Privacy policy

Data Controller:
Podere Giusti Società Agricola S.S. - Località Case Giusti 105 Reggello 50066 Firenze - VAT ID: 07458220485
Controller email address: [email protected]

Types of Data collected
Among the Personal Data collected by Podere Giusti, independently or through third parties, there are: Tracking Tools; Usage Data; unique device identifiers for advertising (e.g., Google Advertiser ID or IDFA identifier); number of sessions; session duration; in-app purchases; Application opening; Application updates; launches; first name; last name; email; ZIP/postal code; phone number; payment information; billing address; physical address; company name.

Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informative texts displayed before the data collection. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of Podere Giusti. Unless otherwise specified, all Data requested by Podere Giusti is mandatory. If the User refuses to communicate it, it may be impossible for Podere Giusti to provide the Service. In cases where Podere Giusti indicates some Data as optional, Users are free to refrain from communicating such Data without any consequence on the availability or operation of the Service. Users who have doubts about which Data is mandatory are encouraged to contact the Controller. Any use of Cookies - or other tracking tools - by Podere Giusti or by the owners of third-party services used by Podere Giusti, unless otherwise specified, aims to provide the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, if available.

The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through Podere Giusti and guarantees that they have the right to communicate or disseminate it, freeing the Controller from any responsibility towards third parties.

Mode and place of processing the collected DataMethods of processing: The Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. The processing is carried out using computers and/or IT-enabled tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of Podere Giusti (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Controller. The updated list of these parties may be requested from the Data Controller at any time.

Legal basis of processing: The Controller processes Personal Data relating to the User if one of the following conditions applies: the User has given consent for one or more specific purposes; the processing is necessary for the performance of a contract with the User and/or for any pre-contractual obligations thereof; the processing is necessary for compliance with a legal obligation to which the Controller is subject; the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller; the processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.

Place: The Data is processed at the Controller's operating offices and in any other places where the parties involved in the processing are located. For further information, contact the Controller. User's Personal Data may be transferred to a country other than their own. The User is entitled to learn about the legal basis of Data transfers to a country outside the European Union or to any international organization of public international law or set up by two or more countries, such as the UN, as well as about the security measures taken by the Controller to safeguard their Data.

Retention period: Personal Data shall be processed and stored for as long as required by the purpose they have been collected for. Personal Data collected for purposes related to the performance of a contract between the Controller and the User shall be retained until such contract has been fully performed. Personal Data collected for purposes related to the Controller’s legitimate interests shall be retained as long as needed to fulfill such purposes. Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.