PRIVACY AND COOKIE POLICY

INFORMATION ON THE PROCESSING OF PERSONAL DATA AND COOKIES POLICY IN ACCORDANCE WITH ARTICLE 13 OF REGULATION (EU)
2016/679 – GDPR

1. INTRODUCTION

For Experti Srl, the protection of personal data is of primary importance, and it guarantees that the processing of personal data carried out in the performance of its activities is carried out in compliance with the rights of the data subject, with particular reference to confidentiality, protection of personal identity and the right to protection of personal data.

Experti Srl is committed to the following general principles:

  • All data are processed lawfully, fairly, and transparently with respect to the data subject, in accordance with the principles set forth in EU Regulation 2016/679 (hereinafter GDPR) and current legislation on the protection of personal data;
  • Personal data are processed only for the purposes stated in this Notice;
  • We aim to collect, process and use as little personal data as possible;
  • If the personal information we collect is no longer needed for any purpose and we are not required by law to retain it, we will make every effort to delete, destroy, or anonymize it;
  • Specific security measures are observed to prevent data loss, illegal or incorrect use, and unauthorized access;
  • Personal data will not be shared, sold, made available, or disclosed to parties other than those specified in the Notice.

This Notice describes how personal data are processed by:

  • Visitors/users of the website www.experti.it, acquired – independently or through third parties – through the website itself;
  • Apply for job positions through applications collected on this website or through other channels;
  • Experti Srl’s clients within the scope of existing business relationships;
  • Suppliers of Experti Srl under existing contractual relationships.

2. DATA CONTROLLER AND CONTACTS

The Data Controller is Experti Srl based in Via Colomba, 14 37030 – Colognola ai Colli (VR) (P.IVA 04837140237), and can be contacted at the following addresses: Tel: +39 045 7675023, +39 045 7675380, email: experti@experti.it to which you can contact for any questions regarding this Policy or the processing of personal data, and to exercise all the rights provided by the GDPR.

3. PROCESSING OF PERSONAL DATA OF VISITORS AND USERS OF THE WEBSITE

3.1 NAVIGATION DATA

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow Users to be identified.

This category of data includes IP addresses or domain names of computers and terminals used by users, the URI/URL notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.

These data, which are necessary for the use of web services, are also processed for the purpose of:

  • Obtain statistical information on the use of services (most visited pages, number of visitors by time slot or daily, geographical areas of origin, etc.);
  • Monitor the proper functioning of the services offered.

Browsing data do not persist for a time exceeding the needs of operation and are deleted
immediately after their aggregation, subject to any need for the investigation of crimes by
the judicial authority.

3.2 DATA COLLECTED WITH THE USER’S CONSENT

Some personal data, provided voluntarily, may be collected through the use of special forms on the site:

From the Write Us Form we collect personal contact information for the purpose of responding to inquiries about our products, commercial, administrative, transparency requests, or to respond to a complaint.

From the Work with Us Form we collect personal contact information, and additional data contained in the candidate’s resume.

From the Newsletter Module, which allows you to subscribe to the newsletter that offers Experti news, initiatives and events to subscribers. Subscription is subject to acceptance of specific, free and informed consent. The data are kept until the possible revocation of the subscription to the newsletter service, which can be freely carried out at any time through the link contained at the bottom of each message sent. This data may be used to send the user communications, also of a commercial nature, relating to the Services and Products of Experti Srl in which the user has expressed interest.

Data are kept for times compatible with the purpose of collection.

The User has the option of providing or not providing personal data in the above-mentioned form or by sending information request to the Site by e-mail. Refusal to provide the data will result in the impossibility of obtaining the requested service. Data are kept for times compatible with the purpose of collection.

Experti Srl also collects customer data to manage the sale of products, including through the e-commerce page of the www.shop.experti.it website.

3.3 COOKIES

In order to make its services as efficient and easy to use as possible this Site makes use of cookies. Therefore, when you visit the Site, a minimal amount of information is placed on your device as small text files called “cookies,” which are saved in the directory of your Web browser. There are different types of cookies, but basically the main purpose of a cookie is to make the Site work more efficiently and to enable certain features of the Site.

Cookie Settings

SAVING NAVIGATION PREFERENCES

This Web Site uses Cookies to save your browsing preferences and optimize your browsing experience.
These Cookies include, for example, those for setting the language or for statistics management by the Site Owner.

STATISTICS

This site uses Piwik Pro to collect information about users’ browsing performed on the site.
To view the privacy policy for the service, please visit https://piwik.pro/privacy-policy

INTERACTION WITH LIVE CHAT PLATFORMS

This type of service allows the User to interact with live chat platforms, operated by third parties, directly from the pages of this Website. This allows the User to get in touch with Experti staff to request more information about products or services, or for Experti staff to contact the User while he/she is browsing the pages of this Website.
In the event that a service for interacting with live chat platforms is installed, it is possible that, even if Users do not use the service, it will collect Usage Data related to the pages where it is installed. In addition, live chat conversations may be recorded.

WhatsApp’s Widget (WhatsApp Ireland Limited)
WhatsApp’s Widget is an interaction service provided by WhatsApp Ireland Limited
Personal Data Collected: Cookie and Usage Data.
Place of Processing: United States – Privacy Policy Privacy Policy eea

MAILING LIST OR NEWSLETTER (THIS WEBSITE)

By registering for a mailing list or newsletter, the User’s email address is automatically added to a list of contacts to whom email messages containing information, including information of a commercial and promotional nature, relating to this Web Site may be sent.
Collection of the User’s email address is done through the Mailchimp service.
This type of service allows you to manage a database of email contacts, telephone contacts, or contacts of any other type used to communicate with the User.
These services may also allow for the collection of data related to the date and time of the User’s viewing of messages, as well as the User’s interaction with them, such as information about clicks on links embedded in the messages.

Mailchimp (The Rocket Science Group, LLC.)
Mailchimp is an address management and email messaging service provided by The Rocket Science Group, LLC.
Personal Data Collected: last name; email; first name.
Place of Processing: United States – Privacy Policy. Privacy Shield Adherent.

REMARKETING AND BEHAVIORAL TARGETING

These types of services allow this Web Site and its partners to communicate, optimize, and serve advertisements based on your past use of this Web Site.
This activity is carried out by tracking Usage Data and the use of Cookies, information that is transferred to partners to which the remarketing and behavioral targeting activity is linked.
In addition to the opt-out possibilities offered by the services below, the User may opt out with respect to receiving cookies related to a third-party service by visiting the Network Advertising Initiative opt-out page.

Remarketing Google Ads (Google LLC)
Remarketing Google Ads is a remarketing and behavioral targeting service provided by Google LLC that links this Web Site’s activity with the Google Ads advertising network and the DoubleClick cookie. Users can opt out of Google’s cookies for ad personalization by visiting Google Ads Settings.
Personal Data Collected: Cookies; Usage Data.

Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield Adherent.

You can oppose the recording of cookies on your hard disk by configuring your browsing browser (Internet Explorer, Mozilla Firefox, Opera, Safari etc…) to disable cookies.
After this operation, however, some functions of the web pages may not be performed correctly.

3.4 LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA OF WEBSITE USERS

The provision of data is obligatory for all that is required by legal and contractual obligations, and therefore refusal to provide them in whole or in part may result in the inability to provide the services requested. The company processes the optional data of users on the basis of consent, i.e. through explicit approval of this privacy policy and in relation to the methods and purposes described above.

3.5 MODE AND PLACE OF PROCESSING

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes.
The data are processed at the operational offices according to which the Company is organized, and at companies in charge and duly appointed as Data Processors. The data will not be transferred outside the European Union. It is in any case understood that the Data Controller, should it become necessary, will have the right to move the location of the servers to countries outside the EU. In this case, the Data Controller assures as of now that the transfer of the data will take place in accordance with the applicable legal provisions by entering, if necessary, into agreements that guarantee an adequate level of protection.
The data processing is carried out for the time strictly necessary to pursue the above purposes, without prejudice to any retention periods provided for by law.

3.6 COMMUNICATION AND/OR DISSEMINATION OF PERSONAL DATA

Personal data of Users collected may be disclosed to companies that provide the services available on the Site. Some data may be disclosed in anonymous and aggregate form to group or third party companies for statistical purposes. Personal data may also be shared when required by law and/or government authorities. With the exception of cases explicitly permitted by law, or provided for in this Policy, personal data will not be disclosed or shared without the consent of the user concerned.

4. PROCESSING OF PERSONAL DATA OF APPLICANTS FOR THE ESTABLISHMENT OF EMPLOYMENT RELATIONS

4.1 TYPES OF DATA PROCESSED AND PURPOSE OF PROCESSING

Experti Srl processes personal data of job applicants, provided voluntarily, which may be collected through the Work with Us Form from the website www.experti.it, or through direct communications, by e-mail regular mail or other channels.
Experti Srl processes data provided by candidates for the purpose of establishing an employment relationship. The personal data processed are identification data (such as first name, last name, gender, date and place of birth and residence,
citizenship, tax code, photo and activity carried out) and contact data (such as address, telephone numbers, e-mail), as well as any other information reported in the resume or that the candidate otherwise communicates to Experti Srl for the above purposes.
This processing of such personal data is for the purpose of evaluating the candidate himself/herself with a view to the possible establishment of an employment relationship with Experti Srl In the absence of such data, this evaluation cannot be carried out and, therefore, the possible employment relationship cannot be established.
The applications collected in the Internship section of the website www.experti.it allow the candidate seeking an internship in the wine, beer and food & beverage industry to get in touch with the companies that offer them by posting their profile.
Experti Srl processes personal contact information and data reported in resumes provided spontaneously by candidates for the purpose of putting them in contact with companies seeking employees.
The candidate who sends his or her resume to submit his or her professional application is solely responsible for the relevance and accuracy of the data sent.

4.2 LEGAL BASIS FOR THE PROCESSING OF CANDIDATES’ PERSONAL DATA

The legal basis of the processing is the need to satisfy the request for examination of the application that the interested party manifests, even implicitly through the simple sending of his or her curriculum vitae and/or cover letter or other communication of similar content, for the purpose of the possible establishment of an employment relationship. Moreover, once the application has been received, such processing as well as the preservation of the personal data referred to in the application may take place for the pursuit of the legitimate interest of the data controller in the performance of subsequent selection activities, or activities related to the proposal of internships also by companies of Experti Srl or clients of Experti Srl.

4.3 MODE AND PLACE OF PROCESSING

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data. The processing is carried out by means of computer, telematic and paper-based tools, with organizational methods and logics strictly related to the indicated purposes.
The data are processed at the operational offices according to which the Company is organized, and at companies in charge and duly appointed as Data Processors. The data will not be transferred outside the European Union. It is in any case understood that the Data Controller, should it become necessary, will have the right to move the location of the servers to countries outside the EU. In this case, the Data Controller assures as of now that the transfer of data will take place in accordance with the applicable legal provisions by entering into agreements, if necessary, that guarantee an adequate level of protection.
The data processing is carried out for the time strictly necessary for the pursuit of the above purposes.

4.4 COMMUNICATION AND/OR DIFFUSION OF PERSONAL DATA

The personal data of Users collected may be disclosed to companies of Experti Srl , to companies that are clients of Experti Srl that offer internships in the ‘Internship’ section of the Experti website, companies that provide services related to the purposes of the processing. Personal data may also be shared when required by law and/or government authorities. Except in cases explicitly permitted by law, or provided for in this Policy, personal data will not be disclosed or shared without the consent of the data subject.

5. PROCESSING OF PERSONAL DATA OF CUSTOMERS

5.1 TYPES OF DATA PROCESSED AND PURPOSE OF PROCESSING

Experti Srl may process personal data of customers to manage the sale of products, including through the e-commerce page of the Site and to provide you with related after-sales services (e.g., assistance, returns, warranty). Thus, personal data is processed to record orders and payments and to fulfill the resulting contractual obligations, such as for the shipment of products. Sales-related data are also processed to fulfill related legal obligations in commercial and tax matters, such as to issue commercial and tax documents related to the sale. The provision of the data is necessary, and without it, it will not be possible to proceed with the order or respond to the data subject’s request. The personal data processed are identification and contact data, payment systems).
Experti Srl may also process the data indicated above for the execution of customer satisfaction surveys and for direct marketing purposes aimed at its customers, who are in any case guaranteed the right to object to such processing, at any time and free of charge. In case of opposition, the customer’s personal data will no longer be processed for these purposes.

5.2 LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA OF CUSTOMERS

The legal basis of the processing is, therefore:
the fulfillment of legal obligations, for needs related to the execution of a contract as well as the need to satisfy the requests of the data subject;
the legitimate interest of the data controller in carrying out Customer satisfaction surveys and direct marketing initiatives towards its customers, in view of the relationship established with them and the protection of their fundamental rights and freedoms guaranteed also through the right of opposition mentioned above.

5.3 MODE AND PLACE OF PROCESSING

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data. The processing is carried out by means of computer, telematic and paper-based tools, with organizational methods and logics strictly related to the indicated purposes.
The data are processed at the operational offices according to which the Company is organized, and at companies in charge and duly appointed as Data Processors. The data will not be transferred outside the European Union. It is in any case understood that the Data Controller, should it become necessary, will have the right to move the location of the servers to countries outside the EU. In this case, the Data Controller assures as of now that the transfer of data will take place in accordance with the applicable legal provisions by entering into agreements, if necessary, that guarantee an adequate level of protection.
The data processing is carried out for the time strictly necessary for the pursuit of the above purposes.

5.4 COMMUNICATION AND/OR DIFFUSION OF PERSONAL DATA

The data collected by the Data Controller will be shared only for the above purposes; your personal data may be transferred to the following categories of recipients:

  • hosting providers, IT companies, communication agencies, third-party technical services;
  • persons, companies or professional firms providing assistance and advice to the Data Controller, in accounting, administrative, legal, tax and financial matters;
  • Subjects to whom the right to access the data is recognized by legal provisions or orders of the authorities.

These individuals are also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

6. PROCESSING OF PERSONAL DATA OF SUPPLIERS

6.1 TYPES OF DATA PROCESSED AND PURPOSE OF PROCESSING

Experti Srl may process certain personal data concerning the supplier, if a natural person, and/or the supplier’s workers and collaborators (in the latter case even if the supplier is a legal person) for the purpose of entering into and executing contracts with such suppliers.
Experti Srl makes every effort to make this information known to each interested natural person indicated above, primarily through the publication of this document on its website. However, it should be noted that the communication of this information to all data subjects and, in particular, to each employee and collaborator of each of its suppliers in relation to whom it receives or collects personal data, would imply a disproportionate effort for Experti Srl or, in some cases, might even be impossible. That being considered, the supplier of Experti Srl communicates and disseminates this information to any interested parties involved in the processing described above, i.e. to its Workers and Collaborators (however named, including in the definition also all natural persons whose data may in any case be communicated toExperti Srl or known by it for the stipulation and execution of the contract of
supply) by all appropriate means.
The personal data processed are the identification and contact data (such as address, telephone numbers, e-mail) regarding the supplier and/or its Workers and Collaborators and that the same may communicate to Experti Srl as part of the normal activities that characterize the supply relationships that have been or are intended to be established.
The purpose of the processing of such personal data is the conclusion or execution of supply contracts and is functional to the achievement of the same. In the absence of such data, it may not be possible to properly establish or execute such contracts.
The legal basis for such processing is, therefore, the conduct of pre-contractual negotiations in agreement with the supplier or the fulfillment of the supply contract with the same or of legal obligations.

6.2 LEGAL BASIS FOR THE PROCESSING OF SUPPLIERS’ PERSONAL DATA

The legal basis for such processing is, therefore, the conduct of pre-contractual negotiations in agreement with the supplier or the fulfillment of the supply contract with the same or of legal obligations.

6.3 MODE AND PLACE OF PROCESSING

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data. The processing is carried out by means of computer, telematic and paper-based tools, with organizational methods and logics strictly related to the indicated purposes.
The data are processed at the operational offices according to which the Company is organized, and at companies in charge and duly appointed as Data Processors. The data will not be transferred outside the European Union. It is in any case understood that the Data Controller, should it become necessary, will have the right to move the location of the servers to countries outside the EU. In this case, the Data Controller assures as of now that the transfer of data will take place in accordance with the applicable legal provisions by entering into agreements, if necessary, that guarantee an adequate level of protection.
The data processing is carried out for the time strictly necessary for the pursuit of the above purposes.

6.4 COMMUNICATION AND/OR DISSEMINATION OF PERSONAL DATA

Personal data of collected suppliers may be disclosed to Experti companies and companies that provide services related to the purposes of the processing. Personal data may also be shared when required by law and/or government authorities. Except in cases explicitly permitted by law, or provided for in this Policy, personal data will not be disclosed or shared without the consent of the data subject.

7. RIGHTS OF THE DATA SUBJECT

The data subject, i.e., the natural person to whom the personal data relate, has the right to request from the Data Controller access to, rectification or erasure of his or her personal data, as well as to request restriction or object to their processing. The data subject also has the right to data portability. To exercise these rights, it is possible to refer to the contacts indicated in this notice.
All requests received will be processed and acknowledged in accordance with the applicable regulations, including with reference to the actual subsistence of the conditions for their acceptance. In the absence of such subsistence, the Data Controller may not act on the requests. The Data Controller shall make every effort to respond to legitimate and well-founded requests within one month of their receipt. Depending on the complexity and number of requests, as well as the above, this deadline may be extended by two months. Upon the final outcome of the handling of the request and against the same, the data subject has the option to file a complaint with the supervisory authority www.garanteprivacy.it and to file a judicial appeal.

8. POLICY UPDATE

This Policy was updated on 07/12/2022, and may be subject to periodic revision, in relation to changes related to the processing carried out and the relevant legislation and case law.