PRIVACY POLICY
Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)
DATA CONTROLLER, pursuant to art. 4 and art. 24 of the Regulation (EU) 2016/679 is Hotel Le Fontanelle S.p.A., with registered address in Via Roma 11, Radda in Chianti (SI) – 53017 and operational headquarters in SP 408 – km 14.7, Pianella, Castelnuovo Berardenga (SI) – 53019, represented by the Chairman of the Board of Directors, Legal Representative. You can contact the Controller at any time at the following contacts: email privacy@hotelfontanelle.com.
PROCESSED PERSONAL DATA
Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (such as name, last name, date of birth, address, email, telephone number).
Browsing data
During their ordinary course of operation, the IT systems and software procedures required to run this website acquire certain Personal Data, whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified Data Subjects but, by its very nature, it could enable identification of the users through the processing and matching of data held by third parties. This data category includes IP addresses or domain names of computers used by the users who visit the site, as well as the URI addresses (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in reply, the numerical code indicating the status of the reply from the server (done, error, etc.) and other parameters related to the operating system and the IT environment of the user.
Data provided voluntarily by the user
The optional and voluntary disclosure of personal data (e.g.: sending of emails to the email addresses indicated on this website and/or the completion of a data collection form on this website) entails the collection and processing of the voluntary disclosed user’s data, necessary to reply to the request, as well as other personal data included in the email message (such as name, last name, address, telephone number, email address).
Cookies
To get more info on cookies used in this website please read our COOKIES POLICY.
|
Purposes
|
Legal basis
|
Data Retention Period
|
|
A) Navigation of this website / obtaining anonymous statistical information on the use of the website and services / control of website’s correct functioning
Request for informations – contacts
Organizational, administrative, financial and accounting activities and customer / user data management
|
Controller’s legitimate interest:
ensure the correct browsing and
usage of the website
Controller’s legitimate interest:
reply to users’ requests
Fulfillment of law and contractual obligations
|
Duration of the browsing session, (except for any need to ascertain criminal offenses by the judicial authorities)
1 year
10 years or different data retention period required by law
|
|
B) Registration to the Hotel Le Fontanelle newsletter service in order to receive information on our Hotel's news and offers
The Data Controller, to compare and possibly improve the results of communications, could use systems for sending newsletters and promotional communications with reports. Thanks to the reports, the Data Controller will be able to know, for example, the number of readers, openings, unique "clickers" and clicks; the devices and operating systems used to read the communication; the detail on the activity of the single users; the detail of the emails sent, emails delivered or not, of those forwarded. All these data are used for the purpose of comparing, and possibly improving, the results of communications.
|
Consent
|
Withdrawal of consent – opt out
|
PERSONAL DATA RECIPIENTS
The personal data provided will be communicated to recipients, who will process the data as processors (Article 28 of the GDPR), as persons acting under the authority of the Controller and Processor (Article 29 of the GDPR) or autonomous Data Controllers, for the purposes listed above. Precisely, the data will be communicated to: - parties that provide services for the management of the information system and telecommunications networks used by the Data Controller (including email, the web platform, newsletter platform); studies or companies in the context of assistance and consultancy relationships; competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request.
DATA TRANSFER TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES
The sending of newsletters could be managed through the MailChimp® platform, belonging to the Rocket Science Group, LLC company, which is based in USA, a country where your personal data could be transferred. The aforementioned Company adheres to the "Privacy Shield" agreement, which imposes a level of protection of personal data adequate to the standards required by the GDPR.
NATURE OF DATA PROVISION
Except for what specified for navigation data which are necessary in order to allow navigation of the website, users are free to provide their personal data and their refusal may result in the impossibility of obtaining the information or services requested and provided through this website.
DATA SUBJECT’S RIGHTS | COMPLAINT TO SUPERVISORY AUTHORITY
You may exercise your rights pursuant to article 15 et seq. of the GDPR, contacting the Data Controller at privacy@hotelfontanelle.com. In particular, you have the right, at any time, to request the Data Controller to access your personal data and receive the information concerning their processing and to amend or delete your data or limit their processing. With reference to the art. 6(1) point (a) (consent), you have the right to withdraw the consent given at any time. Furthermore, you have the right to object, at any time, to processing of your personal data pursuant to art. 6(1) point (f) GDPR (Data Controller’s legitimate interest). If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for this purpose, by sending an e-mail to the address privacy@hotelfontanelle.com or by clicking on automatic removal link present in the individual communications that you received. In exercising your right to data portability. In the event that you believe that the processing of personal data violate the provisions of GDPR, you have the right to lodge a complaint to the supervisory authority or to appeal the judge.
CHANGES TO THIS PRIVACY POLICY
The Controller reserves the right to amend, update, supplement or remove parts of this Privacy Policy at its own discretion and at any time. We encourage you to periodically review our Privacy Policy. For your convenience, when we post changes, we will revise the “last update” date of the Privacy Policy.
Last update: 30/04/2019
DATA CONTROLLER – HOTEL LE FONTANELLE SPA
