II – DATA PROCESSING 1 – Data Holder The data controller is the natural or legal person, public authority, service or other body that, individually or together with others, determines the purposes and means of processing personal data. He also deals with safety profiles. With regards to this website, the data controller is Cornella Piergiusto, and for any clarification or exercise of the user’s rights, he can contact him at the following e-mail address: firstname.lastname@example.org 2 – Responsible for data processing The controller is the natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller. Pursuant to Article 28 of EU Regulation no. 2016/679, on the appointment of the data owner, the person in charge of data processing on the www.villasanfermo.it website is Cornella Piergiusto.
3 – Data processing place The processing of data generated by the use of www.villasanfermo.it takes place at: Villa San Fermo – Via San Fermo, 17 – 36045 Lonigo (VI). In case of necessity, the data connected to the newsletter service can be processed by the person in charge of the treatment or subjects appointed by it for this purpose at the relevant office.
2 – Technical cookies There are many technologies used to store information on the user’s computer, which are then collected by the sites. Among these the best known and used is that of HTML cookies. They are used for navigation and to facilitate access and use of the site by the user. They are necessary for the transmission of communications on the electronic network or the supplier to provide the service requested by the customer. The settings to manage or deactivate cookies may vary depending on the internet browser used. In any case, the user can manage or request the general deactivation or cancellation of cookies, modifying the settings of his internet browser. This deactivation can slow down or prevent access to some parts of the site. The use of technical cookies allows the safe and efficient use of the site. Cookies that are inserted in the browser and retransmitted by Google Analytics or the statistics service of bloggers or similar are technical only if used for the purpose of optimizing the site directly from the owner of the site, which can collect information in aggregate form on the number of users and how they visit the site. Under these conditions, for analytics cookies the same rules apply, in terms of information and consent, provided for technical cookies. From the point of view of duration we can distinguish temporary session cookies that are deleted automatically at the end of the browsing session and are used to identify the user and thus avoid logging on every page visited and the permanent ones that remain active in the PC until expiry or cancellation by the user. Session cookies may be installed in order to allow access to and access to the reserved area of the portal as an authenticated user. They are not stored permanently but only for the duration of the navigation until the browser is closed and disappear when the browser is closed. Their use is strictly limited to the transmission of session identifiers consisting of random numbers generated by the server necessary to allow the safe and efficient exploration of the site.
3 – Third-party cookies In relation to the provenance we distinguish the cookies sent to the browser directly from the site you are visiting and those of third parties sent to the computer from other sites and not from the one you are visiting. Persistent cookies are often third-party cookies. The majority of third-party cookies consists of tracking cookies used to identify online behavior, understand the interests and then customize the advertising proposals for users. Third-party analytical cookies may be installed. They are sent from the domains of the aforementioned third parties external to the site. The analytical cookies of third parties are used to detect information on user behavior on www.villasanfermo.it. The survey takes place anonymously, in order to monitor the performance and improve the usability of the site. The third-party profiling cookies are used to create profiles relating to users, in order to propose advertising messages in line with the choices expressed by the users themselves. The use of these cookies is governed by the rules set by the third parties themselves, therefore, users are invited to read the privacy policies and indications to manage or disable the cookies published on the related web pages. 4 – Profiling cookies Profiling cookies are those that create profiles related to the user and are used to send advertising messages in line with the preferences expressed by the same in the context of surfing the net. When these types of cookies are used, the user must give explicit consent. Article 22 of EU Regulation 2016/679 and Article 122 of the Code on data protection will apply.
2 – Purposes of data processing The data collected by the site during its operation are used exclusively for the purposes indicated above and kept for the time strictly necessary to carry out the activities specified, and in any case not later than 5 years. The data used for security purposes (block attempts to damage the site) are kept for the time strictly necessary to achieve the previously indicated end. 3 – Data provided by the user As indicated above, the optional, explicit and voluntary sending of e-mails to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request. 4 – Support in configuring your browser The user can also manage cookies through the settings of his browser. However, deleting cookies from your browser may remove the preferences you have set for the site. For further information and support you can also visit the specific help page of the web browser you are using: – Internet Explorer: http://windows.microsoft.com/en-us/windows-vista/block-or-allow-cookies – Firefox: https://support.mozilla.org/en-us/kb/enable-and-disable-cookies-website-preferences – Safari: http://www.apple.com/legal/privacy/it/ – Chrome: https://support.google.com/accounts/answer/61416?hl=en – Opera: http://www.opera.com/help/tutorials/security/cookies/
V – USER RIGHTS Article. 13, c. 2 of EU Regulation 2016/679 lists the user’s rights. The website www.villasanfermo.it therefore intends to inform the user about the existence: – the right of the interested party to ask the holder for access to personal data (Article 15 of the EU Regulation), their updating (Article 7, paragraph 3, letter a) of the Legislative Decree 196/2003), the rectification (Article 16 of the EU Regulation), integration (Article 7, paragraph 3, letter a) of the Legislative Decree 196/2003) or the limitation of processing that concerns it (Article 18 of the EU Regulation) or to oppose, for legitimate reasons, to their treatment (Article 21 EU Regulation), in addition to the right to data portability (Article 20 EU Regulation); – the right to request cancellation (Article 17 of the EU Regulation), the transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is unnecessary for the purposes for which the data are been collected or subsequently processed (Article 7, paragraph 3, letter b) of Legislative Decree 196/2003); – the right to obtain the attestation that the operations of updating, rectification, integration of data, cancellation, blocking of data, transformation have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which such fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right (Article 7, paragraph 3, letter C) of Legislative Decree no. 196/2003);
Requests can be sent to the data controller, without formalities or, alternatively, using the model provided by the Guarantor for the Protection of Personal Data, or by sending an email to: email@example.com If the treatment is based on art. 6, paragraph 1, lett. a) – express consent to use – or on art. 9, paragraph 2, lett. a) – express consent to the use of genetic, biometric, health-related data revealing religious beliefs, philosophical or union membership, revealing racial or ethnic origin, political opinions – the user has the right to revoke the consent at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation. Likewise, in the event of violation of the law, the user has the right to lodge a complaint with the Guarantor for the Protection of Personal Data, as the authority responsible for monitoring the processing in the Italian State. For a more in-depth examination of the rights that compete with it, see articles 15 and ss. of the 2016/67 EU Regulation and the art. 7 of Legislative Decree no. 196/2003. VI – DATA TRANSFER TO EXTRA UE COUNTRIES This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook and Microsoft (LinkedIn) through social plugins and the Google Analytics service. The transfer is authorized and strictly regulated by Article 45, paragraph 1 of EU Regulation 2016/679, for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield. Data will never be transferred to third countries that do not comply with the conditions set out in Article 45 e ss of the EU Regulation.
VII. SECURITY DATA PROVIDED This site processes the data of users in a lawful and correct manner, adopting the appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data. Processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the owner, in some cases, may have access to the data categories of employees involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (as suppliers of third-party technical services, postal couriers, hosting providers, IT companies, communication agencies).