IDISCLOSURE PURSUANT TO ART. 12 AND 13 OF EU REGULATION NO. 679/2016 AND CONSENT TO THE PROCESSING OF PERSONAL DATA
Preamble
EU Regulation no. 2016/679 (hereinafter also the GDPR) establishes rules regarding the protection of natural persons with regard to the processing of personal data, as well as rules related to the free movement of the same. In order to protect the fundamental rights and freedoms of natural persons, the Regulation therefore imposes on the data controllers the obligation to provide data subjects with the information referred to in articles 12, 13 and 14, and the specific indication of the rights of the data subject, provided for in Articles 15 to 22 of the GDPR.
This information is effective only with reference to this web portal www.langheholiday.com
*****
Information pursuant to art. 13, par. 1
A) Data Controller and contacts
Data controller is ALBAHOUSE DI ADOLFO ALESSANDRO PANDOLFI, with registered office located in Via Rorine no. 8/D – 12051 Alba (CN), Italia; PEC: albahouse@pec.it
The Data Controller informs you that your personal data will be processed pursuant to Articles 12 and 13 of EU Regulation No. 2016/679 (General Data Protection Regulation, hereinafter referred to as “GDPR”), by specifically authorized subjects, limited to the purposes and in the ways that will be specified below with reference to the functionality of the web portal www.langheholiday.com
Please also note that the Data Controller uses data processors for the performance of its activities in a manner that complies with the provisions of the GDPR 2016/679.
The list of data processors can be requested to the data controller with a specific request, also sent by email.
B) Subject matter, purpose of processing
The Data Controller informs you that when you use our services you agree that your personal data will be processed.
Personal data means any data that can be related to your person as:
a. First and last name
b. Email
c. telephone number
Your data, as described above, will be processed in the ways and forms prescribed by the GDPR. The processing of data, provided by you by contacting the Data Controller at the addresses shown on the web page, will be used for the following purposes:
a) to follow up on the specific requests made by you to the Owner through the Website;
b) for communications of an informative nature relating to the services of the same Holder, following your request for information.
Please refer to the Cookie Policy for more information.
C) Legal basis for processing
Apart from what is specified in the Cookie Policy for navigation data, the communication by you to the Data Controller of the personal data better specified above, has as prerequisites for the lawfulness of the processing: the legitimate interest of the owner provided that it does not conflict with the rights and freedoms of the data subject, the fulfillment of the contractual and/or pre-contractual obligations with you assumed, the consent given by you. The processing carried out on users’ personal data is based on art. 6 of EU Regulation 2016/679 letters: A, B, C, F.
In particular, the provision of data for the purposes of which a) e a) and b) it is mandatory, the failure to provide implies the impossibility of taking advantage of the services offered by the Owner.
D) recipients and categories of recipients of the data collected
In relation to the purposes indicated above, the data may be communicated to the following subjects and/or the categories of subjects indicated below, or they may be communicated to companies and/or persons, who provide services, including external services, on behalf of the Data Controller. Among these, they are indicated for greater clarity, but not limited to: subjects – internal or external to the company – who provide IT and telematic services for the management of the information system used by the Data Controller and telecommunications networks, subjects that in the event the Data Controller reserves the right to appoint data controllers; financial administrations and other companies or public entities in compliance with regulatory obligations; competent authorities and/or Supervisory Bodies for the fulfillment of legal obligations; companies associated, controlled or contractually linked to the Owner.
Information pursuant to art. 13, par. 2
A) data retention period
Please note that, pursuant to art. 5 of the GDPR, in compliance with the principles of lawfulness, limitation of purposes and the storage and minimization of data, the data collected for the purposes referred to in points a) e b) will be kept in accordance with the law and for the time necessary to carry out the activities referred to above in compliance with the legal provisions.
B) data subject rights –
Right of Access and Correction
Pursuant to the art. 15 of the GDPR, in your capacity as an Interested Party, you have the right to obtain from the Data Controller the confirmation of the existence or not of a processing of personal data concerning you, to obtain access to them and to all the information referred to in art. 15, paragraph 1, letters (a) to (h), by issuing a copy of the data subject to processing in a structured, commonly used format, readable by automatic and interoperable device.
Pursuant to the art. Pursuant to art. 16 of the GDPR, in your capacity as an Interested Party you have the right to obtain from the Data Controller the correction and/or integration of the data being processed if it is not up to date and/or inaccurate and/or incomplete.
– Right to Cancellation and Right of Limitation Pursuant
Pursuant to the art. 17 of the GDPR, in your capacity as Interested You have the right to obtain, without undue delay, from the Owner, exclusively in the cases referred to in art. 17, paragraph 1, letters (a) to (f), of the GDPR, the deletion of data concerning you – with the exception of the assumptions specifically provided for in art. 17 paragraph 3.
Pursuant to the art. 18 paragraph 1, letters (a) to (d), of the GDPR, in your capacity as an Interested Party, you have the right to request and obtain from the Data Controller, the limitation of the processing of your personal data, or that such data is not subject to further processing and can no longer be modified. The Data Controller ensures that the limitation of treatment is implemented by appropriate technical devices that guarantee its inaccessibility and unchangeability.
– Right to portability
Pursuant to the art. 20 of the GDPR, in your capacity as an Interested Party, you have the right to receive from the Data Controller the personal data concerning you, whose processing is carried out by automated means, in a structured format, commonly used and legible by automatic device, and you also have the right to transmit such data to another data controller, or to obtain from the Data Controller, where technically feasible, the direct transmission of such data to another Data Controller specifically identified.
– Right of Opposition
Pursuant to the art. 21 of the GDPR, in your capacity as an Interested Party, you have the right to object at any time to the processing of personal data concerning you, for reasons related to your particular situation, in cases where the processing of your data is necessary (1) for the performance of a task of public interest and/or related to the exercise of public powers that the Data Controller is invested; (2) for the pursuit of a legitimate interest of the Owner or a third party; (3) for the profiling activity, if carried out by the Data Controller, on the basis of the previous points. You also have the right to object to the processing of your personal data for reasons related to your particular situation if they are processed for scientific or historical research or for statistical purposes in accordance with Article 89 (1) of the GDPR, unless the processing is necessary for the performance of a task of public interest.
How to exercise the above rights
You may exercise the rights listed above upon request to be sent to the registered office address or through a PEC.
We will confirm the receipt of your request and provide you with the information related to the communication received within 1 (one) month of receipt of the request. If necessary, and taking into account the complexity and number of requests, this period may be extended by 2 (two) months, upon reasoned notice to be transmitted within 1 (one) month of receipt of the request.
Any correction, cancellation, limitation opposition to all recipients will be communicated, as identified in art. 4, paragraph 1, no. 9 of the GDPR, to which such data has been transmitted, unless this proves impossible and/or involves disproportionate effort.
Following the sending of your request for rectification, cancellation, restriction of objection, if the Data Controller has reasonable doubts about your identity, he or she will ask you for more information to confirm it. These communications will be sent by email.
In the event that the Data Controller fails to comply with your request within the period of 1 (one) month from receipt of the request, the latter will inform you of the reasons for the non-compliance, informing you as of now of your right to lodge a complaint with the Control Authority (Personal Data Protection Authority), as specified pursuant to art. 13, paragraph 2, letter (d) and governed by Articles 77 et seq. of the GDPR.
C) right of claim
Pursuant to the art. 77 of the GDPR, in your capacity as Interested You have the right to lodge a complaint with a supervisory authority in the manner indicated in the same article.
D) Automated decision-making and profiling
The Data Controller informs you that, for the purposes of processing your personal data, it does not use automated decision-making processes, or those directed to make decisions based solely on technological means based on predetermined criteria (i.e. without human involvement). The owner does not carry out profiling.
Langhe Holiday | Albahouse di Adolfo Alessandro Pandolfi | P.IVA 03279820041
credits: alfcreative.it
