In compliance with the provisions of Article 13 of EU Regulation 2016/679, Agribios Italiana S.r.l., in its capacity as Data Controller, represented by its legal representative pro tempore, hereby informs Users who visit the website and who may submit a contact request to the Data Controller by completing the form available on the website, or who give their consent to the sending of promotional material, about the purposes and methods of the processing of personal data, the scope of their communication and dissemination, as well as the nature of their provision.

Personal Data Collected

If Users request information through the “Contact Us” page of the website www.agribiositaliana.it by completing the relevant form, or give their consent to the sending of promotional material, the Data Controller will process identification and contact data (first and last name, company name or corporate name, province, telephone number, e-mail address, etc.), browsing data and data voluntarily provided by the User.

The IT systems and software applications used for the operation of the website www.agribiositaliana.it, during their normal operation, collect certain data (the transmission of which is inherent in the use of Internet communication protocols) that is not associated with directly identifiable users. The data collected includes the IP addresses and domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relating to the operating system and IT environment used by the User. These data are processed, for the time strictly necessary, solely for the purpose of checking the proper functioning of the website.

The voluntary and explicit sending of e-mails to the addresses indicated in the different access channels of the website www.agribiositaliana.it and the completion of the specifically provided “forms” entails the subsequent acquisition of the e-mail address and other data necessary to respond to contact requests and/or for the sending of promotional material, subject to the User’s express consent.

Purposes

The Users’ data collected and subject to processing are processed and used directly:

1. to respond to contact requests;
2. subject to express consent, the data will be processed for marketing activities through the sending of promotional material relating to services and products provided directly by the Data Controller;
3. subject to express consent, contact data will be disclosed to Yara Italia S.p.A. for the sending of informative/promotional/advertising material (including invitations to initiatives organised by Yara Italia S.p.A.), including by ordinary mail, e-mail, SMS or social media channels.

In full compliance with the principles of fairness, lawfulness, purpose limitation and proportionality, as well as with the applicable legal provisions, no profiling of the data subject is envisaged.

Processing Methods

Your data are processed using tools and procedures suitable for ensuring a high level of security and confidentiality and may be processed both through our website and by means of other electronic tools, and occasionally also by telephone or with the aid of paper-based media.

Data processing is carried out through IT procedures or, in any case, by telematic means by specifically authorised internal personnel. The data are stored in electronic and telematic archives, and the appropriate security measures provided for by EU Regulation 2016/679 are ensured. No automated decision-making process, including profiling as referred to in Article 22(1) and (4) of EU Regulation 2016/679, is envisaged.

Communication and/or Dissemination

Personal identification and contact data will not be communicated, disseminated, sold or exchanged with third parties. No processing of data outside the EU is envisaged. Should this occur, the data subjects will be informed pursuant to Article 13(1)(f) of EU Regulation 2016/679, in accordance with the requirements of the GDPR.

Subject to express consent, contact data will be disclosed to Yara Italia S.p.A. for the sending of informative/promotional/advertising material (including invitations to initiatives organised by Yara Italia S.p.A.), including by ordinary mail, e-mail, SMS or social media channels.

For marketing activities for advertising purposes, the Data Controller makes use of advertising services provided by Google (in particular, Google Ads) and LinkedIn (LinkedIn Ads).

The data collected will not be subject to dissemination.

Failure to Provide Data or Provision of Incorrect Data

The Data Controller hereby informs Users that any failure to provide, or incorrect provision of, any mandatory information will result in the Data Controller being unable to ensure that the processing is consistent with the contractual arrangements for which it is carried out.

Rights of the Data Subject

Rights pursuant to Articles 15, 16, 17, 18, 20, 21 and 22 of EU Regulation 2016/679.
We hereby inform you that, as a data subject, in addition to the right to lodge a complaint with a Supervisory Authority, you also have the rights listed below, which you may exercise by submitting a specific written request to the Data Controller.

Article 15 – Right of access
The data subject has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, to obtain access to the personal data and information concerning the processing.

Article 16 – Right to rectification
The data subject has the right to obtain from the Data Controller, without undue delay, the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Article 17 – Right to erasure (right to be forgotten)
The data subject has the right to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay, and the Data Controller has the obligation to erase personal data without undue delay.

Article 18 – Right to restriction of processing
The data subject has the right to obtain from the Data Controller restriction of processing where one of the following applies:

1. a) the accuracy of the personal data is contested by the data subject, for a period enabling the Data Controller to verify the accuracy of the personal data;
   b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
   c) although the Data Controller no longer needs the personal data for the purposes of the processing, they are required by the data subject for the establishment, exercise or defence of legal claims;
   d) the data subject has objected to processing pursuant to Article 21(1), pending verification as to whether the legitimate grounds of the Data Controller override those of the data subject.

Article 19 – Notification obligation regarding rectification or erasure of personal data or restriction of processing

The Data Controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller shall inform the data subject about those recipients if the data subject so requests.

Article 20 – Right to data portability
The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a Data Controller, in a structured, commonly used and machine-readable format, and has the right to transmit those data to another Data Controller without hindrance from the Data Controller to which the personal data have been provided.

In exercising his or her rights concerning data portability pursuant to paragraph 1, the data subject has the right to have the personal data transmitted directly from one Data Controller to another, where technically feasible.

Article 21 – Right to object
The data subject has the right to object, at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1)(e) or (f), including profiling based on those provisions.

Article 22 – Right not to be subject to automated decision-making, including profiling
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
To exercise the rights provided for under Articles 15 et seq. of Regulation 2016/679, you must write to agribiossrl@pec.it, for the attention of the Data Controller.

Data Controller and Data Processors

The Data Controller is Agribios Italiana S.r.l., with registered office at Località Carzaghetto S.N.C. – 46013 Canneto sull’Oglio (MN), Italy.

The updated list of external Data Processors referred to in Article 28 of the GDPR may be consulted by submitting a written request to the aforementioned Data Controller.

Retention Periods

The data will be retained for the time necessary to fulfil the purposes indicated in Section 2 and, more specifically:

• Identification and contact data necessary to respond to contact requests will be retained for the time necessary to process the contact request received and will be deleted as soon as the contact request has been dealt with;
• For the purposes of marketing activities through the sending of promotional material relating to products or services similar to those covered by the existing relationship, or provided by the same Company, and for the disclosure of contact data to Yara Italia S.p.A. for the sending of informative/promotional/advertising material, the data will be retained until the data subject requests that such processing cease and, in any event, for no longer than 3 years from the date on which the data subject’s consent was obtained.

Legal Basis and Nature of Consent

Consent to the processing of data is not required for point 1) of Section 2, as the processing is based on the legitimate interest of the Data Controller. Consent for points 2) and 3) of Section 2, pursuant to and for the purposes of Articles 6 and 7 of EU Regulation 2016/679, is optional but necessary in order to carry out the marketing activities described above.