Privacy policy

Informative document pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) - Information on the processing of personal data collected from the data subject.

In compliance with the provisions of EU Regulation 2016/679 (European Regulation for the protection of personal data), the necessary information regarding the processing of the provided personal data is provided.

Definitions: Article 4 of Regulation (EU) 2016/679 defines "personal data" as any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is considered to be one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

INFORMATIVE SPECIFICATIONS

• Privacy policy for filling out the Contact Form for informational purposes.
• Privacy policy for filling out the Booking Request Form.
• Privacy policy for filling out the Accommodation Booking Form.
• Privacy policy for filling out the Online Payment Form.
• Privacy policy for the completion of Web Check-In.
  
  

TITOLARE DEL TRATTAMENTO translates to: DATA CONTROLLER

According to Article 4 of Regulation (EU) 2016/679, it is Agrituristica Lignano Srl, located at Via Sabbiadoro n. 1, Zip Code 33054, City of Lignano Sabbiadoro (UD), amministrazione@andretta.info, with exclusive reference to the role of data controller of the activity named “Residence Camping Punta Spin.”

PURPOSE OF PROCESSING

The personal data provided will be processed for the following purposes:

• navigation on this website.
• <form compilation data collection for contact request with sending of the requested information.
• <form compilation data collection for accommodation booking.
• <form compilation data collection for online payments.
• <form compilation data collection for online check-in.
  
  

LEGAL BASIS OF PROCESSING

The legal basis applicable to the processing of your personal data for the purposes indicated is:

• consent (art. 6 paragraph 1 letter a)), as the legal basis for processing.
• execution of pre-contractual measures (art. 6 paragraph 1 letter b)), as the legal basis for processing.
• execution of pre-contractual measures/execution of the contract (art. 6 paragraph 1 letter b)) and legal obligations (art. 6 paragraph 1 letter c)) as legal bases for processing.
• legal obligations (art. 6 paragraph 1 letter c)) as the legal basis for processing.
• execution of pre-contractual measures/execution of the contract (art. 6 paragraph 1 letter b)) as the legal basis for processing.
  
  

RECIPIENTS OR CATEGORIES OF DATA RECIPIENTS

The personal data provided will be communicated to recipients who will process the data as data processors (art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Processor, and who operate as employees or collaborators with specific appointments as authorized to process (art. 29 of EU Reg. 2016/679), for the purposes listed above in point 2.

As an example and not exhaustive, the data will be communicated to:

• subjects that provide services for the management of the information system used by the Owner and the related telecommunications networks, including email and website management.
• professionals and consultants in the field of assistance and consulting relationships.
• competent authorities for compliance with legal obligations and/or provisions of public bodies, upon request.
• societies or credit institutions that offer online payment services.

The subjects belonging to the aforementioned categories perform the function of Data Processing Manager, or operate independently as distinct Data Controllers.

The list of Data Processors is constantly updated and available at the legal headquarters of the Data Controller.

Every further communication will occur only with your explicit consent, in accordance with and within the limits of the GDPR.

Your data, subject to processing, will not be disclosed.

DATA TRANSFER TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES

Personal data is stored on servers located within the European Union.
It is understood that the Data Controller, if necessary, will have the right to move the servers outside the EU as well.

In this case, the Owner assures from now on that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the signing of the standard contractual clauses provided by the European Commission, and the user will be informed.

DATA RETENTION PERIOD OR CRITERIA FOR DETERMINING THE PERIOD

The treatment will be carried out in an automated and manual form, using methods and tools aimed at ensuring maximum security and confidentiality, by the Data Controller and/or by individuals specifically authorized for this purpose.

In compliance with the provisions of Article 5, paragraph 1, letter e) of Regulation (EU) 2016/679, the personal data collected will be kept in a form that allows the identification of the data subjects for a period not exceeding the achievement of the purposes for which the personal data are processed. The retention of personal data provided depends on the purpose of the processing (the timeframes have been determined based on criteria on which the data subject can receive information by writing an email to amministrazione@andretta.info):

• navigation on this website: please see what is provided by the cookie policy.
• contact request: maximum 2 years.
• booking of accommodations and any possibility of online payment: for the minimum period required by law in relation to the accounting/tax regime adopted by the Owner and in any case not beyond the subsequent 10 years, in order to verify any pending issues including accounting documents (for example invoices).
• check-in online: for the minimum period required by law, no later than 48 hours.
  
  

RIGHTS OF THE DATA SUBJECTS

The interested party may assert their rights as expressed by Regulation EU 2016/679, by contacting the Data Controller, sending an email to amministrazione@andretta.info or writing to the address of the Data Controller mentioned above.

The interested party has the right, at any time, to request from the Data Controller:

• the access to your personal data (art. 15);
• the correction (art. 16);
• the cancellation (art. 17) of the same;
• the limitation of processing (art. 18);
• the transfer of your data to another controller (art. 20);
• The interested party also has the right, if it is not possible to request the deletion of data, to object to the processing when this is justified by reasons related to their particular situation (art. 21).
  
  

POSSIBILITY OF COMPLAINT TO THE GUARANTOR

Without prejudice to any other administrative and judicial remedy, if you believe that the data processing violates the provisions of Regulation (EU) 2016/679, the data subject has the right to lodge a complaint with the supervisory authority (Guarantor for the protection of personal data) pursuant to Article 15 letter f) of Regulation (EU) 2016/679.

NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO PROVIDE THE DATA

The communication of personal data is not mandatory, as you are free to provide your personal data, but it is necessary for the purpose of browsing the pages of the website. The user can deny consent and can revoke any consent already given at any time (through the banner at the bottom of the page or the browser settings for cookies).

However, denying consent may result in a reduced browsing experience on the site. Aside from what is specified for browsing data, the communication of personal data is not mandatory, as you are free to provide your personal data in the dedicated areas on the site, but it is necessary to fulfill the purposes of the processing; the consequence of not providing personal data results in the inability to use the various services offered by the Data Controller.

AUTOMATED DECISION-MAKING PROCESSES

There is no existence of an automated decision-making process.