1. General Information on Privacy

With this disclosure, EMPower S.p.a. with registered office in Via Padova, 68 - 35026 Conselve (PD) VAT 03205101201 - in the person of the legal representative pro-tempore, as Data Controller of the personal data wishes to inform you regarding the processing of the personal data that you will provide by surfing this website.
Italian Legislative Decree 196/2003 and EU REG. 2016/679 establish the rules to protect and safeguard persons with regarding to the processing of their personal data and this disclosure is drafted in conformity with the new legislation. The entire legal basis of the processing of the personal data is founded on the Treaty on the Functioning of the European Union and in particular on art. 16 of that text. The disclosure may undergo modifications following the introduction of new rules or following changes to the website, therefore we ask you to please visit this section periodically for the update. The Privacy Policy that you are reading is exclusively referable to the site www.empowerspa.it.
The company is not responsible for the management methods of the processing of the personal data carried out by third party websites which can be linked through the Cookie section, or through any other redirection links present on the site. According to the law, the processing of the personal data is based on the principles of correctness, lawfulness, transparency, protection of the user’s confidentiality as well as the protection of their rights: EMPower S.p.a. commits to observing the aforementioned principles and, for that reason, wishes to inform you as of now that - with the exception of the processing for which the law requires your explicit consent - by surfing this website, downloading or providing personal data, you accept and consent to being bound by the terms and conditions provided in this disclosure.
In the event of offers and services to minors, their consent is only legitimate if provided or authorized by the person with parental responsibility for the minor. This website does not provide for services and offers specifically directed at minors, since it involves the advertising of wines produced by EMPower S.p.a... In any event, we wish to give you some information on the concept of processing personal data, on the individuals who manage it, on the main processing activities that we implement, as well as your user rights.

2. Definition of personal data and its processing.

By personal data, we mean all that information which identifies or makes a certain physical person an individual. This is information that directly permits the identification of the subject (such as first name, last name or tax code) or only indirectly (such as the profiling cookies). By processing of personal data, instead, we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as their collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, restriction, erasure or destruction.

3. Identification of the data controller, data processor and person in charge of the processing.

3.1 Data Controller.

The Controller is the physical person or legal entity, public authority, service or other organization which, individually or with others, determines the purposes and the means of the processing of the personal data. It is moreover the person who handles the profiles on security. Relative to the processing of your personal data, the Data Controller is EMPower S.p.a.. as described in greater detail above.
For any clarification or to exercise the rights which you are entitled to, you may contact them at the addresses already provided.

3.2 Data processors.

Relative to the processing of your personal data, the controller has appointed as outside processor its own Web Agency. It will only process the data necessary to fulfil the obligations required by virtue of the services agreement with the controller. The appointment of the Web Agency - as well as its perimeter of responsibility - is therefore limited to that processing.

4. List of the main processing activities of the personal data carried out after the surfing on this website.

• The data collected through the surfing will not be circulated, or transferred to countries outside the EU (the hosting used by the controller is located in the EU). However, for the actual implementation of the service requested, some data may be shared with outside subjects asked to perform specific duties on behalf of our company (just as an example: Web Designers, IT Consultants).
  In any case, the Data Controller undertakes to protect the security of your personal data, adopting the IT and physical measures necessary to protect it.
  It is appropriate however to highlight that no security system guarantees with absolute certainty that protection, therefore, barring the cases of responsibility because of the Data Controller, EMPower S.p.a. is not responsible for action of third parties who abusively access the systems without the due authorizations.
• By simple surfing, no identification data will be collected. However, for the purposes of the normal operation of the website, it is possible that the computer system may acquire some information the transmission of which is implicit in the internet communication protocols (e.g. log files). Furthermore, through the use of the cookies, information will be collected that the user does not provide directly (Cookie Policy). It is, in any case, information that is not collected for the purpose of association with identified interested parties, but that despite this, given their nature, could however allow third parties to identify the user, through processing and association with other data already in their possession.
• By contacting the telephone number or the e-mail listed at the end of the website, the user provides their personal data (first name, last name, telephone number, etc.). The contribution of this data is optional, but the failure to give it does not allow the company to carry out the requests for information sent by the user. This data and information will be processed with computer/paper systems and the duration of the processing ends with the completion of the information service by the company.
• Except for the regulation on the cookies (which please see for more information), this website does not anticipated the existence of an automated decision-making process for commercial profiling (focused marketing technique which includes all the collection and processing activities of the data of the user for the purpose of understanding their choices and their behaviours in order to divided the interests into “profiles”, in other words into homogeneous groups by increasingly specific behaviours or characteristics).

5. User rights according to the EU REG 2016/679

The data subject - in other words the person making available to the Data Controller his/her personal data - is entitled to the following rights:

• the right of the data subject to ask the controller for access to the personal data, that is to know what data the controller is processing;
• the right to have it updated;
• the right to its rectification, that is the right to have the data modified if it has changed;
• the right to the integration of the own personal data that is the right to integrate the data with other information provided by the data subject;
• the right to restrict the processing of the data that concerns them, that is to limit the use of the data by the data controller;
• the right to object, for legitimate reasons, to its processing;
• the right to data portability namely the right to receive all the personal data processed by the controller in a structured and legible format on electronic media;
• the right to erasure their data with the controller;
• the transformation into anonymous format or the blocking of the data processed unlawfully, including data the storage of which is unnecessary for the purposes for which it has been collected or subsequently processed;
• the right obtain the certification that the data updating, rectification, integration, erasure, blocking, transformation operations have been notified, also with regard to their contents, to those to whom or to which the data was communicated or shared, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right being protected;
• the right to withdraw at any time the specific consent previously given, without prejudicing the lawfulness of the processing carried out up to that moment;
• the right to file a complaint with the Data Protection Supervisor in the event of violations of the legislation.

For a more in-depth examination of the rights you are entitled to, please see articles 15 – 16 – 17 – 18 – 20 – 21 of the EU REG 679/2016. The request can be addressed to the Data Controller, informally, at the addresses indicated in the caption, or alternatively, using the form provided by the Data Protection Supervisoravailable at the site: http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 ;

6. Disclosure on the Cookies.

Relative to the information regarding the use of Cookies on this website, please see the disclosure on Cookies from the link inserted in the footer.