Pursuant to Article 13 of the European Regulation 2016/679 (GDPR), in accordance with the applicable legislation, Accademiavino Srl, VAT/Tax ID number 09193780963, processes personal identification data (such as name, surname, company name, address, telephone, email, banking and payment references) in accordance with principles of fairness, lawfulness, transparency, and confidentiality.
Data controller
The Data Controller is Accademiavino Srl, with registered office at Viale Monza 8, 20127 Milano.
You can contact the Data Controller using the following contacts:
Tel: +39-0240705404
E-mail: desk@accademiavino.com
PEC E-mail: accademiavinosrl@legalmail.it
Legal basis and purpose of processing
Data provision is mandatory for all requirements imposed by legal and contractual obligations, and therefore any refusal to provide them, in whole or in part, may result in the inability to provide the requested services.
In compliance with the principles of lawfulness, fairness, and transparency, your personal data are processed:
-
Under Article 7 of the EU Regulation 2016/679 for the following Service Purposes:
-
-
execution of contractual performances agreed with the Data Controller;
-
compliance with pre-contractual, contractual, and fiscal obligations arising from existing relationships with you;
-
compliance with obligations under law, regulation, community legislation, or an order from the Authority (such as anti-money laundering);
-
exercise of the rights of the Data Controller (for example, the right to defense in court).
-
-
Only with your specific and distinct consent (Article 7 of the EU Regulation 2016/679), for the following Marketing Purposes:
-
sending you by email, mail, and/or sms and/or telephone contacts, newsletters, commercial communications, and/or advertising material about products or services offered by the Data Controller;
-
sending you by email, mail, and/or sms and/or telephone contacts, commercial and/or promotional communications of third parties (for example, business partners, insurance companies, other companies);
-
Any further purpose will be subject to a dedicated information notice in addition to specific and separate consent;
-
The data processed will only be ordinary personal data; sensitive data, such as data concerning health, religion and similar are not required except in case you request special consideration on the basis of those specific circumstances.
-
Processing methods
The processing of your personal data is carried out by means of the operations indicated in Article 4 n. 2) EU Regulation 2016/679 and precisely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data. Your personal data is subject to both paper and electronic and/or automated processing.
Consent to the processing of data collected for promotional purposes is optional and any refusal to such use will have no consequences on the execution of the contractual performance.
Rights of the data subject
Pursuant to the European Regulation 679/2016 (GDPR) and national legislation, the data subject may, in the manner and within the limits established by the current legislation, exercise the following rights:
-
request confirmation of the existence of personal data concerning him/her (right of access);
-
know its origin;
-
receive intelligible communication;
-
have information about the logic, methods, and purposes of the processing;
-
request the update, rectification, integration, deletion, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected;
-
right to limit and/or object to the processing of data concerning him/her;
-
right of revocation;
-
right to data portability;
-
in cases of consent-based processing, receive their data provided to the controller, in a structured and readable form by a data processor and in a format commonly used by an electronic device;
-
the right to lodge a complaint with the Supervisory Authority.
A written response will be provided within 30 days (unless specifically requested for oral response), also by electronic means.
Duration of personal data conservation
The Data Controller will process personal data for the time necessary to fulfill the above purposes and in any case within the terms prescribed by national and community laws, rules, and regulations to which the Company must adhere, generally for no more than 10 years from the termination of the relationship for Service Purposes and for no more than 2 years from data collection for Marketing Purposes.
The data of those who do not purchase or use products/services, despite having had previous contact with company representatives, will be immediately deleted or processed anonymously, unless their conservation is otherwise justified, unless the informed consent of the interested parties has been validly acquired for a subsequent commercial promotion or market research activity.
Transfer of data to third parties for marketing purposes
The collected data will in no case be transferred to third parties for marketing purposes.
Transfer of data to a third country or international organizations
When necessary for the provision of services, for example, for WSET (Wine & Spirit Education Trust) courses and exams, the collected data may be communicated to international organizations, transferred to third countries outside the EU, and saved on servers located in these third countries.
Communication and disclosure
Without the need for express consent, the Data Controller may communicate your data to Supervisory Bodies, Judicial Authorities, to insurance companies for the provision of insurance services, as well as to those subjects to whom communication is mandatory by law for the fulfillment of the said purposes. These subjects will process the data in their capacity as independent data controllers.
The data provided will in no way be disclosed.
Right to file a complaint with the Control Authority
If the data subject believes that the data has been processed unlawfully, they have the right to contact the Control Authority to file a complaint.