{"id":1791,"date":"2021-01-20T17:31:32","date_gmt":"2021-01-20T16:31:32","guid":{"rendered":"https:\/\/www.biosio.it\/privacy-policy\/"},"modified":"2026-10-06T11:36:46","modified_gmt":"2026-10-06T09:36:46","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.biosio.it\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy & Cookie Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

General information<\/h2>

This notice describes the processing of personal data carried out through the website https:\/\/www.biosio.it\/ pursuant to Regulation (EU) 2016\/679 (GDPR). It does not apply to external websites that may be reached through links contained on this website.<\/p>

Data Controller<\/h2>

The Data Controller is Azienda Agricola POPPO di Enicanti Leonardo<\/strong>, with registered office at Via per Lecco, 12 BELLANO (LC).<\/p>

Data processed through the website<\/h2>

Browsing data<\/h3>

The IT systems used to operate this website automatically collect certain technical data, such as IP address, device and browser information, date and time of the request, requested resource and technical connection data. These data are processed to ensure the operation and security of the website and, where applicable, to produce aggregate statistics on its use.<\/p>

The legal basis is the need to provide the service requested by the user and, for website security and proper technical management, the legitimate interest of the Data Controller. Technical data are retained for the time necessary for these purposes, unless longer retention is required for security reasons or to investigate unlawful activity.<\/p>

Data provided voluntarily<\/h3>

Sending emails or requests through any contact forms involves the processing of the data voluntarily provided by the user solely in order to reply to the request. Any data collected through the website are forwarded to the Data Controller and are not used by the website for marketing or profiling purposes unless a specific notice is provided and separate consent is obtained.<\/p>

The legal basis is the performance of measures requested by the data subject or, where applicable, the legitimate interest of the Data Controller in replying to communications received. Data are retained for the time necessary to handle the request, without prejudice to any subsequent contractual relationship, legal obligations or the Data Controller’s internal procedures.<\/p>

Provision of data<\/h3>

Providing data by email or through contact forms is optional. Any fields marked as required are necessary only to allow the Data Controller to receive and handle the request; failure to provide them may make it impossible to reply.<\/p>

Services used by the website<\/h2>

The following sections are shown only when the relevant service is actually used. Non-essential services are activated in accordance with the preferences expressed by the user through the consent management system.<\/p>

For non-essential services, the legal basis is the user’s consent. Services strictly connected with website security and abuse prevention may be used on the basis of the Data Controller’s legitimate interest in protecting the website, without prejudice to any consent required for non-technical cookies or similar tools. Cookie storage periods are shown in the dedicated table.<\/p>

WPML<\/h3>

WPML is a WordPress plugin for multilingual website management<\/strong>. It can store the current language, browser-language redirection preferences and other information required to display the correct language version of the website.<\/p><\/div><\/div>

These services allow content or resources provided by external platforms to be integrated into the website. Loading them may establish a connection to the relevant provider’s servers and transmit the technical data required for communication. Where a service involves non-essential tracking, it is activated in accordance with the user’s consent preferences.<\/p>

YouTube<\/h3>

YouTube is an external multimedia content<\/strong> service provided by Google, used to display videos hosted on YouTube directly on the website without hosting those video files on the website server. The embedded player may receive technical device and connection information and data relating to interaction with the video.<\/p>

The website may also use YouTube’s Privacy Enhanced Mode<\/strong>, based on the youtube-nocookie.com<\/code> domain, which limits the use of embedded video views for personalising the YouTube experience and advertising. In some configurations the player may also be loaded only when the user chooses to start the content; in that case the connection to YouTube and processing related to the player begin when the player is actually loaded.<\/p>

Provider: Google. Privacy Policy<\/a><\/p><\/div>

Google Maps<\/h3>

Google Maps is an external maps and geographic content<\/strong> service provided by Google, used to display interactive maps, locations, points of interest and geographic information directly within website pages. Loading a map establishes a connection to Google systems and may transmit technical device, IP address and interaction data. Where loading is not strictly necessary, it may be subject to the user’s consent.<\/p>

Provider: Google. Privacy Policy<\/a><\/p><\/div><\/div>

Recipients and international transfers<\/h2>

Data may be processed by technical providers acting on behalf of the Data Controller or, for the external services identified in this notice, by the relevant providers according to their respective roles and terms. Where a service involves transfers of data outside the European Economic Area, such transfers are carried out using the safeguards provided for by the GDPR, such as adequacy decisions, the Data Privacy Framework where applicable, or Standard Contractual Clauses. Information on the applicable safeguards and, where provided for, how to obtain a copy may be requested from the Data Controller or found in the provider privacy notices linked from this page.<\/p>

Data subject rights<\/h2>

Where provided for by the GDPR, data subjects may exercise their rights of access, rectification, erasure, restriction, portability and objection, and may withdraw any consent previously given without affecting the lawfulness of processing carried out before withdrawal.<\/p>

A complaint may also be lodged with the competent supervisory authority.<\/p>

The website does not carry out decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject, unless this is expressly stated in a specific privacy notice.<\/p>

Cookie Policy<\/h1>

Cookies and tracking tools<\/h2>

Cookies<\/strong> are small text files that a website may store on a user’s device. They may be used to ensure the correct operation and security of the website, remember preferences, obtain statistics or, subject to consent, measure advertising activity and perform profiling or remarketing. Cookies may be first-party, when they are managed directly by the website being visited, or originate from third-party services integrated into website pages, and they may last only for the browsing session or remain stored for a defined period. Technical and necessary cookies<\/strong> are those required for the operation of the website or to provide functions requested by the user and do not require prior consent. Analytics cookies<\/strong> are used to measure website traffic and usage: they may be treated as equivalent to technical cookies only where the conditions established by applicable law and the competent supervisory authority are met; otherwise they are used only with the user’s consent. Profiling and marketing cookies<\/strong> and other tools used for remarketing, advertising measurement or personalised advertising are activated exclusively after consent. Some functions may also use third-party services<\/strong>: being a \u201cthird party\u201d does not by itself determine the purpose of a cookie or other tool, which instead depends on the specific service used and on its category. Information about the cookies actually present, their purposes and storage periods is provided in the dedicated table and in the descriptions of the services used by the website.<\/p>

Consent management<\/h2>

Where cookies or other tracking tools require consent, users may give, refuse or withdraw that consent at any time through the preference panel or privacy widget available on the website. Withdrawal does not affect the lawfulness of processing carried out before preferences were changed.<\/p>

For tools managed by third parties, users may also use any opt-out mechanism provided by the relevant provider, follow the instructions in that provider’s privacy policy, or contact the provider directly.<\/p>

First-party and third-party tools<\/h2>

The website may use tools managed directly by the Data Controller and tools connected to services supplied by third parties. Third-party providers may receive the technical data required to operate their services according to their own privacy notices. The presence of an external service does not automatically imply profiling: purpose, legal basis and consent requirements depend on the specific service used.<\/p>

Duration of tracking tools<\/h2>

The duration of cookies and similar tools may vary. Some expire at the end of the browsing session, while others remain stored for a period defined by the Data Controller or the relevant provider. Where available, the specific duration is shown in the cookie table or in the provider’s documentation.<\/p>

How to control or delete cookies and similar technologies through browser or device settings<\/h2>

Users may use browser or device settings to see which cookies or similar technologies are stored, block them, or delete them. These controls operate at a technical level and generally do not provide the same category-based control as the website’s consent panel.<\/p>

More information is available in the help pages of the main browsers:<\/p>