I – INFORMATION REGARDING THE WEBSITE PRIVACY POLICY
- This section contains information regarding the data processing practices of Albergo al Maso di Bertamini Mario & C. snc with respect to the processing of users’ personal data.
- This privacy notice is also provided pursuant to Article 13 of Italian Legislative Decree No. 196/2003 (Personal Data Protection Code) and Article 13 of EU Regulation No. 2016/679 (General Data Protection Regulation - GDPR), concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data, for all individuals interacting with Albergo al Maso di Bertamini Mario & C. snc. This notice is available at the address corresponding to the website homepage: https://www.hotelalmaso.it/
- This privacy notice applies exclusively to Albergo al Maso di Bertamini Mario & C. snc and not to any other websites that may be accessed by users through links contained on this website.
- The purpose of this document is to provide information regarding the methods, timing and nature of the information that data controllers are required to provide to users when they access the web pages of Albergo al Maso di Bertamini Mario & C. snc, regardless of the purpose of such access, in accordance with Italian and European legislation.
- This privacy notice may be amended following the introduction of new regulations in this field. Users are therefore encouraged to review this page periodically.
- If the user is under 16 years of age, pursuant to Article 8(1) of EU Regulation 2016/679, consent must be provided or authorised by a parent or legal guardian.
II – DATA PROCESSING
1 – Data Controller
- The Data Controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. The Data Controller is also responsible for data security matters.
- With regard to this website, the Data Controller is Albergo al Maso di Bertamini Mario & C. snc. For any clarification or to exercise their rights, users may contact the Data Controller at the following email address: [email protected]
2 – Data Processor
- The Data Processor is the natural or legal person, public authority, agency or other body that processes personal data on behalf of the Data Controller.
- Pursuant to Article 28 of EU Regulation No. 2016/679, and upon appointment by the Data Controller, the Data Processor for the website of Albergo al Maso di Bertamini Mario & C. snc is: Giorgia Bertamini.
3 – Place of Data Processing
- The processing of data generated through the use of the Albergo al Maso di Bertamini Mario & C. snc website takes place at [insert location where the data is stored].
- Where necessary, data related to the newsletter service may be processed by the Data Processor or by persons specifically appointed for this purpose at the relevant premises.
III – DATA PROCESSED
1 – Methods of Data Processing
- Like all websites, this website uses log files in which information collected automatically during users’ visits is stored. The information collected may include: IP (Internet Protocol) address; browser type and parameters of the device used to connect to the website; name of the Internet Service Provider (ISP); date and time of the visit; referring and exit web pages; and, where applicable, the number of clicks.
- The above information is processed automatically and collected exclusively in aggregated form in order to verify the proper functioning of the website and for security purposes. Such information is processed on the basis of the legitimate interests of the Data Controller.
- For security purposes (spam filters, firewalls, virus detection), automatically collected data may also include personal data such as the IP address, which may be used, in accordance with applicable laws, to block attempts to damage the website, harm other users, or engage in activities that are harmful or constitute criminal offences. Such data is never used to identify or profile users, but solely to protect the website and its users. This information is processed on the basis of the legitimate interests of the Data Controller.
- If the website allows the posting of comments, or in the case of specific services requested by the user, including the possibility of submitting a Curriculum Vitae for potential employment purposes, the website automatically detects and records certain identifying data of the user, including the email address. Such data is deemed to have been voluntarily provided by the user when requesting the service. By posting a comment or providing other information, the user expressly accepts this Privacy Policy and, in particular, consents to the possibility that the submitted content may be shared with third parties. The data received will be used exclusively to provide the requested service and only for the time necessary to deliver such service.
- Any information that users choose to make public through the services and tools provided on this website is supplied voluntarily and knowingly by the user, thereby releasing this website from any liability regarding any possible violation of the law. It is the user's responsibility to ensure that they have the necessary permissions to provide personal data relating to third parties or content protected by national and international regulations.
2 – Purpose of Data Processing
- The data collected by the website during its operation is used for the purposes indicated above and for the following purposes: – specify the purposes for which the data collected by the website during its operation is processed.
- Data will be retained for the period strictly necessary to achieve the purposes stated above and, in any case, no longer than [specify retention period].
- Data processed for security purposes (such as preventing attempts to damage the website) will be retained only for the period strictly necessary to achieve the aforementioned purpose.
3 – Data Provided Voluntarily by the User
- As indicated above, the optional, explicit and voluntary sending of emails to the addresses listed on this website entails the subsequent acquisition of the sender’s email address, which is necessary to respond to requests, as well as any other personal data included in the communication.
- Specific summary privacy notices will be progressively displayed on or made available through the pages of the website dedicated to particular on-request services.
4 – Browser Configuration Support
- Users may manage cookies through their browser settings. However, deleting cookies from the browser may remove the preferences previously set for this website.
- For further information and support, users may consult the help page of the web browser they are using: – Internet Explorer: http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies – Firefox: https://support.mozilla.org/en-us/kb/enable-and-disable-cookies-website-preferences – Safari: http://www.apple.com/legal/privacy/it/ – Chrome: https://support.google.com/accounts/answer/61416?hl=it – Opera: http://www.opera.com/help/tutorials/security/cookies/
5 – Social Network Plugins
- This website also incorporates plugins and/or buttons for social networks in order to facilitate the sharing of content on users’ preferred social platforms. These plugins are designed so that no cookies are set when accessing the page, thereby protecting user privacy. Where provided for by the social network, cookies may be set only when the user voluntarily and actively uses the plugin. Users should note that if they are logged into a social network while browsing, they have already consented to the use of cookies transmitted through this website when registering with that social network.
- The collection and use of information obtained through these plugins are governed by the respective privacy policies of the social networks concerned. Users are encouraged to refer to the following privacy policies: Facebook: https://www.facebook.com/help/cookies Twitter: https://support.twitter.com/articles/20170519-uso-dei-cookie-e-di-altre-tecnologie-simili-da-parte-di-twitter Google+:http://www.google.com/policies/technologies/cookies Pinterest: https://about.pinterest.com/it/privacy-policy AddThis: http://www.addthis.com/privacy/privacy-policy Linkedin: https://www.linkedin.com/legal/cookie-policy
IV – USER RIGHTS
- Article 13(2) of EU Regulation 2016/679 sets out the rights of users.
- [Company/Organisation Name] hereby informs users of the existence of:- the right of the data subject to obtain from the Data Controller access to their personal data (Article 15 GDPR), its updating (Article 7(3)(a) of Legislative Decree No. 196/2003), rectification (Article 16 GDPR), completion (Article 7(3)(a) of Legislative Decree No. 196/2003), restriction of processing concerning them (Article 18 GDPR), or to object, on legitimate grounds, to such processing (Article 21 GDPR), as well as the right to data portability (Article 20 GDPR);- the right to request erasure of personal data (Article 17 GDPR), anonymisation or blocking of data processed unlawfully, including data whose retention is unnecessary in relation to the purposes for which it was collected or subsequently processed (Article 7(3)(b) of Legislative Decree No. 196/2003);- the right to obtain confirmation that the operations of updating, rectification, completion, erasure, blocking or transformation of data have been notified, including their content, to those to whom the data has been communicated or disclosed, unless this proves impossible or involves a manifestly disproportionate effort compared to the protected right (Article 7(3)(c) of Legislative Decree No. 196/2003).
- Requests may be submitted to the Data Controller without any formal requirements or, alternatively, by using the form provided by the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), or by sending an email to: https://www.hotelalmaso.it/
- Where processing is based on Article 6(1)(a) of the GDPR (consent) or Article 9(2)(a) of the GDPR (explicit consent to the processing of genetic, biometric, health-related data, data revealing religious or philosophical beliefs, trade union membership, racial or ethnic origin, or political opinions), the user has the right to withdraw their consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Likewise, in the event of a breach of applicable data protection legislation, the user has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), the supervisory authority responsible for monitoring data processing activities in Italy.
- For a more detailed examination of the rights available to you, please refer to Articles 15 et seq. of EU Regulation 2016/679 and Article 7 of Legislative Decree No. 196/2003.
V – TRANSFER OF DATA TO NON-EU COUNTRIES
- This website may share some of the data collected with services located outside the European Union. In particular, data may be shared with Google, Facebook and Microsoft (LinkedIn) through social plugins and the Google Analytics service. Such transfers are authorised and governed by Article 45(1) of EU Regulation 2016/679 and therefore do not require any additional consent. The above-mentioned companies guarantee their adherence to the Privacy Shield framework.
- Personal data will never be transferred to third countries that do not comply with the conditions set out in Article 45 et seq. of EU Regulation 2016/679.
VI – SECURITY OF PROVIDED DATA
- This website processes users’ personal data lawfully and fairly, adopting appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of data. Data processing is carried out using IT and/or telematic tools, with organisational procedures and methods strictly related to the purposes indicated.
- In addition to the Data Controller, in certain cases the following categories of persons involved in the organisation of the website may have access to the data: administrative, commercial, marketing and legal staff, system administrators, as well as external parties such as third-party technical service providers, postal couriers, hosting providers, IT companies and communication agencies.
VIII – CHANGES TO THIS DOCUMENT
- This document, published at: ://www.hotelalmaso.it/ constitutes the Privacy Policy of this website.
- This document may be subject to amendments or updates. Users are therefore invited to consult this page periodically in order to remain informed about the latest legislative developments.
- Previous versions of this document will remain available for consultation on this page.
- This document was last updated on [insert date] in order to comply with the applicable legal provisions, and in particular with EU Regulation 2016/679 (GDPR).