Information pursuant to art.13 of Legislative Decree no. 196/03 – EU Regulation 2016/679 GDPR (General Data Protection Regulation) Code on the protection of personal data Your personal data will be processed in compliance with the law for the processing of orders, the provision of services for which registration is required and for the other purposes indicated in this policy; the processing will be based on the principles of fairness, lawfulness and transparency and the protection of your privacy. The methods of processing include the use of manual, computer and telematic tools (including telefax, telephone, even without operator assistance, electronic mail, SMS and other computer and/ or automated communication systems) and shall be such as to ensure the security and confidentiality of the data. Users/visitors should carefully read this Privacy Policy before submitting any personal information and/or filling in any electronic form on the access points mentioned above. Data Controller Data Controller POLO FRUTTA S.R.L.U.S. – VIA CALVANESE, S.N.C., 84018, Scafati (SA) Italy Tel. +39 334 703 2548 e-mail: info@polofrutta.com Website: www.polofrutta.com P.IVA IT 07410430727 – REA BA – 555629 – C.S. € 10.000 Types of Data collected Among the Personal Data collected by this website, independently or through third parties, there are: Cookies, Usage Data, name, surname and Email. Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informative texts displayed before the collection of the data. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this website. Unless otherwise specified, all Data requested by this website are mandatory. If you refuse to provide them, it may be impossible for this website to provide the Service. In cases where this website indicates certain Data as optional, Users are free to refrain from communicating such Data, without this having any consequences on the availability of the Service or its operation. Users who have doubts about which Data is mandatory, are encouraged to contact the Owner. The possible use of Cookies – or other tracking tools – by this website or third party service owners used by this website, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the additional purposes described in this document and in the Cookie Policy. The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this website and guarantees to have the right to communicate or disseminate them, freeing the Data Controller from any liability to third parties. Method and place of processing of the collected Data Method of treatment The Data Controller processes Users’ Personal Data by taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out by means of computer and/ or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, categories of persons in charge of the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects may have access to the Data (as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller. Legal basis of processing The Data Controller processes Personal Data relating to the User if one of the following conditions is met: the User has given consent for one or more specific purposes; Note: in some jurisdictions the Data Controller may be authorised to process Personal Data without the User’s consent or another of the legal bases specified below, until the User objects (“opt-out”) to such processing. However, this does not apply if the processing of Personal Data is regulated by European legislation on the protection of Personal Data; the processing is necessary for the execution of a contract with the User and/or for the execution of pre-contractual measures; the processing is necessary to fulfil a legal obligation to which the Data Controller is subject; he processing is necessary for the performance of a task in the public interest or for the exercise of public authority by the Data Controller; the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties. It is however always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on the law, provided by a contract or necessary to conclude a contract. Place The Data are processed at the operating offices of the Data Controller and at any other place where the parties involved in the processing are located. For further information, contact the Data Controller. Your Personal Data may be transferred to a country other than the country where you are located. For further information on the place of processing, the User can refer to the section on the details of the processing of Personal Data. The User has the right to obtain information about the legal basis of the transfer of Data outside the European Union or to an international public law organization or constituted by two or more countries, such as the UN, as well as the security measures taken by the Data Controller to protect the Data. If one of the transfers described above takes place, the User can refer to the respective sections of this document or ask the Data Controller for information by contacting him at the contact details shown at the opening. Retention period The Data are processed and stored for the time required by the purposes for which they were collected. Therefore: The Personal Data collected for purposes related to the execution of a contract between the Data Controller and the User will be retained until the execution of this contract is completed. The Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until the satisfaction of this interest. The User can obtain further information about the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller. When processing is based on the User’s consent, the Data Controller may retain the Personal Data for longer until such consent is revoked. In addition, the Data Controller may be obliged to store Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period the Personal Data will be deleted. Therefore, upon expiry of this period, the right of access, cancellation, rectification and the right to data portability can no longer be exercised. Purpose of the Processing of Collected Data The User Data is collected to allow the Data Controller to provide its services, as well as for the following purposes: Statistics, Advertising, Hosting and backend infrastructure, Interaction with social networks and external platforms and Viewing content from external platforms. The types of Personal Data used for each purpose are indicated in the specific sections of this document. In particular, Navigation Data is processed exclusively:for the operational management of navigation; for the processing of statistical data on access and consultation; for the management of data security. As for the Personal Data voluntarily provided by the User, they are processed for the following purposes, in addition to those indicated below: for the production of anonymous and aggregated use statistics; protection or defence of rights in court; compliance with obligations under applicable laws or regulations, including those relating to accounting and taxation; fulfillment of the specific purposes for which such Data have been provided by the User (provision of a service, response to specific questions submitted through contact forms, assistance requests etc.); management of the User’s registration and/or access to any reserved areas available on the site; sending newsletters to the User, with the latter’s consent; participation of the User in initiatives, in compliance with the rules governing such activities or any regulations published on the site. In order to pursue the purposes of processing described above, POLO FRUTTA S.R.L.U.S. uses the following services, listed for processing purposes. Details on the processing of Personal Data Personal Data is collected for the following purposes and using the following services: Hosting and back-end infrastructure This type of services has the function of hosting data and files that allow POLO FRUTTA S.R.L.U.S. to operate, allow its distribution and provide a ready-to-use infrastructure to provide specific functionalities of POLO FRUTTA S.R.L.U.S. Some of these services operate through geographically located servers in different locations, making it difficult to determine the exact location where Personal Data is stored. Aruba Business ( Aruba Business S.r.l. ) Aruba Business is a hosting service provided by Aruba Business S.r.l. Personal Data collected: various types of Data as specified by the privacy policy of the service. Place of treatment: Italia (Ferrara) – Privacy Policy Interaction with social networks and external platforms This type of service allows you to interact with social networks, or with other external platforms, directly from the pages of POLO FRUTTA S.R.L.U.S.. The interactions and information acquired by POLO FRUTTA S.R.L.U.S. are in any case subject to the User’s privacy settings related to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if users do not use the service, the same collects traffic data related to the pages where it is installed. +1 button and Google+ social widgets (Google Inc.) The +1 button and Google+ social widgets are social interaction services provided by Google Inc. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy Like button and Facebook social widgets (Facebook, Inc.) The “Like” button and Facebook social widgets are social networking services provided by Facebook, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy Twitter Tweet button and social widgets (Twitter, Inc.) The Tweet button and Twitter social widgets are social interaction services provided by Twitter, Inc. Personal Data collected: Cookies and Usage Data. Place of processing : USA – Privacy Policy Interaction with data collection platforms and other third parties This type of service allows Users to interact with data collection platforms or other services directly from the pages of this website in order to save and reuse data. If one of these services is installed, it is possible that, even if the Users do not use the service, the same collects Usage Data related to the pages where it is installed. Sendinblue widget (Sendinblue SAS) The Sendinblue widget allows you to interact with the Sendinblue email address and message management service provided by Sendinblue SAS. Personal Data collected: surname, email, first name and telephone number. Place of treatment: France – Privacy Policy. Subject adhering to the Privacy Shield. Optimization and distribution of traffic This type of services allows this Application to distribute its contents through servers located in the territory and to optimize its performance. The Personal Data processed depend on the characteristics and methods of implementation of these services, which by their nature filter communications between this Application and the User’s browser. Due to the distributed nature of this system, it is difficult to determine where content is transferred, which may contain Your Personal Data. Cloudflare(Cloudflare) Cloudflare is a traffic optimization and distribution service provided by cloudflare Inc. The modalities of cloudflare integration provide that this filters all the traffic of this Application, ie the communications between this Application and the User’s browser, also allowing the collection of statistical data on it. Personal Data collected: Cookies and various types of Data as specified by the privacy policy of the service. Place of processing: United States – Privacy Policy. Publicity This type of services allow you to use your User Data for commercial communication purposes in various advertising forms, such as banners, videos, etc. This does not mean that all Personal Data is used for this purpose. Data and conditions of use are indicated below. Statistics The services contained in this section allow the Data Controller to monitor and analyse traffic data. POLO FRUTTA S.R.L.U.S. uses this service in order to carry out aggregate analysis on its Users in anonymous form and, thus, improve the performance of the site POLO FRUTTA S.R.L.U.S. Google Analytics (Google Inc.) Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads on its advertising network. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy- Opt Out. Subject adhering to the Privacy Shield.Google Analytics with anonymized IP (Google Inc.) Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads on its advertising network. This integration of Google Analytics makes your IP address anonymous. Anonymization works by shortening the IP address of Users within the borders of the Member States of the European Union or in other countries that are parties to the Agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google’s servers and shortened within the United States. Personal Data collected: Cookies and Usage Data. Place of processing: United States – Privacy Policy- Opt Out. Subject adhering to the Privacy Shield. Managing contacts and sending messages This type of service allows you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow the collection of data relating to the date and time of display of messages by the User, as well as the interaction of the User with them, such as information on clicks on links inserted in messages. Sendinblue (Sendinblue SAS) Sendinblue is an email address and message management service provided by Sendinblue SAS. Personal Data collected: Name, Surname, email address. Place of processing: France – Privacy Policy. Subject adhering to the Privacy Shield Viewing content from external platforms This type of service allows you to view content hosted on external platforms directly from the ROSSI WEB MEDIA pages and to interact with them. If a service of this type is installed, it is possible that, even if Users do not use the service, the same collects traffic data related to the pages where it is installed. YouTube Video Widget (Google Inc.) YouTube is a video content display service managed by Google Inc. that allows POLO FRUTTA S.R.L.U.S. to integrate this content into its pages. Personal Data collected: Cookies and Usage Data. Place of processing : USA – Privacy Policy Instagram Widget (Instagram, Inc.) Instagram is an image visualization service managed by Instagram, Inc. that allows POLO FRUTTA S.R.L.U.S. to integrate these contents into its pages. Personal Data collected: Cookies and Usage Data. Place of processing : USA – Privacy Policy Google Maps Widget (Google Inc.) Google Maps is a map display service managed by Google Inc. that allows POLO FRUTTA S.R.L.U.S. to integrate these contents into its pages. Personal Data collected: Cookies and Usage Data. Place of processing : USA – Privacy Policy Interaction with live chatThis type of services allows you to interact with live chat platforms, managed by third parties, directly from the pages of this Application. This allows the User to contact the support service of this Application or this Application to contact the User while browsing its pages. In the event that an interaction service with the live chat platforms is installed, it is possible that, even if the Users do not use the service, the same collects Usage Data related to the pages where it is installed. In addition, live chat conversations may be recorded. Smartsupp (Smartsupp.com, s.r.o.) The Smartsupp Widget is an interaction service with the Smartsupp live chat and session recording platform, provided by Smartsupp.com, s.r.o. Personal Data collected: Cookies, Data communicated during the use of the service, Usage data and various types of Data as specified by the privacy policy of the service. Place of processing: Czech Republic – Privacy Policy. Payment management Payment management services allow this Application to process payments by credit card, bank transfer or other means. The data used for the payment are acquired directly by the operator of the requested payment service without being processed in any way by this Application. Some of these services may also allow messages to be sent to you on a scheduled basis, such as emails containing invoices or payment notifications. PayPal (Paypal Inc.) PayPal is a payment service provided by PayPal Inc., which allows the User to make payments online. Personal Data collected: various types of Data as specified by the privacy policy of the service. Privacy Policy. Stripe(Stripe Inc.) Stripe is a payment service provided by Stripe Inc. Personal Data collected: various types of Data as specified by the privacy policy of the service. Place of processing: USA – Privacy Policy More information about Personal Data Smartsupp (Smartsupp.com, s.r.o.) The Smartsupp Widget is an interaction service with the Smartsupp live chat and session recording platform, provided by Smartsupp.com, s.r.o. Personal Data collected: Cookies, Data communicated during the use of the service, Usage data and various types of Data as specified by the privacy policy of the service. Place of processing: Czech Republic – Privacy Policy. Payment management Payment management services allow this Application to process payments by credit card, bank transfer or other means. The data used for the payment are acquired directly by the operator of the requested payment service without being processed in any way by this Application. Some of these services may also allow messages to be sent to you on a scheduled basis, such as emails containing invoices or payment notifications. PayPal (Paypal Inc.) PayPal is a payment service provided by PayPal Inc., which allows the User to make payments online. Personal Data collected: various types of Data as specified by the privacy policy of the service. Privacy Policy. Stripe(Stripe Inc.) Stripe is a payment service provided by Stripe Inc. Personal Data collected: various types of Data as specified by the privacy policy of the service. Place of processing: USA – Privacy Policy More information about Personal Data Additional rights of users We never, ever sell or rent User Data to third parties. The only uses of the Data are those highlighted in this policy. Users are the only owners of their Data and may request its modification or deletion at any time. Rights of the data subject The User, as a data subject, may contact the Data Controller at any time, without any formalities, to assert his rights, as provided for by article 7 of the Privacy Code, which for the convenience of the User is set out below in its entirety: The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet recorded, and their communication in an intelligible form. The data subject shall have the right to obtain information on: the origin of personal data; the purposes and methods of processing; the logic applied in the case of treatment carried out with the help of electronic tools; the identification details of the owner, the managers and the representative designated pursuant to article 5, paragraph 2 (of the Privacy Code); the subjects or categories of subjects to whom the personal data may be disclosed or who may become aware of them as designated representative in the territory of the State, of responsible persons or persons in charge. You have the right to obtain: updating, correcting or, where appropriate, integrating the data; the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including those whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed; proof that the operations referred to in a) and b) have been brought to the attention, including as regards their content, of those to whom the data have been communicated or disseminated, except where such performance proves impossible or involves the use of means manifestly disproportionate to the protected right. You have the right to object, in whole or in part: for legitimate reasons relating to the processing of personal data concerning him, even if relevant to the purpose of the collection; the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for the performance of market research or commercial communication.” How to exercise your rights You may at any time exercise your rights by sending a communication: by e-mail to: info@polofrutta.com or by mail A.R., to: POLO FRUTTA S.R.L.U.S. – Via Prof. M. Papagni 4- 84018 Scafati (SA) Italy