pursuant to articles 13 and 14 of (EU) Regulations 2016/679 (“EU Regulations”) and Legislative Decree 30.06.2003, no. 196, as amended and supplemented by Leg. Decree 10.08.2018, no. 101 (“Personal Data code” or “Privacy Code”)
Pursuant to EU Regulations, this page describes the ways in which the personal data of users who visit the website of Casillo Partecipazioni S.r.l. (hereinafter the “Company”) are processed. The website can be accessed on the following internet address: www.molinocasillo.com. The present information does not apply to other websites, web pages or online services that can be reached through hypertextual links published on the site and that refer to resources outside the domain of Casillo Partecipazioni S.r.l.
Data Controller, Co-controller and Data Processor
Following consultation of the above-mentioned site, data relating to identified or identifiable natural persons may be processed.
Data Protection Officer
The Company has appointed a Data Protection Officer (DPO) who can be contacted at the following address: [email protected]
Legal Basis for the Processing
Personal data are processed by the Company to execute any requests forwarded by interested parties via e-mail and/or by filling out forms that are available on the site or in order to fulfil requests made directly through web service from the site relating to requests made by the customer for the provision of the service(s) on the site and provided by/ on behalf of the Data Controller (G.D.P.R., art. 6, paragraph 1, letter b).
Types of processed data
During their normal operations, the IT systems and software procedures used to operate this site acquire certain personal data whose transfer is implicit in the use of Internet communication protocols. This type of data includes IP addresses or the domain names of the computers and terminals used by users, the URI/URL addresses (Uniform Resource Identifier/Locator) of the requested resources, the time of the request, the method used to send the request to the server, the size of the file that is received in response, the numerical code indicating the state of the response provided by the server (successful, error, etc.) and other parameters concerning the user’s operative system and IT environment.
Purposes of the processing
- The data mentioned in the previous paragraph, which is necessary in order to use the site, is also processed in view of checking the correct operations of the provided services. Browsing data is not stored for more than seven days and is deleted immediately after it has been acquired (except for possible needs to ascertain crimes on behalf of the judicial authorities).
- The website also requests the necessary data to perform commercial communication activities, present proposals, activities and offers, and to collect information in relation to customer satisfaction. These activities are performed both by Casillo Partecipazioni S.r.l., as independent Data Controller, and by third parties, as external Data Processors or independent Controllers, based on possible specific agreements.
Data provided by the user
The optional, explicit and voluntary act of sending messages to the Company’s contact addresses, as well as the act of filling in the forms present on the site, imply that the sender’s contact details be collected, in view of answering his/her request, and entail the collection of all personal data that may be included in these communications.
Data retention period and right to be forgotten
For the purposes mentioned in point 1, the Data Controller will process and retain the personal data of the interested parties for the entire time that their registration is active and for a further period of 3 (three) years in order to execute the inherent and consequent fulfilments, to comply with legal obligations and applicable regulations, as well as to defend himself or third parties. This period of time is subject to possible extension in case of legitimate needs. In the event, on the other hand, of limited access to the contingent activities related to the promotions which do not require registration on the site, the data will be processed only for the time necessary to fulfil the requests made by the user and retained for a minimum period of 60 (sixty) days to ensure every form of protection for all interested parties. For the purposes mentioned in point 2, the Data Controller will process and retain the personal data for a minimum period of 3 (three) years in order to execute the inherent and consequent fulfilments, to comply with legal obligations and applicable regulations, as well as to defend himself or third parties. At the end of the retention period, the personal data of the interested parties will be deleted or retained in a way that does not make it possible to identify the interested party (e.g. irreversible anonymization), unless the user renews his/her consent to their processing.
Cookies and other tracking systems
The following subjects appointed by the Company pursuant to article 28 of the Regulations are the recipients of the data that is collected upon consultation of the site: Data Processor, Angelini Design S.r.l., as provider of the services of development and maintenance of the internet platform. The collected personal data is also processed by the Company’s staff, which acts according to specific instructions provided regarding the purposes and methods of processing.
Rights of Data Subjects
In the cases provided for, data subjects have the right to ask the Company for permission to access their personal data and change or delete the latter, as well as limit their processing or deny their consent to processing (articles 15 and following of the Regulations). For any requests and/or applications relating to the exercise of the interested parties’ rights, please send an email to the following address: [email protected]
Right to lodge a complaint
Any interested party who claims that the processing of their personal data carried out through this website is violating the provisions set forth in the Regulations, has the right to lodge a complaint with the Guarantor, according to art. 77 of the Regulations, or to bring the issue before the competent courts (art. 79 of the Regulations).
Last updated: may 6 2020