Privacy Policy South Tyrolean Apple PGI
Version 1.0 | Last updated: 24.04.2026
In the following section you will find information on how we handle your personal data collected while you browse our website and use the services we offer. The processing of your personal data is always carried out in accordance with the principles of lawfulness, fairness and transparency, taking into account all applicable provisions and in compliance with Regulation (EU) 2016/679 (GDPR).
1. Data Controller
South Tyrolean Apple Consortium (Südtiroler Apfelkonsortium) Jakobistraße 1/A, I-39018 Terlan (BZ) | South Tyrol / Italy Phone: +39 0471 054066 E-mail: info@suedtirolerapfel.com | VAT no.: IT 02241830211
For any data protection enquiries you may contact us at any time.
2. Data Protection Officer (Art. 37 GDPR)
[PLACEHOLDER — to be confirmed/adjusted. If the same DPO as for the Speck Consortium is retained:]
Mr Gianluigi Muscas, Attorney-at-law Dentons Europe Studio Legale Tributario Piazza degli Affari 1, 20123 Milan, Italy E-mail: Gianluigi.Muscas@dentons.com PEC: gianluigi.muscas@milano.pecavvocati.it
3. Categories of personal data processed
The South Tyrolean Apple Consortium processes the following categories of personal data (non-exhaustive list):
Identification data: first name, last name, title
Contact data: e-mail address, postal address
Technical data: IP address, browser type and version, operating system, referrer URL, date and time of access
Communication data: content of enquiries submitted via the contact form
Consent data: timestamp and type of consents granted or withdrawn
Only ordinary personal data are processed. No special categories of personal data within the meaning of Art. 9 GDPR are processed.
4. Purposes of processing, legal bases and retention periods
Personal data are processed for the purposes set out below. For each purpose, the relevant legal basis pursuant to Art. 6 GDPR and the corresponding retention period are indicated.
a) Operation and security of the website (Art. 6(1)(f) GDPR – Legitimate interest): When you access the website, technical connection data (IP address, browser data, timestamp) are automatically recorded in server log files. This serves to ensure system security, troubleshooting and the analysis of misuse. The data are stored for a maximum of 30 days and subsequently deleted.
b) Handling of contact and information enquiries (Art. 6(1)(b) GDPR – Performance of a contract / pre-contractual measures): Data submitted via the contact form (https://www.suedtirolerapfel.com/en/contact.html) are used exclusively for handling your enquiry. The provision of the data marked as mandatory (*) is necessary in order to process your enquiry; without such data we cannot reply to you. Optional fields may be filled in voluntarily. The data are deleted upon completion of the handling of the enquiry and after the expiry of any statutory retention obligations.
c) Newsletter and marketing communication (Art. 6(1)(a) GDPR – Consent): With your express consent we will send you the "South Tyrolean Quality Products" newsletter, containing information about the South Tyrolean Apple PGI, recipes, events and news. Subscription is performed via a double opt-in procedure; the date and confirmation of the subscription are logged. The data (first name, last name, e-mail address) are stored for the duration of the newsletter subscription. The provision of these data is voluntary; without consent we cannot send you the newsletter. You may withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in the newsletter or by sending an e-mail to info@suedtirolerapfel.com.
d) Profiling and personalised advertising (Art. 6(1)(a) GDPR – Consent): Subject to your separate consent – which you may grant in the contact form – we analyse your usage behaviour on the website in order to provide you with information and advertising tailored to your interests. The provision of these data is voluntary. The profiling data are stored for a maximum of 12 months from the granting of consent. After this period the data are deleted or anonymised. You may withdraw your consent at any time (see section 8).
e) Compliance with legal obligations (Art. 6(1)(c) GDPR – Legal obligation): Where required by law (e.g. tax and accounting retention obligations) we process your data for the fulfilment of such obligations. Retention periods are determined by the applicable legal provisions (in Italy, generally 10 years pursuant to tax and commercial law).
5. Automated decision-making and profiling (Art. 22 GDPR)
The South Tyrolean Apple Consortium does not take any decisions based solely on automated processing – including profiling – which produce legal effects concerning you or similarly significantly affect you.
If you have given your consent to profiling (see section 4d), this is carried out exclusively for the purposes of personalised communication and advertising. The results of such analysis do not produce legally binding effects on you. You may object to profiling at any time (see section 8).
6. Recipients of the data and disclosure
Your personal data may be made accessible to the following categories of recipients:
a) Internal staff (Art. 29 GDPR): employees and collaborators of the South Tyrolean Apple Consortium who are authorised to process the data, as well as any system administrators, to the extent necessary for their tasks.
b) Processors (Art. 28 GDPR): external service providers acting on our behalf, with whom a data processing agreement has been signed, including IT service providers, hosting providers, the web agency and CMS maintenance provider Consisto GmbH (Brixen), the provider of the consent management solution Cybot A/S (Cookiebot, Denmark), newsletter delivery providers and web analytics providers. An up-to-date list of processors is available upon request.
c) Independent controllers: tax and legal advisors, courts and chambers of commerce as well as public authorities – to the extent necessary for the fulfilment of legal obligations. Such recipients act as independent controllers within the meaning of Art. 4(7) GDPR.
Your data will not be disseminated to unauthorised parties or disclosed for purposes other than those indicated.
7. Transfer of data to third countries (Arts. 44 et seq. GDPR)
In connection with the use of third-party services (in particular YouTube and possibly further tools such as Google Analytics), your data may be transferred to countries outside the European Union or the European Economic Area (EEA), in particular to the United States.
Such transfers take place on the basis of suitable safeguards pursuant to Art. 46 GDPR, in particular through:
EU Standard Contractual Clauses (SCCs) pursuant to the European Commission's implementing decision
adequacy decisions of the European Commission (where available)
certification under the EU-US Data Privacy Framework (where applicable)
Detailed information on the services used and the relevant safeguards can be found in the privacy policies of the respective providers.
8. Data subject rights (Arts. 15–21 GDPR)
You have the following rights vis-à-vis the South Tyrolean Apple Consortium:
Right of access (Art. 15 GDPR): you may request confirmation and information about the processing of your data.
Right to rectification (Art. 16 GDPR): you may request the rectification of inaccurate data or the completion of incomplete data.
Right to erasure (Art. 17 GDPR): you may request the erasure of your data, provided that no legal retention obligation precludes this.
Right to restriction (Art. 18 GDPR): you may request the restriction of processing under the conditions provided for by law.
Right to data portability (Art. 20 GDPR): you may receive your data in a structured, machine-readable format or have them transmitted to another controller.
Right to object (Art. 21 GDPR): you may object at any time to the processing of your data based on Art. 6(1)(f) GDPR (legitimate interest), including any related profiling.
Right to withdraw consent (Art. 7(3) GDPR): a consent given may be withdrawn at any time with effect for the future, without affecting the lawfulness of the processing carried out prior to the withdrawal.
Right to lodge a complaint (Art. 77 GDPR): you have the right to lodge a complaint with the competent supervisory authority. In Italy: Garante per la Protezione dei Dati Personali, www.garanteprivacy.it.
To exercise your rights please contact us in writing at: South Tyrolean Apple Consortium, Jakobistraße 1/A, I-39018 Terlan (BZ), Italy, or by e-mail to info@suedtirolerapfel.com.
9. Contact form
When you contact us via the contact form (https://www.suedtirolerapfel.com/en/contact.html), the data you provide (name, e-mail, message) are processed for the handling of your enquiry. Fields marked as mandatory (*) are required for the handling of the enquiry; without these data we cannot process your enquiry. Legal basis: Art. 6(1)(b) GDPR. The data are deleted upon completion of the handling and after the expiry of statutory periods.
In the contact form you may additionally grant – on a voluntary basis and independently of one another – your consent to the processing of your data for marketing and/or profiling purposes (see sections 4c and 4d). Granting such consents is not a precondition for the handling of your enquiry.
10. Newsletter
We send our newsletter only with your express consent (Art. 6(1)(a) GDPR). Subscription is performed via a double opt-in procedure: after subscribing, you will receive a confirmation e-mail by which your consent is documented upon confirmation. Subscription is voluntary; without consent you will not receive the newsletter.
You may unsubscribe from the newsletter at any time, e.g. via the unsubscribe link at the end of every newsletter or by sending an e-mail to info@suedtirolerapfel.com. Following the withdrawal, your data will be promptly removed from the mailing list.
[PLACEHOLDER: name the newsletter delivery provider, e.g.: "For the dispatch of the newsletter we use the service provider [Brevo / MailChimp / …], with whom a data processing agreement pursuant to Art. 28 GDPR has been signed."]
11. Cookies, web analytics and third-party services
This website uses cookies and similar tracking technologies. Consent management is handled through the consent management platform Cookiebot (Cybot A/S, Denmark). Detailed information on the cookies used, their purposes and durations as well as your settings options can be found on the Cookies page or in the cookie banner, which you can recall at any time via the "Cookie settings" link in the footer of the website.
[PLACEHOLDER: please activate or remove the items below depending on actual usage.]
Google Analytics: web analytics service provided by Google LLC. Analysis of user behaviour to optimise the website. Used with IP anonymisation. Legal basis: consent (Art. 6(1)(a) GDPR).
Google Ads / Remarketing: use of cookies for targeted advertising on the Google advertising network. Legal basis: consent (Art. 6(1)(a) GDPR).
YouTube: integration of videos in extended privacy mode. Data transfer to YouTube/Google takes place only when the video is started. Legal basis: consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR), depending on the configuration.
Facebook / Meta social plugins: deactivated by default. Activation requires a click by the user. Legal basis: consent (Art. 6(1)(a) GDPR).
12. Data security
This website uses SSL/TLS encryption for the secure transmission of data (recognisable by "https://" in the address bar). We adopt appropriate technical and organisational measures pursuant to Art. 32 GDPR to protect your data against unauthorised access, loss or destruction.
13. Changes to this privacy policy
We reserve the right to update this privacy policy where necessary, in particular in the event of changes to the legal framework or to the services we use. The current version is available on this page at all times. In the event of substantial changes affecting the consents you have given, we will inform you separately.
Note: this privacy policy is drafted in Italian. In the event of discrepancies, the Italian version shall prevail.
Version 1.0 | Last updated: 24.04.2026