Privacy Notice (according to the Chapter III of EU Regulation 679/2016)
Dear Sir / Madam,
We wish to inform you that Chapter III of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data provides for the protection of individuals. According to the law, this treatment will be performed on principles of correctness, lawfulness and transparency and protection of your privacy and your rights. Therefore, AL.PI. Srl (henceforth the "Company") as Data Controller, is obliged to provide you with some information regarding the processing of your personal data.
Article 13 Paragraph 1 - Regulation (EU) 2016/679
A1) Data controller
The Data Controller is:
L'Oca Nera Srl
Via U.Foscolo, 7
62010 Montecassiano (Mc)
Partita IVA 01094670435
Contacts Phone 0733290050 Email firstname.lastname@example.org
B1) Categories of data being processed
Personal Data (Name and Surname), Your email address
C1) Purpose of the treatment operated by the Company
Personal data is processed by the Company only for the performance of its institutional functions and for the following purposes:
- Sending informative / promotional material and commercial offers relating to the accommodation facility (direct marketing) You will be asked for a precise and explicit consent provided directly on the web page by ticking and pressing a confirmation button.
C1.1) The legal basis of the treatment operated by the Company
The processing of data is about the purpose carried out by the Aziendas only following its consent to the processing.
D1) Categories of subjects to whom the data may be communicated
In relation to the purposes indicated in the preceding letter C), the Accommodation facility ommunicates your personal data to the following public (non-economic) institutions:
- Police forces, armed forces and other public administrations, in compliance with legal obligations, regulations or community legislation; Financial administration.
The Company also communicates your personal data to individuals and / or economic public bodies in particular to the following subjects:
- Email or SMS service provider
E1) Transfer of personal Data outside the European Economic Area
The Data Controller may transfer the personal data collected to countries inside the European Economic Area or outside the European Economic Area, whose legal provisions on the protection of personal data are aligned with those of the European Union.
Article 13 Paragraph 2 - Regulation (EU) 2016/679
A2) Data retention period
Your personal data will not be stored in an archive on the site but will be received by the Company through an email that will be used to respond to your request for information.
B2) Rights of the person concerned
You can request the Data Controller
• access to personal data
• cancellation of the personal data.
You can also request the limitation of the treatment or oppose it. For the type of data the individual concerned has the right to receive, in a structured format, in common and automatically readable by automatic device, the personal data concerning him / her provided to a data controller and has the right to transmit this data to another holder of the unrestricted treatment by the data controller.
C2) Right to withdraw consent
The person concerned has the right to revoke the consent given to the direct marketing treatment at any time by communicating his intentions to the Data Controller by email. Any message sent by the Company, however, will contain a link to withdraw the consent to send messages.
D2) Right to propose a complaint to a supervisory authority
You have the right to lodge a complaint with a Supervisory Authority which at the moment is the Garante della Protezione dei dati personali and on whose website http://www.garanteprivacy.it the complaints procedures to be used are indicated.
E2) Obligation or optional nature of the provision of data and the consequence of non-conferment
With reference to the purposes of the treatment indicated above, the provision of data is therefore mandatory since refusing it would make it impossible to provide you with the information or offers you requested.
F2) Existence of an automated decision-making process
No profiling activity is performed.
Document updated to 27/05/2019