The website domussocolataeresidenzadepoca.it collects certain personal data from users who browse the website.
In accordance with our commitment and attention to personal data and in accordance with Articles 13 and 14 of the EU GDPR, domussocolataeresidenzadepoca.it provides information on the methods, purposes, scope of communication and dissemination of personal data and users’ rights.
Data controller
Rima Loca s.a.s. di Cavazzoni Massimiliano & C.
Piazza Vittorio Veneto, 21
58022 – Follonica (GR) Italia
P.IVA 01594840538
Email: domussocolatae@gmail.com
Phone: +39 338 9368 207
Types of data acquired
domussocolataeresidenzadepoca.it collects user data directly or through third parties. The types of data collected are: technical navigation data, usage data, email, first name, last name, phone number, province, country, postal code, city, address, company name, status, cookies, and other various types of data. More details on the data collected are provided in the following sections of this policy.
Personal data is provided deliberately by the user by filling in forms or, in the case of usage data, such as data relating to navigation statistics, is collected automatically when browsing the pages of domussocolataeresidenzadepoca.it.
The data requested in the forms is divided into mandatory and optional fields; each form will clearly indicate which fields are mandatory and which are optional. If the user chooses not to provide mandatory data, domussocolataeresidenzadepoca.it reserves the right not to provide the service. If the user chooses not to provide optional data, the service will still be provided by domussocolataeresidenzadepoca.it.
www.domussocolatae.it uses statistical tools to track user navigation; analysis is performed via logs. It does not directly use cookies but may use cookies by including third-party services.
Each use of cookies is detailed in the Cookie Policy and subsequently in this policy.
Users who communicate, publish, disseminate, share, or obtain personal data of third parties through domussocolataeresidenzadepoca.it assume full responsibility for such data. The user releases the website owner from any direct or third-party liability, guaranteeing that they have the right to communicate, publish, and disseminate such data. domussocolataeresidenzadepoca.it does not provide services to minors under the age of 18. In the case of requests made on behalf of minors, the parent or guardian must fill in the data requests.
Methods, locations, and timing of data processing
Methods of processing acquired data
The data controller has designed an IT system that guarantees security measures deemed appropriate to prevent unauthorized access, disclosure, modification, or deletion of personal data. The same system makes daily copies, which are considered sufficiently adequate based on the importance of the data contained.
The user has the right to obtain information regarding the security measures adopted by the data controller to protect the data.
Access to data by parties other than the data controller
Internal staff (such as administrative, commercial, marketing, legal, and system administrators) and/or external parties (such as third-party IT service providers, web farms, communication agencies, and complementary service providers) have access to the personal data collected by domussocolataeresidenzadepoca.it. If necessary, these entities are appointed by the data controller as data processors.
The user may request an updated list of data processors from the data controller at any time.
Notification of any unwanted access to the Data Protection Authority
The aforementioned IT system is monitored and checked daily by technicians and system administrators. However, even if considered a remote possibility, unwanted access may still occur. Should this happen, the data controller undertakes, in accordance with the GDPR, to notify the Data Protection Authority within the terms established by law.
Where the acquired data is stored
Personal data is stored and processed at the data controller’s operational and administrative offices, as well as on the web farms where the servers hosting the domussocolataeresidenzadepoca.it website are located, or on the servers that perform backup copies. The user’s personal data may be stored in Italy, Germany, and the Netherlands, but in any case within the European Community. The user’s personal data is never transferred or copied outside the European territory.
Retention period for acquired data
In the case of data acquired to provide a service to the user (whether for a purchased service or a trial service), the data is retained for 24 months after completion of the service. Or until consent is revoked.
If the data controller is required to retain personal data in compliance with a legal obligation or by order of the authorities, the data controller may retain the data for a longer period of time, as necessary to fulfill its obligations.
At the end of the retention period, personal data will be deleted. After this period, it will no longer be possible to access your data or request its deletion or portability.
Legal basis for the processing of acquired data
The data controller acquires users’ personal data in the cases described below.
Processing is necessary:
– if the user has deliberately accepted processing for one or more purposes;
– to provide the user with a quote;
– to provide the user with a contract;
– to provide the user with a service;
– so that the data controller can fulfill a legal obligation;
– so that the data controller can fulfill a task in the public interest;
– so that the data controller can exercise public authority;
– so that the data controller or third parties can pursue their legitimate interests.
The user may request clarification from the data controller at any time regarding the legal basis for each processing operation.
Purpose of processing the data acquired
User data is collected by the data controller for the following purposes:
– providing the Service and complying with legal obligations;
– requests for technical and commercial information about services;
– sending technical and commercial information about services;
– requests for quotes from users;
– responses to requests for quotes;
– contacting the user in case of problems;
– advertising newsletters.
The data may also be processed for the following purposes:
contacting the user, statistics, analysis of user behavior and session recording, content display and interaction with external applications, spam protection, payment management, interaction with social networks, advertising.
The user may request clarification from the data controller at any time regarding the purposes of each processing operation.
Specific details on the collection and use of personal data
To contact the user
Contact forms
The user can fill in the contact/information request form(s), entering their data and consenting to its use to respond to requests of the nature indicated in the form header.
Personal data that may be collected: ZIP code, city, last name, email, address, country, first name, phone number, province, company name.
To manage tags
These services are used for the centralized management of tags or scripts used on the website; they collect data from users and store it if necessary.
Google Tag Manager
Service provider: Google LLC.
Purpose of the service: tag management service.
Personal data collected: cookies, usage data
Place of processing: United States
Privacy Policy (https://policies.google.com/privacy?hl=it)
Privacy Shield compliant
To manage payments
The website domussocolataeresidenzadepoca.it uses payment services to process payments by credit card, bank transfer, or other means. The website domussocolataeresidenzadepoca.it does not collect or acquire the data used for payment. Payment data is collected and acquired directly by the payment service provider (e.g., credit card company, PayPal, etc.).
These services may send messages to the user, such as emails or text messages notifying them of payments.
The data collected and its use by third-party services are governed by their respective Privacy Policies, to which reference should be made.
PayPal
Service provider: PayPal, Inc.
Purpose of the service: to make online payments
Personal data collected: types of data as specified in the service’s privacy policy
Place of processing: as specified in the service’s privacy policy
Privacy Policy (https://www.paypal.com/it/webapps/mpp/ua/privacy-full)
For interaction with external applications (including social networks)
domussocolataeresidenzadepoca.it includes plugins and/or buttons on its pages to interact with social networks and/or external applications.
With regard to social networks, even if the user does not use the service on the web page, it is possible that the service may acquire traffic data.
The data collected and its use by third-party services are governed by their respective Privacy Policies, to which reference should be made.
Facebook: “Like” button and social widgets
Service provider: Meta Platforms Ireland Limited.
Purpose of the service: interaction with the Facebook social network
Personal data collected: cookies, usage data
Place of processing: United States and other countries
Privacy Policy (https://www.facebook.com/privacy/policy)
Twitter: “Tweet” button and social widgets
Service provider: Twitter, Inc.
Purpose of the service: interaction with the Twitter social network
Personal data collected: cookies, usage data
Place of processing: United States
Privacy Policy (https://twitter.com/privacy)
Cookies used (https://help.twitter.com/it/rules-and-policies/twitter-cookies)
Privacy Shield compliant
WhatsApp: WhatsApp button and WhatsApp social widgets.
Service provider: if the user resides in the European Region, WhatsApp Ireland Limited; if the user resides outside the European Region, the Services are provided by WhatsApp LLC.
Purpose of the service: interaction services with WhatsApp.
Personal data collected: cookies, usage data.
Place of processing: Ireland. The information may be transferred or transmitted or stored and processed in the United States or other third countries outside the user’s country of residence.
Privacy Policy (https://www.whatsapp.com/legal/privacy-policy-eea)
Privacy Shield compliant.
For statistics
These services are used by the data controller to analyze user traffic on the domussocolataeresidenzadepoca.it website.
The data collected and its use by third-party services are governed by their respective Privacy Policies, to which reference should be made.
Google Analytics
Service provider: Google, Inc.
Purpose of the service: web analysis service provided. This service collects the user’s personal data to monitor and analyze the use of the domussocolataeresidenzadepoca.it website, generate reports, and also use them for other Google services. Google may use the data collected to personalize its advertisements.
Personal data collected: cookies, usage data
Place of processing: United States
Privacy Policy (https://policies.google.com/privacy?hl=it)
Opt-Out (https://tools.google.com/dlpage/gaoptout?hl=it)
Privacy Shield compliant
To display content from external websites
These services are used to display content external to the website on the website pages, with the possibility of interaction.
Even if the user does not use the service on the web page, it is possible that the service may acquire traffic data.
The data collected and its use by third-party services are governed by their respective Privacy Policies, to which reference should be made.
Google Maps widget
Service provider: Google, Inc.
Purpose of the service: service for viewing and interacting with external maps on your website
Personal data collected: cookies, usage data
Place of processing: United States
Privacy Policy (https://policies.google.com/privacy?hl=it)
Privacy Shield compliant
TripAdvisor widget
Service provider: TripAdvisor LLC.
Purpose of the service: service for viewing and interacting with external content on your website.
Personal data collected: cookies, usage data.
Place of processing: United States.
Privacy Policy (https://tripadvisor.mediaroom.com/us-privacy-policy)
Privacy Shield compliant.
YouTube Video Widget
Service Provider: Google, Inc.
Purpose of the service: To view and interact with external videos on your website
Personal data collected: Cookies, usage data
Place of processing: United States
Privacy Policy (https://policies.google.com/privacy?hl=en)
Privacy Shield compliant
Wubook Widget
Service Provider: WuBook
Purpose of the service: Service to display and interact with external content on your website
Personal data collected: Cookies, usage data
Place of processing: Italy
Privacy Policy (https://wubook.net/privacy/site/it/privacy.html)
Rights of the interested party
The user has all the rights provided for by Art. 12 of the EU GDPR, including the right to review, modify, supplement (rectify), and delete their personal data by accessing their reserved area. Once all data has been deleted, the access account to the reserved area will be closed.
Specifically, you have the right to:
– know whether the data controller holds personal data concerning you (Article 15, Right of Access);
– modify or supplement (rectify) inaccurate or incomplete personal data (Article 16, Right to Rectification);
– request the erasure of some or all of your personal data if one of the grounds set forth in the GDPR applies (Right to Erasure, Article 17);
– restrict processing to only some of your personal data, or withdraw your consent entirely, if one of the grounds set forth in the Regulation applies (Article 18, Right to Restriction of Processing);
– receive a copy of all your personal data held by the data controller, in a commonly used, structured, and machine-readable format (Article 20, Right to Portability);
– object, in whole or in part, to processing of your data for marketing purposes, for example, to object and receive advertising offers (Article 21, Right to Object). Users are advised that they can object to the processing of their data for advertising purposes without providing any reason;
– object to the processing of their data, whether automated or otherwise, for profiling purposes (so-called Consent).
How a user can exercise their rights
The user may exercise their rights set forth above by sending a request to the data controller Rima Loca s.a.s. di Cavazzoni Massimiliano & C. at the following addresses: domussocolatae@gmail.com; tel. +39 338 9368 207.
There is no cost to requesting to exercise one’s rights. The owner undertakes to process requests as quickly as possible, and in any case within one month.
The user has the right to lodge a complaint with the Italian Data Protection Authority. Contact details: garante@gpdp.it, http://www.gpdp.it (http://www.gpdp.it).
Additional information on data processing
Legal defense
In the event of legal action for abuse by the user in the use of domussocolataeresidenzadepoca.it or related services, the data controller has the right to disclose the user’s personal data. The data controller is also required to provide such data upon request by public authorities.
Request for specific information
The user has the right to request specific information from domussocolataeresidenzadepoca.it regarding the services offered on the website and/or the collection and use of personal data.
Data Collection for System Logs and Maintenance
domussocolataeresidenzadepoca.it and/or third-party services (if any) may collect personal data, such as the user’s IP address, in the form of system logs. This data is collected for the operation and maintenance of the website.
Information not contained in this policy
The user has the right to request from the data controller at any time additional information not contained in this Policy regarding the processing of personal data. The data controller can be contacted using the contact information.
Support for “Do Not Track” requests
“Do Not Track” requests are not supported by domussocolataeresidenzadepoca.it.
Users are encouraged to consult the privacy policies of the third-party services listed above to find out which ones support these types of requests.
Changes to this Privacy Policy
The Data Controller reserves the right to amend this document by notifying users on this page or, if applicable, through the contact information provided. Users are therefore encouraged to periodically review this page. To confirm whether any changes have been made, please refer to the last modification date indicated at the bottom of the page.
The Data Controller will re-obtain user consent if the changes to this document involve data processing for which consent is required.
Definitions and legal references
Personal data (or data, or user data)
Personal data is information that identifies or makes identifiable, directly or indirectly, a natural person and that can provide insights into their characteristics, habits, lifestyle, personal relationships, health, economic situation, etc.
Source: Website of the Italian Data Protection Authority (http://www.garanteprivacy.it).
Usage data
Usage data is information collected automatically while browsing domussocolataeresidenzadepoca.it, both from the website itself and from third-party applications included on the site. Examples of usage data include the IP address and details of the device and browser (including geographic location) used by the user to navigate the site, the pages viewed, and the length of time spent on each page.
User
The individual who uses the domussocolataeresidenzadepoca.it website.
This term coincides with the data subject, unless otherwise specified.
Data Subject
The data subject is the natural person to whom the personal data refers. Therefore, if a processing concerns, for example, the address, tax code, etc. of Mario Rossi, this person is the data subject (Article 4, paragraph 1, point 1), of EU Regulation 2016/679 (http://www.garanteprivacy.it/regolamentoue).
Source: Website of the Italian Data Protection Authority (http://www.garanteprivacy.it).
Data Processor (or Controller)
A data processor is the natural or legal person to whom the controller entrusts, even outside its organizational structure, specific and defined management and control tasks on its behalf regarding data processing (Article 4, paragraph 1, point 8) of EU Regulation 2016/679 (http://www.garanteprivacy.it/regolamentoue). The same Regulation introduced the possibility for a data processor to, in turn and under certain conditions, designate another entity as a “sub-processor” (Article 28, paragraph 2).
Source: Website of the Italian Data Protection Authority (http://www.garanteprivacy.it).
Data Controller (or Owner)
The Data Controller is the natural person, public authority, company, public or private entity, association, etc., which makes decisions on the purposes and methods of processing (Article 4, paragraph 1, point 7) of EU Regulation 2016/679 (http://www.garanteprivacy.it/regolamentoue).
Source: Website of the Italian Data Protection Authority (http://www.garanteprivacy.it).
domussocolataeresidenzadepoca.it (or website)
The website through which users’ personal data is collected and processed.
Service
The service offered by the domussocolataeresidenzadepoca.it website as indicated in the relevant terms.
European Community (or EU)
Any reference to the European Community extends to all current member states of the European Union and the European Economic Area, unless otherwise specified.
Cookies
Data stored on the user’s device.
Legal References
This privacy policy is prepared based on multiple legislative provisions, including Articles 13 and 14 of Regulation (EU) 2016/679. This policy applies exclusively to domussocolataeresidenzadepoca.it, unless otherwise specified.
Informativa privacy aggiornata il 30/06/2023 15:00
