The purpose of this document (hereinafter "Privacy Policy") is to inform Users about personal data, understood as any information that allows the identification of a natural person (hereinafter "Personal Data"), collected from the website www .casevacanzeduemari.it (hereinafter "Application"). The Data Controller, as subsequently identified, may modify or simply update, in whole or in part, this Information by informing Users. Changes and updates will be binding as soon as they are published on the Application. The User is therefore invited to read the Privacy Notice at each access to the Application. In the event of non-acceptance of the changes made to the Privacy Notice, the User is required to cease using this Application and may request the Data Controller to remove their Personal Data.
1. Personal Data collected by the Application
The Data Controller collects the following types of Personal Data:
1. Contents and information provided voluntarily by the User
• Contact details and contents: are those Personal Data that the User voluntarily provides to the Application during its use, such as personal data, contact details, credentials for access to services and / or products provided, personal interests and preferences and other personal content, etc.
• Personal data collected from social media: Users can share data provided to social media with the Application. The User has the right to control the Personal Data that the Application can access through the privacy settings available on the social media in question. By associating accounts managed by social media with the Application and authorizing the Owner to access such Personal Data, the User gives consent to the acquisition, processing and storage in accordance with this Privacy Notice.
Failure by the User to provide Personal Data, for which there is a legal, contractual obligation or if they constitute a necessary requirement for the use of the service or for the conclusion of the contract, will make it impossible for the Data Controller to provide or in part its own services.
The User who communicates to the Personal Data Controller of third parties is directly and exclusively responsible for their origin, collection, processing, communication or dissemination.
2. Data and contents acquired automatically during the use of the Application:
• Technical data: the computer systems and software procedures used to operate this Application may acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified Users, but which by their very nature could, through processing and association with data held by third parties, allow Users to be identified. IP addresses fall into this category, or the domain names used by the Users who connect to the Application, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained, etc.
• Usage data: Personal Data relating to the use of the Application by the User may also be collected, such as the pages visited, the actions performed, the features and services used.
• Geolocation data: the Application may collect Personal Data on the User's location which may be GNSS (Global Navigation Satellite System, such as GPS) data, in addition to data that identify the nearest repeater, Wi-Fi hotspots and bluetooth, communicated when you enable location-based products or features.
3. Personal data collected through cookies or similar technologies:
The Application uses cookies, web beacons, unique identifiers and other similar technologies to collect Personal Data on the pages, links visited and other actions that are performed when using our services. They are stored before being re-transmitted at the next visit by the same User.
The User can view the complete Cookie Policy at the following address: http://www.casevacanzeduemari.it/cookie-policy.
2. Purpose
The Personal Data collected may be used for the execution of contractual and pre-contractual obligations and for legal obligations as well as for the following purposes:
1. Support and contact with the User: to respond to the User's requests and help him in case of problems.
2. Viewing content from external platforms: to allow the User to view and share content from social networks or other external platforms (eg YouTube, Facebook).
3. External management of payments by credit card, bank transfer or other tools: to manage User payments through external platforms that acquire payment data without the Application owner having access.
4. Technical monitoring of the infrastructure for maintenance, troubleshooting and performance improvement: to identify and resolve any technical problems and improve performance.
5. User database management: to organize, access and modify User data.
6. Monitoring, analysis and tracking of User behavior: to monitor and analyze how the User behaves on the Application.
7. User profiling: to group and automatically analyze the characteristics or behavior of the User and provide him with personalized services or messages.
8. Targeting advertising and remarketing: to show advertisements that are more relevant to the User based on their browsing behavior and preferences.
9. Customization of the User's experience of use: to modify the Application and adapt it to the User's needs.
10. Implementation of third party advertising campaigns: to create third party advertising campaigns within the Application.
11. Transfer of data to third parties for marketing purposes: to sell Users' data to third parties for their autonomous processing for marketing purposes.
3. Processing methods
The processing of Personal Data is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In some cases, subjects involved in the organization of the Data Controller may also have access to Personal Data (such as, for example, personnel, management personnel, sales personnel, system administrators, etc.) or external subjects (such as IT companies, suppliers of services, postal couriers, hosting providers, etc.). These subjects may, if necessary, be appointed as Data Processors by the Owner, as well as access the Personal Data of Users whenever necessary and will be contractually obliged to keep the Personal Data confidential. The updated list of Managers can be requested by email at info@casevacanzeduemari.it.
4. Legal basis of the processing
The processing of Personal Data relating to the User is based on the following legal bases:
1. The consent given by the User for one or more specific purposes;
2. the processing is necessary for the execution of a contract with the User and/or for the execution of pre-contractual measures.
3. The processing is necessary to fulfill a legal obligation to which the Data Controller is subject
4. The processing is necessary for the performance of a task of public interest or for the exercise of public authority vested in the Data Controller
5. The processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties
6. The processing is necessary for the pursuit of a vital interest of the owner or third parties.
However, it is always possible to ask the Data Controller to clarify the legal basis of each treatment at info@casevacanzeduemari.it.
5. Place Personal
Data are processed at the Owner's operating offices and in any other places where the parties involved in the processing are located. For more information, contact the Data Controller at the following email address info@casevacanzeduemari.it or at the following postal address Via Carru e Frau, internal 5, Stintino 07040 (SS).
6. Security measures
The Treatment is carried out in a manner and with suitable tools to guarantee the security and confidentiality of the Personal Data, having the Data Controller adopted adequate technical and organizational measures that guarantee, and allow to demonstrate, that the Treatment is carried out in compliance with the relevant legislation.
7. Data retention period
Personal Data will be kept for the period of time necessary to fulfill the purposes for which they were collected.
In particular, the Personal Data will be kept for the entire duration of the contractual relationship, for the execution of the related and consequent obligations, for compliance with applicable legal and regulatory obligations, as well as for own or third party defensive purposes.
If the processing of Personal Data is based on the User's consent, the Data Controller may keep the Personal Data until the consent is revoked.
I Dati Personali possono essere conservati per un periodo più lungo se necessari per adempiere un obbligo di legge o per ordine di un’autorità.
Personal Data may be kept for a longer period if necessary to fulfill a legal obligation or by order of an authority.
All Personal Data will be deleted or stored in a form that does not allow the identification of the User within 30 days of the end of the retention period. At the expiry of this term, the right of access, cancellation, rectification and the right to the portability of Personal Data can no longer be exercised.
8. Automated decision-making processes
The Application uses automated decision-making processes that can produce legal effects for the person or significantly affect them and that operate according to these criteria: Social campaigns, Mail marketing.
9. User rights
Users can exercise certain rights with reference to the Personal Data processed by the Owner. In particular, the User has the right to:
1. withdraw consent at any time;
2. oppose the processing of their Personal Data;
3. access your Personal Data;
4. verify and request rectification;
5. obtain the limitation of the treatment;
6. obtain the cancellation of their Personal Data;
7. receive their Personal Data or have them transferred to another owner;
8. propose a complaint to the supervisory authority for the protection of Personal Data and/or take legal action.
To exercise their rights, Users can direct a request to the contact details of the Owner indicated in this document. The requests are made free of charge and processed by the Data Controller as soon as possible, in any case within 30 days.
10. Data Controller
The Data Controller is DUEMARI CASE VACANZE SRLS, with registered office in Via Carru e Frau, int. 5, 07040, Stintino, Tax Code / VAT number 02816090902, e-mail address info@casevacanzeduemari.it, PEC address duemaricasevacanze@pec.it, telephone number 079523533. Last updated: 22/09/2020