1. What do we need?

Our Privacy Policy governs the use and storage of your data. You can view our Privacy Policy at the link. Full Privacy Policy. Adriana Errighi, nella persona del legale rappresentante, è il Titolare del trattamento dei dati personali che tu (interessato) ci fornisci. Noi raccogliamo I seguenti tipi di dati personali:

  • Personal data (such as name, surname, email address and telephone number, arrival date, departure date, number of guests)

2. Why we need it)

We need your personal data to provide you with the following services:

  • Respond to requests entered
  • Send information about services and availability

3. What do we do with it and who can we communicate it to?

Your personal data is processed at Adriana Errighi’s headquarters, Via Il Palazzo, 14 – Lisciano Niccone (PG). Data hosting and storage are carried out by Register.it S.p.a., located at Viale della Giovine Italia, 17 – 50122 Florence.

For each of the purposes described above, we indicate the “legal basis”—that is, the reasons for which the processing is permitted—specifying which processing is necessary and which depends on your choice.

The processing described is necessary to form and execute contracts and to fulfill related legal obligations, and in any case to pursue our Company’s legitimate interest in the proper formation and execution of the relationship, to fulfill the obligations arising therefrom, and, in any case, to protect its contractual rights. The acquisition of data for the purposes indicated is therefore necessary and constitutes an essential requirement for the conclusion and execution of the contract, without which it would not be possible to provide products and/or perform services.

Regarding the purposes listed in point 2, we will only proceed with sending your data after you have given your consent by clicking in the appropriate box below the form. In any case, for your maximum protection, you may inform yourself and/or object to the processing of your data for this specific purpose at any time, using the methods indicated at the bottom of this policy.

No third party has access to your data unless specifically required by law or necessarily required as an integral part of our contractual obligations to you, without which we would be unable to provide you with products and/or services.

4. How long do we keep them and how are they processed?

Under Italian law, we are required to retain documents that are part of legally required processing for a mandatory period of time defined by the laws themselves, according to our Data Retention Policy.i. After this period, your personal data will be irreversibly destroyed or pseudonymized or rendered anonymous, based on the effort deemed best with respect to the type of personal data provided. All personal data held by us for notifications of updates on our products and services, or for commercial and marketing activities, or for processing for activities not bound by law, will be retained for a maximum of 5 years.. For more information on our personal data retention program, see our Data Retention Policy. Your data will be processed using paper and/or electronic means. The security and proper storage of your data are essential to us, including preventing unauthorized or unlawful processing and accidental destruction or loss of data.

This is why processing is carried out in compliance with appropriate security measures, both directly and by any external data processors and individuals under their authority and adequately trained. In the event of joint proposals with other entities, these other companies may operate independently as “controllers” of the processing they perform, for which they will provide you with separate information.

5. What are your rights and who can you contact?

Rights of interested parties

In relation to the processing described in this Policy, as a data subject, you may, under the conditions set forth in the GDPR, exercise the rights set forth in Articles 15 to 21 of the GDPR and, in particular, the following rights:

• Right of access – Article 15 GDPR: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, access to your personal data – including a copy thereof – and communication of, among other things, the following information:

  • a) purpose of the processing
  • b) categories of personal data processed
  • c) recipients to whom these have been or will be communicated
  • d) data retention period or the criteria used
  • e) rights of the interested party (rectification, erasure of personal data, limitation of processing and right to object to processing
  • f) right to lodge a complaint
  • g) right to receive information on the origin of my personal data if they were not collected from the interested party
  • h) the existence of an automated decision-making process, including profiling;

• Right to rectification – Article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;

• Right to erasure (right to be forgotten) – Article 17 GDPR: right to obtain, without undue delay, the erasure of personal data concerning you, when:

  • a) the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • b) You have withdrawn your consent and there is no other legal basis for the processing;
  • c) You have successfully objected to the processing of your personal data;
  • d) the data have been processed unlawfully;
  • e) the data must be deleted to comply with a legal obligation;
  • f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1, GDPR. The right to erasure does not apply to the extent that processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest, or for the establishment, exercise, or defense of legal claims.

• Right to restriction of processing – Article 18 GDPR: right to obtain restriction of processing, when:

  • a) the data subject contests the accuracy of the personal data;
  • b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that their use be limited;
  • c) although the data controller no longer needs the personal data for the purposes of the processing, the data subject requires the personal data for the establishment, exercise or defence of legal claims;
  • d) the data subject has objected to the processing, as indicated above, pending verification of whether the legitimate grounds of the data controller override those of the data subject;

• Right to data portability – Article 20 GDPR: the right to receive the personal data concerning you, which you have provided to the Data Controller, in a structured, commonly used, and machine-readable format and the right to transmit those data to another controller without hindrance, if the processing is based on consent and is carried out by automated means. Furthermore, the right to have your personal data transmitted directly from the Data Controller to another controller, where technically feasible;

• Right to object – Article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimacy of legitimate interest, including profiling, unless there are legitimate reasons for the Data Controller to continue processing that prevail over the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a right in court.

• File a complaint with the Italian Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (RM).

The above rights may be exercised against the Data Controller by contacting the details listed below. The Data Controller will process your request and provide you, without undue delay and, in any case, no later than one month after receiving it, with information regarding the action taken regarding your request.

The exercise of your rights as a data subject is free of charge pursuant to Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, including due to their repetitive nature, the Data Controller may charge you a reasonable fee, taking into account the administrative costs incurred in handling your request, or refuse to comply with your request.

Finally, we inform you that the Data Controller may request additional information necessary to confirm the identity of the data subject. If you would like information on how we have handled your personal data, please contact Adriana Errighi, data controller, at villaessiccatoio@gmail.com or in writing to Via Il Palazzo, 14 – Lisciano Niccone (PG), Italy. Adriana Errighi, data controller, will review your request and make every effort to provide you with all the necessary information.

If you believe that your personal data has not been handled appropriately in accordance with the law, you can also contact Adriana Errighi, the data controller, at the addresses indicated above, or submit a report to the Data Protection Authority, reachable at www.garanteprivacy.it.