With this document (” Information“) The Data Controller, as defined below, wishes to inform you about the purposes and methods of processing your personal data and about the rights recognized by Regulation (EU) 2016/679 concerning the protection of individuals, with regard to processing of personal data as well as their free circulation (“GDPR “).
The “ Agritur Sandro “ farmhouse , has always paid particular attention to compliance with the confidentiality obligations towards the subjects whose personal data they process and adopts in its activities every measure necessary for data protection. As required by the privacy legislation, we now wish to provide you with some information on how our company uses your personal data.
Holder of the treatment
The data controller is Agritur Sandro, with registered office in Via Maron, 6, 38010 Sporminore TN, VAT no. 02077750228 – e.mail firstname.lastname@example.org .
The owner himself oversees the protection of personal data. For any request relating to your personal data, contact the e-mail address where you can exercise your rights, as well as to receive any information relating to them and / or this Notice, by writing to:
Agritur Sandro ;
By sending an e-mail to: email@example.com .
The Data Controller will take care of your request and provide you, without undue delay and in any case, at the latest, within one month of receiving it, the information relating to the action taken regarding your request.
For our society, privacy is really important, everyone says it, but for us it really is. This means that we will strive to protect and safeguard any personal data you provide to us by acting in the interest of our customers and we will treat your personal data transparently.
What personal data we process
To accept your orders either by telephone or via the web platform or by using electronic tools available to the company, it is necessary in some cases, and required by law, to collect and use some of your personal data.
In the absence of such data , Agritur Sandro would not be able to process your request. With reference to the purposes of the processing of the data pertaining to you, we mean that the same will first of all be used to fulfill the obligations established by law. For this reason, when you use the services, there is precise information that we must ask for, for example your name, contact details to contact you, any names of those traveling with you and payment details.
You can decide whether to send special requests for your Trip (for example, certain preferences). In addition, the company also collects data from the computer, phone, tablet or other device it uses to access the services. This includes the IP address, the browser.
For the purposes indicated in this Notice, the Data Controller may process common personal data, which are, for example, personal data (name, surname, address, telephone number, VAT number, city, State / Province, e-mail and others contact details, an identification number, an online identifier).
· Private customer If you are a private customer, when you contact us, you will have to communicate data such as name, surname, telephone number, address, state / province, these data are used to use our service and therefore reserve a room for you.
As part of the use of the service, you could use the functions to communicate with the company, considering that your data is always protected.
FurthermoreAgritur Sandro , may ask you for an e-mail, VAT number, or additional personal data in order to fulfill the formalities required by law.
Data of minors under the age of 16 If you are under the age of 16 you cannot provide us with any personal data nor can you be part of theAgritur Sandro , and in any case the company does not assume responsibility for any false statements provided by you.
The services offered byAgritur Sandro are intended only for people over the age of 16. For persons under the age of 16, the use of our services is permitted only with the consent of their parents or legal guardian. Agritur Sandro may collect and use information from minors only with the consent of the parents or legal guardian and in limited cases such as for a reservation, or in other exceptional cases (for example specific functions for families).
If we become aware of the existence of untruthful declarations, we will proceed with the immediate cancellation of any personal data acquired.
As part of the aforementioned activities, personal data may be known by the personnel appointed byAgritur Sandro (employees and collaborators), in relation to the functions performed, also by means of IT and telematic tools, and with methods and logics of organization, processing and transmission of data strictly related to the management of the relationship.
Agritur Sandro may transfer personal data to third countries under one of the following conditions:
· Whether it is a third country deemed adequate ex. art. 45 of EU Regulation 679/2016 or of the country for which Agritur Sandro provides adequate or appropriate guarantees regarding the protection of data pursuant to art. 46 and 47 of the aforementioned EU Regulation and always on condition that the interested parties have enforceable rights and effective means of redress.
The customer can still contactAgritur Sandro to obtain a copy of such data and the place where they are available. For the aforementioned hypotheses regarding the processing of your personal data, the Data Controller requires your explicit consent to the processing. Any decision not to grant such consent will make it impossible for the Owner to proceed with the management of the relationship. The data are processed with the support of IT and telematic means and are protected by adequate security measures suitable to guarantee their confidentiality and integrity.
In particular, Agritur Sandro has adopted and adopts organizational (distribution of roles and responsibilities in the execution of the activity and controls), procedural and technical (firewall, antivirus and other advanced technologies) measures appropriate to protect your data against loss, theft, as well as unauthorized use, disclosure or modification. The data collection is done for a good reason: to help the company manage the Travel Reservations and to ensure the best possible service. We also use personal data to contact you and to inform you of any discounts and special offers and other products and services that we believe may be of interest to you.
Purpose of the processing
The processing of personal data is necessary for the acquisition of preliminary information for the conclusion of the contracts that it will stipulate with Agritur Sandro (such as, for example, the contract for the purchase of goods, invoicing, etc.), for the completion and execution of the contracts you have signed.
The purposes for whichAgritur Sandro needs to request and process your data, deriving either from consent (when requested) or from other reasons provided for by the Privacy Regulation, and more precisely:
o the use of the Portal and its functions;
o Acquisition of preliminary information to the conclusion of contracts
o Monitoring of the use of the services made available to the interested party.
· Purpose of the law
o compliance with any legal and regulatory obligations and the possible need to assert and defend the rights ofAgritur Sandro or third parties in court;
· Marketing purposes
or only with prior consent (which you can revoke at any time, as indicated below) for the promotion of products and / or services, including by sending advertising material, commercial communications, carrying out market research and direct sales activities, both through traditional communication tools such as paper mail and through remote communication tools, such as email, chat, telephone, SMS, video call, automatic call, instant message, chatbot, intelligent interactive automated communication systems, banners, and promotion, using the same methods and tools, of products and services offered by third parties to the product categories whose list is available to you and you can request it at any time (Third Party Marketing Purposes);
The information collected is used for various purposes. Here’s what your data is for:
Room booking, first of all, we use your personal data to complete and manage your online travel booking, which is the main purpose of our company;
Customer Support: Provide 24/7 support. Sharing your details such as booking details or user account information with our global customer support allows us to be there for you when you need us;
1. Marketing activities: we also use the information for marketing activities, including for example: Using the information to send periodic news on products and services related to the structure. You can unsubscribe from marketing communications at any time by writing to firstname.lastname@example.org
2. When you participate in promotional activities offered by the structure, the information about it will be used to manage participation in these promotions.
3. Communications via e-mail, post, telephone or SMS, depending on the method of contact you have chosen.
Legal purposes: Finally, in some cases, we may need to use your information to manage and resolve legal disputes, government investigations and compliance checks, or to comply with legitimate requests from public authorities.
The processing of data for the Contractual Purposes is mandatory as it is necessary for the provision of the requested services.
Nature of the provision: Mandatory.
Consequences of refusal to provide data: Failure to provide data will make it impossible for Agritur Sandro to follow up on contractual requests and to execute the contract.
Legal basis of the processing: Execution of measures provided for in the contract, fulfillment of a legal obligation, consent formulated with an explicit request and conclusive behavior.
Personal data retention period: Your personal data will be processed for the time necessary to carry out the purposes of the processing described above. In case of non-completion of the contract or dissolution of the contractual obligation, your personal data will be kept for 10 years or, if later, from the date of the binding decision issued by a competent authority (for example, court sentence), without prejudice to remaining any storage obligations relating to particular categories of data, for longer periods of time, prescribed by the legal system.
With your consent, Agritur Sandro may process your personal data in order to send commercial communications of products and services, including direct marketing.
Nature of the provision: Optional.
Consequences of refusal to provide data: Failure to provide data will not affect the satisfaction of your requests but will make it impossible for the Data Controller to send you marketing communications.
Legal basis of the processing: Express consent of the interested party.
Personal data retention period: Your personal data for this purpose will be processed until your decision to revoke the consent and / or to obtain the cessation of processing. If you have also consented to the profiling activity of this Notice, the marketing activities, based on profiling, will only take into consideration the data recorded in the last 24 months.
Right to object to direct marketing activities
We inform you that, at any time, you have the right to object to direct marketing activities by contacting the Data Controller.
The systems used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but which, by its very nature, could, through processing and association with data held by third parties, allow users to be identified. The information collected could be the following:
– internet protocol address (IP);
– type of browser and device parameters used to connect to the site;
– name of the internet service provider (ISP);
– date and time of visit;
– web page of origin of the visitor (referral) and exit;
– possibly the number of clicks.
This information is processed in an automated form and collected in an exclusively aggregated form in order to verify the correct functioning of the site and for security reasons. For security reasons, some data (such as the IP address) could be used, in accordance with the laws in force on the subject, also to ascertain responsibility in the event of hypothetical computer crimes against the site.
Disabling cookies Since cookies are connected to the browser used, they can be disabled directly by the browser, refusing or revoking consent to their use. However, disabling cookies may prevent the correct use of some functions of the site. The instructions for disabling cookies can be found on the web pages of the browsers: Mozilla Firefox – Microsoft Internet Explorer – Microsoft Edge – Google Chrome – Opera – Apple Safari.
Delete, modify or delete a data
Disabling cookies Since cookies are linked to the browser used, they can be disabled
To export your personal data or request its cancellation, you can send a request to the email address email@example.com from the e-mail box with which you registered.
The cancellation will be carried out within the expected technical times and in accordance with the provisions of the right to be forgotten through a request for express cancellation of the personal data processed by the owner.
We remind you that such data will be stored, in a protected form and with limited access, only for the purposes of ascertaining and suppressing crimes, for a period not exceeding 12 months from the date of the request and subsequently they will be securely deleted or irreversibly anonymised. .
In relation to the treatments described in this Notice, as an interested party you can, under the conditions provided for by the GDPR, exercise the rights enshrined in articles 15 to 21 of the GDPR and, in particular, the following rights:
- right of access – article 15 GDPR: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, to obtain access to your personal data – including a copy of the same – and communication, between the others, of the following information:
a) purpose of the processing;
b) categories of personal data processed;
c) recipients to whom these have been or will be communicated;
d) data retention period or criteria used;
e) rights of the interested party (rectification, cancellation of personal data, limitation of processing and right to object to processing;
f) right to lodge a complaint;
g) the right to receive information on the origin of my personal data if they have not been collected from the interested party;
h) the existence of an automated decision-making process, including profiling;
- right of rectification – article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and / or the integration of incomplete personal data;
- right to cancellation ( right to be forgotten ) – article 17 GDPR: right to obtain, without undue delay, the cancellation of personal data concerning you, when:
a) the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) you have revoked your consent and there is no other legal basis for the processing;
c) has successfully opposed the processing of personal data;
d) the data has been unlawfully processed,
e) the data must be deleted to fulfill a legal obligation;
f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1, GDPR.
The right to erasure does not apply to the extent that the processing is necessary for the fulfillment of a legal obligation or for the performance of a task carried out in the public interest or for the ascertainment, exercise or defense of a right. in court.
- right to limitation of treatment – article 18 GDPR: right to obtain limitation of treatment, when:
a) the data subject disputes the accuracy of the personal data;
b) the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited
c) personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
d) the interested party opposed the processing pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
- right to data portability – Article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another Data Controller without impediments, if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly from Agritur Sandro to another owner if this is technically feasible;
- right to object – article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimacy of the legitimate interest, including profiling, unless there are legitimate reasons for the Data Controller to continue the processing that prevail over interests , on the rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.
- right not to be subjected to an automated decision-making process – article 22 GDPR: the interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way, unless this is necessary for the conclusion or execution of a contract or you have given your consent.
In any case, an automated decision-making process cannot concern your personal data and you can at any time obtain human intervention from the data controller, express your opinion and contest the decision.
- propose a complaint to the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Rome (RM);
- revoke the consent given on any occasion and with the same ease with which it was provided.
The above rights may be exercised against the owner.
The exercise of your rights as an interested party is free pursuant to article 12 of the GDPR.
We remind you that for any question or request relating to your personal data and respect for your privacy you can write to the dedicated address firstname.lastname@example.org
The storage of personal data will take place in paper and / or electronic / computer form and for the time strictly necessary to satisfy the purposes of requesting quotes, or purchases made with the company and in compliance with your privacy and current regulations.
For analysis purposes aimed at developing and improving the service, the user’s personal data may be subject to data retention for a period not exceeding 36 months.
For direct marketing purposes we keep your data for a maximum period equal to that required by the applicable legislation (respectively equal to 24 and 12 months).
Invoices, accounting documents and transaction data are kept for 10 years in accordance with the law (including tax obligations).
Data protection is ensured
The data are collected by the Data Controller, according to the indications of the reference legislation, with particular regard to the security measures provided for by the GDPR (Article 32) for their processing using IT tools, and in any case in order to guarantee security and confidentiality of the data.
In compliance with the applicable legislation, an antispam verification system is active on communications between users. The data entered therein may be verified for the sole purpose of identifying illegal activities or contents that do not comply with the General Conditions of the Service, but will not be processed or communicated for commercial or promotional purposes.
This information may be subject to changes. If substantial changes are made to the use of data relating to the user by the Owner, the latter will notify the user by publishing them with the utmost emphasis on their pages or through alternative or similar means.