Pursuant to the articles. 13 and 14 of Regulation 2016/679/EU (hereinafter “GDPR”) VILLA ADA (hereinafter “Owner”) with registered office in FRANCAVILLA AL MARE (CH), VIA FIGLIA DI IORIO 58D – 66023, in its capacity as “ Data Controller”, informs you that your personal data collected for the purpose of concluding the contract with the Customer and/or as part of the execution and/or stipulation of the same will be processed in compliance with the aforementioned legislation, to in order to guarantee rights, fundamental freedoms, as well as the dignity of natural persons, with particular reference to confidentiality and personal identity. We inform you that if the activities carried out towards you involve processing of personal data of third parties owned by you, It will be your responsibility to ensure that you have complied with the legal provisions concerning the interested parties in order to make their processing by us legitimate.
Origin, purpose, legal basis and nature of the data processed.
The processing of your personal data, directly provided by you, is carried out by VILLA ADA for the purpose of concluding the contract with the Customer and/or as part of the execution and/or stipulation of the same.
Furthermore, it is possible that personal data of third parties communicated by the Customer may be processed. With respect to this hypothesis, the Customer acts as an independent data controller and assumes the consequent legal obligations and responsibilities, holding the data controller harmless from any dispute, claim and/or request for compensation for damage deriving from the processing that may be received. . by interested third parties.
In compliance with current legislation on the protection of personal data and without the need for specific consent from the interested party, the Data will be stored, collected and processed for the following purposes: fulfillment of contractual obligations, execution and/or stipulation of the contract with the Customer and/or management of any pre-contractual measures;
fulfillment of any regulatory obligations, fiscal and tax provisions deriving from the performance of the business activity and obligations related to administrative-accounting activities;
sending, directly or through third party marketing and communication service providers, newsletters and communications for direct marketing purposes via email, sms, mms, push notifications, fax, paper mail, telephone with operator, in relation to products supplied by other companies pursuant to art. . the art. 130 c. 1 and 2 of the Legislative Decree. 196/03 (hereinafter the “Code”);
communication of the Data to third-party companies for the sending of newsletters and communications for marketing purposes via email, sms, mms, push notifications, fax, paper mail, telephone with operator pursuant to art. 130 c. 1 and 2 of the Code.
The legal bases of the processing for the purposes a) and b) indicated above are the articles. 6.1.b) and 6.1.c) of the Regulations.
The provision of Data for the purposes indicated above is optional, but any failure to provide the Data itself and refusal to provide it would make it impossible for the Data Controller to execute and/or stipulate the contract and provide the services requested by the same.
The legal basis for the processing of personal data for purposes c) and d) is art. 6.1.a) of the GDPR as the processing is based on consent;it is specified that the Data Controller may collect a single consent for the marketing purposes described here, pursuant to the General Provision of the Guarantor for the protection of personal data “Guidelines regarding promotional activities and combating spam” of 4 July 2013. The granting consent to the use of data for marketing purposes is optional and if the interested party wishes to oppose the processing of data for marketing purposes carried out in the manner indicated here, as well as revoke the consent given; you may do so at any time without any consequences (except for the fact that you will no longer receive marketing communications) by following the instructions in the “Rights of the interested party” section of this Policy. Finally, please note that for processing carried out for direct processing purposes, sending of its own advertising material or for its own direct sales or for carrying out its own market research or commercial communications relating to products or services similar to those used by the Customer, the Company may use the e-mail address or personal data pursuant to of the art. and within the limits permitted by art. 130, paragraph 4 of the Code and by the provision of the Guarantor Authority for the protection of personal data of 19 June 2008 even in the absence of explicit consent. The legal basis of the data processing for this purpose is Article 6, paragraph 1, letter f) of the GDPR, without prejudice to the possibility of objecting to such processing at any time, following the instructions in the “Rights of the interested party” section of this Information.
Communication
The data may be communicated to third parties appointed as data controllers pursuant to Article 28 of the GDPR and in particular to banking institutions, companies active in the insurance field, providers of services strictly necessary for carrying out company activities, or to business consultants, where this proves necessary for fiscal, administrative, contractual reasons or for needs protected by current regulations.
Your personal data, or the personal data of third parties under its ownership, may also be communicated to external companies, identified from time to time, to which VILLA ADA entrusts the execution of obligations deriving from the assignment received and to which only the transmitted data necessary for the activities requested of them. All those who carry out their business on the basis of the instructions received from VILLA ADA, pursuant to art. 29 of the GDPR, are appointed “Data Processors” (hereinafter also “Data Processors”). VILLA ADA imparts adequate operational instructions to the Persons in Charge or Managers, possibly designated, with particular reference to the adoption and observance of security measures, in order to guarantee the confidentiality and security of the data. Precisely with reference to the aspects of protection of personal data, the Customer is invited, pursuant to art. 33 of the GDPR to report to VILLA ADA any circumstances or events from which a potential “violation of personal data (data Breach)” may arise in order to allow immediate evaluation and the adoption of any actions aimed at counteracting this event through ‘sending a communication to VILLA ADA at the addresses indicated below.
The Data will not be disclosed.
VILLA ADA’s obligation to communicate the data to the Public Authorities upon specific request remains unaffected.
Transfer abroad
The transfer of your personal data abroad may take place if it is necessary for the management of the assignment received. For the processing of information and data possibly communicated to such subjects, the equivalent levels of protection adopted for the processing of the personal data of its employees will be required. In any case, only the data necessary to pursue the intended purposes will be communicated and the regulatory instruments provided for in Chapter V of the GDPR will be applied.
Methods, processing logic and storage times
Your data is collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles and provisions of the art. 5 c 1 of the GDPR.
The processing of personal data takes place using manual, IT and telematic tools with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee their security and confidentiality.
Personal data will be processed by VILLA ADA for the entire duration of the assignment and also subsequently to assert or protect its rights or for administrative purposes and/or to execute obligations deriving from the regulatory and legislative framework applicable pro tempore and in compliance specific legal obligations on data retention.
Rights of the interested party
In compliance with, within the limits and conditions established by the legislation on the protection of personal data regarding the exercise of the rights of interested parties with respect to the processing covered by this Information, as an interested party you have the right to request confirmation that whether or not your personal data is being processed, access the personal data concerning you and in relation to them you have the right to request rectification, cancellation, notification of rectifications and cancellations to those to whom the data has been received possibly transmitted by our Organization, the limitation of processing in the cases provided for by law, the portability of personal data – provided by you – in the cases indicated by law, to oppose the processing of your data and, specifically, you have the right to object to decisions concerning him if based exclusively on the automated processing of your data, including profiling. In the event that you believe that the processing that concerns you violates the rules of the GDPR, you have the right to lodge a complaint with the Guarantor pursuant to art. 77 of the GDPR.
If you wish to request further information on the processing of your personal data or for the possible exercise of your rights, you can contact VILLA ADA in writing (natadiyagirresort@gmail.com).
Data controller, pursuant to art. 4 of the GDPR, is VILLA ADA, VIA FIGLIA DI IORIO 58D – 66023
FRANCAVILLA AL MARE (CH)
