Privacy Policy

Information pursuant to Article 13 of EU Regulation 2016/679 – Article 13 of Legislative Decree 196/2003 (Personal Data Protection Code) and subsequent amendments.

Pursuant to European Regulation No. 679 of 2016 and Legislative Decree No. 196 of 2003 concerning the protection of personal data, we hereby inform you that the owners of the individual flats forming part of the Podere La Rocca complex and made available by them for the purposes of tourist renting are the data controllers of the personal data. On behalf of said owners acts, assuming the role of data controller, POGGI ANGELA – E-mail angela.poggi@avvpoggi.it, PEC: angela.poggi@busto.pecavvocati.it, mobile phone 347 0874946. 347 0874946.

Personal data are processed in full compliance with EU Regulation 679/2016 and Legislative Decree 196/2003 as amended

The data provided by the guest will be used solely for the purpose of processing his or her requests and may only be disclosed to third parties if this is necessary for this purpose or with his or her express consent.

The processing of the data will be carried out by personnel appointed by the Owner using procedures, technical and computerised tools suitable for protecting the confidentiality and security of the guest’s data, and this consists of their collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion, destruction, including the combination of two or more of the above activities.

The data will be stored for as long as is strictly necessary to provide the guest with the requested services and will, in any case, be deleted at the guest’s request, without prejudice to further storage obligations provided for by law.

The guest’s data will not be disclosed.

Within the scope of its activity and for the purposes indicated above, the data controller may make use of services rendered by third parties acting on behalf of the data controller and in accordance with its instructions, as data processors.

These are suppliers, business and production partners, intermediaries, technical consultants and other similar parties who collaborate with our organisation to fulfil contractual commitments undertaken with you; parties who provide a service that is strictly and necessarily connected to the owner’s business, such as tax consultants, banks, forwarding agents, insurance companies, public and private bodies, also in relation to inspections or audits; parties who can access the data by virtue of legal provisions.

The data may also be communicated to all those subjects authorised by law to collect them (e.g. Police Headquarters, Provincial Agencies for Health Services, financial administration, etc.).

The data subject may request a complete and up-to-date list of the persons appointed as data processors by contacting the contact person indicated below.

Rights of the Data Subject

Right of access (Article 15 GDPR). Right of the data subject to obtain access to their data and to complain to the supervisory authority.

Right to rectification (Art. 16 GDPR). The right of the Data Subject to obtain from the Data Controller the rectification of inaccurate personal data concerning him/her.

Right to erasure (right to be forgotten) (Article 17 GDPR). The data subject shall have the right to obtain from the data controller the erasure of personal data concerning him/her without undue delay.

Right to restriction of processing (Article 18 GDPR). Right of the data subject to obtain a restriction of data processing.

Obligation to notify (Article 19 GDPR). The data controller shall notify each of the recipients to whom the personal data have been transmitted of any rectification or erasure or restriction of processing carried out pursuant to Articles 16, 17 and 18.

Right to data portability (Article 20 GDPR). The data subject has the right to receive personal data concerning him or her provided to the Data Controller and has the right to transmit such data to another data controller without hindrance from the Data Controller.

Right to oppose (Article 21 GDPR). Right of the data subject to object to the processing of his/her personal data

Profiling (Art. 22 GDPR). The Data Subject has the right not to be subject to a decision based solely on automated processing, including profiling, or which significantly affects him/her.

Right of access to personal data and other rights

  1. The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and their communication in intelligible form.
  2. The data subject shall have the right to be informed of:
    (a) the origin of the personal data;
    b) the purposes and methods of processing;
    c) the logic applied in the event of processing carried out with the aid of electronic instruments;
    d) the identity of the data controller, data processors and the designated representative;
    e) the entities or categories of entity to whom or which the personal data may be communicated or who or which may get to know said data in their capacity as designated representatives in the State’s territory, data processors or person(s) in charge of the processing.
  3. The data subject has the right to obtain:
    a) the updating, rectification or, where interested therein, the integration of the data;
    b) the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed;
    c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
  4. The data subject shall have the right to object, in whole or in part:
    a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
    b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys

Personal Data Controller

Pursuant to Article 28 of Legislative Decree 196/2003, the Data Protection Officer is: FARIA ELLEN – Email: ellen@monasterofratibianchi.it – Mobile: 391 338 2349 391 3382349

Links to other sites

The sites to which we redirect, including but not limited to secondary sites and third-party service providers, may have a different privacy policy than the one set forth here.

We assume no responsibility for the privacy policies of linked sites and therefore encourage you to become aware of them.

Children

We do not intend to collect personal information from any individual under the age of 18.

Questions

Any time you believe that the owner has not followed the above policy, please let us know by sending an email to angela.poggi@avvpoggi.it or a PEC to angela.poggi@busto.pecavvocati.it and we will try our best to identify and resolve any issues.

Changes to this online privacy policy

We may update this Privacy Statement from time to time to accommodate changes in regulations, business needs, or to meet the requirements of our visitors, guests, market partners, and service providers. Updated versions will be posted on our site, along with update dates, to inform you of the last update to the privacy policy.