Information pursuant to art. 13-14 of the european regulation (gdpr) 2016/679
With this extended information on the processing of personal data, the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing the personal data you provide through the website www.salentogiteinbarca.it/en/ and about the rights that the European Union Regulation 2016/679 (GDPR - concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data), recognizes to you.
Data Controller and person responsible for the protection of personal data.
The Data Controller is:
Orlando Ivan, via Azienda Fontanelle, 126 - 73028 Otranto - Lecce.
The Data Controller can be contacted by e-mail at the address: info@salentogiteinbarca.it
The Data Controller has not appointed a person responsible for the protection of personal data (RPD or, data protection officer, DPO) as he is not obliged under the aforementioned legislation.
Common personal data processed
For the purposes indicated in this Notice, the Data Controller processes common personal data such as personal data (name, surname, telephone number, e-mail and other contact details).
Source of personal data
Your personal data processed by the Data Controller are those provided by you directly by filling in the forms on the website.
Cookie management
All information relating to cookies can be found on the Information page on cookies.
Purpose of data processing
The collected data are processed for the following purposes:
- Manage booking requests received from the website;
- Perform statistical analysis and contact management;
- Comply with legal obligations;
- Respond to your requests contained in the message you sent via the form on the contact page.
Methods of data processing
Personal data may be processed by means of both paper and computer archives (including portable devices) and processed in a manner strictly necessary to meet the aforementioned purposes and in a manner suitable for guaranteeing security and confidentiality in accordance with the provisions of 'article 32 of the GDPR.
Data retention
Your personal data will be stored in a controlled access archive and / or database for a period of time deemed necessary to pursue the purposes described in this statement. After this period, the user's personal data will be stored only to comply with legal obligations, or to allow you to keep proof of their respective rights and obligations.
Optional supply of data
The provision of data is optional. However, the refusal to provide it will make it impossible to be contacted and it will not be possible to fulfill the purposes of the data processing.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mail messages to the address indicated on this site and / or the compilation of data collection forms, involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered.
Communication, sharing and dissemination of data
Your data, object of the treatment, will not be disclosed, sold or exchanged in any case with third parties. They are not subject to disclosure or to any fully automated decision-making process, including profiling. The scope of data communication is limited exclusively to those competent for the fulfillment of contractual operations and compliance with legal obligations. They may therefore be disclosed to third parties (such as: Revenue Agency, Judicial or Administrative Authorities, for the fulfillment of legal obligations, consultants and accountants or other lawyers who provide functional services for the purposes indicated above; subjects who process the data in execution of specific legal obligations or as Data Processors; collaborators responsible for the management and maintenance of the IT systems appointed by the data controller).
Rights of the interested party
In relation to the treatments described in this notice, as an interested party you may, under the conditions provided for by the GDPR, exercise the rights enshrined in articles 15 to 21 of the GDPR and, in particular, the following rights:
- ask the Owner for access to your personal data and information relating to them;
- the correction of inaccurate data or the integration of incomplete ones;
- the cancellation of personal data concerning you (upon the occurrence of one of the conditions indicated in art. 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article);
- the limitation of the processing of your personal data (in the event of one of the hypotheses indicated in art. 18, paragraph 1 of the GDPR);
- right of rectification - Article 16 of the GDPR: right to obtain, without undue delay, the correction of inaccurate personal data concerning you and / or the integration of incomplete personal data;
- request and obtain from the Data Controller - in the hypothesis in which the legal basis of the processing is the contract or consent, and the same is carried out by automated means - your personal data in a structured and readable format by automatic device, also in order to communicate such data to another data controller (so-called right to the portability of personal data);
- right to object - article 21 GDPR: at any time to the processing of your personal data in the event of particular situations concerning you;
- withdraw consent at any time, limited to cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (e.g. data revealing your racial origin, political views, religious beliefs, health or sex life). The treatment based on consent and carried out prior to the revocation of the same retains, however, its lawfulness;
- lodge a complaint with a supervisory authority (Authority for the protection of personal data www.garanteprivacy.it).