Keglevich
PRIVACY POLICY
Stock Srl gives protecting and respecting privacy the highest priority.
This Privacy Policy explains how Stock Srl (hereafter the “Company“) processes personal data, of which the Company is the data controller, collected from www.Keglevich.it
In addition to these provisions, the Code of Conduct and the Cookies Policy apply.
How can you contact us?
The Company (data controller) contact details are:
Stock Srl, via Tucidide, 56 bis- Torre 2, 20132 Milan, Italy
tel.: +39 02 4968 1201
e-mail: gdpr@stockspirits.com
What do the terms used in this Policy mean?
Personal data
Information on an individual that allows identification, either alone or in combination with other information held or obtainable by the data controller.
Personal data which includes information on website users, including candidates for employment with companies that use online forms.
Personal data use
All operations carried out on personal data, including the collection from individuals or the acquisition from other sources, registration, storage, modification, transfer, and disclosure to third parties.
GDPR
Regulation (EU) 2016/679 of the European Parliament and Council, of 27 April 2016, on the protection of individuals regarding personal data processing and free movement, repealing Directive 95/46/EC (general regulation on data protection) (OJ L 119, 4/5/2016, pages 1-88).
Us
Stock S.r.l.
You
Individual whose data is used by the Company, i.e. website user, including job applicants who use online forms.
How do we use personal data?
We use the personal data provided by users on our sites for website management and the purposes described below:
- ensure compliance with legal restrictions on advertising and promotion of alcoholic beverages,
- competitions and events,
- reply to requests,
- website optimisation and site user experience,
- newsletter subscription,
- recruiting activities,
- managing data subject right requests and complaints.
Ensure compliance with legal restrictions on advertising and promotion of alcoholic beverages
We use personal data, including country of residence and date of birth, which is provided by users, to ensure that advertisements and promotional messages related to alcoholic beverages are not directed to minors. The data processing legal basis is the fulfilment of a legal obligation to which the data controller is subject (GDPR Article 6, paragraph 1, letter c)) prescribed by the national legislation which limits advertising and promotion of alcoholic beverages.
The data is deleted once the age verification has been successfully completed. Information on the successful execution of the verification is stored in the memory of the user’s device through cookies only until the end of the website browsing session (session cookies).
Newsletter subscription
We use your personal information, including name, surname and e-mail address to send you a newsletter with updates on promotional events and products. The data processing legal basis is the performance of pre-contractual measures requested by the data subject (GDPR Article 6, paragraph 1, letter b)).
Unless you unsubscribe, your data will be kept for a year for all promotional and social media information exchanges and two years for competition promotional activities.
Website optimisation and site user experience
We use your personal data, including IP address, information about your operating system, browser and device, and activity on our websites, recording and storing it in cookies to monitor usage patterns, customise content and improve the site use experience.
For any information regarding cookie use, we refer to the Company’s cookies policy.
The data processing legal basis is our legitimate interest (GDPR Article 6, paragraph 1, letter f)) in optimising the use of our website by:
- site traffic analysis and identification of user habits,
- adapting the site to user interests,
- adapting the site to user devices,
- faster searches,
- Returning user recognition.
Your data will be kept for a year, for the purposes above.
reply to requests
We use personal data, including the e-mail address, telephone number and other data you choose to provide us for information requests, to contact you, reply to your request or take other message-related actions. The data processing legal basis is the performance of pre-contractual measures requested by the data subject (GDPR Article 6, paragraph 1, letter b)).
Your data will be kept for the period necessary to respond to your request or take other message-related actions. This will not exceed a year.
Recruiting activities
We use your name, e-mail address, telephone number, country of residence and information on your professional interests, and other details you share with us by attaching documents (including CV) to your application for employment or completing the form. We use this data to create a list of candidates for vacant positions and to contact you for questions related to the recruitment process.
The data processing legal basis is the performance of pre-contractual measures requested by the data subject (GDPR Article 6, paragraph 1, letter b)).
Your data will be kept for a year from the application submission date using the online form.
Competitions and events:
If you participate in competitions and events organised by the Company, you will find detailed information on your data processing and legal basis in the website section dedicated to the competition or event.
Managing data subject right requests and complaints.
We use your personal data, including the e-mail address and the data you chose to send in the e-mail message, to process requests and complaints so you can exercise your rights, take the necessary actions in response to your requests or complaints and give feedback.
The data processing legal basis is the fulfilment of a legal obligation to which the data controller is subject (GDPR Article 6, paragraph 1, letter c))
Your data will be stored for 10 years after the request or complaint date.
Who has access to your personal data?
Your personal data may be accessed by duly authorised Company employees, and external suppliers, appointed privacy managers, who provide service support.
Other Stock Spirits Group PLC Group companies may access your personal data, for purposes related to the IT infrastructure management based on contractual agreements.
If you wish to view the list of privacy managers and other subjects to whom we communicate the data, please contact us.
What rights can you claim?
You have the right to:
- request access to your personal data, confirmation of its use and related copies, information on the purpose, personal data categories, categories of recipients to whom personal data have been or will be disclosed, personal data retention period, and the source from which the data was acquired (under GDPR Article 15)
- request a copy of the personal data you have provided, request that it be given to you or a third party you have appointed, in a structured, commonly used and electronically readable format (under GDPR Article 20);
- request the correction of data if it is incomplete or inaccurate (under GDPR Article 16)
- request the deletion of all or part of your personal data (under GDPR Article 17)
- request the data use limitation or suspension (under GDPR Article 18).
You have the right to:
- oppose the use of your personal data based on our legitimate interests for reasons related to your situation. Following this objection and based on the situation, the Company will determine whether the protection of its interests, rights and freedoms prevail over interests pursued through using your personal data. If an objection is founded and there is no legal basis, the data will be deleted (under GDPR Article 21, paragraph 1)
The exercise of these rights is subject to certain exceptions aimed at safeguarding the public and Company interests. If you exercise any of the above rights, it will be the Company’s responsibility to verify your entitlement and reply normally within a month.
For any complaints or reports regarding the processing of your data, the Company will make every effort to respond to your concerns. You can lodge complaints or reports to the data protection authority, using the relevant contact details: Authority for the protection of personal data – E-mail: garante@gpdp.it – Certified email: protocollo@pec.gpdp.it.
How are changes to this privacy policy communicated?
Any future changes to this Privacy Policy will be published on this website and possibly electronically communicated to the data subject, indicating the changes and the effective date.
