Privacy Policy of suditono.com

This Application collects some Personal Datas from its Users.
This document can be printed by using the print option of your browser settings.

RECAP OF POLICY

Personal Data processed for the following purposes and using the following services:

Contact the User

Contact Form:
Personal Data: surname; email; address; name; phone number; Business Numebr; Company name

Management of Payments

PayPal and PayPal Payments Hub
Personal Data: surname; usage data; email; billing address; information of payment; device information; name; password; Tracking Tool; username; various types of data as specified in the privacy policy of the service
MyBank UniCredit
Personal Data: surname; usage data; email; billing address; shipping address; information of payment; name; Tracking Tool; various types of data as specified in the privacy policy of the service
Sofort

Tag Management

Google Tag Manager
Personal Data: Usage data; Tracking tool

SPAM Protection

hCaptcha
Personal Data: Data communicated for Service use; usage data; keypress events; sensors of motion events; touch events; mouse events; scrolling position; Tracking Tool

Advertising

Jetpack
Personal Data: Usage Data; Tracking Tool

Collection of Privacy preferences

Iubenda Cookie Solution
Personal Data: Tracking Tool

Remarketing and behavioral targeting

LinkedIn Website Retargeting
Personal Data: Usage data; Tracking Tool

Statistics

Google Analytics with anonymous IP and Monitoring of Facebook Ads conversions (Facebook Pixel)
Personal Data: Usage data; Tracking Tool

Display of contents for external platforms

Widget Video YouTube
Personal Data: Usage data; Tracking Tool

Information to disable interest-based advertisement

Beyond the opt-out functions provided by the above services, listed in this document, Users can read more about how to disable interest-based advertisement in the specific section “Cookie Policy”.

Further information about processing of Personal Data

Selling goods and services online

Personal Data are collected for the provision of services to the User or for the sale of products, including payment and possible delivery. Personal Data collected to complete the payment can be related to credit card, bank account used for bank transfer, or to other payment tools provided. Payment Data collected by this App depend on the payment system used.

Contact Information

Data Controller

SAN PIO X Azienda Agricola dal 1708
Vicolo San Pio X, 37
35020 Albignasego PD ITALY
Email address of Data Controller: contact@suditono.com

FULL POLICY

DATA CONTROLLER
SAN PIO X Azienda Agricola dal 1708
Vicolo San Pio X, 37
35020 Albignasego PD ITALY
Email address of Data Controlles: contact@suditono.com

Types of collected Data

Personal Data collected by this App, autonomously or by third parts, include: name; surname; phone number; Business Number (VAT); Company name; physical address, email; Tracking Tool; Usage Data; mouse movements; sensors of movement events; Data communicated in order to use the Service; position of scrolling; keypress event; touch events; username; password; payment information; billing address; device information; shipping address.
Full details about each type of collected data are available in the specific sections of this Privacy Policy or in specific informative texts, displayed before data collection.
Personal Data can be freely provided by the User or, in case of Usage Data, automatically collected during the use of this App.
Unless it’s not otherwise stated, all Data requested by this Application are compulsory. If the User refuses to communicate its Data, it could prevent this Application from providing the Service. If this Application indicates as optional some of Data, Users can refrain from communicating Data, without consequences on the availability or functioning of Service.
Users who may have doubts about which Data is compulsory, are invited to contact the Data Controller.
Potential use of Cookies – or other tracking tools – by this Application or third part Service Owners used by this Application, unless not otherwise specified, has purpose to provide requested Service to User, in addition to further purposes indicated in this document and in the Cookie Policy, if available.
The User takes responsibility of Personal Data of third parts obtained, published or shared through this Application and guarantees to have right to communicate or publicize it, releasing the Data Controller by every liability to third parties.

Modality and place of collected Data Processing

Modality of processing
Data Controller takes adequate safety measures to deny not allowed access, publicizing, modification or elimination of Personal Data.
Processing occurs by IT and/or telematic tools, with organizational methods and reasons strictly related to above mentioned purposes. Besides Data Controller, in some cases, other subjects could have access to data, that is subjects involved into the organization of this Application (administration, sales, marketing, legal, system administrators), that is external subjects (as third parties providers of technical services, postal couriers, hosting provider, IT companies, communication agencies) also appointed, if needed, as in charge for Data Processing by Data Controller. The updated list of Responsibles can always be asked to Data Controller.

Legal basis of processing
Data Controller processes Personal Data relating to User if existing one of the following conditions:

The User has given consent for one or more specific purposes; Note: in some jurisdictions, the Data Controller can be authorized to Personal Data processing without need for User consent or other of legal basis mentioned here below, until the User won’t oppose (“opt-out”) to this processing. However, this does not apply if Personal Data processing is regulated by European jurisdictions for Personal Data protection;
Processing is necessary to the execution of an agreement with the User and/or to the execution of pre-agreement measures;
Processing is necessary to fulfillment of legal obligations of the Data Controller;
Processing is necessary to execution of task of public interest of to the exercise of public authority vested in the Data Controller;
Processing is necessary to persecution of legitimate interest of Data Controller or third parties.
Processing is necessary to the execution of an agreement with the User and/or to the execution of pre-agreement measures;

However, it is possible to request the Data Controller clarification of precise legal basis for each processing and, especially, specification if the processing is based on law, required by an agreement or required for conclusion of an agreement.

Place
Data is processed at the operative offices of Data Controller and in any other place where other parties involved in processing are located. For more information, contact the Data Controller.
User’s Personal Data could be transferred in a different country than that of User. To have further information about place of processing, User can refer to the section relevant to Personal Data processing details.
The User has right to obtain information regarding the legal basis for Data transfer outside European Union or to an international public law organization, international or consisting of two or more countries, as for example ONU, as well as information regarding safety measures adopted by Data Controller for Data protection.

User can verify if one of above transfers happens by examining the section of this document relevant to Personal Data processing details or request the Data Controller for information, by contacting him as shown at beginning.

Retention Period
Data is processed and retained for time requires by purposes of their collection.
Therefore:

Personal Data which are collected for purposes of execution of an agreement between Data Controller and User, will be retained until fulfillment of such agreement.
Personal Data which are collected for purposes relevant to Data Controller legitimate interest, will be retained until fulfillment of such interest. The User can have further information regarding legitimate interest pursued by Data Controller in the relevant sections of this document, or by contacting the Data Controller.

When processing is based on User consent, Data Controller can retain Personal Data for longer, until such consent wont’ be revoked. Furthermore, Data Controller could be obliged to retain Personal Data for longer period, in compliance with legal obligation or by order of an authority.
At the end of retention period, Personal Data will be canceled. Therefore, at the end of this period, the right of access, cancelation, correction and right to portability of Data could not be exercised anymore.

Purposes of Processing of collected Data

User’s Data is collected to allow Data Controller to provide the Service, fulfill legal obligations, respond to requests or enforcement actions, protect its right and interests (or those of Users or third parties), identify any malicious or fraudulent activities, as well as fort he following purposes: Contact User; SPAM Protection; Content view from external platforms; Advertising; Collection of privacy preferences; Payment management; Statistics; Tag management; Remarketing and behavioral targeting.

Details of Personal Data processing

Personal Data is collected for the following purposes and using following services:

Contact User

Contact Form (this Application)
By filling in the contact form with his Data, User agrees to their use to answer requests for information, quote, or of any other nature indicated in the form heads.
Personal Data processed: surname; email; physical address; name; phone number; Business Nr; Company name.

Payment Management

If not stated differently, this Application processes all payment by credit card, bank transfer or other ways supplied by external payment services providers. In general, and except for different indication, Users are requested to provide payment details and personal information directly to provide of these payment services.
This Application is not involved in collection and processing of this information: it will only receive notification from payment services supplier about the payment.

PayPal (Paypal)
PayPal is a service provided by PayPal Inc., that enables User to online payments.
Personal Data processed: surname; usage data; email; billing address; payment information; device information; name; password; Tracking Tool; username; different types of Data, according to what indicated by service Privacy Policy.

MyBank UniCredit (UniCredit S.p.A.)
MyBank is a payment service provided by UniCredit S.p.A.
Personal Data processed: surname; usage data; email; billing address; shipping address; payment information; device information; name; Tracking Tool; username; different types of Data, according to what indicated by service Privacy Policy.
Place for processing: Italy – Privacy Policy.

PayPayl Payments Hub (Paypal)
PayPal Payments Hub is a payment service provided by PayPal Inc.
Personal Data processed: surname; usage data; email; billing address; payment information; device information; name; password; Tracking Tool; username; different types of Data, according to what indicated by service Privacy Policy.
Place for processing: Check Privacy Policy by Paypal – Privacy Policy.

Sofort
SOFORT is the main direct online payment method, that functions via online banking.

Tag Management

These services are functional to centralized management of tags or scripts used on this Application.
Usage of these services involves the flow of User’s Data through the same services and, if appropriate, their retention.

Google TagManager (Google Ireland Limited)
Google Tag Manager is a management service provided by Google Ireland Limited.
Personal Data processed: Usage Data; Tracking Tool.
Place for processing: Ireland – Privacy Policy.

SPAM Protection

These services analyze traffic of this Application, which potentially includes Users’ Personal Data, in order to filter it out from third parties of traffic, messages and contents recognized as SPAM.

hCaptcha (Intutition Machines, Inc)
hCaptcha is a SPAM protection service, provided by Intuition Machines, Inc.
Personal Data processed: Data provided for Service use; Usage Data; keypress events; sensors of movement events; touch events; mouse movements; scrolling position; Tracking Tool.
Place for processing: USA – Privacy Policy.

Advertising

This type of services allows to use User’s Data for commercial communication purposes. These communication are shown on this Application as banner and other advertising formats, also relating to User’s interests.
This does not mean that all Personal Data are used for these purposes. Data and Conditions for Use are indicated below.
Some services below could use Tracking Tools to identify the User or use behavioral retargeting technique, that is show advertisements according to interests and behaviour of User, also detected outside this Application. For more information, please check Privacy Policy of respective services.
Generally, such services allow you to disable the tracking. Besides every opt-out functionality offered by any of the services listed in this document, User can read more about how to disable advertisements related to his interests in the proper section “How to disable interest-based advertising” in this document.

Jetpack (Jetpack Digital LLC)
Jetpack is an advertising service provided by Jetpack Digital LLC.
Personal Data processed: Usage Data; Tracking Tool.
Place for processing: USA – Privacy Policy – Opt out.

Collection of Privacy preferences

This service allow this Application to collect and save Users’ perferences for collection, use and processing of their personal information, as required by applicable privacy legislation.

Iubenda Cookie Solution (iubenda srl)
Iubenda Cookie Solution allows the Data Controller to collect and save Users’ preferences for personal data processing and, especially, for use of Cookies and other Tracking Tools on this Application.
Personal data processed: Tracking Tool.
Place for processing: Italy – Privacy Policy.

Remarketing and behavioral targeting

This service allows this Application and its partners to communicate, optimize and provide advertisings according to previous use of this Application by User. This activity is facilitated by Usage Data tracking and the use of Tracking Tools to collect information, which are than transferred to partners who manage remarketing and behavioral targeting activities.
Some services offer a remarketing option based on email addresses lists.
In general, this kind of services offer the possibility to disable the tracking. Besides any opt-out function provided by any of services listed in this document, User can read more on how to disable interest-based advertisements in the proper section “How to disable interest-based advertising” in this document.

LinkedIn Website Retargeting (LinkedIn Corporation)
LinkedIn Website Retargeting is a remarketing and behavioral targeting service provided by LinkedIn Corporation, that connects this Application activity to LinkedIn advertising network.
Personal data processed: Tracking Tool.
Place for processing: USA – Privacy Policy – Opt Out.

Statistics

Services listed in this section allow the Data Owner to monitor and analyze traffic data and to track the User behavior.

Google Analytics with anonymous IP (Google Ireland Limited)
Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses Personal Data collected for tracking and analyze the use of this Application, fill in report and share it with other services developed by Google.
Google could use Personal Data to contextualize and customize advertisements of its own advertising network.
This integration by Google Analytics makes your IP address anonymous. Anonymization shortens Users’ IP addresses within EU countries or in other countries adhering to the agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google servers and shortened within United States.
Personal data processed: Usage Data; Tracking Tool.
Place for processing: Ireland – Privacy Policy.

Monitoring of Facebook Ads conversions (Facebook pixel) (Facebook Ireland Ltd)
Monitoring of Facebook Ads conversions (Facebook pixel) is a statistics service provided by Facebook Ireland Ltd, that link data from Meta advertising network with actions accomplished within this Application. Facebook Pixel monitors conversions that may be attributed to Facebook, Instagram and Audience Network advertisements.
Personal data processed: Usage Data; Tracking Tool.
Place for processing: Ireland – Privacy Policy.

Display of contents from external platforms

This kind of services allow to view contents hosted on external platforms straight on the pages of this Application, and to interact with these contents.
However, this kind of service could collect web traffic data related to pages where this service is installed, also when it’s not used by Users.

Widget Video YouTube (Google Ireland Limited)
YouTube is a service for video contents view, managed by Google Ireland Limited, that enables this Application to integrate these contents into its pages.
Personal data processed: Usage Data; Tracking Tool.
Place for processing: Ireland – Privacy Policy

Information about interest-based advertisements disablement

In addition to any opt-out function provided by any of the services listed in this document, Users can read more on how to disable interest-based advertisements in the appropriate section of the Cookie Policy

Further information about Personal Data processing

Sale of online goods and services

Collected Personal Data is used for provision of services to User or for products selling, including payment and delivery. Personal Data collected to finalize payment can be those of credit cart, bank account used for bank transfer or other payment systems. Payment Data collected by this Application change according to payment system involved.

User Rights

Users can excercise certain rights with reference to the Data processed by Data Controller. Specifically, User has right to:

withdraw consent at any time. The User can revoke the consent to the processing of their Personal Data previously expressed.
oppose to his Data processing. Used can oppose to his Data processing when this occurs on legal basis other than consent. Further details about opposition right are stated in the section below.
access his Data. User has rights to obtain information about Data processed by Data Controller, specific aspects of processing and receiving a copy of processed Data.
verify and ask for rectification. The User can verify the correctness of their Data and request its updating or correction.
obtain the limitation of the treatment. When certain conditions are met, the User can request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose than their conservation.
obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Owner.
receive their data or have them transferred to another owner. The User has the right to receive his / her data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain its unhindered transfer to another owner. This provision is applicable when the Data is processed with automated tools and the processing is based on the User’s consent, on a contract to which the User is a party or on contractual measures connected to it.
propose a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority or take legal action.

Details about opposition right
When Personal Data is processed according to public interest and exercise of public authorities of which the Data Controller is in charge or in order to pursue the Controller legitimate interest, Users have right to oppose to processing for reasons related of their special conditions.
Users are reminded that, should their Data be processed for direct marketing purposes, they can oppose the processing without providing any reasons. To know if the Controller is processing data with direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise rights
To exercise User rights, Users can address a request to contact details of Controller, indicated in this document. Requests are filed free of charge and processed by the Controller as soon as possible, in any case within one month.

Cookie Policy

This Application uses Tracking Tools. For more information, User can check the Cookie Policy.

Further Information about processing

Defense in court
User’s Personal Data can be used by Data Controller in judgment, or in the preparatory stages for its eventual establishment for defense against abuse in usage of this Apps or connected Services by the User.
User declares he is aware that the Data Controller may be obliged to disclose the Data by order of the public authorities.

Specific Information
On User request, in addition to information into this Privacy Policy, this Application may provide the User with additional and contextual information regarding specific Services, or collection and processing of Personal Data.

System log and maintenance
For needs of operation and maintenance, this Application and any third party services used by it may collect system logs, which are files that record the interactions and which may also contain Personal Data, such as the User IP address.

Information not included in this policy
Further information regarding the Personal Data processing can be requested anytime to the Data Controller, using the contact details.

Answer to “Do Not Track” requests
This Application does not support requests for “Do Not Track”.
To know if possible services by third parties support them, User is requested to check the respective privacy policies.

Modifications to this privacy policy
Data Controller reserves the right to make changes to this privacy policy at any moment, notifying the Users on this page and, if possible, on this Application as well as, if technically and legally feasible, sending a notification to Users by one of their contact details that he has. Please therefore check frequently this page, with reference to the last modification date at the bottom.

If changes affect processings which juridical basis is consent, the Data Controller would provide for collecting again User consent, if necessary.

Legal definitions and references

Personal Data
A personal data is every information that, directly on indirectly, also in connection with any other information, also included a personal identification number, makes identified or identifiable a physical person.

Usage Data
It’s information automatically collected by this Application (also by third parties applications integrated into this), as: IP addresses or domain names of computers used by the User who connects with this Application, URI (Uniform Resource Identifier) notation addresses , request time, method employed for sending request to server, answer file size, numeric code indicating server answer status (successful, error, etc.), country of origin, features of browser and operative system used by the visitor, various temporal connotations of the visit (ex. time spent on each page) and details about the journey into the Application, with specific reference to the sequence of visited pages, to parameters of operative system and to User’s IT background.

User
It’s the individual who uses this Application that, unless otherwise specified, coincides with the Interested party.

Interested party
It’s the physical person to who Personal Data refers.

Responsible for Processing (or Responsible)
The physical, juridical person, public administration or any other body which processes personal data on behalf of Data Controller, according to what exposed in this privacy policy.

Data Controller (or Controller)
The physical or juridical person, public authority, service or other body that, individually or together with others, determines the purposes and means for personal data processing and the employed tools, here included the safety measures for functioning and fruition of this Application. The Data Controller, unless otherwise specified, is the Owner of this Application.

This Application
The hardward or software tools by which Users’ Personal Data is collected and processed.

Service
The Service provided by this Application as defined by respective terms (if present) on this website/application.

European Union (or EU)
Unless otherwise specified, every reference to European Union into this document is meant to be extended to all actual member countries of European Union and of the European Economic Space.

Cookie
Cookies are Tracking Tools consisting of small parts of data, filed into the User’s brower.

Tracking Tool
With “Tracking Tool” it is meant every technology -ex. Cookie, unique identifiers, web beacons, integrated script, e-tag and fingerprinting- that enables tracking of Users, for example by collecting or saving information on User’s device.

Legal references
This privacy policy is written on the basis of multiple set of laws, including art. 13 and 14 of UE Regulation 2016/679.
Unless otherwise specified, this privacy policy only refers to this Application.

Last modification: 10 February 2022
Iubenda hosts this content and collects only strictly necessary Personal Data at its provision.