This information describes how to manage the site in relation to the processing of personal data of users who consult it, as well as the processing practices of data transmitted by the data subject to the Data Controller through this site.
In compliance with articles 13 (for data collected from the interested party) and 14 (for data not collected from the interested party) of the Regulation (EU) 2016/679 (GDPR) the Users of this Website are given the following information, which refers to exclusively to the processing carried out through said Website and not through other websites possibly visited through links from the present, for which it is suggested to read the relative information provided by the respective Owners.
This Website and any services offered through the Website are reserved for individuals who have reached the age of eighteen. Therefore, the Data Controller does not collect personal data relating to subjects under the age of 18. Upon request by such Users, the Data Controller will promptly cancel all personal data inadvertently collected.
1. Data Controller
HOTEL LE GINESTRE PORTO CERVO with registered office in SP. 59 LOC. PORTO CERVO - 07021 - OT (hereinafter also "Owner"), as owner of the processing of personal data of users of the site leginestrehotel.com (hereinafter, "Users") provides the following privacy information pursuant to the 'art. 13 of Legislative Decree 196/2003 (hereinafter, the "Privacy Code") and pursuant to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter the "Regulation", the Regulation and the Privacy Code are together defined as "Applicable Regulations").
The Data Controller reserves the right to appoint a web agency or consultant, whose references may be communicated following a request to the addresses, as the person responsible for the processing of personal data handled for the purposes of technical assistance, maintenance, technical management and the like of this Site. indicated above. The Data Controller and the Data Processor also process the Users' data thanks to their own in-house representatives, specially designated and provided with instructions for the correct processing of personal data, also orally.
The person responsible for the protection of personal data is Salvatore Mocci, who can be contacted by email: firstname.lastname@example.org
2. Purpose of the processing
The personal data of the Users of the Website, as described above, will be processed in the manner and in the forms prescribed by the GDPR, for the performance of the functions proper to the Website, with particular, but not exclusive, reference to the procedures described therein collection. data, contact form, possible registration / access process reserved area, newsletter subscription and similar.
In particular, the personal data provided to the Data Controller will be processed for the following purposes:
- to respond to the specific requests made to the Owner by the Website and its communication tools (contact form, information request forms and the like);
- for the possible subscription to the newsletter and the consequent sending of various commercial and informative communications concerning the sector in which the Owner operates, with the appropriate consent given by the user
- for communications of an informative nature relating to the services of the same Owner, following the request for information via e-mail messages or by filling in the contact form and other communication tools;
- for other purposes ancillary to or related to those indicated above and in any case within the scope of the activities of the Website;
- for the processing of the e-mail address, provided by the interested party in the context of the sale of a product or service, also aimed at sending, without further consent, communications for the subsequent direct sale of products or services similar to those subject of the sale itself; the interested party can in any case express his / her refusal and oppose such treatment, both initially and subsequently, in an easy and free manner, following the instructions given in each subsequent communication.
Data collected through the Email platform
For complete information we specify that in sending communications via email, the Owner uses a compliant platform, which, through statistical tracking systems, allows to detect the opening of a message, the clicks made on the hyperlinks contained within of the email, from which IP address or with what type of browser the email is opened, and other similar details. The collection of such data is functional to the use of the platform and constitutes an integral part of the functionality of the system for sending messages. The User can also easily oppose further newsletter submissions also by clicking on the appropriate link for revocation of consent, which is present in each email containing the newsletter. Once the consent has been revoked, the Data Controller will send the User a message to confirm the revocation of the consent.
3. Legal basis of the treatment
The processing of personal data is based on the right to information, on the fulfillment of contractual obligations or social contact, or where necessary on consent by free and consciously filling in the appropriate information fields in the dedicated form.
4. Legitimate interest of the Owner
The processing of personal data is also based on the legitimate interest of the Data Controller, such as the exercise of its rights in the context of the information society, the performance of the contractual service and the implementation of direct marketing operations.
5. Mandatory transfer
The provision of data relating to navigation by Users, for the purposes mentioned above, depends on the degree of privacy that the User has enabled or disabled through their browser. In some cases the disabling may affect navigation on this website. For certain modules of this website, the provision of navigation data and / or the use of technical cookies is mandatory for the proper functioning of the website.
The provision of some personal data is in any case necessary for the structure of the Website and its procedures. The possible request for other optional data will instead be preceded by a special check of approval. The provision of all other data is optional, in accordance with the type of information that the User wishes to give to the Website.
6. Any recipients of personal data
The data may be communicated to connected companies, connected or controlled by the Data Controller, as well as to consultants, or even to third parties that operate, also in the name and on behalf of the Data Controller, for the evasion of the services connected to the purposes indicated in this information, both within the EU and outside the EU (in the latter case, they will be exclusively subjects adhering to the Privacy Shield protocol).
The navigation data and the like (for which we refer the above), as well as the profiling cookies also from third parties (for which we refer to the Cookie Information of this Web Site), which will be communicated to the respective third parties concerned, where these do not manage them directly as Data Controllers.
7. Period of conservation
The data provided by the interested party will be stored until the revocation is expressed by the interested party, including through action on his browser, cleaning of cookies, express request or otherwise expressed.
The navigation data will be kept for the technical time necessary to fulfill the functions for which they were collected.
8. Rights of the interested party
Each interested party has the right of access, rectification, cancellation (oblivion), limitation, receipt of notification in the event of rectification, cancellation or limitation, of portability, of opposition and of not being subject to an individual decision automated, including profiling, pursuant to articles from 15 to 22 of the GDPR.
These rights can be exercised in the forms and terms of art. 12 GDPR, by written communication sent to the Owner by e-mail to the address email@example.com. The Holder will make an adequate reply as soon as possible and in any case within 1 month from receipt of the request. Pursuant to articles 15 and following of the Regulations, the user has the right to request access at any time.
9. Right to revoke consent
You can revoke this consent at any time by sending an e-mail to the address of the Owner firstname.lastname@example.org; express communication at the headquarters of the Data Controller.
Each interested party has the right to lodge a complaint pursuant to articles 77 and following of the GDPR to a supervisory authority, which for the Italian State is identified in the Guarantor for the protection of personal data.
The forms, methods and terms for proposing the complaints are provided for and regulated by the national legislation in force. The complaint is without prejudice to administrative and jurisdictional actions, which for the Italian State can be proposed alternatively to the same Guarantor or the competent Court.
The personal data provided with the form may be subject to profiling.
The profiling allows the Data Controller to evaluate certain personal aspects of the Interested party related in particular to his preferences, his interests, his tastes with reference to the products sold and the activities carried out by the Owner, in order to allow the Owner to offer the Interested in a more specific sales service aimed at his needs.