PRIVACY NOTICE ON THE PROTECTION OF PERSONAL DATA

In compliance with the provisions of Article 13 of Regulation (EU) 2016/679, Agribios Italiana S.r.l., in its capacity as Data Controller, represented by its legal representative pro tempore, hereby informs Users who visit the website and who may submit a contact request to the Data Controller by completing the form available on the website, or who give their consent to receive promotional material, about the purposes and methods of processing their personal data, the scope of their communication and disclosure, as well as the nature of the provision of such data.

1. Personal Data Collected

If Users request information through the “Contact Us” page of the website www.agribiositaliana.it by completing the relevant form, or give their consent to receive promotional material, the Data Controller will process identification and contact data (first name and surname, company/business name, province, telephone number, e-mail address, etc.), browsing data and any data voluntarily provided by the User.

Browsing data: The IT systems and software applications used to operate the website www.agribiositaliana.it collect, during their normal operation, certain data (the transmission of which is implicit in the use of Internet communication protocols) that are not associated with directly identifiable Users. The data collected include the IP addresses and domain names of the computers used by Users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the operating system and IT environment used by the User. These data are processed for the period strictly necessary for the sole purpose of checking the proper operation of the website.
Data voluntarily provided: The voluntary and explicit sending of e-mails to the addresses indicated in the various access channels of the website www.agribiositaliana.it and the completion of the specifically provided forms result in the subsequent acquisition of the e-mail address and other data necessary to respond to contact requests and/or to send promotional material subject to the User’s express consent.

2. Purposes of Processing

The Users’ data collected and subject to processing are processed and used directly:

To respond to contact requests;
Subject to express consent, for marketing activities through the sending of promotional material concerning the services and products provided directly by the Data Controller;
Subject to express consent, contact data will be disclosed to Yara Italia S.p.A. for the sending of informational/promotional/advertising material (including invitations to initiatives organised by Yara Italia S.p.A.), including by ordinary mail, e-mail, SMS or social media channels.

In full compliance with the principles of fairness, lawfulness, purpose limitation and proportionality and with applicable legal provisions, no profiling of the Data Subject is envisaged.

3. Processing Methods

Your data are processed using tools and procedures suitable for ensuring a high level of security and confidentiality and may be processed both through our website and by means of other electronic tools, and occasionally also by telephone or with the aid of paper-based media.

Data processing is carried out through IT procedures or, in any event, by electronic means by specifically authorised internal personnel. The data are stored in IT and electronic archives, and appropriate security measures as required by Regulation (EU) 2016/679 are ensured. No automated decision-making process, including profiling as referred to in Article 22(1) and (4) of Regulation (EU) 2016/679, is envisaged.

4. Communication and/or Disclosure

Personal, identification and contact data will not be communicated, disseminated, sold or exchanged with third parties. The data collected will not be subject to dissemination. No processing of data outside the EU is envisaged; should this occur, the Data Subjects will be informed pursuant to Article 13(1)(f) of Regulation (EU) 2016/679, in accordance with the requirements of the GDPR.

Subject to express consent, contact data will be disclosed to Yara Italia S.p.A. for the sending of informational/promotional/advertising material (including invitations to initiatives organised by Yara Italia S.p.A.), including by ordinary mail, e-mail, SMS or social media channels.

For marketing activities carried out for advertising purposes, the Data Controller uses the advertising services provided by Google (in particular, Google Ads) and LinkedIn (LinkedIn Ads).

5. Incorrect or Failure to Provide Data

The Data Controller hereby informs Users that failure to provide, or the incorrect provision of, any mandatory information will result in the Data Controller being unable to ensure that the processing complies with the contractual terms for which it is carried out.

6. Rights of the Data Subject

(Rights pursuant to Articles 15, 16, 17, 18, 20, 21 and 22 of Regulation (EU) 2016/679)

We hereby inform you that, as a Data Subject, in addition to the right to lodge a complaint with a supervisory authority, you also have the rights listed below, which you may exercise by submitting a specific written request to the Data Controller:

Article 15 – Right of access: The Data Subject shall have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, access to the personal data and information concerning the processing.
Article 16 – Right to rectification: The Data Subject shall have the right to obtain from the Data Controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the Data Subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Article 17 – Right to erasure (‘right to be forgotten’): The Data Subject shall have the right to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay, and the Data Controller shall have the obligation to erase personal data without undue delay.
Article 18 – Right to restriction of processing: The Data Subject shall have the right to obtain from the Data Controller restriction of processing where one of the following applies:
- a) The accuracy of the personal data is contested by the Data Subject, for a period enabling the Data Controller to verify the accuracy of the personal data;
- b) The processing is unlawful and the Data Subject opposes the erasure of the personal data and requests the restriction of their use instead;
- c) The Data Controller no longer needs the personal data for the purposes of the processing, but they are required by the Data Subject for the establishment, exercise or defence of legal claims;
- d) The Data Subject has objected to processing pursuant to Article 21(1), pending verification as to whether the legitimate grounds of the Data Controller override those of the Data Subject.
Article 19 – Notification obligation regarding rectification or erasure of personal data or restriction of processing: The Data Controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller shall inform the Data Subject about those recipients if the Data Subject so requests.
Article 20 – Right to data portability: The Data Subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a Data Controller, in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another Data Controller without hindrance from the Data Controller to which the personal data have been provided. In exercising his or her right to data portability pursuant to paragraph 1, the Data Subject shall have the right to have the personal data transmitted directly from one Data Controller to another, where technically feasible.
Article 21 – Right to object: The Data Subject shall have the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her which is based on Article 6(1)(e) or (f), including profiling based on those provisions.
Article 22 – Right not to be subject to automated decision-making, including profiling: The Data Subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

How to exercise your rights:

To exercise the rights provided for under Articles 15 et seq. of Regulation (EU) 2016/679, you must write to agribiossrl@pec.it, for the attention of the Data Controller.

7. Data Controller and Data Processors

Data Controller: Agribios Italiana S.r.l., with registered office at Località Carzaghetto S.N.C. – 46013 Canneto sull’Oglio (MN), Italy.
Data Processors: The updated list of external Data Processors pursuant to Article 28 of the GDPR may be consulted by submitting a written request to the aforementioned Data Controller.

8. Retention Period

The data will be retained for the period necessary to fulfil the purposes set out in Section 2 and, more specifically:

Contact requests: Identification and contact data required to respond to contact requests will be retained for the period necessary to process the contact request received and will be deleted as soon as the contact request has been handled.
Marketing activities and third-party communication: For marketing activities involving the sending of promotional material concerning products or services similar to those covered by the existing relationship, or products or services of the same Company, and for the communication of contact data to Yara Italia S.p.A. for the sending of informational/promotional/advertising material, the data will be retained until the Data Subject exercises his or her right to object and, in any event, for no longer than 3 years from the date on which the Data Subject’s consent was obtained.

9. Legal Basis and Nature of Consent

Responding to contact requests (Point 1, Section 2): Consent to the processing of data is not required, as such processing is based on the legitimate interest of the Data Controller.
Marketing activities and third-party communication (Points 2 and 3, Section 2): Consent, pursuant to Articles 6 and 7 of Regulation (EU) 2016/679, is optional but necessary in order to carry out the marketing activities described above.