Complete Privacy & Cookie Policy

Privacy Policy for website


Respecting the privacy of our guests is of the utmost importance to us, therefore the number and nature of the data collected during navigation has been reduced to the absolute minimum and all the necessary precautions have been taken to ensure its safety. It should be noted that the information is provided only for the website and not for other websites that may be consulted by the user through links on the aforementioned website. In compliance with the provisions of General Data Protection Regulation – EU Regulation 2016/679 and Italian Legislative Decree 196/2003, Code regarding the protection of personal data, Casalta Società Agricola ARL, represented for this purpose by the President in charge, as Data Controller, wishes to inform you of the following.


Personal data processed and purposes of the processing


Data automatically acquired

The computer systems used to operate this site acquire, during navigation, some personal data whose transmission is connected to the use of Internet communication protocols (IP addresses, domain names of the computers used by users who connect to the site, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, and so on) and other parameters relating to the operating system and computer environment of the user. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The collected data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.


Data provided voluntarily by users

Personal data voluntarily provided by users by filling in contact forms or by other forms of communication that may be provided on our site are used for the sole purpose of responding to requests made. For example, the inclusion of an e-mail address in the contact form involves its acquisition, necessary to respond to the requests made, as well as the acquisition of any other personal data included in the message. Your personal data may be disclosed for the purposes indicated to our specially authorized colleagues or associates as part of their duties. For the same purposes, if necessary, the collected data may be transferred outside the national territory where the conditions required by law exist.


Methods of processing and storage times

The processing will be carried out on paper and computerized media by the owner and by authorized colleagues or associates in compliance with all precautionary measures that guarantee its security and confidentiality. Your personal data communicated through forms and contact forms will be kept for the necessary period of time to follow up on your requests. The personal data collected relating to navigation will be kept in order to ensure checks relating to the management of the site and its security for the period of time necessary which is, except in special cases, 6 months.


Optional nature of providing personal data

Apart from what is specified for navigation data that are automatically recorded, the user is free to provide personal data (for example, name, surname, address, email…) requested in the forms on the site. Failure to provide them may make it impossible to obtain what is requested.


Communication of collected data

For the pursuit of the purposes described above, your personal data will be known by the employees, assimilated personnel and collaborators of the Data Controller, who will operate as subjects authorized to process personal data. Furthermore, your personal data will be communicated and processed by third parties belonging to the following categories:
a) subjects that the Data Controller uses for the website management;
b) companies that manage the Data Controller’s IT system;
c) companies and consultants who provide legal and / or tax consultancy activities d) supervisory and control authorities and bodies, and in general public or private entities with publicity functions.

The subjects belonging to the categories listed above operate, in some cases, in total autonomy as separate Data Controllers, in other cases, as Data Processors specifically appointed by the Data Controller in compliance with Article 28 of the GDPR. The complete and updated list of subjects to whom your personal data may be disclosed can be requested at the Data Controller’s registered office (


Rights of interested parties

In relation to the treatments described in this Notice, as an interested party you may, under the conditions provided for by the GDPR, exercise the rights enshrined in articles 15 to 21 of the GDPR and, in particular, the following rights:


• Right of access – article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, to obtain access to your personal data – including a copy of the same – and communication, among others, of the following information:

a) purposes of the processing
b) categories of personal data processed
c) recipients to whom these have been or will be communicated
d) data retention period or criteria used
e) rights of the interested party (rectification, deletion of personal data, limitation of processing and right to object to processing
f) right to lodge a complaint
g) right to receive information on the origin of my personal data if they have not been collected from the data subject
h) the existence of an automated decision-making process, including profiling;


• Right of rectification – Article 16 GDPR: right to obtain, without undue delay, the correction of inaccurate personal data concerning you and / or the integration of incomplete personal data;


• Right to cancellation (right to be forgotten) Article 17 GDPR: right to obtain, without undue delay, the cancellation of personal data concerning you, when:

a) the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) You have withdrawn your consent and there is no other legal basis for the processing;
c) You have successfully opposed the processing of your personal data;
d) the data have been unlawfully processed,
e) the data must be deleted to fulfill a legal obligation;
f) the personal data were collected in relation to the information society service offer referred to in Article 8, paragraph 1, GDPR. The right to erasure does not apply to the extent that the processing is necessary for the fulfillment of a legal obligation or for the performance of a task carried out in the public interest or for the ascertainment, exercise or defense of a right. in court.


• Right to limitation of treatment – article 18 GDPR: right to obtain limitation of treatment, when:

a) the interested party disputes the accuracy of personal data;
b) the processing is unlawful and the interested party opposes the deletion of personal data and requests instead that its use be limited
interested party for the assessment, exercise or defense of a right in court;
c) the data subject opposed the processing, as indicated below, pending verification of the possible prevalence of the data controller’s legitimate reasons with respect to those of the data subject;


• Right to data portability – article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another controller without impediments , if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly from the Data Controller to another Data Controller if this is technically feasible;


• Right to object – article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimacy of legitimate interest, including profiling, unless there are legitimate reasons for the Data Controller to continue processing which prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or defense of a right in court.


• Submit a complaint to the Authority for the protection of personal data, Garante della Privacy, Piazza di Montecitorio n. 121, 00186, Roma (RM) ITALIA.

The above rights may be exercised against the Owner by contacting the references in the „Data Controller and Data Processors“ paragraph. The Data Controller will take charge of your request and provide you, without undue delay and, in any case, at the latest within one month of receipt of the same, the information relating to the action taken regarding your request.

The exercise of your rights as an interested party is free of charge pursuant to Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetition, the Data Controller may charge you a reasonable fee, in light of the administrative costs incurred to manage your request, or deny the satisfaction of your request.

Finally, we inform you that the Data Controller may request additional information necessary to confirm the identity of the data subject.


Data Controller and Data Processors

The Data Controller is Casalta Società Agricola A.R.L. For any information relating to the processing of your personal data through this site, or to obtain the list of Data Processors, you can contact the Data Controller by the email address