Skip to content

Privacy Policy

In the following, we inform you about the nature, scope and purpose of the collection and use of personal data on our website. In terms of content, we are guided by the EU General Data Protection Regulation (GDPR), because the data protection provisions of the German Telemedia Act (TMG) are unlikely to be applicable from 25.05.2018.

The company responsible for this website (and the general contact details) can be found in our legal notice.

Would you like to contact our data protection officer specifically? Then write him an email at aaa.sassolive@gmail.com. Your request will be treated confidentially.
Our data protection officer is not responsible for ensuring that your specific concerns are met (information, etc.); rather, he is available to answer confidential questions and general legal matters.

According to Article 77 GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority.

You are welcome to contact us first before you contact the supervisory authority; Our very competent company data protection officer takes care of your concerns much faster and just as thoroughly. If we cannot help you, you can still contact the supervisory authority afterwards.

Of course, you have numerous personal rights that we would like to fulfill:

According to Article 77 GDPR, you have the right to lodge a complaint with the competent data protection supervisory authority.

You are welcome to contact us first before you contact the supervisory authority; Our very competent company data protection officer takes care of your concerns much faster and just as thoroughly. If we cannot help you, you can still contact the supervisory authority afterwards.

Of course, you have numerous personal rights that we would like to fulfill:

information desk

We comply with the obligation to provide information in this data protection declaration.
Rectification
You can request that incorrect data be corrected.
deletion
You can request the deletion of your data if the numerous exceptions of the GDPR do not apply.
Restriction of processing
You can request that your data is no longer actively used (e.g. if you doubt the accuracy of the data).
Right to object to our “legitimate interests”
If in your individual case there are overriding interests that outweigh our operational interests, you can object to the processing. In many cases this can be done via an “opt-out”.
Data portability
If you actively provide data and the legal basis for processing is (a) your consent or (b) our contractual relationship, you can request that we hand over this data to you in electronic form.

Retrieval of information from the website

As part of normal “surfing” on our website, the following data is collected and used for the delivery of websites in your interests:

Date and time (We can use this to make a time allocation and use this, e.g. to localize technical problems.
IP address (the collection of the IP address is necessary so that the web server can send you the desired data.)
The requested data (which file are you requesting? In which subdirectory is it located?)
The port via which you request the data (this information is automatically sent by your browser. You will receive the desired website via this port.)
The referring website (some browsers also send the URL of the previously used website each time it is accessed.)
Name of the browser with which you surf the Internet (this information is automatically sent by your browser. We may use this information so that the content can be optimally displayed. Your browser may also send other information, e.g. about installed programs)
The status of the request (Here we can see whether the desired website exists and whether it was successfully delivered to you.)
Miscellaneous: For the sake of completeness, it should be mentioned that your browser may send additional data to our web server (name of the browser, screen resolution, etc.). Naturally, we have no influence on this.

The data described above is only saved in the memory of the web server for a fraction of a second. This process is technically absolutely necessary in order to make a website available, so we have a “legitimate interest” within the meaning of Article 6 (1f) GDPR. The web server is with a European operator.

Due to the nature of the Internet, this data is inevitably processed on a large number of servers until your request arrives on our web server; Therefore, a collection and use in “third countries” (e.g. the USA) is possible. Our company has no influence on this process.

Our website works internally with SSL encryption. In this respect, the operators of worldwide web servers have no insight into the transported content.

The above data are also stored in the form of log files for a limited time in order to allow eventube able to analyze all technical problems (or hacker attacks). We keep these log files for 5 days. If there are no problems (or hacking attacks), no one looks at these files. These log files are important in order to prove the criminal behavior to the law enforcement authorities; insofar we have a “legitimate interest” in the sense of Article 6 (1f) GDPR.

contact form

You can use the contact form to request information quickly and unbureaucratically. Please understand that we are requesting your specific contact details; Experience has shown that this is the only way we can provide you with targeted information.

The relevant data collection is justified by our “legitimate interest” within the meaning of Article 6 (1f) GDPR, because a smooth contact favors our business purposes. If a contractual relationship should arise from the contact form, the (pre-) contractual fulfillment of tasks within the meaning of Article 6 (1b) GDPR should also be named as the legal basis. If you do not want to give us this data in the contact form, please contact us by phone, for example.

(Mentioned in passing: The previously possibly existing obligation to consent to the contact form does not (no longer) exist because the underlying Section 12 (1) TMG is no longer applicable).

The entry of your data in the contact form is SSL-encrypted and is therefore confidential. However, the data on the contact form will be forwarded to our company in unencrypted form by email. In this respect, overall confidentiality is not guaranteed. However, if full confidentiality is important to you, please send us an email (our email server supports TLS encryption if YOUR email server also supports it).

After the email with the contact form data has been sent, no data remains on the web server.

If you want the resulting email to be deleted, please let us know. If there are no weighty reasons (e.g. laws) to the contrary, we will be happy to respond to your request.

Cookies

Cookies are small text files that are stored on your hard drive by your browser. This is useful for various purposes in order to adapt a website to the users. Switching off and deleting cookies is an important issue. General instructions can be found here. We also recommend the website www.youronlinechoices.com. There are different types of cookies with regard to storage duration and access rights:

a) Own cookies with a short duration (“session cookies”)

These cookies are not critical in terms of data protection law and are mostly used to design our own website. The legal basis is our “legitimate interest” within the meaning of Article 6 (1f) GDPR. These cookies are deleted as soon as you close the browser. In detail these are:

We do not use such cookies.

b) Own cookies with a longer duration

These cookies allow our website to recognize your browser in the long term. This means that we can also adjust the content “tomorrow” or “next” week.

We do not use such cookies.

d) Third party cookies with a long duration

These cookies are readable and writable by ourselves and also by other websites. This means that other services can also access this data. This is particularly interesting for customized advertising and for connecting to “social networks”.

Google Analytics

As part of the pseudonymized usage profiles of our website, cookies are set by Google. These are only used for our internal evaluation (see below). DoubleClick.net (Google Group)
We consider it to be our legitimate interest within the meaning of Article 6 (1f) GDPR that your visit to our website means that you may see advertising from us in the Google advertising network. This happens within Google’s DoubleClick advertising network. You can find specific information and deactivation options here. Google writes: We use cookies to make ads more appealing for users and more valuable for publishers and advertisers. Cookies are usually used to select ads that are relevant to the user, to improve reporting on campaign performance, or to prevent a user from seeing the same ads multiple times. Google uses cookies such as the NID and SID cookies to customize advertising in Google products such as Google search. With the help of such cookies we record, for example, your most recent searches, your previous interactions with an advertiser’s ads or search results and your visits to an advertiser’s website. In this way we can show you individually tailored advertising on Google. We also use cookies for advertising that we display in various places on the web. The main cookie for ad preferences for non-Google websites is called “IDE”. It is stored for two years and can be used by other Google websites to display suitable advertising. Google accesses this cookie from servers around the world. This cookie is not assigned to you personally and is not sold to third parties (says Google).

Statistical evaluation of the use of our website (Google Analytics) It is of great economic importance for our company that we can statistically evaluate the use of our website by our visitors. We are not interested in evaluating the behavior of a single person. Rather, it is about general statistical aspects: On which page do visitors “enter” our site? How many clicks does an average visitor make?

You may have heard of the position paper of the German data protection conference, where under number 9 the subject of “consent” in connection with “tracking mechanisms and user profiles” is briefly mentioned.

To our understanding (and not just ours), the above position paper does not mean that we need to obtain consent for our internal website usage statistics. We share the view of the Article 29 data protection group in Working Paper 194 (in chapter 4.3 on page 10) that there is no risk to your rights and freedoms if you proceed carefully. The supervisory authorities have also explicitly endorsed this European legal understanding in the above DSK position paper.

Please be assured that the results of these statistics are not personally identifiable. These statistics are of great importance to our company and we see them as a legitimate interest within the meaning of Article 6 (1f) GDPR; if you want to object, we will of course be happy to offer you an “opt-out” option.
This website uses Google Analytics, a web analysis service from Google Inc. (“Google”), 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Here you find detailed information.

Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a server in exceptional cases transferred by Google in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de.

Google Maps

We offer you a convenient way of planning your journey to our company. For this we use an API from the Google Maps map service. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. As soon as you visit this page, your IP address will be sent to Google. This is an American company; insofar, data is sent outside of Europe (Google participates in the EU-US PrivacyShield). If you enter your own data on this card (e.g. your own place of residence), this data will also be transmitted. Google provides information here. We see a “legitimate interest” in this service within the meaning of Article 6 (1f) GDPR.

Newsletter

With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures as well as your right of objection. By subscribing to our newsletter, you agree to the receipt and the described procedures edisagree.

Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter “newsletter”) only with the consent of the recipient or with legal permission. If the content of the newsletter is specifically described when registering for the newsletter, it is decisive for the consent of the user. In addition, our newsletters contain information about our services and us.

Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in process. This means that after registration you will receive an email in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with someone else’s email address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation times as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

The dispatch of the newsletter and the associated performance measurement is based on the consent of the recipient in accordance with Art. 6 Para. 1 lit. a, Art. 7 GDPR in conjunction with Section 7 Paragraph 2 No. 3 UWG or on the basis of legal permission according to § 7 Abs. 3 UWG.

The logging of the registration process is based on our legitimate interests in accordance with Art. 6 Paragraph 1 lit. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of users and also allows us to prove consent.

Cancellation / Revocation – You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. On the basis of our legitimate interests, we can save the unsubscribed email addresses for up to three years before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time.

Newsletter – Mailchimp

The newsletter is sent via the mailing service provider “MailChimp”, a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE # 5000, Atlanta, GA 30308, USA. You can view the data protection provisions of the shipping service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d / b / a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is used on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR and an order processing contract in accordance with Article 28 (3) sentence 1 GDPR.

The shipping service provider can use the recipient’s data in pseudonymous form, i.e. without assignment to a user, to optimize or improve their own services, e.g. to technically optimize the shipping and presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

Newsletter – success measurement

The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, its server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval, are initially collected.

This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our aim nor, if used, that of the shipping service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

We hereby deliver to youall information on data processing by our company.
The corresponding obligations from Articles 13, 13a, 14, 15, 26 and 30 of the GDPR are thus covered.

Who are the authorized recipients (both internal and external)?
Human resources department; Academy; Document shredding service providers; Employee training by external companies

When will the data be deleted again?
10 years after survey (within the framework of the academy)
2 years from survey (as part of the academy information event)
5 years from survey (as part of employee training)

Which categories of data are processed?
Name, training dates
Bank and / or credit card details
Receipts (invoices, credits, reminders, travel expenses …)
Contact details (name, phone, e-mail, address, …)

Which people are affected?
Study participants
Those interested in training at the academy
Employees

The right to “information” (see Article 15 GDPR)
You have a right to information about the data concerning you. This is exactly what this document is intended to ensure in the best possible way. If you have any further questions, please feel free to contact us.

The right to “correct” incorrect data (see Article 16 GDPR)
You have the right to have incorrect data corrected. Please contact us about this.

The right to “delete your data” (see Article 17 GDPR)
You have the right to have your data deleted if (a) the data is no longer necessary, (b) you may have withdrawn your consent or there is (no longer) any other legal basis, (c) you have rightly objected, (d) the data was processed unlawfully, (e) deletion is required by law, (f) the data originate from children and are to be deleted. Please note that according to Article 17 (2) GDPR it may not be possible / may not be deleted.

The right to “restriction of processing” (see Article 18 GDPR)
You have the right to have your data “blocked” if (a) you dispute the accuracy of the data, (b) the processing is unlawful and you deny deletion, (c) the data is no longer required by us, (d ) You still need the data due to legal claims.

The right to “object to processing” (see Article 21 GDPR)
You have the right to object to processing if there are reasons for this from your SPECIAL SITUATION. On our part, we will weigh up whether we have compelling legitimate reasons for processing.

The right to “withdraw consent” (see Article 7 (3) GDPR)
You have the right to withdraw your consent (if this is relevant to the processing described here). The revocation is only valid for the future.

The right to “data portability” (see Article 20 GDPR)
You have the right to have your data handed over if (a) the legal basis is based on consent or a contract, (b) you have provided this data yourself, (c) the data is processed automatically. If these requirements are met, you can also request that we pass the data on to a recipient of your choice.

The right to “complain” (see Article 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority.
You are welcome to contact us first before you contact the supervisory authority; Our very competent company data protection officer takes care of your concerns much faster and just as thoroughly. If we cannot help you, you can still contact the supervisory authority afterwards.

Data collection by third parties
No, no data is collected by third parties. Thus, all data is requested / collected by us.

Does profiling take place? Are personal aspects analyzed or predicted? Does an automated individual decision take place? (See Article 4 No. 4 GDPR)
No, this does not happen.

Are there data transfers to recipients in third countries (i.e. outside the EU)? (See Article 44 GDPR)
No, this does not happen.

Are there several responsible persons in the sense of a “joint responsibility”? (See Article 26 GDPR)
No, there is only one responsible person named above.

accounting

In the following we will inform you in detail about all the important details of this data processing. We refer to all information obligations resulting from Articles 13, 14, 15, 26 and 30 of the GDPR. What is the purpose of this processing?
Implementation of corporate accounting (handling of incoming and outgoing invoices, auditing of invoices, dunning, account assignment, preparation of monthly and annual financial statements, making transfers)

Who is responsible for this processing?
Organic Farming Italy
Strada privata Daffieno
18100 Imperia, Italia

Who is named as the company’s data protection officer? (Shehe Article 37 GDPR)
Organic Farming Italy
Strada privata Daffieno
18100 Imperia, Italia

What is the legal basis? Why is this processing permitted? Safeguarding the legitimate interests of the person responsible (Article 6 (1f) GDPR) Employment relationship (Section 26 BDSG)

Explanation of the majority of legal bases:
In the employment relationship, the following data categories are affected: wage and salary data, contact details. All other data categories are subject to legitimate interest.

Specifically, which “legitimate interests” does the person responsible pursue? (See Article 13 (1d) GDPR)
Right to profit, work and cost efficiency

Who are the authorized recipients (both internal and external)?
Accounting; External service providers / support staff / technicians; External accounting; Accounting and payroll service providers; Bank

When will the data be deleted again?
10 years after the end of the calendar year (in accordance with Section 147 (3) of the Tax Code)

Which categories of data are processed?
Transfer details
Accounting data
Foreign exchange
Bank and credit card details
Receipts (invoices, credits, reminders, travel expenses …)
Wage / salary data

Which people are affected?
Free contractors
Employees
Customers
Suppliers

The right to “information” (see Article 15 GDPR)
You have a right to information about the data concerning you. This is exactly what this document is intended to ensure in the best possible way. If you have any further questions, please feel free to contact us.

The right to “correct” incorrect data (see Article 16 GDPR)
You have the right to have incorrect data corrected. Please contact us about this.

The right to “delete your data” (see Article 17 GDPR)
You have the right to have your data deleted if (a) the data is no longer necessary, (b) you may have withdrawn your consent or there is (no longer) any other legal basis, (c) you have rightly objected, (d) the data was processed unlawfully, (e) deletion is required by law, (f) the data originate from children and are to be deleted. Please note that according to Article 17 (2) GDPR it may not be possible / may not be deleted.

The right to “restriction of processing” (see Article 18 GDPR)
You have the right to have your data “blocked” if (a) you dispute the accuracy of the data, (b) the processing is unlawful and you deny deletion, (c) the data is no longer required by us, (d ) You still need the data due to legal claims.

The right to “object to processing” (see Article 21 GDPR)
You have the right to object to processing if there are reasons for this from your SPECIAL SITUATION. On our part, we will weigh up whether we have compelling legitimate reasons for processing.

The right to “withdraw consent” (see Article 7 (3) GDPR)
You have the right to withdraw your consent (if this is relevant to the processing described here). The revocation is only valid for the future.

The right to “data portability” (see Article 20 GDPR)
You have the right to have your data handed over if (a) the legal basis is based on consent or a contract, (b) you have provided this data yourself, (c) the data is processed automatically. If these requirements are met, you can also request that we pass the data on to a recipient of your choice.

The right to “complain” (see Article 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority. The contact details are: LDI NRW, Kavalleriestr. 2-4, 40213 Düsseldorf GERMANY, Tel. 0049-211-38424-0, www.ldi.nrw.de.
You are welcome to contact us first before you contact the supervisory authority; Our very competent company data protection officer takes care of your concerns much faster and just as thoroughly. If we cannot help you, you can still contact the supervisory authority afterwards.

Data collection by third parties
No, no data is collected by third parties. Thus, all data is requested / collected by us.

Does profiling take place? Are personal aspects analyzed or predicted? Does an automated individual decision take place? (See Article 4 No. 4 GDPR)
No, this does not happen.

Are there data transfers to recipients in third countries (i.e. outside the EU)? (See Article 44 GDPR)
No, this does not happen.

Are there several responsible persons in the sense of a “joint responsibility”? (See Article 26 GDPR)
No, there is only one responsible person named above.

IT administration

In the following we will inform you in detail about all the important details of this data processing . We refer to all information obligations resulting from Articles 13, 14, 15, 26 and 30 of the GDPR.

What is the purpose of this processing?
Administration of the company’s IT (user administration, support, backup, maintenance, etc.)

Who is responsible for this processing?
Sassolive – azienda agricola
Via Diano Calderina N.284 Imperia
E-mail: aaa.sassolive@gmail.com
Telephone: +39 347 5976928
P.iva: 01644400085

Who is named as the company’s data protection officer? (See Article 37 GDPR)
Sassolive – azienda agricola
Via Diano Calderina N.284 Imperia
E-mail: aaa.sassolive@gmail.com
Telephone: +39 347 5976928
P.iva: 01644400085

What is the legal basis? Why is this processing allowed?
Safeguarding the legitimate interests of the person responsible (Article 6 (1f) GDPR)

Specifically, which “legitimate interests” does the person responsible pursue? (See Article 13 (1d) GDPR)
Ensuring data protection and (information) security

Who are the authorized recipients (both internal and external)?
IT consultant; It department; HR department

When will the data be deleted again?
10 years after the end of the calendar year (in accordance with Section 147 (3) of the Tax Code)

Which categories of data are processed?
All email traffic
Total internet usage
Date the computer was logged on and off
Log data (technical type)
Usage data (date and type of use)
Directory service (MS Active Directory, LDAP, …)

Which people are affected?
Employees
interested persons
Customers

The right to “information” (see Article 15 GDPR)
You have a right to information about the data concerning you. This is exactly what this document is intended to ensure in the best possible way. If you have any further questions, please feel free to contact us.

The right to “correct” incorrect data (see Article 16 GDPR)
You have the right to have incorrect data corrected. Please contact us about this.

The right to “delete your data” (see Article 17 GDPR)
You have the right to have your data deleted if (a) the data is no longer necessary, (b) you may have withdrawn your consent or there is (no longer) any other legal basis, (c) you have rightly objected, (d) the data was processed unlawfully, (e) deletion is required by law, (f) the data originate from children and are to be deleted. Please note that according to Article 17 (2) GDPR it may not be possible / may not be deleted.

The right to “restriction of processing” (see Article 18 GDPR)
You have the right to have your data “blocked” if (a) you dispute the accuracy of the data, (b) the processing is unlawful and you deny deletion, (c) the data is no longer required by us, (d ) You still need the data due to legal claims.

The right to “object to processing” (see Article 21 GDPR)
You have the right to object to processing if there are reasons for this from your SPECIAL SITUATION. On our part, we will weigh up whether we have compelling legitimate reasons for processing.

The right to “withdraw consent” (see Article 7 (3) GDPR)
You have the right to withdraw your consent (if this is relevant to the processing described here). The revocation is only valid for the future.

The right to “data portability” (see Article 20 GDPR)
You have the right to have your data handed over if (a) the legal basis is based on consent or a contract, (b) you have provided this data yourself, (c) the data is processed automatically. If these requirements are met, you can also request that we pass the data on to a recipient of your choice.

The right to “complain” (see Article 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority. You are welcome to contact us first before you contact the supervisory authority; Our very competent company data protection officer takes care of your concerns much faster and just as thoroughly. If we cannot help you, you can still contact the supervisory authority afterwards.

Data collection by third parties
No, no data is collected by third parties. Thus, all data is requested / collected by us.

Does profiling take place? Are personal aspects analyzed or predicted? Does an automated individual decision take place? (See Article 4 No. 4 GDPR)
No, this does not happen.

Are there data transfers to recipients in third countries (i.e. outside the EU)? (See Article 44 GDPR)
No, this does not happen.
Are there several responsible persons in the sense of a “joint responsibility”? (See Article 26 GDPR)
No, there is only one responsible person named above.Data collection by third parties
No, no data is collected by third parties. Thus, all data is requested / collected by us.

Does profiling take place? Are personal aspects analyzed or predicted? Does an automated individual decision take place? (See Article 4 No. 4 GDPR)
No, this does not happen.

Are there data transfers to recipients in third countries (i.e. outside the EU)? (See Article 44 GDPR)
No, this does not happen.

Are there several responsible persons in the sense of a “joint responsibility”? (See Article 26 GDPR)
No, there is only one responsible person named above.

communication

In the following we will inform you in detail about all the important details of this data processing. We refer to all information obligations resulting from Articles 13, 14, 15, 26 and 30 of the GDPR.

What is the purpose of this processing?
Exchange and transfer of information (e-mails, telephone, Internet, letters, data exchange) and the corresponding management and logging.

Who is responsible for this processing?
Organic Farming Italy
Strada privata Daffieno
18100 Imperia, Italia

What is the legal basis? Why is this processing allowed?
Safeguarding the legitimate interests of the person responsible (Article 6 (1f) GDPR)

Specifically, which “legitimate interests” does the person responsible pursue? (See Article 13 (1d) GDPR)
Right to profit, work and cost efficiency

Who are the authorized recipients (both internal and external)?
All rheingold employees

When will the data be deleted again?
No way

Which categories of data are processed?
Contact details (name, phone, e-mail, address, …)

Which people are affected?
Press contacts
Free contractors
Employees
Customers
Suppliers

The right to “information” (see Article 15 GDPR)
You have a right to information about the data concerning you. This is exactly what this document is intended to ensure in the best possible way. If you have any further questions, please feel free to contact us.

The right to “correct” incorrect data (see Article 16 GDPR)
You have the right to have incorrect data corrected. Please contact us about this.

The right to “delete your data” (see Article 17 GDPR)
You have the right to have your data deleted if (a) the data is no longer necessary, (b) you may have withdrawn your consent or there is (no longer) any other legal basis, (c) you have rightly objected, (d) the data was processed unlawfully, (e) deletion is required by law, (f) the data originate from children and are to be deleted. Please note that according to Article 17 (2) GDPR it may not be possible / may not be deleted.

The right to “restriction of processing” (see Article 18 GDPR)
You have the right to have your data “blocked” if (a) you dispute the accuracy of the data, (b) the processing is unlawful and you deny deletion, (c) the data is no longer required by us, (d ) You still need the data due to legal claims.

The right to “object to processing” (see Article 21 GDPR)
You have the right to object to processing if there are reasons for this from your SPECIAL SITUATION. On our part, we will weigh up whether we have compelling legitimate reasons for processing.

The right to “withdraw consent” (see Article 7 (3) GDPR)
You have the right to withdraw your consent (if this is relevant to the processing described here). The revocation is only valid for the future.

The right to “data portability” (see Article 20 GDPR)
You have the right to have your data handed over if (a) the legal basis is based on consent or a contract, (b) you have provided this data yourself, (c) the data is processed automatically. If these requirements are met, you can also request that we pass the data on to a recipient of your choice.

The right to “complain” (see Article 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority. You are welcome to contact us first before you contact the supervisory authority; Our very competent company data protection officer takes care of your concerns much faster and just as thoroughly. If we cannot help you, you can still contact the supervisory authority afterwards.

Data collection by third parties
No, no data is collected by third parties. Thus, all data is requested / collected by us.

Does profiling take place? Are personal aspects analyzed or predicted? Does an automated individual decision take place? (See Article 4 No. 4 GDPR)
No, this does not find statt.

Are there data transfers to recipients in third countries (i.e. outside the EU)? (See Article 44 GDPR)
No, this does not happen.

Are there several responsible persons in the sense of a “joint responsibility”? (See Article 26 GDPR)
No, there is only one responsible person named above.

Controlling / monitoring

In the following we will inform you in detail about all the important details of this data processing. We refer to all information obligations resulting from Articles 13, 14, 15, 26 and 30 of the GDPR.

What is the purpose of this processing?
Reporting, documenting and analyzing (sales, customer behavior, etc.)

Who is responsible for this processing?
Organic Farming Italy
Strada privata Daffieno
18100 Imperia, Italia

What is the legal basis? Why is this processing allowed?
Safeguarding the legitimate interests of the person responsible (Article 6 (1f) GDPR)

Specifically, which “legitimate interests” does the person responsible pursue? (See Article 13 (1d) GDPR)
Right / duty to controlling or quality management

Who are the authorized recipients (both internal and external)?
All employees; It department; IT service provider

The right to “information” (see Article 15 GDPR)
You have a right to information about the data concerning you. This is exactly what this document is intended to ensure in the best possible way. If you have any further questions, please feel free to contact us.

The right to “correct” incorrect data (see Article 16 GDPR)
You have the right to have incorrect data corrected. Please contact us about this.

The right to “delete your data” (see Article 17 GDPR)
You have the right to have your data deleted if (a) the data is no longer necessary, (b) you may have withdrawn your consent or there is (no longer) any other legal basis, (c) you have rightly objected, (d) the data was processed unlawfully, (e) deletion is required by law, (f) the data originate from children and are to be deleted. Please note that according to Article 17 (2) GDPR it may not be possible / may not be deleted.

The right to “restriction of processing” (see Article 18 GDPR)
You have the right to have your data “blocked” if (a) you dispute the accuracy of the data, (b) the processing is unlawful and you deny deletion, (c) the data is no longer required by us, (d ) You still need the data due to legal claims.

The right to “object to processing” (see Article 21 GDPR)
You have the right to object to processing if there are reasons for this from your SPECIAL SITUATION. On our part, we will weigh up whether we have compelling legitimate reasons for processing.

The right to “withdraw consent” (see Article 7 (3) GDPR)
You have the right to withdraw your consent (if this is relevant to the processing described here). The revocation is only valid for the future.

The right to “data portability” (see Article 20 GDPR)
You have the right to have your data handed over if (a) the legal basis is based on consent or a contract, (b) you have provided this data yourself, (c) the data is processed automatically. If these requirements are met, you can also request that we pass the data on to a recipient of your choice.

The right to “complain” (see Article 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority.
You are welcome to contact us first before you contact the supervisory authority; Our very competent company data protection officer takes care of your concerns much faster and just as thoroughly. If we cannot help you, you can still contact the supervisory authority afterwards.

Data collection by third parties
No, no data is collected by third parties. Thus, all data is requested / collected by us.

Does profiling take place? Are personal aspects analyzed or predicted? Does an automated individual decision take place? (See Article 4 No. 4 GDPR)
No, this does not happen.

Are there data transfers to recipients in third countries (i.e. outside the EU)? (See Article 44 GDPR)
No, this does not happen.

Are there several responsible persons in the sense of a “joint responsibility”? (See Article 26 GDPR)
No, there is only one responsible person named above.

Customer Relationship Management

In the following we will inform you in detail about all the important details of this data processing. We refer to all information obligations resulting from Articles 13, 14, 15, 26 and 30 of the GDPR.

What is the purpose of this processing?
Comprehensive management of existing customers(Customer acquisition and retention); Organization of the congress

Who is responsible for this processing?
Organic Farming Italy
Strada privata Daffieno
18100 Imperia, Italia

What is the legal basis? Why is this processing allowed?
Safeguarding the legitimate interests of the person responsible (Article 6 (1f) GDPR)

Specifically, which “legitimate interests” does the person responsible pursue? (See Article 13 (1d) GDPR)
Right to advertising (see recital 47 GDPR)

Who are the authorized recipients (both internal and external)?
Department head / division manager; Accounting; Account Manager

When will the data be deleted again?
5 years after the survey
10 years after the end of the year ((tax-relevant data) as part of the distribution of publications))
immediately after the end of the contract (employees on the website)
There is no storage of tracking data (cookies) for website visitors

The right to “information” (see Article 15 GDPR)
You have a right to information about the data concerning you. This is exactly what this document is intended to ensure in the best possible way. If you have any further questions, please feel free to contact us.

The right to “correct” incorrect data (see Article 16 GDPR)
You have the right to have incorrect data corrected. Please contact us about this.

The right to “delete your data” (see Article 17 GDPR)
You have the right to have your data deleted if (a) the data is no longer necessary, (b) you may have withdrawn your consent or there is (no longer) any other legal basis, (c) you have rightly objected, (d) the data was processed unlawfully, (e) deletion is required by law, (f) the data originate from children and are to be deleted. Please note that according to Article 17 (2) GDPR it may not be possible / may not be deleted.

The right to “restriction of processing” (see Article 18 GDPR)
You have the right to have your data “blocked” if (a) you dispute the accuracy of the data, (b) the processing is unlawful and you deny deletion, (c) the data is no longer required by us, (d ) You still need the data due to legal claims.

The right to “object to processing” (see Article 21 GDPR)
You have the right to object to processing if there are reasons for this from your SPECIAL SITUATION. On our part, we will weigh up whether we have compelling legitimate reasons for processing.

The right to “withdraw consent” (see Article 7 (3) GDPR)
You have the right to withdraw your consent (if this is relevant to the processing described here). The revocation is only valid for the future.

The right to “data portability” (see Article 20 GDPR)
You have the right to have your data handed over if (a) the legal basis is based on consent or a contract, (b) you have provided this data yourself, (c) the data is processed automatically. If these requirements are met, you can also request that we pass the data on to a recipient of your choice.

The right to “complain” (see Article 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority.
You are welcome to contact us first before you contact the supervisory authority; Our very competent company data protection officer takes care of your concerns much faster and just as thoroughly. If we cannot help you, you can still contact the supervisory authority afterwards.

Data collection by third parties
No, no data is collected by third parties. Thus, all data is requested / collected by us.

Does profiling take place? Are personal aspects analyzed or predicted? Does an automated individual decision take place? (See Article 4 No. 4 GDPR)
No, this does not happen.

Are there data transfers to recipients in third countries (i.e. outside the EU)? (See Article 44 GDPR)
No, this does not happen.

Are there several responsible persons in the sense of a “joint responsibility”? (See Article 26 GDPR)
No, there is only one responsible person named above.

advertising

What is the purpose of this processing?
Acquiring and retaining customers (generating interest in new products and services)

Who is responsible for this processing?
Organic Farming Italy
Strada privata Daffieno
18100 Imperia, Italia

Who is named as the company’s data protection officer? (See Article 37 GDPR)
Organic Farming Italy
Strada privata Daffieno
18100 Imperia, Italia

What is the legal basis? Why is this processing allowed?
Safeguarding the legitimate interests of the person responsible (Article 6 (1f) GDPR)

Specifically which “legitimate interests” are pursuing gt the person in charge? (See Article 13 (1d) GDPR)
Right to advertising (see recital 47 GDPR)

Who are the authorized recipients (both internal and external)?
Department head / division manager; Account Manager

When will the data be deleted again?
The contact details for the newsletter are cleaned up after each dispatch, there is no deletion period.

Which categories of data are processed?
Contact details (name, phone, e-mail, address, …)

Which people are affected?
interested persons
Press contacts
all contacts stored in Outlook
service provider
Customers

The right to “information” (see Article 15 GDPR)
You have a right to information about the data concerning you. This is exactly what this document is intended to ensure in the best possible way. If you have any further questions, please feel free to contact us.

The right to “correct” incorrect data (see Article 16 GDPR)
You have the right to have incorrect data corrected. Please contact us about this.

The right to “delete your data” (see Article 17 GDPR)
You have the right to have your data deleted if (a) the data is no longer necessary, (b) you may have withdrawn your consent or there is (no longer) any other legal basis, (c) you have rightly objected, (d) the data was processed unlawfully, (e) deletion is required by law, (f) the data originate from children and are to be deleted. Please note that according to Article 17 (2) GDPR it may not be possible / may not be deleted.

The right to “restriction of processing” (see Article 18 GDPR)
You have the right to have your data “blocked” if (a) you dispute the accuracy of the data, (b) the processing is unlawful and you deny deletion, (c) the data is no longer required by us, (d ) You still need the data due to legal claims.

The right to “object to processing” (see Article 21 GDPR)
You have the right to object to processing if there are reasons for this from your SPECIAL SITUATION. On our part, we will weigh up whether we have compelling legitimate reasons for processing.

The right to “withdraw consent” (see Article 7 (3) GDPR)
You have the right to withdraw your consent (if this is relevant to the processing described here). The revocation is only valid for the future.

The right to “data portability” (see Article 20 GDPR)
You have the right to have your data handed over if (a) the legal basis is based on consent or a contract, (b) you have provided this data yourself, (c) the data is processed automatically. If these requirements are met, you can also request that we pass the data on to a recipient of your choice.

The right to “complain” (see Article 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority. You are welcome to contact us first before you contact the supervisory authority; Our very competent company data protection officer takes care of your concerns much faster and just as thoroughly. If we cannot help you, you can still contact the supervisory authority afterwards.

Data collection by third parties
No, no data is collected by third parties. Thus, all data is requested / collected by us.

Does profiling take place? Are personal aspects analyzed or predicted? Does an automated individual decision take place? (See Article 4 No. 4 GDPR)
No, this does not happen.

Are there data transfers to recipients in third countries (i.e. outside the EU)? (See Article 44 GDPR)
No, this does not happen.

Are there several responsible persons in the sense of a “joint responsibility”? (See Article 26 GDPR)
No, there is only one responsible person named above.

Video surveillance

In the following we will inform you in detail about all the important details of this data processing. We refer to all information obligations resulting from Articles 13, 14, 15, 26 and 30 of the GDPR.

What is the purpose of this processing?
Opto-electronic surveillance
Who is responsible for this processing?
Organic Farming Italy
Strada privata Daffieno
18100 Imperia, Italia

Who is named as the company’s data protection officer? (See Article 37 GDPR)
Organic Farming Italy
Strada privata Daffieno
18100 Imperia, Italia

What is the legal basis? Why is this processing allowed?
Safeguarding the legitimate interests of the person responsible (Article 6 (1f) GDPR)
Specifically, which “legitimate interests” does the person responsible pursue? (See Article 13 (1d) GDPR)
Right / duty to controlling or quality management

Who are the authorized recipients (both internal and external n)?
It department; police
When will the data be deleted again?
5 days after the survey (exception: incidents were documented)

Which categories of data are processed?
Video data

Which people are affected?
Employees who are in the security area
Victims affected by video surveillance

The right to “information” (see Article 15 GDPR)
You have a right to information about the data concerning you. This is exactly what this document is intended to ensure in the best possible way. If you have any further questions, please feel free to contact us.

The right to “correct” incorrect data (see Article 16 GDPR)
You have the right to have incorrect data corrected. Please contact us about this.

The right to “delete your data” (see Article 17 GDPR)
You have the right to have your data deleted if (a) the data is no longer necessary, (b) you may have withdrawn your consent or there is (no longer) any other legal basis, (c) you have rightly objected, (d) the data was processed unlawfully, (e) deletion is required by law, (f) the data originate from children and are to be deleted. Please note that according to Article 17 (2) GDPR it may not be possible / may not be deleted.

The right to “restriction of processing” (see Article 18 GDPR)
You have the right to have your data “blocked” if (a) you dispute the accuracy of the data, (b) the processing is unlawful and you deny deletion, (c) the data is no longer required by us, (d ) You still need the data due to legal claims.

The right to “object to processing” (see Article 21 GDPR)
You have the right to object to processing if there are reasons for this from your SPECIAL SITUATION. On our part, we will weigh up whether we have compelling legitimate reasons for processing.

The right to “withdraw consent” (see Article 7 (3) GDPR)
You have the right to withdraw your consent (if this is relevant to the processing described here). The revocation is only valid for the future.

The right to “data portability” (see Article 20 GDPR)
You have the right to have your data handed over if (a) the legal basis is based on consent or a contract, (b) you have provided this data yourself, (c) the data is processed automatically. If these requirements are met, you can also request that we pass the data on to a recipient of your choice.

The right to “complain” (see Article 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority.
You are welcome to contact us first before you contact the supervisory authority; Our very competent company data protection officer will take care of your concerns much faster and just as thoroughly. If we cannot help you, you can still contact the supervisory authority afterwards.

Data collection by third parties
No, no data is collected by third parties. Thus, all data is requested / collected by us.

Does profiling take place? Are personal aspects analyzed or predicted? Does an automated individual decision take place? (See Article 4 No. 4 GDPR)
No, this does not happen.

Are there data transfers to recipients in third countries (i.e. outside the EU)? (See Article 44 GDPR)
No, this does not happen.

Are there several responsible persons in the sense of a “joint responsibility”? (See Article 26 GDPR)
No, there is only one responsible person named above.

Documentation of information, deletion and other requests

In the following we will inform you in detail about all the important details of this data processing. We refer to all information obligations resulting from Articles 13, 14, 15, 26 and 30 of the GDPR.

What is the purpose of this processing?
People can exercise their personal rights. The fulfillment is documented in order to be able to provide proof later if necessary.
Who is responsible for this processing?
Organic Farming Italy
Strada privata Daffieno
18100 Imperia, Italia

Who is named as the company’s data protection officer? (See Article 37 GDPR)
Organic Farming Italy
Strada privata Daffieno
18100 Imperia, Italia

What is the legal basis? Why is this processing allowed?
Safeguarding the legitimate interests of the person responsible (Article 6 (1f) GDPR)
Specifically, which “legitimate interests” does the person responsible pursue? (See Article 13 (1d) GDPR)
Defense against claims for damages. Proof of data protection compliance.

Who are the authorized recipients (both internal and external)?
Managing directors

When will the data be deleted again?
3 years after the corresponding contact was made e by the person
Which categories of data are processed? Master data (possibly name, possibly e-mail, etc.)
Information data (possibly personal data that must be provided)
Identification data (if necessary, copy of ID card)

Which people are affected?
People who exercise their personal rights (information, deletion, etc.)
The right to “information” (see Article 15 GDPR)
You have a right to information about the data concerning you. This is exactly what this document is intended to ensure in the best possible way. If you have any further questions, please feel free to contact us.

The right to “correct” incorrect data (see Article 16 GDPR)
You have the right to have incorrect data corrected. Please contact us about this.

The right to “delete your data” (see Article 17 GDPR)
You have the right to have your data deleted if (a) the data is no longer necessary, (b) you may have withdrawn your consent or there is (no longer) any other legal basis, (c) you have rightly objected, (d) the data was processed unlawfully, (e) deletion is required by law, (f) the data originate from children and are to be deleted. Please note that according to Article 17 (2) GDPR it may not be possible / may not be deleted.

The right to “restriction of processing” (see Article 18 GDPR)
You have the right to have your data “blocked” if (a) you dispute the accuracy of the data, (b) the processing is unlawful and you deny deletion, (c) the data is no longer required by us, (d ) You still need the data due to legal claims.

The right to “object to processing” (see Article 21 GDPR)
You have the right to object to processing if there are reasons for this from your SPECIAL SITUATION. On our part, we will weigh up whether we have compelling legitimate reasons for processing.

The right to “withdraw consent” (see Article 7 (3) GDPR)
You have the right to withdraw your consent (if this is relevant to the processing described here). The revocation is only valid for the future.

The right to “data portability” (see Article 20 GDPR)
You have the right to have your data handed over if (a) the legal basis is based on consent or a contract, (b) you have provided this data yourself, (c) the data is processed automatically. If these requirements are met, you can also request that we pass the data on to a recipient of your choice.

The right to “complain” (see Article 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority. You are welcome to contact us first before you contact the supervisory authority; Our very competent company data protection officer takes care of your concerns much faster and just as thoroughly. If we cannot help you, you can still contact the supervisory authority afterwards.

Data collection by third parties

No, no data is collected by third parties. Thus, all data is requested / collected by us.

Does profiling take place? Are personal aspects analyzed or predicted? Does an automated individual decision take place? (See Article 4 No. 4 GDPR)
No, this does not happen.

Are there data transfers to recipients in third countries (i.e. outside the EU)? (See Article 44 GDPR)
No, this does not happen.

Are there several responsible persons in the sense of a “joint responsibility”? (See Article 26 GDPR)
No, there is only one responsible person named above.

Status: January 1st, 2021