PRIVACY POLICY
Dear User,
this Privacy Policy provides you with information regarding the processing of your personal data carried out via our website in accordance with Regulation (EU) no. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR"). This Privacy Policy describes the personal data we collect, how it is used and shared, and your choices regarding this data.
1. Contacting Us
The Data Controller is Terra Nursia s.r.l Via Case Sparse n. 164, CAP 06046 Norcia (PG), Italy (hereinafter “the Terra Nursia”). For questions about this Privacy Policy, or our use of your personal information, cookies or similar technologies, please contact us by email at info@terranursia.com. Please note that when you contact us to assist you, for your safety and ours we may need to authenticate your identity before fulfilling your request.
2. Data Source
– Information you provide to us: information such as name, surname, e-mail address, mailing address, or any other information given freely by you to Terra Nursia.
– Information collected automatically: we collect information about your use of our website. This information may include device and software characteristics, connection information, source (e.g., referring URL), IP address, browser information, standard web server log information and information collected through the use of cookies.
– Information collected from third parties: we collect information from other companies that provide services to you while navigating our website such as payment service providers. In order discover how they process your personal data you can access their privacy policy published on their website.
3. Purposes and legal basis
a) Navigation Data
|
Data |
Purposes |
Legal Basis |
|
Browsing data, e.g., connection data, IP addresses, domain names and other parameters relating to the browser and operating system that you use, log data, data relating to installation and configuration licenses, data relating to recordings carried out, interaction and transaction processes, performance indicators, data relating to browsing flows and page views, usage of features and counts. |
To enable you to browse our website. |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6 (1)(b) GDPR). |
Providing navigation data is necessary if you want to navigate and interact with our website. Any refusal to provide them would prevent you from browsing this website.
b) Orders payments and your account
|
Data |
Purposes |
Legal Basis |
|
First name, last name, company, billing address, tax code, vat number, SDI, PEC, e-mail address, phone number and payments data (transaction code, amount, last cards digits). When processing your payment requests, PayPal and Stripe may share with Terra Nursia some payments data for the mentioned purpose. In order to discover how those suppliers process your personal data you can access PayPal and Stripe privacy policy published on their website. |
In order to elaborate or answer to your order. |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6 (1)(b) GDPR). |
|
Email address |
To create your personal account. |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6 (1)(b) GDPR). |
|
Name, surname, email address, and any other information you may share with Tera Nursia |
In order to answer your questions, support requests, or other specific requests. |
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6 (1)(b) GDPR). |
Your personal data is necessary and mandatory for the aforementioned purpose. Any refusal to provide them would prevent us from providing the requested services.
c) Newsletter
|
Data |
Purposes |
Legal Basis |
|
Name, surname, e-mail address, mailing address. |
In order to send you our newsletter and keep you informed on the Monastery’s life and on fundraising requests. |
The data subject has given consent to the processing of his or her personal data (Article 6(1)(a) GDPR). |
|
Name, surname, e-mail address, mailing address. |
In order to send you our newsletter and keep you informed on Birra Nursia promotions |
The data subject has given consent to the processing of his or her personal data (Article 6(1)(a) GDPR). However, consent is not required when we use your e-mail address to send you information about products and services similar to those you have already purchased. In this case, the processing is done on the basis of the legitimate interest of the data controller (so-called soft spam); |
Your personal data is necessary and mandatory for the aforementioned purpose. Any refusal to provide them would prevent us from providing the requested services.
d) Protection in court
|
Data |
Purposes |
Legal Basis |
|
The information provided and acquired |
Defending our rights in case of disputes. |
The processing is carried out on the basis of the legitimate interest of the data controller (Article 6 (1)(f) GDPR). |
Your personal data is necessary and mandatory for the aforementioned purpose. Any refusal to provide them would prevent us from providing the requested services.
4. Cookies
You can freely decide whether to accept cookies and other tracking technologies that are not strictly necessary for the functioning of this website. To know how we process your personal data through the use of cookies or other similar technologies, see the Cookie Policy.
5. Data Storage and Protection
Personal data will be processed by both automated and non-automated means. We use providers that are located outside the EU, this means that your data might be stored and transferred outside the EU. In these cases, we will transfer your personal data on the basis of an adequacy decision adopted by the European Commission or by implementing appropriate safeguards to ensure adequate protection of your personal data in the place of destination pursuant to articles 44 ff. of the GDPR.
Your personal data will be kept as long as necessary to fulfill the purposes indicated above, without prejudice to the cases in which the retention for a longer period is necessary to comply with the applicable legislation or with requests received by competent authorities. The personal data that we process on the basis of your consent are retained until your consent is withdrawn.
6. Sharing Your Personal Data
Data will be accessed only by subjects authorized and trained by Terra Nursia.
We may share your data with our contractors, service providers, consultants and commercial partners as well as with any competent judicial, administrative or regulatory authority upon their requests or in compliance with any legal obligations to which the Monastery is subject.
In order to obtain an updated list of the subjects who may become aware of your personal data, please contact us by email at info@terranursia.com, taking care to specify the reason for the request.
7. Data protection Rights
You can request access to your personal information, or correct or update out-of-date or inaccurate personal information we hold about you. You may also request that we delete personal information that we hold about you.
You can object to processing of your personal information, ask us to restrict the processing of your personal information or request portability of your personal information; if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time; withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
You also have the right to lodge a complaint with a Data Protection Authority about our collection and use of your personal information, in particular in the Member State in which you habitually live or work or in the place where the alleged violation took place.
8. Changes and Updates
This policy may be subject to modification also as a consequence of any regulatory changes. We kindly invite you to periodically review this Privacy Policy for the latest information on our privacy practices.
