This page is intended to describe the management methods of the ilmiraggioinvaldorcia.com website (henceforth also the “Website”) with reference to the processing of personal data of users who consult it. This is an information that is made pursuant to and for the purposes set out in the EU Regulation no. 679/2016 (“GDPR”), concerning the protection of individuals with regard to the processing of personal data, and is aimed at explaining our practices with respect to personal information of those who browse the Website, so as to know how are managed the their personal information and allow us to give an express and informed consent to the processing of data, entered on the Website through the voluntary compilation of forms present in it or provided by them in any other way.
All personal data sent by users (name, surname, e-mail address, etc.) are acquired, saved and processed in accordance with the GDPR.
Personal data processing means any operation or complex of operations, carried out without the aid of electronic tools, concerning the collection, registration, organization, storage, consultation, processing, modification, selection , the extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion and destruction of data, even if not recorded in a database.
The information is provided only for this Website and not for other websites that may be consulted by the user through links.
By accessing and using the Website, the user acknowledges that he has carefully read this Privacy Policy and accepts the purposes and methods of treatment described therein.
I. THE “HOLDER” OF THE TREATMENT
The personal data provided or collected through the operations carried out by users on the Website will be processed by Ralaimo srl, with headquarters in Sp 137 km 0,070, 53027 San Quirico d’Orcia (SI) and P. Iva 02019510854 as Data Controller.
II. DATA PROCESSED
Navigation data
The computer systems and software procedures used to operate this Website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than seven days.
Data related to the user’s geographic location could be used to provide information, proposals and other customized content based on location. Users who do not want to share information about their geographical location will have to disable the location services on their device.
Data provided voluntarily by the user
The personal data entered on the Website as well as the data sent by the user by e-mail to the e-mail addresses indicated on the Website. These data include, for example, the sender’s e-mail address, first name and surname, postal address and telephone number included in the message. The optional, explicit and voluntary sending of e-mail through the Website and / or to the addresses indicated on the Website entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message sent .
Cookies
To ensure the functioning of the Website and to improve the service offered, the Website uses proprietary and third-party cookies. Cookies are small text files that the sites visited by the user send to his terminal (usually the browser), where they are stored before being re-transmitted to the same sites at the next visit of the same user.
For more information, know the cookies used on the Site and possibly disable them and / or deny consent to refer to the cookie policy.
III. PURPOSE AND LEGAL BASIS OF TREATMENT OF PERSONAL DATA
Personal data are collected and processed by Ralaimo srl for the following purposes:
A. as part of the processes for checking the availability, booking and purchase of the services offered by the Website, personal data are requested (such as e-mail address, personal data, postal address, card details of credit and bank details, telephone number);
B. to provide assistance services and other technical, commercial or other information specifically requested by users, personal data are collected (such as e-mail address, name and surname and telephone number );
Furthermore, with the prior consent of the users, the Personal Data may be entered in the client database of Ralaimo srl and processed for the following purposes:
C. marketing purposes: to contact users and send them (by post, telephone, e-mail and other forms of electronic communication) newsletters and / or other promotional messages, including commercial ones relating to the services of Ralaimo srl;
D. profiling purposes: for the preparation of studies, surveys, analyzes and statistical and / or market research, in relation to the preferences on the services offered by Ralaimo srl, in order to offer a personalized service to users’ needs and to promote cultural and recreational initiatives and activities.
The processing of personal data will only be used to achieve the aforementioned purposes and to the extent strictly necessary for the pursuit of the purpose of the specific case.
The legal bases for the processing of personal data of the user are based on the purposes for which such data were provided and collected and include the processing of information as required to comply with contractual obligations, compliance with legal obligations, security protection of Ralaimo srl employees, guests and other persons, for the legitimate commercial interests of Ralaimo srl and in accordance with the consent
given by the user.
IV. CONSENT OF THE USER
By browsing the Website and / or entering your personal data, the user declares to have read this information under the GDPR and to accept it. Furthermore, by selecting the consent flag or other similar means of confirmation, the user gives explicit consent to the processing of his data, as well as to their transfer to third parties for the fulfillment of the purposes, within the limits mentioned above.
By entering your data on the Website, the user in particular gives his consent to:
to. transmit your e-mail address to automatic third-party e-mail forwarding systems for advertising purposes;
b. receive advertising e-mails or other correspondence from Ralaimo srl;
c. the detection, saving and processing of personal data;
d. that your data are stored in the database by Ralaimo srl and / or by companies or third parties contractually linked to the Company and specifically responsible for processing the personal data of users.
The user may withdraw his consent to the processing of data at any time by writing an e-mail to info@ilmiraggioinvaldorcia.com.
V. PLACE OF DATA PROCESSING AND COMMUNICATION OF DATA TO THIRD PARTIES
The processing connected to the web services of the Website may take place on servers of third-party companies that will offer hosting services on behalf of Ralaimo srl also cloud.
User data may also be processed by third-party companies, of which Ralaimo srl use it to carry out activities on its behalf (for example, analyzing data, storing data, sending newsletters or other commercial or non commercial communications, providing marketing assistance, carrying out market analysis).
With reference to the scope of communication of personal data, personal data provided by the user or otherwise collected may be communicated to the following subjects or categories of subjects:
to. public administrations, for the fulfillment of obligations under the law, regulations or national or community legislation. In such cases, the obligation to acquire the prior consent of the interested party to such communications is excluded;
b. companies controlling, controlled or connected to Ralaimo srl;
c. other companies or natural persons contractually linked to the Company and specifically responsible for processing personal data on behalf of Ralaimo srl
Ralaimo srl uses third-party companies and individuals to perform certain activities on their behalf (eg processing data, sending automatic e-mails, etc.). These subjects have access only to personal data necessary for the performance of their duties on behalf of Ralaimo srl They have been selected because they are deemed to have adequate experience, capacity and reliability, as well as being able to guarantee full compliance with the regulations in force regarding privacy.
By browsing the Website, you consent to the communication of your data to third party service providers on our behalf and to this method of data processing.
In cases other than those indicated above, the user will be informed in the event that his personal data must be communicated to third parties and can choose whether or not to authorize the communication to third parties of his personal data.
VI. DATA PROCESSING METHODS
Personal Data will be processed using appropriate electronic or automated means, computerized and telematic, or by manual paper processing, with logic strictly related to the purposes for which the personal data were collected and, however, in such a way as to guarantee the security and confidentiality of the data themselves and for the time strictly necessary to achieve the purposes for which they were collected.
Ralaimo srl has adopted technical solutions and security measures that guarantee the security of personal data and avoid their alteration, loss, incorrect treatment or unauthorized access.
Ralaimo srl reserves the right to charge third parties (companies or individuals) for processing personal data on its behalf and may share personal data with such third parties. However, it will require such third parties to comply with the applicable privacy principles and regulations when processing the aforementioned data.
Personal Data will be collected and processed by Ralaimo srl and by its internal staff (employees) and / or collaborators authorized to process such data as data processors and, if necessary and / or instrumental for the execution of the aforementioned purposes, by external third parties ( for example, service providers, consultants and professional firms, companies that provide assistance and / or consultancy services or who carry out, on behalf of Ralaimo srl, maintenance services for the technological and management part of the Website, services connected and instrumental to the purposes of data processing, and of which Ralaimo srl can also use for the creation and / or management of promotional offers of its services, etc.).
Any use of data relating to the user’s credit card for purposes other than the verification of the existence of means of payment, the debiting and management of payments, as well as the management of any complaints and litigation procedures, is expressly excluded. To this end, the aforementioned data will also be processed by the bank that provides services connected with online payment processing as well as by the institution that issued the credit card that the user will enter to validate the purchase of the services.
VII. OPTIONALITY OF DATA SUPPLY
Apart from that specified for navigation data, the provision of Personal Data is optional.
However, if the user intends to access the services offered by the Website and / or receive information on the services and / or promotions and / or discounts offered by Ralaimo srl and / or receive assistance and / or specific information it is necessary to fill in all the fields indicated as mandatory in the relative forms. The processing of user data for the purposes referred to in paragraph III. letters (A), (C) and (D) is conditional on the release by the same user of explicit consent.
Failure to provide personal data and explicit consent to their processing may result in the inability to access the services offered by the Website, to receive the newsletter and / or other informative and advertising material.
By entering your personal data on the Website, the user guarantees that the personal information provided is correct and up to date. Furthermore, he acknowledges that he is solely responsible for the data provided, be it personal data, photos, comments or other information, by stopping Ralaimo srl from every responsibility.
VIII. CONSERVATION OF PERSONAL DATA
Ralaimo srl will keep the personal data, object of treatment, for the period of time necessary to fulfill the purposes indicated in this statement, where a longer period of conservation is not required or permitted by law.
IX. RIGHTS OF THE INTERESTED
The subjects to whom the personal data refer have the following rights:
A) Right of access, correction, deletion and limitation.
The user has the right to:
ask Ralaimo srl access to your personal data and information relating thereto;
verify the accuracy of personal data or request the integration of incomplete data or the updating or correction of inaccurate data;
ask Ralaimo srl the cancellation of personal data upon the occurrence of the conditions indicated in art. 17, par. 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article);
request the limitation of the processing of personal data (at the request of one of the hypotheses indicated in Article 18, paragraph 1 GDPR).
B) Right to oppose treatment.
The user has the right to request that Ralaimo srl stop processing your personal information:
for marketing activities, including profiling activities;
for statistical purposes;
where such processing is based on the legitimate commercial interests of Ralaimo srl, unless it proves a legitimately grounded reason for such processing or if the processing of your personal information is necessary to ascertain, exercise or defend a right in court.
C) Right to withdraw consent.
The user has the right to withdraw at any time his consent to any treatment that is conducted by Ralaimo srl solely on the basis of your consent (such as sending marketing materials directly to your personal email address).
The treatment based on consent and carried out prior to the revocation of the same preserves, however, its lawfulness.
D) Right to data portability.
The user has the right to request Ralaimo srl and to obtain, in the cases in which the legal basis of the treatment is the consent or contract, and the same is done by automated means, his personal data in an electronic format in common use, also in order to communicate such data to a other data controller.
E) Complaint to a supervisory authority
The user has the right to propose a complaint to a supervisory authority (Authority for the protection of personal data – www.garanteprivacy.it)
Requests should be addressed:
by e-mail, at: info@ilmiraggioinvaldorcia.com;
or by post, to Ralaimo srl, with headquarters in Sp 137 km 0,070, 53027 San Quirico d’Orcia (SI).
X. LINKS TO THIRD PARTY WEBSITES AND SERVICES
This Website may contain links to third-party websites.
Ralaimo srl is not responsible for the collection, use, management, sharing or disclosure of personal data by the aforementioned third parties. If the user provides personal data on, and uses, third-party sites, the privacy policies and terms of use of the aforementioned websites will be applied. We therefore invite the user to read the privacy policies of the websites he visits before sending his personal data.
XI. CHANGES TO THE INFORMATION
This information may be subject to changes. The version published on the Website is the one currently in force with the latest update on 24.05.2018.
