Privacy Notice on the Processing of Personal Data. Effective from 06/04/2025
PREFACE
This notice takes into account the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and the Italian Privacy Code (Legislative Decree No. 196 of June 30, 2003). The document has also been drafted based on the Italian Data Protection Authority’s Guidelines (especially the anti-spam Guidelines issued on July 4, 2013).
Data Controller: Agricola Gian Piero Marrone S.r.l. – Frazione Annunziata, 13 – 12064 La Morra (CN) – F.C. / VAT 00595190042 – Tel +39.0173.509288 – Chamber of Commerce: CUNEO – REA CN 111451 – Share Capital €50,000 paid up – Certified Email (PEC): info@pec.agricolamarrone.com
Website to which this privacy policy applies: https://www.agricolamarrone.com/ (Site).
The Data Controller has not appointed a Data Protection Officer (DPO). Therefore, you may send any request for information directly to the Data Controller.
GENERAL INFORMATION
This document describes how the Data Controller processes your personal data submitted on the Site.
Below are the main purposes for which your personal data are processed. The legal bases for processing, whether provision of data is mandatory, and the consequences of refusal are explained. We have also specified when a particular data processing operation is not carried out, to better illustrate your rights.
Site Registration
The Site does not offer registration. Therefore, the Data Controller does not process your personal data for this purpose.
Purchases on the Site
No purchases can be made on the Site. Therefore, your personal data will not be processed for that purpose. The Data Controller does not use your data to send “reminder” emails for the purchase of products and/or services.
Responding to Your Requests
Your data will be processed to respond to information requests. Providing data is optional, but refusal will prevent the Controller from responding to your inquiries. The legal basis is the Controller’s legitimate interest to fulfill user requests, which aligns with the user’s interest in receiving a response.
General Marketing
With your consent, the Controller may process your data to send advertising materials and/or newsletters related to its own or third-party products. The legal basis is your consent, which is optional. Refusal will prevent receipt of advertising materials and your inclusion in market research or newsletters. Communications will be sent to the email address you provided on the Site.
Profiling
With your consent, the Controller may process your data for profiling—analyzing your consumption choices based on purchase type and frequency—to send targeted advertising or newsletters. The legal basis is your consent, which is optional. Refusal will prevent the Controller from creating your commercial profile and sending tailored advertising. Communications will be sent to the email address you provided.
Data Transfer
The Controller does not transfer your personal data to third parties.
Geolocation
The Site does not implement IP address geolocation tools.
Curriculum Vitae
The Site does not allow submission of CVs. Therefore, your data will not be processed for this purpose.
Appointment Booking
Information and data requested when booking an appointment and/or service will be used to enable the booking as indicated on the Site. The legal basis is the necessity to take pre-contractual steps at your request. Providing this data is optional; refusal will prevent appointment or service booking on the Site.
Photos and Videos
The Controller does not request publication of personal photos or videos. Therefore, your data will not be processed for this purpose.
Web Scraping
The use of any automated process or system to access, acquire, copy, or monitor any part of our website, including, but not limited to, web scraping, crawling, or spidering techniques, is expressly prohibited. The Data Controller reserves the right to take all necessary measures, including legal action, to prevent and prosecute any unauthorised scraping activities. By using the Site, the user or any third party agrees not to: (i) use automated systems, such as bots, scrapers, or spiders, to access or interact with the Site; (ii) collect content, data, or other information on the Site without express written permission; (iii) distribute, display, publish, or otherwise use content acquired through scraping techniques without consent. Any breach of this clause will be considered a material breach of the terms of use of the Site and will result in appropriate action being taken, including the possible suspension of access to the Site and the taking of legal action to protect the interests of the Data Controller.
Disclosure of Personal Data
The Controller may disclose your personal data to specified categories of recipients. In Article 2 you will find the list of those recipients. Data “disclosure” differs from “transfer”: disclosed recipients may only use data for specified purposes, while transferred recipients become independent controllers. Transfer always requires your consent. The Controller may still use your data to comply with legal obligations.
SPECIFIC PRIVACY NOTICE
Art. 1 Processing Methods
1.1 Your personal data will be processed primarily with electronic or other automated means, using tools that ensure confidentiality and security.
1.2 Collected information and processing methods will be relevant and not excessive for the services provided. Data will be managed and protected in secure IT environments.
1.3 The Site does not process “special category data”—such as racial or ethnic origin, religious or philosophical beliefs, political opinions, union membership, health status, or sexual orientation.
1.4 The Site does not process judicial data.
Art. 2 Disclosure of Personal Data
The Controller may disclose your data to certain categories of recipients, including those operating the YouTube API. When you view a YouTube video embedded via API, the following may be collected: IP address (to deliver the video), behavioral data (interaction details, watch time), and location information (for relevant content). This is done automatically and may be stored by YouTube to enhance user experience and analytics. Viewing YouTube content means acceptance of YouTube’s Terms of Service. For details on how Google LLC manages data, see Google’s privacy policy and YouTube’s commitments. Data from YouTube includes viewing preferences, history, likes, comments, shares; accessed via API calls to YouTube. Data is collected automatically to ensure a smooth user experience, stored securely by YouTube, and used for internal analysis, content personalization, and performance improvement.
Below is a list of recipients to whom your data may be disclosed:
- The Controller may disclose your data to public authorities when required by law.
- Your data may be shared with public or private entities—including legal, administrative, tax advisors, courts, chambers of commerce, and labor offices—when necessary to comply with obligations.
- The Controller does not share data with employees or collaborators.
- Data may be processed by external companies or professionals involved in IT system maintenance, updates, and management.
- The Controller uses external CRM platforms for communications; your email may be shared with these providers.
- Customer care is not outsourced.
- We do not share data with banks or payment processors.
- Data of purchasers is not shared with couriers.
The Controller reserves the right to modify this list based on operations. Please check this notice regularly for updates on data sharing.
Art. 3 Data Retention
3.1 This article outlines retention periods:
- For marketing purposes, data is retained until consent is withdrawn. Inactive users’ data is deleted one year after the last email viewed.
3.2 Additionally, data may be retained for periods required by applicable law.
Art. 4 Data Transfer
4.1 The Controller is based in a country deemed adequate by EU standards. Transfers to third countries with adequacy decisions are considered secure. Check this article regularly to verify transfer locations.
- Please check for updates on third-country data transfers.
4.2 Data may also be transferred to non-adequate third countries. Please check this section for updates.
4.3 The article lists specific third countries involved, which may imply application of their local laws in addition to those outlined here.
- Upon request, the Controller will apply whichever data protection law is more favorable to the user’s country.
Art. 5 Your Rights
The Controller informs you that you have the right to:
- access, rectify, delete, restrict processing of your data, object to processing, and request data portability;
- withdraw consent at any time without affecting the lawfulness of prior processing;
- file a complaint with a supervisory authority.
These rights can be exercised via a request to the contacts listed in the Preface.
Art. 6 Amendments & Miscellaneous
The Controller reserves the right to amend this notice at any time, giving appropriate notice to Site users and ensuring equivalent data protection. To view changes, please consult this notice regularly. For substantial updates, the Controller may notify you via email.