Privacy disclaimer

This information is provided pursuant to art. 13 EU Regulation 2016/679 for the protection of personal data.

The Data Controller is:

Grotto Carza - Caica Srl
Via per Cannero, 2 - 28826 Trarego Viggiona (VB) - Italy
info@grottocarza. It

Nature of the provision

The provision of data is optional. Refusal to provide data makes it impossible to be contacted for the purposes listed below. The provision for marketing purposes is optional and does not make it impossible to be contacted for other purposes.

Purpose of the processing and legal basis

  1. execution of obligations deriving from contracts stipulated with the Data Controller and / or fulfillment, before the conclusion of the contract, of specific requests of the interested party;

  2. fulfillment of obligations established by law, regulations or community legislation;

With regard to the purposes under a) and b), we inform you that the processing and communication of your personal data by the Data Controller does not require your consent as this is necessary for the execution of obligations deriving from the contract itself and / or for the '' execution of services requested by you before the conclusion of the contract as well as to comply with legal obligations.

Methods for data processing

The collected data are processed with IT tools.

Suitable security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Who processes your data

The processing of personal data takes place at the aforementioned office and is handled by appointed personnel.

Retention period of your data.

Personal data processed for contractual or economic purposes such as invoicing will be processed for the mandatory times provided for by the relevant laws.

Complaint or claim

The right of the interested party to lodge a complaint with the supervisory authority is reserved.

Rights of interested parties pursuant to Article 15 of EU 2016/679

The subjects to whom the personal data refer have the right to be aware of whether or not personal data referring to them is being processed, and if so, to obtain information regarding:

  • the purposes of the processing;

  • the categories of data in question;

  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients of third countries or international organizations;

  • when possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;

  • the existence of the right of the interested party to ask the data controller to correct or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;

  • the right to lodge a complaint with a supervisory authority;

  • if the data are not collected from the interested party, all available information on their origin;

  • the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the 'interested.

Requests should be sent to the email address or by ordinary mail to the addresses listed above.