Villa Firmina Villa Firmina
IT EN DE
Check availability

Privacy Policy

Dear user, following the entry into force of the new GDPR (General Data Protection Regulation), below you can find the terms for the processing of your personal data, both with regard to browsing this website and to the newsletter service.

Information document pursuant to and for the purposes of Articles 13-14 of the GDPR (General Data Protection Regulation) 2016/679

In compliance with EC Regulation 679/16 (GDPR), we hereby provide the required information regarding the processing of the personal data you provide. This notice is not to be considered valid for other websites that may be accessed via links present on this site, for which the Data Controller bears no responsibility whatsoever.

1) Data Controller, processor and place of processing

The "Data Controller": Alessandro Colle Tiz — Tax code: CLLLSN63H02H823B — Phone: 0435 469273 — colletiz@villa-firmina.it

Place of data processing: processing is carried out at the Data Controller's premises and at the premises of designated external parties.

2) Types of data processed

Personal and browsing data. "Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.

Browsing data: the computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes IP addresses or domain names of computers used by users connecting to the site, URI addresses of requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the server's response, and other parameters relating to the user's operating system and computing environment.

Data provided voluntarily by the user: the optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site, and/or the completion of data collection forms, entails the subsequent acquisition of the sender's address, necessary to reply to requests, as well as any other personal data entered.

3) Purposes of processing for which consent is given where required (Art. 6 GDPR)

Personal data voluntarily provided will be processed for the following purposes: browsing this website; the completion of data collection forms for quote requests and/or contact; the completion of data collection forms for online booking; general administrative and accounting activities.

For the purposes of applying personal data protection provisions, processing carried out for administrative and accounting purposes refers to activities connected with organisational, administrative, financial and accounting operations, regardless of the nature of the data processed.

Personal data provided when completing the data collection forms on the site (such as name, surname, email address) will be processed, subject to consent, by the Data Controller for commercial promotional activities and email newsletters.

4) Method of processing — Retention

Processing will be carried out using automated and manual methods, with procedures and tools designed to guarantee maximum security and confidentiality, by specifically appointed persons in compliance with Articles 13-14 of the GDPR. Data will be retained for a period not exceeding that necessary for the purposes for which it was collected and subsequently processed.

5) Scope of communication and disclosure

Your data, subject to processing, will not be disclosed and may be communicated to companies contractually linked to the Data Controller, in order to fulfil contracts or related purposes. Data may be communicated to third parties belonging to the following categories: parties providing services for the management of the information system and telecommunications networks; firms or companies in the context of assistance and consultancy relationships; competent authorities for compliance with legal obligations, upon request.

Parties belonging to the aforementioned categories act as Data Processors, or operate independently as separate Data Controllers. The list of processors is constantly updated and available from: Alessandro Colle Tiz — Tax code: CLLLSN63H02H823B — Phone: 0435 469273 — colletiz@villa-firmina.it

6) Nature of provision and refusal

Aside from what is specified for browsing data, the user is free to provide personal data. Providing data for the purposes set out in point 3) is necessary: any refusal will make it impossible to obtain what has been requested. Giving consent for promotional activities is instead optional, and any refusal will not have any negative consequence on the other purposes.

7) Rights of data subjects

You may exercise your rights as set out in Articles 12-23 GDPR by contacting the Data Controller, including by email at: villafirmina@yahoo.it

As a data subject, you have the right to: obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and its communication in an intelligible form; obtain information on the origin of the data, the purposes and methods of processing, the logic applied in case of processing carried out with the aid of electronic instruments, the identity of the controller and processors, and the parties or categories of parties to whom the data may be communicated; obtain the updating, rectification or integration of the data, the erasure, anonymisation or blocking of data processed in violation of the law; object, in whole or in part, on legitimate grounds, to the processing of data concerning you, or to processing for the purpose of sending advertising material, direct selling, market research or commercial communication.

You also have the rights set out in Articles 16-21 GDPR (rectification, erasure, restriction of processing, data portability, objection), as well as the right to lodge a complaint with the Italian Data Protection Authority ("Garante per la protezione dei dati personali"), based in Piazza di Monte Citorio n. 121, 00186 – Rome (www.garanteprivacy.it).

8) Changes to this privacy notice

The Data Controller reserves the right to modify, update, add to or remove parts of this notice at its own discretion and at any time. Data subjects are encouraged to periodically check for any changes. Continued use of the site after such changes are published constitutes acceptance of them.

The Data Controller is not responsible for keeping all links shown in this notice up to date; whenever a link is not working and/or is not up to date, users acknowledge and accept that they must always refer to the document and/or section of the website that the link refers to.