This document is drawn up in order to allow the User (interested party) to understand how personal data is processed when using the Site, pursuant to and for the purposes of EU Reg. 2016/679 (“GDPR”) . Personal data are processed in accordance with the legislative provisions of the aforementioned legislation and with the confidentiality obligations established therein.

1. Data controller

The data controller of personal data is BIRRA MASTINO S.R.L., with registered office in 37012 Bussolengo (VR), Via Caduti sul Lavoro, 11 (Fiscal Code – VAT number 04154770236) – email commerciale@birramastino.it, with website www.birramastino.it (the “Site”).

2. Data processed

The Site represents a presentation of the company and the products offered. The Site does not contain forms to be filled in with the User entering personal data. The User’s personal data being processed are navigation data and data collected through cookies.

2.1. Browsing data The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes, for example, the IP addresses or domain names of the computers used by the User who connects to the Site and other parameters relating to the operating system and the User’s IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are kept for the minimum period required by current legislation. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site

2.2. Data provided voluntarily by the User The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

2.3. Cookie Information that may concern the User is collected on the Site and is used to adapt the functioning of the Site to the User’s expectations and to offer a better browsing experience. To find out about the use and cookies applied, consult the Cookie Policy.

3. Purpose

These data are used, for the time strictly necessary, for the sole purpose of checking the correct functioning of the Site and to fulfill obligations established by law, regulations or community legislation. As for cookies, please refer to the Cookie Policy regarding purposes, consent and type of cookies applied.

4. Legal basis of the processing

The data processing indicated above finds its legal basis in the legal obligations to which the Data Controller is subject.

5. Treatment methods

The data is processed using electronic, telematic and paper tools.

6. Data communication

The data may be communicated to: (a) personnel authorized to process data (employees, internal collaborators, etc.); (b) to third parties duly appointed as external managers (e.g. consultants); (c) to subjects who can access the data pursuant to legal provisions, or community legislation, within the limits established by law.

7. Data Transfer and Dissemination

The User’s personal data will not be transferred either to member states of the European Union or to third countries not belonging to the European Union. Furthermore, the data will not be disseminated in any way, “dissemination” meaning making it known to indeterminate subjects in any way, including by making the data available or consulting it.

8. Storage time

The data are used by the Data Controller for the time strictly necessary for the purposes for which they were collected.

9. Exercise of rights

At any time you have the right to obtain cancellation (right to be forgotten), limitation, updating, rectification, portability, opposition to the processing of personal data concerning you, as well as in general to exercise all the rights provided for. from the articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.  

To exercise these rights you can send a written request in free form to the address 37012 Bussolengo (VR), Via Caduti sul Lavoro, 11 or to the email address commerciale@birramastino.it

Rights of the interested party

In relation to the processing described in the Information, as an interested party you may, pursuant to articles 15-21 of the GDPR, exercise the following specific rights:

(a) right of access (art. 15 GDPR): this is the right to obtain confirmation as to whether or not personal data concerning you is being processed and, in this case, to obtain access to your personal data, as well as more information; (b) right of rectification (art. 16 GDPR): right to obtain from the Data Controller the rectification of inaccurate personal data concerning you without unjustified delay and/or the integration of incomplete personal data, also by providing a supplementary declaration;

(c) right to cancellation (right to be forgotten – art. 17 GDPR): right to obtain, without unjustified delay, the cancellation of personal data, in the presence of certain conditions (e.g. the data are no longer necessary for the purposes for which they were collected or otherwise processed; revocation of consent and there is no other legal basis for the processing; opposition to the processing; unlawful processing of the data; existence of a legal obligation to erase or the personal data were collected in relation to the offer of services of the information society referred to in Article 8, paragraph 1, GDPR;

(d) right to limit processing (art. 18 GDPR): right to obtain the limitation of processing, when: (i) the interested party disputes the accuracy of the personal data, for the period necessary for the owner to verify the accuracy of such data; (ii) the processing is unlawful and the interested party opposes the deletion of the personal data and instead requests that their use be limited; (iii) although the Data Controller no longer needs them for the purposes of the processing, the personal data are necessary for the interested party to ascertain, exercise or defend a right in court; (iv) the interested party has objected to the processing pursuant to art. 21, par. 1 GDPR, in the period of waiting for verification regarding the possible prevalence of legitimate reasons of the data controller with respect to those of the interested party;

(e) right to data portability (art. 20 GDPR): right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to a other owner without impediments, if the processing is based on consent or a contract and is carried out by automated means. Furthermore, the right to have your personal data transmitted directly from the Data Controller to another data controller if this is technically feasible;

(f) right to object (art. 21 GDPR): right to object to the processing of personal data concerning you, unless there are legitimate reasons for the Data Controller to continue processing which prevail over the interests, rights and freedoms of the interested party or for the establishment, exercise or defense of a right in court. If personal data are processed for direct marketing purposes, the interested party has the right to object at any time to the processing, including profiling, to the extent that it is connected to such direct marketing. In particular, you have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless such a decision is necessary for the conclusion or execution of a contract between you and the Owner, or is authorized by European Union law or Italian law, or is based on your explicit consent;

(g) right to withdraw consent – right to withdraw consent to the processing of your data at any time, without prejudice to the lawfulness of the processing based on consent before the revocation;

(h) right to lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Rome (RM).