Privacy Policy – Contact Form for Informational Purposes

Informative document pursuant to Article 13 of Regulation EU 2016/679 (GDPR) - Information on the processing of personal data collected from the data subject.

In compliance with the provisions of EU Regulation 2016/679 (European Regulation on the protection of personal data), the necessary information regarding the processing of the provided personal data is provided.

Definitions: Article 4 of Regulation (EU) 2016/679 defines "personal data" as any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

TITOLARE DEL TRATTAMENTO translates to "DATA CONTROLLER" in English.

pursuant to Article 4 of Regulation (EU) 2016/679, it is Agrituristica Lignano Srl, based in Via Sabbiadoro n. 1, Zip Code 33054, City of Lignano Sabbiadoro (UD), amministrazione@andretta.info with exclusive reference to the role of data controller of the activity named “Residence Camping Punta Spin”.

PURPOSE OF PROCESSING

The personal data provided will be processed for the following purposes:

• to be able to possibly contact you again through the references you provided via the contact form,
• to fulfill any of your requests contained in the message,
• to evaluate the suggestions received and to respond to the reports.
  
  

LEGAL BASIS OF PROCESSING
The legal basis applicable to the processing of your personal data for the purposes indicated is:

• the execution of pre-contractual measures taken at your request pursuant to Article 6, paragraph 1, letter b) of the GDPR.

RECIPIENTS OR CATEGORIES OF DATA RECIPIENTS

The personal data provided will be communicated to recipients who will process the data as data processors (art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Processor and who operate as employees or collaborators with specific appointments as authorized to process (art. 29 of EU Reg. 2016/679), for the purposes listed above in point 2.

For example and not limited to, the data will be communicated to:

• subjects that provide services for the management of the information system used by the Owner and the related telecommunications networks, including email and website management.
• The subjects belonging to the aforementioned categories perform the function of Data Processing Manager, or operate independently as distinct Data Controllers.

The list of Data Processors is constantly updated and available at the registered office of the Data Controller.

Any further communication will only take place with your explicit consent, in accordance with and within the limits of the GDPR.

Your data, subject to processing, will not be disclosed.

DATA TRANSFER TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES

Personal data is stored on servers located within the European Union.
It remains understood that the Data Controller, where necessary, will have the right to move the servers outside the EU as well.

In this case, the Owner ensures from now on that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the signing of the standard contractual clauses provided by the European Commission, and the user will be informed.

DATA RETENTION PERIOD OR CRITERIA FOR DETERMINING THE PERIOD

The treatment will be carried out in an automated and manual form, using methods and tools aimed at ensuring maximum security and confidentiality, by the Data Controller and/or by persons specifically authorized for this purpose.

In compliance with the provisions of Article 5, paragraph 1, letter e) of Regulation (EU) 2016/679, the personal data provided for contact requests will be retained for a maximum period of 2 years.

RIGHTS OF THE DATA SUBJECTS

The interested party may assert their rights as expressed by Regulation EU 2016/679, by contacting the Data Controller, sending an email to amministrazione@andretta.info or writing to the address of the Data Controller mentioned above.

The interested party has the right, at any time, to request from the Data Controller:

• the access to your personal data (art. 15);
• the correction (art. 16);
• the cancellation (art. 17) of the same;
• the limitation of processing (art. 18);
• the transfer of your data to another controller (art. 20);
• The interested party also has the right, if it is not possible to request the deletion of data, to object to the processing when this is justified by reasons related to their particular situation (art. 21).

POSSIBILITY OF COMPLAINT TO THE GUARANTOR

Without prejudice to any other administrative and judicial remedy, if you believe that the data processing violates the provisions of Regulation (EU) 2016/679, the data subject has the right to lodge a complaint with the supervisory authority (Guarantor for the protection of personal data) pursuant to Article 15 letter f) of Regulation (EU) 2016/679.

NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO PROVIDE THE DATA

The communication of personal data is not mandatory, as you are free to provide your personal data in the dedicated areas on the site, but it is necessary to fulfill the purposes of the processing. The failure to provide the necessary data results in:

• the impossibility of submitting the request and following up: the interested party will not be able to be contacted again to receive answers to their requests nor have information about services.

AUTOMATED DECISION-MAKING PROCESSES

There is no existence of an automated decision-making process.