This document describes how to manage the website www.agriturismocasastella.it (“ Site “), with reference to the processing of users’ personal data (“ User / Users “) who consult it.
It’s an information notice pursuant to art. 13 of Legislative Decree no. 196/2003, so called Code regarding the protection of personal data (“ Privacy Code “) and article 13 of EU Regulation 679/2016 (“ GDPR “), to all those who visit the Site and / or interact with Casastella’s web services accessible through the Site.
The information is provided only for the Site and not for other sites web consulted by the User via links on the Site.
1. Data Controller
The data controller is Azienda Agricola Stella Noemi, Via Nuova di Peagna 69, 17023 Ceriale (SV) – P.Iva: 01749050090, mail info@agriturismocasastella.it, (hereinafter “Casastella” or “Owner”).
2. Types of data processed
2.1 Navigation data
The computer systems and procedures software responsible for the operation of the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.
This information is not collected to be associated with identified subjects, but by their very nature could allow users to be identified.
This category of data includes (i) the IP addresses or domain names of the computers used by the users connecting to the Site, (ii) the URI notation addresses ( Uniform Resource Identifier ) of the requested resources , (iii) the time of the request, (iv) the method used to submit the request to the server, (v) the size of the file obtained in response, (vi) the numeric code indicating the status of the response given by the server (good end, error) and (vii) other parameters relating to the operating system and the user’s IT environment.
These data are used only to obtain anonymous statistical information on the use of the Site and to check its correct functioning and are deleted immediately after processing.
2.2 Cookies
This site uses only technical cookies and analytical third-party cookies that are anonymous and therefore similar to technical cookies, for further information:
2.3 Data provided voluntarily by the user
The Owner processes personal, identifying and non-sensitive data (by way of example, but not limited to, name, surname, address, telephone, email, etc. – later, “personal data” or even data) communicated by the User on the occasion of registration on the web pages of the Site or on the registration form of the Owner, of filling in and sending a contact form to the Owner or, in any case, of any other request.
The User assumes responsibility for the data of third parties published or shared through the Website and guarantees to have the right to communicate or disseminate them, freeing the Owner from any responsibility towards third parties.
3. Purpose and legal basis of the processing
The processing of the User’s personal data by the Owner is aimed at:
- pursue, in accordance with art. 6.1, lett. f) of the GDPR, its own legitimate interest, consisting in guaranteeing the security of the Site and the information exchanged on it, that is the ability of such Site to withstand, at a given level of security, unforeseen events or unlawful or malicious acts compromise the availability, authenticity, integrity and confidentiality of the personal data stored or transmitted and the security of the related services offered or made accessible;
- allow the User to send requests for information and the Owner to provide the User with any response to requests made;
- make it possible to register and authenticate the User;
- for marketing purposes only with your specific and distinct consent in accordance with art. 23 and 130 of the Privacy Code and art. 7 of the GDPR: sending newsletters, commercial communications and / or advertising material about the owner’s products and services via email;
- allow the Owner to receive the User’s personal data via Facebook, and other and other social networks of which the user may provide contact details;
- to exercise the rights of the Owner, for example the right of defense;
- to fulfill the obligations required by law, by a regulation, by EU legislation or by an order of the Authority.
The purposes referred to in letters c), d) and e) will be pursued exclusively after the User has given his specific consent and free consent to such processing, with the possibility for the latter to always request the exclusion of some methods of automated or traditional communications.
4. Consequences of a possible refusal to answer
Apart from that specified with reference to the navigation data, which are necessary in order to allow the correct functionality of the Site, cookies, in relation to which please view the relative cookie policy, Users are free to provide their data personal to formulate requests for information and to register on the Site. Failure to provide data will make it impossible to obtain what is requested and use the Casastella service.
5. Processing methods
Personal data is processed by computerized and automated systems, such as e-mails, databases, spreadsheets, web services for the time necessary to achieve the purposes for which they are collected.
It should be noted, in particular, that the User’s personal data are processed by subjects duly appointed to perform these tasks, constantly identified and / or appointed, appropriately instructed and made aware of the constraints imposed by law, as well as by the use of security measures designed to guarantee the protection of your privacy and to avoid the risks of loss or destruction, unauthorized access, processing that is not permitted or does not comply with the aforementioned purposes.
6. Communication and dissemination of data
In any case, the communication of data to companies expressly entrusted with performing certain services within the activity carried out by the Owner and / or, in general, in his favor, which will operate as autonomous holders and / or data processors, as well as the communication and / or dissemination of data required, in accordance with the law, by police forces, judicial authorities, information and security bodies or other public entities for defense or security purposes. State or prevention, detection or repression of crimes.
The data are not subject to disclosure.
The updated list of Data Processors may always be requested from the Data Controller.
8. Data transfer
The management and storage takes place on servers located within the European Union at Register.it SpA. It remains in any case understood that the owner, if necessary, will have the right to move the location of the servers in Italy and / or European Union and / or extra-EU countries. In this case, the Data Controller ensures from now on that the extra-EU data transfer will take place in compliance with the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection and / or adopting the standard contractual clauses envisaged by the Commission European.
7. Rights of interested parties
The subjects to which the personal data processed by the Data Controller refer have the right at any time to exercise their rights under EU / 2016/679. Requests should be addressed to: Azienda Agricola Stella Noemi, Via Nuova di Peagna 69, 17023 Ceriale (SV) – P.Iva: 01749050090, alla mail info@agriturismocasastella.it, indicating in the subject “Privacy exercise of rights”.
In particular, the interested party has the right to obtain from the data controller:
1. confirmation that personal data concerning him is being processed and in this case, to gain access to personal data and related information (Article 15);
2. the Correction and deletion of data (articles 16 and 17);
3. limitation of data (art. 18);
4. certification that the operations referred to in points 2) and 3) above have been brought to the attention of those to whom the data have been communicated, provided that this is not impossible or involves a disproportionate use of resources (art. 19);
5. Right to data portability (Article 20);
6. Right of opposition (art. 21);
7. Right to object to automated decision-making relating to individuals, including profiling (Article 22);
8. The interested party has the right to withdraw his consent at any time (Article 7). Withdrawal of consent does not affect the lawfulness of processing based on consent prior to revocation;
9. The User, without prejudice to any other administrative or judicial action, also has the right to lodge a complaint with the supervisory authority responsible for the protection of personal data for any violation he believes he has suffered and that for Italy is the Guarantor for the protection of personal data. The complaint can be submitted via e-mail, to the address: garante@gpdp.it, by fax: 06 696773785, or by mail, to the Guarantor for the protection of personal data, which is based in Rome (Italy), Piazza Venezia n. 11 – Cap 00187.
Please note that Casastella will respond to requests within one month, except in particularly complex cases, so it could take up to 3 months. In any case, it will explain the reason for the waiting within one month of the request.
The outcome will be provided in writing or electronically. In the event that rectification, cancellation or limitation of processing is requested, we undertake to communicate the results of the requests to each of the data recipients, unless this proves impossible or involves a disproportionate effort. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to revocation.
Casastella also asks interested parties to keep the data provided up to date. You can correct all data provided by contacting Casastella by e-mail at info@agriturismocasastella.it ,
The interested party declares and guarantees that all data provided is correct and truthful, and that they do not refer to any other person.
If you have previously consented to any marketing communications from Casastella or if you signed up for a newsletter, you can unsubscribe by clicking on the relevant link available in each communication and newsletter sent by Casastella.
If you wish to refuse the receipt of cookies or the use of other tracking technologies on the website, please read the cookie policy available on our website.
8. Duration of processing and storage of personal data
The User’s personal data will be processed by the Data Controller only for the period of time necessary to achieve the purposes of the processing referred to in article 3 above, after which they will be kept only in compliance with the applicable legal obligations for administrative purposes and / or to assert or defend one’s own right, in the event of disputes and pre-litigation.
The user can always request the interruption of the Treatment or the cancellation of the data.
9. Changes
This document constitutes the Website Privacy Policy which may be modified and / or updated at any time. If the Owner intends to process the personal data of Users for purposes other than those provided for in the previous art. 3, undertakes to provide Users, prior to such further processing, with adequate information regarding these different purposes and to carry out such further processing in compliance with current legislation.
10. Complaints
Furthermore, the User, without prejudice to any other action in administrative or judicial proceedings, has the right to lodge a complaint with the supervisory authority responsible for the protection of personal data for any violation he believes he has suffered and which for Italy is the Guarantor for the protection of personal data. The complaint can be submitted via e-mail, to the address: garante@gpdp.it , by fax: 06 696773785, or by mail, to the Guarantor for the protection of personal data, which is based in Rome (Italy ), Piazza Venezia n. 11 – Cap 00187.
*** *** ***
This Privacy Policy was updated on 06/28/2019. Any updates will always be published on this page.