Information pursuant to Articles 13-14 of the European Regulation (GDPR) 2016/679
With this extended information on the processing of personal data, the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing the personal data you provide via the website www.casettadigiulia.it and about the rights granted to you by European Union Regulation 2016/679 (GDPR – on the protection of natural persons with regard to the processing of personal data and on the free movement of such data).
Data Controller and Data Protection Officer
The Data Controller is:
La Casetta di Giulia di Paiano F.
via Pio XII, 51 – 73038 – Spongano (LE)
C.F. PNAFBA81C17C978K
The Data Controller can be contacted by email at: info@casettadigiulia.it
The Data Controller has not appointed a Data Protection Officer (DPO) as this is not required under the aforementioned legislation.
General Personal Data Processed
For the purposes indicated in this Policy, the Data Controller processes general personal data such as personal details (name, surname, telephone number, email address, and other contact details).
Source of Personal Data
Your personal data processed by the Data Controller is that provided by you directly by filling out the forms on the website.
Cookie Management
All information regarding cookies is available on the Cookie Policy page.
Purpose of data processing
The data collected is processed for the following purposes:
- Perform statistical analysis and contact management;
- Comply with legal obligations;
- Respond to your requests contained in the message you sent via the form on the contact page.
Methods of data processing
Personal data may be processed using both paper and electronic archives (including portable devices) and processed in a manner strictly necessary to fulfill the purposes indicated above and in a manner that guarantees security and confidentiality in accordance with the provisions of Article 32 of the GDPR.
Data retention
Your personal data will be stored in a controlled-access archive and/or database for a period of time deemed necessary to achieve the purposes described in this policy. After this period, your personal data will be retained only to comply with legal obligations, or to maintain proof of your respective rights and obligations.
Optional Data Provision
Providing your data is optional. However, refusal to provide it will make it impossible to contact you and it will not be possible to fulfill the purposes of data processing.
Data Provided Voluntarily by the User
The optional, explicit, and voluntary sending of emails to the address indicated on this site and/or the completion of data collection forms entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data entered.
Communication, Sharing, and Dissemination of Data
Your data, subject to processing, will not be disclosed, sold, or exchanged with third parties under any circumstances. They are not subject to dissemination or any fully automated decision-making process, including profiling.
The scope of data communication is limited exclusively to those responsible for fulfilling contractual obligations and complying with legal obligations. Therefore, they may be disclosed to third parties (such as: the Revenue Agency, judicial or administrative authorities for fulfilling legal obligations, consultants, accountants, or other legal professionals who provide services functional to the purposes indicated above; parties who process data in compliance with specific legal obligations or as appointed Data Processors; collaborators assigned to the management and maintenance of IT systems by the data controller).
Rights of the Data Subject
In relation to the processing described in this privacy policy, as a data subject, you may, under the conditions set forth in the GDPR, exercise the rights set forth in Articles 15 to 21 of the GDPR and, in particular, the following rights:
- Request access to your personal data and information relating to the same;
- the rectification of inaccurate data or the completion of incomplete data;
- the erasure of personal data concerning you (if one of the conditions indicated in Article 17, paragraph 1 of the GDPR applies and in compliance with the exceptions provided for in paragraph 3 of the same Article);
- the restriction of the processing of your personal data (if one of the conditions indicated in Article 18, paragraph 1 of the GDPR applies);
- right to rectification – Article 16 GDPR: the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data;
- request and obtain from the Data Controller – where the legal basis for the processing is a contract or consent, and the processing is carried out by automated means – your personal data in a structured, commonly used and machine-readable format, including for the purpose of communicating such data to a another data controller (so-called right to data portability);
- right to object – Article 21 GDPR: at any time to the processing of your personal data in the event of particular situations that concern you;
- withdraw your consent at any time, limited to cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example, date and place of birth or place of residence), or particular categories of data (for example, data revealing your racial origin, political opinions, religious beliefs, health, or sex life). Processing based on consent and carried out before its withdrawal remains lawful;
- lodge a complaint with a supervisory authority (Italian Data Protection Authority www.garanteprivacy.it).