data, rectification or erasure of such data, restriction of processing, the right to object and the right to data portability, where applicable. Requests must be addressed to the data protection officer of the Controller at the address rpd@masaf.gov.it .

Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with the competent supervisory authority (Italian Data Protection Authority) pursuant to Art. 77 of the Regulation, should they consider that the processing of their data violates the Regulation.

No form of automated decision-making process is envisaged that produces legal effects on the data subject.

 

Cookie policy