Privacy Policy In accordance with the provisions of the General Data Protection Regulations (RGPD) relating to "confidentiality", the company Le Orme snc of Cinzia De Letis and Matthieu Schmit , responsible for data processing, informs that, following its navigation on the site www.oltre-bio.it/Enjoy/ , by filling out our forms and related activities, our company will collect and process your personal data. For clarity, we specify the following definitions: a) Personal data Personal data: any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); is deemed to be an "identifiable natural person" a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements specific to his physical, physiological, genetic, psychic, economic, cultural or social identity; b) Processing Any operation or set of operations whether or not carried out using automated processes and applied to data or sets of personal data, such as the collection, recording, organization, structuring, storage , adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, linking or interconnection, limitation, erasure or destruction; c) Processing limit The marking of stored personal data, with a view to limiting their future processing; d) Profiling Any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict matters relating to performance at work, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or movements of that natural person; e) Pseudonymization The processing of personal data in such a way that they can no longer be assigned to a specific data subject without resorting to additional information, provided that this additional information is stored separately and subject to technical and organizational measures in order to to ensure that the personal data is not assigned to an identified or identifiable natural person; f) Controller The natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing; where the purposes and means of such processing are determined by Union law or the law of a Member State, the controller may be designated or the specific criteria applicable to his designation may be provided for by the law of the Union or by the law of a Member State; g) Subcontractor The natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller; h) Recipient The natural or legal person, public authority, service or any other body which receives communication of personal data, whether or not it is a third party. However, public authorities which are likely to receive the communication of personal data in the context of a specific fact-finding mission in accordance with Union law or the law of a Member State are not considered to be recipients; the processing of these data by the public authorities in question complies with the applicable data protection rules according to the purposes of the processing; i) Third parties A natural or legal person, public authority, service or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor , are authorized to process personal data; j) Consent Consent of the data subject, any free, specific, informed and unequivocal manifestation of will by which the data subject accepts, by a statement or by a clear positive act, that personal data concerning him or her be the subject of a treatment; 2. Name and address of the owner of the processing of personal data The owner of the processing of personal data for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union and other provisions relating to data protection is: the company Le Orme snc , Via G. Pepe 19 - 86030 Lucito , Italy, telephone: 3713150494, email: leorme.snc@gmail.com, website: www .oltre-bio.it/Enjoy/ 3. Name and address of the data protection officer The controller's data protection officer is the legal representative. Any interested person may, at any time, contact our data protection officer directly with any questions or suggestions relating to data protection. 4. Cookies The Internet pages of Enjoy Molise use cookies. Cookies are text files that are stored in a computer system via an Internet browser. Many websites and Internet servers use cookies. Many cookies contain what is called a cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string with which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited websites and servers to differentiate the test subjects' individual browser from other Internet browsers that contain other cookies. A specific internet browser can be recognized and identified using the unique cookie ID. Through the use of cookies, Enjoy Molise can provide users of this website with more user-friendly services that would not be possible without the setting of cookies. By means of a cookie, the information and offers on our website can be optimized with the user in mind. Cookies allow us, as mentioned above, to recognize the users of our site. The purpose of this recognition is to facilitate the use of the site by users. The user of the website that uses cookies, for example It is not necessary to enter access data each time you access the website, as these are taken over by the website and the cookie is then stored on the user's computer system. Another example is a shopping cart cookie in an online store. The online store stores the items that a customer has placed in the virtual shopping cart via a cookie. The interested party can, at any time, prevent the installation of cookies on our website through the corresponding configuration of the Internet browser used, and can therefore permanently refuse the installation of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software. This is possible in all popular internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable. Read the cookies policy 5. Collection of general data and information The Enjoy Molise website collects a series of general data and information when a data subject or an automated system calls up the website. This general data and information is stored in server log files. The types of browsers and versions used can be collected (1), (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (referred to as "referrers"), (4) the sub-websites, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the access system internet service provider and (8) other similar data and information that may be used in the event of an attack on our computer systems. By using this general data and information, Enjoy Molise does not draw any conclusions about the interested party. Rather, this information is necessary to (1) deliver the content of our website correctly, (2) optimize the content of our website and its advertising, (3) ensure the long-term viability of our information systems and our technology. (4) provides law enforcement authorities with the information necessary for prosecution in the event of a computer attack. This is why Enjoy Molise statistically analyzes the data and information collected anonymously in order to increase the protection and data security of our company and to guarantee an optimal level of protection of the personal data processed. Anonymous server log file data is stored separately from any personal data provided by an interested party. 6. Registration on our website The interested party has the possibility of registering on the website of the data controller, indicating their personal data. The personal data transmitted to the controller is determined by the respective input mask used for registration. The personal data entered by the interested party are collected and stored exclusively for internal use by the data controller and for their own needs. The controller may request the transfer to one or more processors (e.g. a parcel service) which also uses personal data for internal purposes that can be attributed to the controller. By registering on the website of the controller, the IP address assigned by the Internet service provider (ISP) is also stored and used by the data subject - date and time of registration. The storage of this data takes place in the background, which is the only way to prevent misuse of our services and, if necessary, to make it possible to investigate committed offenses. Therefore, the retention of this data is necessary to protect the data subject. This data is not transmitted to third parties, except in the event of a legal obligation to transmit the data or if the transfer serves the purpose of a prosecution. The registration of the data subject, with the voluntary indication of personal data, is intended to enable the controller to suggest persons or services that can be offered to registered users only due to the nature of the question. . Registered persons are free to change the personal data specified during registration at any time or to delete them completely from the data subject by the controller. The data controller provides, at any time, information to each interested party about the personal data stored on the data subject. In addition, the data controller will correct or delete personal data at the request or indication of the interested party, insofar as the law does not require a retention obligation. All employees of the controller are available to interested parties in this area as contact persons. 7. Subscribe to our newsletter On the Enjoy Molise website, users can subscribe to our newsletter. The input mask used for this purpose determines which personal data is to be transmitted, as well as when the controller orders the newsletter. Enjoy Molise, it regularly informs its customers and business partners via a newsletter about commercial offers. The newsletter can only be received by the interested party if (1) the data subject has a valid e-mail address and (2) his contact details for sending the newsletter. A confirmation email will be sent for the first time to the email address registered by a data subject for sending the newsletter, for legal reasons, as part of the double opt-in procedure. This confirmation e-mail serves to indicate whether the owner of the e-mail address subject to the data is authorized to receive the newsletter. When registering for the newsletter, we also store the IP address of the computer system assigned by the Internet service provider (ISP) and used by the data subject at the time of registration, as well as the date and time of registration. The collection of this data is necessary to understand later (possibly) misuse of a subject's e-mail address and therefore serves the legal protection of the controller. The personal data collected as part of a subscription to the newsletter will only be used to send our newsletter. In addition, newsletter subscribers can be informed by e-mail, provided that this is necessary for the operation of the newsletter service or for a registration in question, as this may occur in the event of changes to the newsletter offer. , or in the following cases: in the event of a change in technical circumstances. The personal data collected from the newsletter service will under no circumstances be transferred to third parties. The subscription to our newsletter can be resolved at any time by the interested party. The consent to the storage of personal data, which the data subject has provided for sending the newsletter, can be revoked at any time. For the purpose of revoking consent, a corresponding link can be found in each newsletter. You can also subscribe to the newsletter at any time directly on the controller's website or inform the controller in a different way. 8. Possibility of contact via the website The Enjoy Molise website contains information that allows rapid electronic contact with our company, as well as direct communication with us, which also includes a general e-mail address (e-mail address ). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. These personal data transmitted on a voluntary basis by an interested subject to the controller are stored for the purpose of processing or to contact the data subject. There is no transfer of this personal data to third parties. 9. Routine deletion and blocking of personal data The controller processes and stores the personal data of the data subject only for the period necessary to achieve the purpose of classification, or insofar as this is granted by the legislator European Union or other legislators in the laws or regulations to which the controller is subject. treatment. If the purpose of the archiving is not applicable or if a retention period prescribed by the European legislator or another competent legislator expires, the personal data is regularly blocked or deleted in accordance with legal requirements. 10. Rights of the interested party The interested party has the right to exercise the rights recognized by the General Data Protection Regulation (GDPR): a) Right of access – article 15 b) Right of rectification – article 16 c) Right to erasure ( "right to be forgotten") – Article 17 d) Right to restriction of processing – Article 18 e) Obligation to notify regarding rectification, erasure of data or limitation of processing – article 19 f) Right to data portability – article 20 g) Right to object – article 21 h) Automated individual decision, including the profiling – article 22 12. Method of payment: data protection provisions regarding the use of PayPal as payment processor On this website, the data controller has integrated components of PayPal . PayPal is an online payment service provider. Payments are processed through the so-called PayPal account , which represent private or virtual business accounts. PayPal is also able to process virtual payments with credit cards when a user does not have a PayPal account . A PayPal account is managed via an e-mail address, which is why there are no classic account numbers. PayPal allows online payments to third parties or to receive payments. PayPal also accepts trust and offers buyer protection service features. PayPal 's European operating company is PayPal (Europe) SARL & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. If the person chooses " PayPal " as payment option in the online shop during the ordering process, we automatically send the person's contact details to PayPal . By selecting this payment option, the person agrees to the transfer of personal data necessary for payment processing. The personal data sent to PayPal is usually the full name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. The processing of the purchase agreement also requires personal information, which is related to the respective order. The transmission of data is intended for the processing of payments and the prevention of fraud. The controller transfers personal data to PayPal , in particular, if they are given a legitimate interest in the transmission. Personal data exchanged between PayPal and the head of data will be sent by PayPal to the economic credit bureaus. This transmission is intended for identity and credit checks. PayPal , if necessary, transmits personal data to subsidiaries or subcontractors and service providers insofar as this is necessary to fulfill its contractual obligations or for the data to be processed in order. The individual has the option to withdraw consent to the processing of personal data at any time by PayPal . A revocation will not affect the personal data to be processed, or used transmitted in accordance with (contractual) payment processing. The applicable PayPal data protection provisions can be retrieved at https://www.paypal.com/us/webapps/mpp/ua/privacy-full . 13. Retention period of personal data The criteria used to determine the retention period of personal data are the respective retention periods required by law. At the end of this period, the corresponding data is regularly deleted, provided that it is no longer necessary for the fulfillment of the contract or the implementation of the contract.