Cookie Policy

This information, addressed to all individuals browsing the website, is provided pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter, "GDPR") and in accordance with Article 122 of Legislative Decree 196/2003 as amended (hereinafter, "Privacy Code"), as well as with the Privacy Guarantor's measure "Identification of simplified methods for information and consent collection for the use of cookies" of May 8, 2014, as supplemented by the "Guidelines on cookies and other tracking tools" of June 10, 2021 (hereinafter, "Measure").

Data Controller

The data controller is SOCIETA' AGRICOLA VILLA ERBICE s.s. , based in Via Villa 22, 37030 – Mezzane di Sotto (Verona) - Italia , contactable by email at info@villaerbice.it .

What Are Cookies

The site uses cookies. Cookies (or markers) are small text files created by the web server on the user's device when they access a specific site in order to store and transport information. These markers are sent from the web server to the user's device (usually to the browser) and stored so that the device can be recognized on each subsequent visit. In fact, cookies are sent back from the user's device to the site on every subsequent visit.

First-Party and Third-Party Cookies

Cookies can be installed not only by the website operator the user is visiting (first-party cookies), but also by another site that installs them through the first site (third-party cookies) and is able to recognize them. This happens because the site visited may contain elements (images, maps, sounds, links to web pages from other domains, etc.) that reside on servers different from that of the site being visited.

Technical, Statistical, and Marketing Cookies

Depending on their purpose, cookies are divided into technical cookies, statistical cookies, and marketing cookies.

Technical cookies are installed solely for "transmitting a communication over an electronic communication network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to deliver such a service" (see Article 122, paragraph 1, of the Privacy Code).
These cookies are commonly used to ensure smooth navigation between pages, store user preferences, retain information related to specific user configurations, authenticate users, and more.
Technical cookies can be further divided into navigation cookies, which record data necessary for normal navigation and use of the website on the user's device (e.g., remembering the preferred size of a page in a list), and functional cookies, which allow the website to remember the user's choices in order to optimize usability (such as country selection or, if set, permanent login status).
Some of these cookies, called essential or strictly necessary, enable functionalities without which certain operations could not be completed.
Pursuant to the aforementioned Article 122, paragraph 1, Privacy Code, the use of technical cookies does not require user consent, but only the obligation to inform them.

Statistical cookies are a type of cookie primarily used to collect data and information on how users interact with a website. These cookies allow the website managers to understand how visitors interact with the web pages, monitoring aspects such as the most visited pages, the time spent on each page, the flow of navigation, and other behavioral metrics.
The information collected through statistical cookies is usually aggregated and anonymous, meaning it does not directly identify the individual user. However, it helps improve the website's functionality and user experience by providing valuable data for performance and content optimization.
In some cases, statistical cookies may be managed by third parties (such as Google Analytics), and in these cases, they may be subject to specific regulations, such as the need to anonymize the collected data to avoid individual tracking.

According to the Measure, technical cookies are equated with statistical cookies if:

1. They are created and used directly by the website operator (first-party) for site optimization purposes, collecting aggregate information on the number of users and how they visit the site; or
2. They are created and provided by third parties and:
   • Used by the website solely for statistical purposes, adopting minimization measures that reduce the identification capability (e.g., masking appropriate parts of the IP address) and employed only for producing aggregate statistics, usually referring to a single site or mobile application, without enabling tracking across applications or sites;
   • Third parties providing the web measurement service do not combine, enrich, or cross-reference the minimized data with other information they possess (e.g., client files or statistics of visits to other sites) nor transmit it to other third parties.

Marketing cookies, on the other hand, are used to track the user's navigation, analyze their behavior for commercial purposes, and create profiles based on their preferences, habits, and choices, in order to send targeted advertising messages in line with the preferences expressed during online browsing.
These cookies can only be installed on the user's device with explicit consent from the user.

Duration of Persistent and Session Cookies

Depending on their duration, cookies are divided into persistent cookies, which remain stored on the user's device until their expiration, unless removed by the user, and session cookies, which are not stored permanently and disappear when the browser is closed.

Cookies Used by the Site villaerbice.it

Technical Cookies

The site uses cookies for specific and limited purposes; in particular, to provide users with smoother navigation, for internal security purposes, and for system administration. This type of cookie cannot be disabled, and as mentioned above, user consent is not required for their installation according to Article 122 of the Privacy Code.

Methods of Providing Consent and Browser Settings

Statistical, marketing, and third-party cookies will be installed on devices only with prior consent, expressed by selecting the "Accept all cookies" button or by clicking on "Settings" within the banner containing the brief notice. Consent for the use of cookies is recorded with a specific "technical cookie."
It is always possible to change your choice by clicking the "Cookies" button at the bottom of every page of the website.
Users can also express their preferences regarding cookies through the settings of the browser they use. Even if the browser is set to automatically accept cookies, the user can modify the default settings through the settings menu, deleting and/or removing all or some cookies, blocking cookie submission, or limiting it to certain sites. Disabling, blocking, or deleting cookies may compromise the optimal use of certain areas of the site or prevent certain functionalities, as well as affect the functioning of third-party services. Below are the links to guides for managing cookies on the main browsers:

• Microsoft Edge
• Google Chrome
• Mozilla Firefox
• Safari

For browsers other than those listed above, consult the relevant guide for managing cookies.

Who Handles the Data within the Data Controller Structure

The data will be processed by employees from various company functions and by collaborators responsible for carrying out activities aimed at achieving the purposes described above. These individuals have been expressly authorized to process the data and have received specific operational instructions.

Recipients of the Data

The data may be processed on behalf of the Data Controller by third parties, designated as Data Processors under Article 28 of the GDPR, such as individuals and/or legal entities performing activities related to the purposes mentioned above (e.g., service providers for site management, system outsourcers, companies providing internet connectivity services, companies assisting in market research, companies maintaining the CRM, and companies managing the marketing automation platform).
Additionally, the data may be disclosed to independent Data Controllers, such as authorities and supervisory bodies authorized to request/receive the data.

Transfer of Data Outside the EU

Data may be transferred to entities outside the European Union (EU) or the European Economic Area (EEA), particularly to the United States, a country deemed adequate by the European Commission within the limits of the “EU-US Data Protection Framework” of July 10, 2023. If these entities are located in a country without an adequacy decision, standard contractual clauses (SCC) as referred to in Article 46(2)(c) of the GDPR will be implemented. A copy of these clauses can be obtained by contacting the company at the contact point provided in paragraph 1. For more information, please refer to the third-party links in the table below.

Rights of the Data Subject

Data subjects can exercise the rights granted to them under Articles 15-22 of the GDPR, including:

1. Request access to their data and the information described in Article 15 (purpose of processing, categories of personal data, etc.);
2. Request the deletion of their data if the Data Controller no longer has the right to process it under Article 17;
3. Obtain the correction of inaccurate data or the completion of incomplete data;
4. Obtain the restriction of processing (i.e., temporarily subjecting data to only the operation of storage), in cases provided by Article 18 of the GDPR;
5. Object to processing at any time, easily and free of charge, for reasons related to their particular situation, for processing based on the legitimate interests of the Data Controller;
6. Receive the data in a structured, commonly used, and machine-readable format, and, if technically feasible, transmit it to another Data Controller without hindrance, in cases where processing is based on consent or contract and carried out through automated tools.

To exercise these rights, data subjects may contact the Data Controller at any time via the email provided in Article 1. Data subjects have the right to file a complaint with the Data Protection Authority or with the relevant supervisory authority in the member state where they reside or work, or where the alleged violation occurred.

1. The data subject has the right to obtain the deletion of their data, particularly in the following cases:
   • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
   • The data subject withdraws their consent on which the processing is based, in accordance with Article 6(1)(a) or Article 9(2)(a), and there is no other legal basis for the processing;
   • The data subject objects to the processing under Article 21(1), and there is no overriding legitimate reason for the processing, or they object under Article 21(2);
   • The personal data has been unlawfully processed;
   • The personal data must be deleted to comply with a legal obligation under EU or member state law to which the Data Controller is subject;
   • The personal data was collected in relation to the offering of information society services under Article 8(1).
2. The cases in which the restriction of processing may be obtained are as follows:
   • The data subject contests the accuracy of the personal data, for the period necessary for the Data Controller to verify the accuracy of the data;
   • The processing is unlawful, and the data subject opposes the deletion of the data, instead requesting its use to be restricted;
   • The Data Controller no longer needs the data, but the data is necessary for the data subject to establish, exercise, or defend a legal claim;
   • The data subject has objected to the processing under Article 21(1) of the GDPR, pending verification of whether the legitimate interests of the Data Controller override those of the data subject.

Update

This document was last updated on 27/08/2024.