1. Definitions
2. Identification of the holder of the treatment and contact of the responsible for the treatment
3. Type of data. Method of treatment
4. Log and Analytics data
5. Cookies
6. Social Plug-in
7. Rights of the interested party
8. Risk analysis and methods of protection of the data processed

1. Definitions
1.1 The User / Interested party is the person who accesses the website www.martinellicave.it (hereinafter only for short WEB SITE) performing registration activities of his Personal Data for the use of the functionality permitted by the website, in the meaning of in the letter "i" of the art. 4 D.Lgs n. 196/03, that is, "natural person, legal person, body or association to which the personal data refer". For the application of EU Regulation 2016/679 the term "Interested" is to refer to any identified or identifiable natural person, considering identifiable the natural person who can be identified, directly or indirectly, with particular reference to an identifier such as the name, the identification number, location data, an online identifier or one or more characteristic elements of its physical, physiological, genetic, psychological, economic, cultural or social identity.
1.2 According to the Article23 ("Consent") of Legislative Decree n. 196/03 the processing of personal data by individuals is only permitted with the express consent of the interested party freely provided and with specific reference to a treatment identified, as well as documented in writing and preceded by the information referred to in article n. 13 D.Lgs. N. 196/03; likewise for the application of EU Regulation 2016/679 for "Consent" means any manifestation of free will, specific, informed and unequivocal of the interested party with which he expresses his assent, through declaration or unequivocal positive action, that the personal data that concern him / her are object of treatment.
1.3 For the application of EU Regulation 2016/679 the "Personnel" is intended as information, of any type, concerning the interested party, for "Genetic Data" we mean the data related to the genetic characteristics inherited or acquired by a physical person providing unique information on the physiology or health of the person and resulting from the examination of a biological sample, "Biometric Data" means personal data obtained from a specific technical treatment related to the physical, physiological or behavioral characteristics of a natural person that allow o confirm the unique identification, such as facial image or dactyloscopic data, and "Health Data" means personal data relating to the physical or mental health of an individual, including the provision of health care services, which reveal information related to his state of health.
1.4 For the application of EU Regulation 2016/679 for "Treatment" we mean any operation or set of operations, also performed with the help of automated processes, applied to personal data, including collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction; "Cross-Border Treatment" means the processing of personal data that takes place within the facilities (understood as the place of choice for management of the Data Controller and the place of effective execution of the main processing activities by the Data Processor) in addition of a member state of the EU or in establishments situated in a single member state but which can have a substantial impact on the interested parties of several member states.
1.5 For the application of EU Regulation 2016/679 for "Profiling" means any form of automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects related to a natural person, in particular to analyze or predict aspects concerning professional performance, economic situation, personal preferences, health, interests, reliability, behavior, location or movements of the interested party.
1.6 For the application of EU Regulation 2016/679 for "Pseudonymisation" means the processing of personal data in such a way that they can no longer be attributed to a specific individual without the use of additional information, provided that such additional information are stored separately and subject to technical and organizational measures to ensure that such personal data are not attributed to an identified or identifiable natural person.
1.7 For the application of EU Regulation 2016/679 "Data Controller" means the natural or legal person, public authority, service or other body that, individually or together with others, determines the purposes and means of the treatment of personal data, "Data Processor" means the natural or legal person, public authority, service or other body that processes data on behalf of the Data Controller, "Recipient" means the natural or legal person, 'public authority, the service or another body that receives communications of personal data, whether it is a third party or not, for "Third parties" means a person other than the Data Subject, the Data Controller, the Data Processor, the persons authorized for processing by the Data Controller or the Data Processor and the Recipient;
1.8 For the application of EU Regulation 2016/679 for "Supervisory Authorities" means any authority responsible for verifying the correct application of EU Regulation 2016/679 in the Italian Republic, in particular the Guarantor for the Protection of Personal Data with based in Rome, Piazza di Monte Citorio n. 121 - pec: protocollo@pec.gpdp.it.

2. Identification of the Holder
The identification details of the holder are:
Mr. Antonio Martinelli - Via San Rocco n. 31 - 24060 Tavernola Bergamasca (BG) - Italy.
The Responsible can be contacted at the following e-mail address: email martinelli@martinellicave.it.
Any modification of the name of the responsible will also be communicated at the same time as the renewal of the present consent, by means of modification contemplated in the name of the responsible.
The holder owner of the WEB SITE may be involved in mergers, incorporations, acquisitions, demergers and in this case it may cede assets of its own company, including personal data of the interested party, which acknowledges and accepts them; in this case the interested party will be informed before his personal data are transferred or in any case are subject to different policies and / or authorizations for the processing of personal data.

3. Type of data. Method of treatment
The Personal Data are processed in a lawful, correct, transparent and for the sole purposes related to the use of the functions allowed by the WEBSITE. Personal Data will be collected exclusively for commercial purposes in accordance with the purpose for which the User / Interested person has registered on the WEBSITE and, in any case, for purposes connected and / or instrumental to the WEB SITE management activities, excluding - therefore - any use that is different and / or conflicting with the interests of the User / Interested party, without prejudice to the legal obligations of the Holder or the Responsible of treatment.
The Personal Data processed will be exclusively limited and relevant to the exercise of the functionalities of the WEBSITE to which the User / Interested party has registered.
Personal Data will be accurate and, if necessary, updated according to the instructions of the User / Interested in registration.
Personal Data will be kept for the period necessary for the activities involved in the processing permitted and for a maximum additional period of 2 (two) months from the cessation of the permitted processing. In any case, the treatment can never exceed ten years, unless express renewal of consent to uopo by the party concerned.
Personal data will be processed using methods that guarantee security and exclude even partial loss or destruction.
The acquisition and processing of Personal Data will also take place for the purposes of the anti-money laundering legislation as introduced by the Community Directive n. 2001/97 Ce, from the Legislative Decree n. 56/2004 and subsequent amendments and by the Ministerial Decrees of implementation, and is aware of the possibility that the same data will be communicated to the Italian UIC Exchange Office for the verification of the correct fulfillment of the aforementioned obligations.
The provision of Personal Data is faculty and not obligation, unless expressly required by law, but is required for registration on the WEBSITE and the related consent to the processing is a condition for registration. The delivery of Personal Data occurs whenever the person concerned accesses the WEBSITE for registration and accesses for the management or use of the services offered by it or connects his account on a third party site to his WEB SITE account where permitted by this 'last.
In the absence of delivery of the data necessary for registration and navigation, membership of the WEBSITE can not be accepted and / or continued and the account will not be enabled or will be canceled if consent is refused to renew the authorization to process the data personal.
If the interested party is authorized to use mobile applications connected to the WEBSITE, data relating to the position of the data subject, including general information (for example IP address, postal code) and information, are also conferred, stored and processed. more specific (for example GPS-based features on mobile devices used to access the platform or specific features of the same). If the interested party accesses the WEBSITE from a mobile device and does not want the device to provide information on its location, it may disable GPS or other location tracking features on the device, provided this is allowed by the device.
The WEBSITE may allow the collection by third parties, previously authorized by the User / Interested party, of information on the online activities of Users, including for the profiling of purchases made by the User and for commercial purposes.
The interested party consents to the transmission of personal data to third parties (for example, web suppliers for the management and maintenance of the site and the management programs used in the organization of the Data Controller).
The holder of treatment does not transfer data of the Data Subject abroad or to third countries.
The interested party undertakes to keep updated personal data and for this purpose will communicate to the holder of treatment any need for modification or updating.

4. Log and Analytics data
The User or the interested party is aware of the processing of the "Log Data", which is automatically recorded by our servers or server spaces, also sites with third parties, each time the User or the interested party accesses the SITE WEB or use it, whether or not the registered user is or has logged into his account; such data are, for example, the IP address, the date and time of access, the hardware and software used for access, the sites and URLs from which it comes and exit, the number of clicks , the pages viewed and the order of these pages, as well as the amount of time spent on particular pages. These data are also the subject of separate consent that the interested party already issues to the Owner that performs the search engine activity on the web the so-called browser (for example Google) and can be used for analytics services (for example Google Analytics - anonymized through the IP anonymization functionality) and to track the User / Interested activities resulting from the interaction with the WEBSITE.

5. Cookies
No personal data of users is acquired by the WEBSITE through the so-called cookies. We do not use cookies to transmit information of a personal nature, nor are used persistent cookies of any kind, or systems for tracking users. The use of session cookies (which are not stored permanently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the site. Session cookies used on this site avoid the use of other technologies that could compromise the privacy of users' browsing and do not allow the acquisition of personal identification data. Cookies to integrate products and functions of third-party software (Google Maps, YouTube videos, integrations with social networks, online payments, etc.) integrate features developed by third parties within the pages of the site in order to share site content or for the use of third-party software services (such as maps generating software and additional software offering additional services). These cookies are sent from third-party domains and from partner sites that offer their functionality between the pages of the website. You can view the management of cookies on your browser on the website of the respective manufacturer (for example Apple Safari, Google Chrome, Microsoft Internet Explorer, Mozilla Firefox, Opera, etc.). The interested party can disable the use of cookies through the settings of his browser, but will change the practices and processing of data as a result of a "Do Not Track" signal in the header http coming from his browser or mobile application. The activities of the interested party are traced if he clicks on an advertisement for the services of the WEBSITE on Third Party sites or platforms such as search engines and social networks.

6. Social Plug-in
The WEBSITE may use social plugins provided and managed by Terzi, such as the Facebook Like button; with the use of similar plug-ins, the interested party may send to third parties the information he is viewing on a specific part of the WEBSITE. If the person concerned has not logged into his account with third parties, the third party should not be aware of his identity unless otherwise agreed to the processing of personal data provided by the interested party directly to the third party. If you have logged into your account with the Third Party, then the Third Party may be able to link information relating to the visit of the Interested person to the WEBSITE to his account at the Third Party. Similarly, its interactions with the social plugin could be recorded by the Third. These methods of access to data of the interested party by the third party are not part of the WEB SITE functionalities and the processing is not carried out by the Data Controller or by the person responsible for processing the WEBSITE, but by the third party to whom the data subject should have consented data processing. The interested party declares to know the privacy policy of such Third Parties and their practices regarding the processing of personal data and declares to have validly authorized their treatment, exempting from responsibility the Holder and the Responsible for the treatment for the WEBSITE.
7. Rights of the interested party
The interested party will be guaranteed all the rights as better specified in the article number 7 D.Lgs. Number 196/03. To the User / Data Subject, they are guaranteed, pursuant to EU Regulation 2016/679 and to be exercised with a request to the Holder:

• the right of access (article 15 of said EU Regulation) to the data to verify the existence of a processing of the current data and to verify the purposes of the processing, category of data processed, recipients of any communication of the treated data, the period of preservation of the treated data, the possible existence of an automated decision-making procedure, including the profiling referred to in Article 22, paragraph 1 and 4 of EU Regulation 2016/679;
• the right to rectification, including integration of incomplete data (Article 16 of said EU Regulation);
• the right to cancel (Article 17 of said EU Regulation) of data without delay at the request of the interested party and mandatory if:
  • or are no longer necessary for the purposes of processing;
  • the consent to the processing is revoked;
  • the Data Subject opposes the processing pursuant to Article 21 of the EU Regulation;
  • the data have been processed unlawfully;
  • the cancellation requirement is imposed by Italian or EU regulatory provisions. The cancellation obligation does not apply in the case of exercising the right to freedom of expression and information, for the fulfillment of a legal obligation that requires treatment, for reasons of public interest or public order requiring treatment, for purposes of justice justifying the treatment.
• the right to limitation of treatment (Article 18 of said EU Regulation) when the interested party disputes the accuracy of the personal data processed for the period necessary for the consequent verifications, the processing is illegal and the interested party opposes the cancellation, the Holder of the Treatment does not need to continue the treatment but the interested party requires its continuation for justice purposes and for the exercise of the rights of defense in court and when the interested party has opposed the treatment pending verification of the prevalence of legitimate reasons of the Holder.
• the obligation for the Holde to communicate (Article 19 of said EU Regulation) to any Recipients of personal data processed, any cancellations, corrections, limitations on processing.
• the right to the portability of personal data (Article 20 of said EU Regulation) as the right to delivery to the Interested Person on a structured format of common and durable use, readable by automatic devices, even in multiple copies, by e-mail to the address specifically indicated by the User / Interested for free, and as the right to transfer Personal Data to another Holder, without impediment, if the processing is carried out by automated means as in this case;
• the right to object to the processing of personal data (Article 21 of said EU Regulation), without prejudice to the right of the Holder to demonstrate the existence of binding legitimate reasons to proceed with processing;
• the right not to be subjected to automated decisions, including profiling, unless such decision-making mode is necessary for the conclusion of the contract or the execution of the same between the Data Subject and the Holder, is permitted by a national or community law source; can be considered already consented by the explicit consent of the interested party (article 22 of the said EU Regulation).

8. Risk analysis and methods of protection of the data processed
The Holder declares that there are no specific risks related to the processing of Personal Data of the Interested Party, to have assessed every burden and risk of conservation and treatment, and to have carefully selected the best types of precautions to guarantee the confidentiality and intangibility of personal data of the interested party.
The Holder reserves the right to use every best form of data security, including encryption and pseudonymisation of the personal data processed. The Holder declares, however, to use suitable anti-intrusion and anti-infringement systems also on servers, or server spaces, in its availability or in any case used by third parties.
Personal data will be processed using appropriate methods to ensure its security and to exclude the loss or even partial destruction (eg system backup, antivirus systems, change of password for access to data for those charged by the Holder with appropriate periodicity, group continuity).

The User / Interested spontaneously declares to authorize, in accordance with the above and more generally as provided by Legislative Decree number 196/03 and EU Regulation 2016/679, the processing of his personal data.

The User / Interested spontaneously declares to authorize, in accordance with the above and more generally as provided by Legislative Decree number 196/03 and EU Regulation 2016/679, the processing of his personal data for commercial purposes, including profiling , marketing and sending commercial and promotional communications.