Le montagne nella mela
Le mie montagne
Published on 2025-02-12 09:18:50
Marlene Verband der Südtiroler Obstgenossenschaften, with registered office at Jakobistraße 1/A, Terlan (BZ) - 39018, C.F./P.IVA IT00122310212, (hereinafter referred to as the "Data Controller" or "Controller"), is committed to protecting the online privacy of individuals while they browse and use the services of the website https://www.marlene.it (hereinafter referred to as the "Portal" or "Website").
This document describes every aspect related to the processing of personal data of users (hereinafter referred to as "Data Subjects") carried out through the Website, in accordance with the provisions of Article 13 of EU Regulation No. 2016/679 (hereinafter referred to as the "Regulation"). According to the provisions of the Regulation, the processing carried out by the Controller through the Website will be based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality.
Voluntarily provided data by the user: Personal information voluntarily provided by the user through specific forms on the Website (e.g., registration, contact, comments, reviews, posts, etc.). Such information may include, for example: identifying data (name, surname, ID number, username, user ID, password, place and date of birth, etc.), personal image, contact and location data (residential address, email address, phone number, postal address, etc.).
Commercial data: Information necessary for the performance of economic and fiscal obligations related to the provision of services on the Website (e.g., payment information, VAT number, purchase history, product or service usage information, credit and billing information, assistance requests, etc.).
Sensitive data: The so-called "special categories of personal data" as defined in Article 9 of the Regulation, which includes personal information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data concerning health or sex life, or sexual orientation.
Location or mobility data: Information indicating the geographical location (latitude, longitude, altitude, direction of movement, time of position recording) of the user's terminal device (e.g., smartphone, PC) using the services of the Website.
Service Provision: Responding to information requests received through the Website; delivering content and services related to the Website; sending user notifications and updates regarding the requested service.
Payments and Invoicing: Managing the economic and fiscal profile related to the sale of products/services through the Website.
Security Assurance, Abuse and Fraud Prevention, Debugging: Monitoring and preventing fraudulent activities and ensuring that systems and processes function properly and securely.
Judicial Protection: Ensuring the Data Controller's right to protect or exercise a legal claim.
Legal Obligation: Complying with a legal obligation to which the Data Controller is subject.
Contract/Pre-contractual Measures: The processing of Personal Data is based on Article 6(1)(b) of the Regulation ("[...] processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract").
Consent of the Data Subject: The processing of Personal Data is based on Article 6(1)(a) of the Regulation ("[...] the data subject has given consent to the processing of his or her personal data for one or more specific purposes"). The consent given by the user is voluntary and does not affect the use of additional services on the Website. The consent given can always be revoked through the appropriate cookie preference selection form or by contacting the Data Controller using the contact information provided in the [Data Controller Contacts] section.
Legitimate Interest of the Data Controller: The processing of Personal Data is based on Article 6(1)(f) of the Regulation ("[...] processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party").
Legal Obligation: The processing of Personal Data is based on Article 6(1)(c) of the Regulation ("[...] processing is necessary for compliance with a legal obligation to which the data controller is subject").
Protection of Vital Interests: The processing of Personal Data is based on Article 6(1)(d) of the Regulation ("[...] processing is necessary in order to protect the vital interests of the data subject or of another natural person").
Task Carried Out in the Public Interest: The processing of Personal Data is based on Article 6(1)(e) of the Regulation ("[...] processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller").
| Vendor Name | Description | Vendor Privacy Policy |
|---|---|---|
| https://www.facebook.com/policy/cookies | ||
| Google Advertising Products | https://business.safety.google/privacy/ | |
| Microsoft Clarity | https://privacy.microsoft.com/en-us/privacystatement | |
| Consisto | https://www.consisto.it/it/privacy-policy.html | |
| TikTok | https://www.tiktok.com/legal/privacy-policy | |
| YouTube | https://policies.google.com/privacy |
To exercise the rights provided by Articles 15-22 of the GDPR, the Data Subject can contact the Data Controller using the contact details provided in the "Contacts" section (see Article 10). The Data Controller is required to respond to the request within 1 month, or to communicate any delay in case of numerous and/or complex requests (the extension period cannot exceed 2 months). In any case, the Data Subject has the right to lodge a complaint with the competent Supervisory Authority (Data Protection Authority) in accordance with Article 77 of the Regulation if they believe that the processing of their Personal Data is in violation of applicable regulations.
