Privacy Policy

In providing services and in the legal relationships pertaining to its business, the sole proprietorship Azienda Agrituristica Bergi recognizes and respects the right to personal data protection as a fundamental human right.
In the current regulatory environment, maintaining control over one's information is essential and requires a constant and conscious commitment to ensuring adequate levels of personal data protection.
It is useful to remember, in this regard, that Regulation (EU) 679/2016 (General Data Protection Regulation – GDPR) defines “personal data” as any information relating to an identified or identifiable natural person (“data subject”).
According to the GDPR, "processing" means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
This information applies only to this website and not to third-party websites accessible via hyperlinks on the Website.

Data Controller
The Data Controller is Azienda Agrituristica Bergi with headquarters in Castelbuono (Pa), C.da Bergi This email address is being protected from spambots. You need JavaScript enabled to view it.

Types of data processed and purposes of processing.
Processing operations are carried out with reference only to the personal data necessary for using the Site and its features. The types of data processed include, in particular:

• Browsing data: the computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This data is used solely to obtain anonymous statistical information on site usage and to monitor its proper functioning. It is not, and will not be, used by the Data Controller for profiling purposes.
• Data provided voluntarily by the user, specifically: email address and other personal data contained in emails sent to the addresses listed on the Site and/or in attachments, for the purpose of carrying out the processing activities necessary to respond to user requests; name and email address provided by completing the newsletter subscription form, for the purpose of sending periodic informational communications and in-depth analyses on technology law;
  name, email address, and any other personal data provided by completing contact and information request forms, for the purpose of responding to user requests;
  The data provided by the user may be acquired and stored by the Data Controller, including in electronic form, for the purposes related to their collection through the Site and the Platform and will not be used for profiling or direct marketing activities.

Processing methods
The processing will be carried out, primarily using IT tools, by authorized collaborators and employees, who operate according to the instructions given by the Data Controller, with logic strictly related to the indicated purposes and, in any case, in a way that guarantees the security and confidentiality of the processed data.
Specific security measures are adopted to minimize the risk of destruction or loss, even accidental, of the data being processed, unauthorized access, unauthorized processing, or processing that does not comply with the purposes indicated in this policy. Data retention period
The data being processed will be retained for a period of time no longer than is necessary to achieve the purposes for which they were collected or subsequently processed and, in particular:

• The data provided by sending emails or filling out the contact forms on the site will be retained for the time necessary to provide feedback;
• The data provided for the purpose of subscribing to the newsletter service will be processed until the interested party exercises the right of opposition pursuant to Article 21 of the GDPR.
• After the retention periods have expired according to the indicated criteria, the Data Controller will adopt measures aimed at deleting or anonymizing data that does not need to be retained due to specific regulatory obligations.

Categories of recipients:
The data subject's personal data may be disclosed to specifically authorized company collaborators and employees, within their respective areas of responsibility. Except for the cases mentioned above, personal data will not be disclosed, disseminated, assigned, or otherwise transferred to third parties for unlawful purposes or purposes unrelated to the purpose of collection and, in any case, without providing appropriate information to the data subjects and obtaining their consent, where required by law. This does not affect the possible disclosure of data at the request of Judicial Authorities or Public Security, in the manner and cases provided by law.
Personal data will not be transferred abroad, to countries or international organizations outside the European Union that do not guarantee an adequate level of protection, as recognized pursuant to Art. 45 GDPR, based on an adequacy decision by the EU Commission. If necessary for the provision of the Site's services, the transfer of personal data to non-EU countries or international organizations for which the Commission has not adopted an adequacy decision pursuant to Art. 45 GDPR will take place only if adequate guarantees are provided by the recipient country or organization, pursuant to Art. 46 GDPR, and provided that data subjects have enforceable rights and effective legal remedies.
In the absence of an adequacy decision by the Commission pursuant to Article 45 of the GDPR or appropriate safeguards pursuant to Article 46 of the GDPR, including binding corporate rules, the cross-border transfer will take place only if one of the conditions set out in Article 49 of the GDPR is met.

Data Subject Rights
The data subject has the right to access their personal data, to request its rectification, updating, deletion, or restriction if incomplete, incorrect, or collected unlawfully, as well as to object to its processing for legitimate reasons or to obtain its portability.
In particular, pursuant to Articles 15-22 of Regulation (EU) 679/2016, the interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him or her, even if not yet recorded, and communication of such data in an intelligible form.
The interested party also has the right to obtain information on:

• of the purposes and methods of processing;
• of the logic applied in case of processing carried out with the aid of electronic instruments;
• of the identifying details of the Data Controller, the Data Processor and the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as persons authorised to process them.

The interested party has the right to obtain:

• the updating, rectification or integration of your data; the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes of the processing;
• the limitation of processing, when one of the hypotheses referred to in Article 18 GDPR applies;
• certification that the operations referred to in letters a), b) and c) have been brought to the attention of those to whom the data were communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected;
• The transmission of data concerning him or her, provided to the Data Controller and processed on the basis of the data subject's consent for one or more specific purposes, in a structured, commonly used, and machine-readable format. Pursuant to Art. 20 of the GDPR, the data subject also has the right to transmit such data to another controller without hindrance and, if technically feasible, to have the personal data transmitted directly from one controller to another. If the processing is based on consent, the data subject has the right to withdraw his or her consent at any time (pursuant to Art. 7, paragraph 3, GDPR).

The interested party has the right to object, in whole or in part:

• for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
• to automated decision-making processes that significantly affect you. Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint and/or report to a supervisory authority, in particular in the Member State in which he or she habitually resides, works or where the alleged infringement occurred.

Exercise of rights
The above rights are exercised by making a request to the Data Controller, directly or through an authorised person, orally or by sending an email to the This email address is being protected from spambots. You need JavaScript enabled to view it. request is made freely and informally by the interested party, who has the right to receive an appropriate response within a reasonable timeframe, depending on the circumstances of the case.
To exercise their rights, the data subject may avail themselves of non-profit organizations, associations, or bodies whose statutory objectives are in the public interest and which are active in the protection of data subjects' rights and freedoms with regard to personal data protection, granting them a suitable mandate for this purpose. The data subject may also seek assistance from a trusted person.
You can receive further information on the purposes and methods of processing of personal data by writing to the email This email address is being protected from spambots. You need JavaScript enabled to view it. “Privacy” in the subject.
To learn about your rights, file a complaint, and stay up-to-date on the legislation regarding the protection of individuals with regard to the processing of personal data, the interested party can contact the Italian Data Protection Authority by consulting the website at http://www.garanteprivacy.it/.