PRIVACY POLICY
This page describes how this website is managed as regards the processing of the personal data of users who visit it, in accordance with Legislative decree196/2003 (Privacy Code) and EU Regulation 679/2016 (GDPR).
1. Nature of the data processed
Navigation/user data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data, the transmission of which is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data directly included in the forms or emails.
2. Purpose of the processing
The browing/use data, described in the previous point 1, are used only to obtain anonymous statistical information on the use of the website and to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the website.
Personal data provided spontaneously by users consulting the website will be processed for the following purposes:
– Responding to requests for information sent by the user
– Responding to requests for availability and reservations at our facility sent by the user
– Sending update e-mails if the user chooses to subscribe to our newsletter system
3. Legal bases of the processing
The personal data provided spontaneously by the users and the technical information strictly necessary for the provision of the service (browsing/use data), will be processed as necessary for the pursuit of the legitimate interest of CONTRALVENTO SNC di Salocchi Alessia & C. to publish and manage its website, as well as to improve its performance and content.
4. Processing methods and data retention period
Data processing will be carried out both manually and with the aid of computerised and telematic means. The data will be stored both in paper archives and in electronic archives for the time strictly necessary to achieve the purposes referred to in point 2 and in any case, following the exhaustion of these purposes, up to a maximum of 2 years.
Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorised access.
5. Obligation or right to provide data
Apart from that specified for browsing data, the user is free to provide the personal data requested by the various services of the website. Failure to provide such data may make it impossible to obtain what is requested.
6. Communication and dissemination of personal data
The personal data collected by the website is not subject to general dissemination.
Such data may be processed, for the purposes referred to in point 2, by the subjects in charge of data processing and information systems, as well as by the subjects responsible for the technical management of the website.
7. Rights of the data subjects
The legislation on privacy (Articles 7-10 of the Privacy Code and Articles 12-22 of EU Regulation 679/2016) guarantee the data subjects the right to be informed about the processing of data concerning them and the right to access the data at any time and to request that it be updated, supplemented and rectified. If the conditions set forth in the regulations are met, the data subject can also claim the right to the deletion of data, the limitation of its processing, its portability, their opposition to processing, not being subjected to decisions based solely on automated processing.
The processing of personal data is based on the data subject’s consent and they have the right to revoke the consent given.
To exercise your rights, as well as for more detailed information about the subjects or categories of subjects to whom the data is communicated or they become aware of it as managers or appointees, the interested party may contact CONTRALVENTO SNC di Salocchi Alessia & C. at the following addresses: tel. (+39) 3401022137 (Bianca) – (+39) 3473312102 (Alessia) and e-mail address info@creativedesignhouse.it
If the data subject considers their rights to have been violated, they can protect themselves by submitting a complaint to the Guarantor for the protection of personal data.
8. Data controller and Data Processors
The Data Controller is CONTRALVENTO SNC of Salocchi Alessia & C., with registered office in Via De Gasperi 12 in Lugana di Sirmione (BS), VAT number 04060620988. The updated list of Data Processors is kept at the Data Controller’s registered office.