3. General and mandatory information Data privacy protection The operators of these pages take the protection of your personal data very seriously. We keep your personal data confidential and treat it in accordance with the applicable data privacy legislation and this data privacy statement. When you are using this website, certain personal data will be collected. “Personal data” means any information that can be used to identify you personally. This data privacy statement explains which types of data we are collecting and what we use them for. It also explains how and for which purposes we process the collected data. We would like to point out that data transmission on the Internet (e.g. when communicating via e-mail) may have security vulnerabilities. Complete protection of your data against access by third parties is not possible. Information on the responsible controller The controller responsible for data processing on this website is: L' Antica Pieve SRL Via Santo Stefano 54 50050 Montaione, Italy Phone: 00491704502918 E-mail address: info@torrevista.it “Controller” means the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses etc.). Storage period Unless a more specific storage period has been specified within this data privacy statement, your personal data will remain with us until the purpose for the processing of the data no longer applies. If you assert a legitimate request for erasure or revoke consent to data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be erased after these reasons no longer apply. General information on the legal basis for data processing on this website If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, if special categories of data are processed pursuant to Art. 9 para. 1 GDPR. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or to the access to information in your terminal device (e.g. via device fingerprinting), the data processing is also based on § 25 par. 1 TTDSG. The consent can be revoked at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data, insofar as this is necessary for the fulfillment of a legal obligation, on the basis of Art. 6 para. 1 lit. c GDPR. Furthermore, the data processing may be based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this data privacy statement. Information on data transfer to the USA and other third countries Among other things, we use tools from companies based in the USA or other third countries that are not deemed secure under data protection law. When these tools are active, your personal data may be transferred to and processed in these third countries. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. For example, U.S. companies are obligated to release personal data to security authorities without you, the data subject, being able to take legal action against this release. It can therefore not be ruled out that U.S. authorities (e.g. intelligence agencies) process, evaluate and permanently store your data located on U.S. servers for monitoring purposes. We have no influence on these processing activities. Withdrawal of your consent to the processing of personal data Many data processing operations can only be carried out with your express consent. You have the right to withdraw your given consent at any time. This withdrawal of consent shall not affect the lawfulness of data processing operations based on your consent before its withdrawal. Right to lodge a complaint with the relevant supervisory authority In the event of breaches of the GDPR, data subjects have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged breach. The right of complaint is without prejudice to other administrative or judicial remedies. Right to data portability You have the right to request your personal data that we are processing in an automated form (on the basis of your consent or in the scope of contract performance) to be issued to yourself or to a third party in a commonly used and machine-readable format. If you request the direct transfer of your data to another controller, this direct transfer will only be carried out insofar as it is technically feasible. Information, deletion and correction In the framework of the applicable legal provisions you may exercise at any time your right to information, free of charge, about your stored personal data, its origin and recipients as well as the purposes for which the data is processed. This includes also the right to have this data corrected or erased. You can contact us at any time with regard to this purpose and for any other questions on the subject of data privacy and protection. Right to restriction of processing You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restrict processing applies in the following cases: If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the data review, you have the right to request the restriction of the processing of your personal data. If the processing of your personal data happened/is happening unlawfully, you may request the restriction of data processing instead of data erasure. If we no longer need your personal data, but you need this data to exercise, defend or enforce legal claims, you have the right to request restriction of the processing of your personal data instead of erasure. If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, your interests and ours must be weighed up. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data. If you have restricted the processing of your personal data, this data may - apart from being stored - only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State. SSL or TLS encryption This site uses SSL resp. TLS encryption for security reasons and for secure transmission of any confidential content such as any orders or inquiries you send to us as the site operator. The use of an encrypted connection is indicated by the switch from "http://" to "https://" in the browser’s address bar (URL) and the appearance of the lock icon in your browser bar. When SSL resp. TLS encryption is activated, the data that you transfer to us cannot be read by third parties.