Privacy Policy

This section contains information on how the site is managed Goloritzè Cooperative https://coopgoloritze.com/ with regard to the processing of user data.

This Privacy Policy:

is meant for the site https://coopgoloritze.com/ (hereinafter: 'Site');
is provided to those who interact with the web services of the Site, either by simple consultation or by using specific services made available through the Site;

The Holder can be contacted at: privacy@coopgoloritze.com We invite you, before communicating any personal data to the Controller, to read this Privacy Policy carefully because it contains important information on the protection of your personal data.

This information is also valid for the purposes of art. 13 of Legislative Decree no. 196/2003, Code for the protection of personal data, and for the purposes of Article 13 of EU Regulation no. 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data, for persons interacting with the Cooperative Goloritzè and can be reached at the address corresponding to the home page:

https://coopgoloritze.com/

The information is only provided for this website (https://coopgoloritze.com/) and not for any other websites that the user may consult via links contained therein.
The purpose of this document is to provide indications as to the manner, timing and nature of the information that data controllers must provide to users when connecting to the web pages of the Cooperativa Goloritzè website, regardless of the purposes of the connection itself, in accordance with Italian and European legislation.
This notice may be subject to change due to the introduction of new regulations in this regard, so please check this page periodically.
If the user is under 16 years of age, according to Art. 8, c.1 EU Regulation 2016/679, he/she will have to legitimise his/her consent through the authorisation of his/her parents or legal guardian.

II - DATA PROCESSING

1 - Data Controller

The controller is the natural or legal person, public authority, service or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. It also deals with security profiles.
With regard to this website, the data controller is: Antonio Cabras, and for any clarification or exercise of your rights you may contact him at the following e-mail address: privacy@coopgoloritze.com.

2 - Data processor

The controller is the natural or legal person, public authority, service or other body that processes personal data on behalf of the controller.
Pursuant to Article 28 of the EU Regulation No. 2016/679, upon appointment by the data controller, the data controller of the coopgolotritze.com website: Antonio Cabras.

3 - Place of data processing

The processing of data generated by the use of 40 Degrees North takes place at Località Golgo, 08040 Baunei (NU).
If necessary, the data connected with the newsletter service may be processed by the data controller or persons appointed by him/her for this purpose at the relevant premises.

III - COOKIES

1 - Type of Cookies

The site coopgoloritze.com uses cookies to make the user's browsing experience easier and more intuitive: cookies are small strings of text used to store certain information that may relate to the user, their preferences or Internet access device (computer, tablet or mobile phone) and are used primarily to adapt the operation of the site to the user's expectations, offering a more personalized browsing experience and storing the choices made previously.
A cookie consists of a small set of data transferred to the user's browser by a web server and can only be read by the server that performed the transfer. It is not executable code and does not transmit viruses.
Cookies do not record any personal information and any identifiable data will not be stored. If you wish, you can prevent the saving of some or all cookies. However, in this case your use of the website and the services offered may be impaired. To proceed without changing your cookie options, simply continue browsing.

Below are the types of cookies the site makes use of:

2 - Technical cookies

There are numerous technologies used to store information on the user's computer, which is then collected by sites. Of these, the best known and most widely used is that of HTML cookies. They are used for navigation and to facilitate the user's access and use of the site. They are necessary for the transmission of communications on the electronic network or for the supplier to provide the service requested by the customer.
The settings for managing or deactivating cookies may vary depending on the internet browser used. However, you can manage or request the general deactivation or deletion of cookies by modifying the settings of your internet browser. Such deactivation may slow down or prevent access to certain parts of the site.
The use of technical cookies enables the safe and efficient use of the site.
Cookies that are placed in the browser and retransmitted through Google Analytics or through the statistics service of blogger or similar are technical only if they are used for site optimisation purposes directly by the site owner, who may collect information in aggregate form on the number of users and how they visit the site. Under these conditions, the same rules on information and consent apply to analytics cookies as to technical cookies.
From the point of view of duration, a distinction can be made between temporary session cookies, which are automatically deleted at the end of the browsing session and are used to identify the user and thus avoid logging in each time a page is visited, and permanent cookies, which remain active on the computer until they expire or are deleted by the user.
Session cookies may be installed in order to allow access and stay in the reserved area of the portal as an authenticated user.
They are not stored in a persistent manner but only for the duration of browsing until the browser is closed and disappear when the browser is closed. Their use is strictly limited to the transmission of session identifiers consisting of random numbers generated by the server and necessary to enable the safe and efficient exploration of the site.

3 - Third-party cookies

In relation to origin, a distinction is made between cookies sent to the browser directly from the site you are visiting and third-party cookies sent to your computer from other sites and not from the one you are visiting.
Permanent cookies are often third-party cookies.
Most third-party cookies are tracking cookies used to detect online behaviour, understand interests and thus personalise advertising proposals for users.
Third-party analytical cookies may be installed. These are sent from third-party domains outside the site.
Third-party analytical cookies are used to collect information about user behaviour on 40 Degrees North. The collection is done anonymously, in order to monitor performance and improve the usability of the site. Third-party profiling cookies are used to create profiles on users, in order to propose advertising messages in line with the choices made by users.
The use of these cookies is governed by the rules laid down by the third parties themselves, so users are invited to read the privacy notices and the instructions for managing or disabling cookies published on the relevant web pages.

4 - Profiling cookies

Profiling cookies are those that create profiles of the user and are used in order to send advertising messages in line with the preferences expressed by the user when surfing the web.
When using these types of cookies, the user must give explicit consent.
Article 22 of the EU Regulation 2016/679 and Article 122 of the Data Protection Code will apply.

These are the data used by the site's plugins https://coopgoloritze.com/ :

Comment Likes This is only accessible to registered users on WordPress.com

Data Used: The following information is used to place a 'Like' on a previous comment: WordPress.com user ID/username (must be logged in), the site-specific user ID of 40 Degrees North, and the true/false data informing whether the user has liked the comment. If these actions are performed by a WordPress on a smartphone or tablet will also be asked for other information to track the activity: IP address, user agent, event timestamp, blog ID, browser language, country code and device information.
Tracked activities: Comment likes.

WP Multilingual

Data Used: to establish the site language, the 40 Degrees North site detects the language of the browser used by the user and synchronises the available translations in accordance. The WPML Plugin obtains the browser language and stores the cookie for 24 hours.
Synchronised data: Pages, tours, products, articles, posts and meta-data associated with the user's language are synchronised.

Contact Form

Data Used: to avoid SPAM, 40 Degrees North uses the plugin Akismet on the contact form, which receives and checks the IP address, user agent, name, email address, website and message. This data is sent to the server of Akismet (property of Automattic) for the sole purpose of spam control. The submitted data is entered into 40 Degrees North's database and sent by email directly to our email address. This email contains the IP address, timestamp, name, email address, website, and message.
Synchronised dataPost and post meta-data associated with the post sent by the user, its IP address and user agent originally sent with the comment are synchronised.

Google Analytics

Data used40 Degrees North uses Plugins simultaneously WooCommerce (property of Automattic) e Google Analytics. Each purchase sends the following information to Google Analytics: order number, product ID and name, product category, total cost and quantity of the order placed. All data sent to Google Analytics is anonymised before being sent.
Tracked activities: sends page view events (potentially also video views) to Google Analytics. In conjunction with WooCommerce, additional data such as products added to and removed from the shopping cart, views and clicks on product lists, views of product details, and finally purchases are sent.

Gravatar Hovercards

Data used: If the user is logged in on WordPress.comor posted a comment using an email address linked to the profile Gravatar, a hash will be sent to the Gravatar (property of Automattic) to draw the profile image.

WooCommerce

Data used: for payments made through PayPal o Stripepurchase total, currency, invoicing information. Taxes and Shipping are not asked or sent.
Synchronised dataFor each payment we send the total amount of the purchase, currency and customer billing information to the respective payment service. For more details please refer to the Privacy Policy of Stripe e PayPal. Retention of personal data:

- Inactive accounts: 1 year
- Pending orders: 1 week
- Wrong orders: 1 week
- Cancelled orders: 1 year
- Completed orders: 5 years
- Stripe system data: 5 years

You can make a purchase by creating an account on which you can check your data, by logging into an existing account or directly without any account. When the account is deleted, all personal order data will be removed.

IV - DATA PROCESSED

1 - Method of data processing

Like all websites, this site also makes use of log files in which information collected automatically during user visits is stored. The information collected may be as follows:

- internet protocol (IP) address; - type of browser and parameters of the device used to connect to the site; - name of the internet service provider (ISP); - date and time of visit; - visitor's web page of origin (referral) and exit; - number of clicks, if any.

This information is processed automatically and collected in an aggregate form only for the purpose of verifying the proper functioning of the site, and for security reasons. This information will be processed in accordance with the legitimate interests of the owner.
For security purposes (anti-spam filters, firewalls, virus detection), automatically recorded data may possibly also include personal data such as the IP address, which could be used, in accordance with the relevant laws in force, in order to block attempts to damage the site itself or to cause damage to other users, or in any case harmful or criminal activities. Such data are never used for user identification or profiling, but only for the purpose of protecting the site and its users, such information will be processed according to the legitimate interests of the owner.
If the site allows the posting of comments, or in the event of specific services requested by the user, including the possibility of sending a Curriculum Vitae for a possible employment relationship, the site automatically detects and records certain user identification data, including the user's e-mail address. This data is understood to be voluntarily provided by the user when requesting the service. By entering a comment or other information, the user expressly accepts the privacy policy, and in particular consents to the contents entered being freely disclosed to third parties. The data received will be used exclusively for the provision of the service requested and only for the time necessary for the provision of the service.
The information that users of the site choose to make public through the services and tools made available to them is provided by the user knowingly and voluntarily, exempting this site from any liability for any violation of the law. It is up to the user to verify that he or she has the permissions to enter personal data of third parties or content protected by national and international regulations.

2 - Purpose of data processing

The data collected by the site during its operation are used exclusively for the above-mentioned purposes and kept for the time strictly necessary to carry out the specified activities, and in any case no longer than 5 years.
Data used for security purposes (blocking attempts to damage the site) are retained for the time strictly necessary to achieve the aforementioned purpose.

3 - Data provided by the user

As indicated above, the optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, which is necessary to reply to requests, as well as any other personal data included in the message.
Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.

4 - Support in configuring your browser

You can also manage cookies through your browser settings. However, deleting cookies from your browser may remove the preferences you have set for the site.
For further information and support, you can also visit the specific help page of the web browser you are using:

Internet Explorer: http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies
Firefox: https://support.mozilla.org/en-us/kb/enable-and-disable-cookies-website-preferences
Safari: http://www.apple.com/legal/privacy/it/
Chrome: https://support.google.com/accounts/answer/61416?hl=it
Opera: http://www.opera.com/help/tutorials/security/cookies/

V - USER RIGHTS

Article 13, c. 2 of the EU Regulation 2016/679 lists the user's rights. The website 40 Degrees North therefore intends to inform the user about the existence: - of the right of the data subject to request from the controller access to personal data (art. 15 EU Regulation), their updating (art. 7, co. 3, lett. a) Legislative Decree 196/2003), rectification (art. 16 EU Regulation), integration (art. 7, co. 3, lett. a) D.Lgs. 196/2003) or limitation of processing concerning him/her (art. 18 EU Regulation) or to object, for legitimate reasons, to their processing (art. 21 EU Regulation), in addition to the right to data portability (art. 20 EU Regulation); - the right to request cancellation (art. 17 EU Regulation), the transformation into anonymous form or the blocking of data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed (art. 7, para. 3, lett. b) Legislative Decree 196/2003); - the right to obtain certification that the operations of updating, rectification, integration of data, cancellation, blocking of data, transformation have been brought to the attention, also as regards their content, of those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate to the protected right (art. 7, co. 3, lett. c) Legislative Decree no. 196/2003);

Requests can be addressed to the data controller, without formalities or, alternatively, using the template provided by the Garante per la Protezione dei Dati Personali, or by sending an e-mail to the address privacy@coopgoloritze.com
Where the processing is based on Art. 6(1)(a) - express consent to use - or Art. 9(2)(a) - express consent to use genetic, biometric, health-related, religious or philosophical beliefs or trade-union membership, racial or ethnic origin, or political opinions - you have the right to withdraw your consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
Likewise, in the event of a breach of the law, the user has the right to lodge a complaint with the Garante per la Protezione dei Dati Personali, as the authority responsible for monitoring processing in the Italian State.
For a more detailed examination of your rights, see Articles 15 et seq. of EU Regulation 2016/679 and Article 7 of Legislative Decree 196/2003.

VI - DATA TRANSFER TO COUNTRIES OUTSIDE THE EU

This site may share some of the data collected with services located outside the European Union. In particular with Google via the Google Analytics service. The transfer is authorised and strictly regulated by Article 45(1) of EU Regulation 2016/679, so no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.
No data will ever be transferred to third countries that do not comply with the conditions laid down in Article 45 et seq. of the EU Regulation.

VII. DATA SECURITY PROVIDED

This site processes user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of data. The processing is carried out using computer and/or telematic instruments, with organisational methods and logics strictly related to the purposes indicated.
In addition to the owner, in some cases, categories of persons involved in the organisation of the site (administrative, sales, marketing, legal, system administrators) or external parties (such as logistics service providers, caterers, hosting providers) may have access to the data.

VIII. AMENDMENTS TO THIS DOCUMENT

This document, published at: https://coopgoloritze.com/privacy-policy/ constitutes the privacy policy of this site.
It may be subject to changes or updates. Users are encouraged to consult this page periodically to keep abreast of the latest legislation.
Previous versions of the document will still be available on this page.
The document was updated on 01/01/2019 to comply with the relevant legal provisions, and in particular with EU Regulation 2016/679