Privacy policy for www.agriturismoessiccatoio.it
Respecting the privacy of our visitors is of utmost importance to us. Therefore, the number and nature of data collected during navigation have been reduced to the bare minimum, and all necessary measures have been taken to ensure their security. Please note that this Privacy Policy applies only to the website www.agriturismoessiccatoio.it and not to any other websites that users may visit through links contained on this site. In accordance with Italian Legislative Decree No. 196/2003 (Personal Data Protection Code) and the General Data Protection Regulation – EU Regulation 2016/679 (GDPR), Adriana Errighi, represented for this purpose by the legal representative in office, acting as Data Controller, wishes to inform you of the following.
Personal Data Processed and Processing Purposes
Data Collected Automatically
The IT systems supporting this website automatically collect certain personal data during normal browsing, the transmission of which is inherent to the use of Internet communication protocols (such as IP addresses, domain names of the computers used by users connecting to the site, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, etc.) and other parameters related to the user’s operating system and IT environment. This data is used solely for the purpose of obtaining anonymous statistical information about the use of the site and to monitor its proper functioning. The collected data may be used to ascertain liability in case of hypothetical cybercrimes against the site.
Data Voluntarily Provided by Users
Personal data voluntarily provided by users through the completion of contact forms or other forms of communication available on our site are used solely to respond to the requests submitted and, with your consent, for all purposes that require it. For example, entering an email address in the contact form results in its collection, which is necessary to respond to the requests made, as well as the collection of any other personal data included in the message. Your personal data may be communicated for the indicated purposes to our authorized collaborators within the scope of their respective duties. For the same purposes, if necessary, the collected data may be transferred outside the national territory where the conditions required by the applicable regulations are met.
Processing Methods and Retention Periods
The data will be processed using paper and electronic media by the owner and authorized parties, in compliance with all precautionary measures to ensure its security and confidentiality. Your personal data provided to us via contact forms will be retained for the period of time necessary to respond to your requests. Personal data collected relating to navigation will be retained to ensure site management and security is monitored for the necessary period, which, except in special cases, is 6 months.
Optional provision of personal data
Aside from what is specified for navigation data, which is automatically recorded, the user is free to provide personal data (e.g., name, surname, address, email, etc.) requested in the forms on the site. Failure to provide such data may make it impossible to obtain what is requested.
Communication of collected data
To achieve the purposes described above, your personal data will be shared with the Data Controller’s employees, similar personnel, and collaborators, who will act as authorized data processors. Furthermore, your personal data will be disclosed to and processed by third parties belonging to the following categories:
- a) subjects used by the Data Controller to manage the Site;
- b) companies that manage the Data Controller’s IT system;
- c) companies and consultants providing legal and/or tax consultancy services
- d) supervisory and control authorities and bodies, and in general public or private entities with public functions.
The entities belonging to the above categories operate, in some cases, completely independently as separate Data Controllers, in other cases, as Data Processors specifically appointed by the Data Controller in compliance with Article 28 of the GDPR. A complete and updated list of entities to whom your personal data may be disclosed can be requested from the Data Controller’s registered office (villaessiccatoio@gmail.com).
Rights of interested parties
In relation to the processing described in this Policy, as a data subject, you may, under the conditions set forth in the GDPR, exercise the rights set forth in Articles 15 to 21 of the GDPR and, in particular, the following rights:
• Right of access – Article 15 GDPR: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, access to your personal data – including a copy thereof – and communication of, among other things, the following information:
- a) purpose of the processing
- b) categories of personal data processed
- c) recipients to whom these have been or will be communicated
- d) data retention period or the criteria used
- e) rights of the interested party (rectification, erasure of personal data, limitation of processing and right to object to processing
- f) right to lodge a complaint
- g) right to receive information on the origin of my personal data if they were not collected from the interested party
- h) the existence of an automated decision-making process, including profiling;
• Right to rectification – Article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
• Right to erasure (right to be forgotten) – Article 17 GDPR: right to obtain, without undue delay, the erasure of personal data concerning you, when:
- a) the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- b) You have withdrawn your consent and there is no other legal basis for the processing;
- c) You have successfully objected to the processing of your personal data;
- d) the data have been processed unlawfully;
- e) the data must be deleted to comply with a legal obligation;
- f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1, GDPR. The right to erasure does not apply to the extent that processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest, or for the establishment, exercise, or defense of legal claims.
• Right to restriction of processing – Article 18 GDPR: right to obtain restriction of processing, when:
- a) the data subject contests the accuracy of the personal data;
- b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that their use be limited;
- c) although the data controller no longer needs the personal data for the purposes of the processing, the data subject requires the personal data for the establishment, exercise or defence of legal claims;
- d) the data subject has objected to the processing, as indicated above, pending verification of whether the legitimate grounds of the data controller override those of the data subject;
• Right to data portability – Article 20 GDPR: the right to receive the personal data concerning you, which you have provided to the Data Controller, in a structured, commonly used, and machine-readable format and the right to transmit those data to another controller without hindrance, if the processing is based on consent and is carried out by automated means. Furthermore, the right to have your personal data transmitted directly from the Data Controller to another controller, where technically feasible;
• Right to object – Article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimacy of legitimate interest, including profiling, unless there are legitimate reasons for the Data Controller to continue processing that prevail over the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a right in court.
• File a complaint with the Italian Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (RM). The above rights may be exercised against the Data Controller by contacting the contact details in the “Data Controller and Data Processors” section. The Data Controller will process your request and provide you, without undue delay and, in any case, no later than one month after receiving it, with information regarding the action taken regarding your request. The exercise of your rights as a data subject is free of charge pursuant to Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, including due to their repetitive nature, the Data Controller may charge you a reasonable fee, taking into account the administrative costs incurred in handling your request, or refuse to comply with your request. Finally, we inform you that the Data Controller may request further information necessary to confirm the identity of the data subject.
Owner and Managers
The owner and data controller is Adriana Errighi, represented by its legal representative pro tempore. For any information regarding the processing of your personal data through this site, you can contact the Data Protection Officer at villaessiccatoio@gmail.com.
