Dear User,
This privacy notice is provided by La Rosa di Nettuno Sas di Biancotti M. in accordance with Regulation (EU) 679/2016 (GDPR) on the protection of personal data, in order to describe how the personal data of users who browse this website are processed.
While browsing the website www.larosadinettuno.it (the “Website”), information relating to users may be collected that constitutes personal data under the GDPR. This notice applies exclusively to the Website and does not concern any external sites that the user may access via links contained herein.
DATA CONTROLLER
The Data Controller, pursuant to applicable law, is: La Rosa di Nettuno Sas di Biancotti M. – VAT No. 01142230539, registered office at Via XXIV Maggio 73, Marina di Grosseto 58100 – GR – contactable via email at info@larosadinettuno.it.
DATA PROCESSOR
The web hosting provider appointed as Data Processor is Aruba S.p.A., represented by its pro tempore legal representative, with registered office in Ponte San Pietro (BG), Via San Clemente no. 53, email: privacy@staff.aruba.it. It is located within the European Economic Area and operates in compliance with European regulations (link to the hosting provider’s policy).
TYPES OF DATA PROCESSED
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects but, by its very nature, could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment. These data are used solely to obtain anonymous statistical information on the use of the site and to check that it is functioning correctly.
For security purposes (anti-spam filters, firewalls, virus detection), the data recorded automatically may also include personal data such as the IP address, which may be used, in compliance with applicable laws, to block attempts to damage the site itself or to harm other users, or in any case to prevent harmful or criminal activities. Such data are never used for user identification or profiling, but only to protect the site and its users.
In addition, the Data Controller informs you that the data you provide are processed by IT tools and procedures for the following purposes:
Manage and improve navigation on the site (see also the Cookie Policy);
Respond to explicit requests submitted via contact forms;
Technical management of browsing (see also the Cookie Policy).
Some data may be processed solely for the purpose of technical/IT management of the web service by the Controller’s technology partners. In any event, the data will never be disseminated.
The data you provide may be accessed exclusively by the Controller’s personnel and collaborators and, where applicable, by companies (web hosting) that, as outsourced processors, handle data on behalf of the Controller, solely to carry out the activities you request.
Data Provided by the User
These are data voluntarily provided by the user when requesting information via the contact form on the “Contacts” page. In particular, the following categories of personal data may be processed:
DATA PROVIDED BY THE USER ON THE BOOKING PAGE
These are data voluntarily provided by the user when booking one of our apartments through the portal provided by the website “www.iperbooking.com”.
These data are provided by the user when completing the booking form for one of our apartments. In particular, the following categories of personal data may be processed:
– Name;
– Surname;
– Email;
– Municipality of Residence and Postcode;
– Check-in / Check-out date;
– Room type;
– Number of people;
– Other information;
– Payment method.
These data are provided voluntarily by the User when requesting the service and will be used exclusively for the provision of the requested service and processed only for as long as necessary to provide the service itself.
The data collected within the booking platform will not be disclosed to third parties, unless this is due to a legitimate request by the judicial authority and only in cases provided for by law. However, the data may be provided to third parties where necessary for the provision of a specific service requested by the User, or for tax purposes, or for carrying out security checks or website optimization (For more information – Iperbooking Privacy Policy).
METHODS OF PROCESSING
Personal data are processed, with and without automated tools, for the time strictly necessary to achieve the purposes for which they were collected (see Data Retention Period below). Personal data provided by users may be accessed by employees and collaborators who provide ancillary or instrumental services to the company’s activities and are appointed as Data Processors pursuant to Art. 28 GDPR. No further communication of data to third parties will take place, except in the event of requests by the Judicial Authority or Public Security. The data collected will not, under any circumstances, be disseminated.
DATA RETENTION PERIOD
Customer data will be retained for the time strictly necessary to achieve the purposes for which they were collected. Data acquired automatically by the system (Art. 4, lett. B)) will be retained for a maximum of 31 days from the time of acquisition.
PLACE OF PROCESSING
The web hosting provider appointed as Data Processor is Aruba S.p.A., represented by its pro tempore legal representative, with registered office in Ponte San Pietro (BG), Via San Clemente no. 53, email: privacy@staff.aruba.it. It is located within the European Economic Area and operates in compliance with European regulations (link to the hosting provider’s policy).
DATA SUBJECTS’ RIGHTS
Data subjects have the right to:
request and obtain information regarding the processing of personal data and a copy of such personal data; for data processed by automated systems, request their transfer to another controller;
request and obtain the amendment and/or rectification of personal data deemed inaccurate or incomplete;
request and obtain the deletion—and/or restriction of processing—of personal data where such data or information are unnecessary—or no longer necessary—for the purposes set out above;
request and obtain the cessation of any processing of personal data for direct marketing purposes.
Pursuant to Regulation (EU) 679/2016, the user may lodge any complaints with the Data Protection Authority. Requests should be addressed by email to: info@larosadinettuno.it.
