Privacy Policy

This privacy policy is intended to describe how the www.villapoliflora.it site is managed with reference to the processing of personal data of users / visitors who consult it.

The Privacy Policy is made only for the Website and not for other websites that may be consulted by the user through appropriate links.

VillaPoliFlora of Mangiavacchi Futura guarantees compliance with the legislation on the protection of personal data (Legislative Decree 196/03 and Reg. 2016/679 / EU). We therefore invite users / visitors of the Website to carefully read this Privacy Policy before forwarding any type of personal information and / or filling in any electronic form on the Website itself,

Data Controller

VillaPoliFlora of Mangiavacchi Futura
Via Luciano Conti 16, 53100 Siena – Italy, owner of the email address info@villapoliflora.it, is the person in charge of the processing of personal data.

Object of the treatment

  • Browsing data

The computer systems and software procedures used to operate the Website acquire, during normal operation, some personal data which are then implicitly transmitted in the use of Internet communication protocols.

This is information which by its nature could, through associations and processing with data held by third parties, allow users / visitors to be identified (e.g. IP address, domain names of computers used by users / visitors who connect to the Website, etc.).

These data are used only for statistical information and to check the correct functioning of the Website.

The data on web contacts are not kept, however, for more than seven days, except for any investigations of computer crimes against the Website.

No data deriving from the web service will be communicated or disclosed

  • Data voluntarily provided by users / visitors

If users / visitors, by connecting to the Website, send their personal data to access certain services, or to make requests by e-mail, they are aware that this entails the acquisition by the Owner of the sender’s address and / or any other personal data that will be processed exclusively to respond to the request or for the provision of the service.

The personal data provided by users / visitors will be communicated to third parties only if the communication is necessary to comply with the requests of the users / visitors themselves, by law or by requests from the public authority.

  • Cookies

In addition to the data expressly provided to the Data Controller, other data deriving from the user’s browsing on the Website may be recorded: when the user accesses it, in fact, the Website can send the user a “cookie”. A “cookie” is a small text file that the site can automatically send to the user’s computer when he or she views the pages of the Website. “Cookies” are used to make navigation more comfortable, as well as to obtain information on the navigation of the individual user within the Website and to allow the operation of some services that require identification of the user’s path through different pages of the Website. For any access to the Website, regardless of the presence of a “cookie”, the Website records the type of browser (eg Internet explorer, chrome, Firefox), the operating system (eg Windows, Macintosh), the host and the URL of origin of the user-browser, in addition to the data on the requested page . These data can be used in aggregate and anonymous form for statistical analysis on the use of the Website. For the complete management of cookies, see the “Cookie Policy” page of this Website.

 

 

Processing methods

The treatment is carried out through automated tools (e.g. using electronic procedures and supports) and / or manually (e.g. on paper) for the time strictly necessary to achieve the purposes for which the data were collected and , in any case, in compliance with the current regulatory provisions on the matter.

Purpose of the processing

In addition to those indicated in the individual information that precede the compilation of the forms of the various sections of the Website, the purposes of the processing carried out by the Owner must be understood as:

  1. collection, storage and processing for the purposes of the possible establishment of the contractual relationship (check availability and online quote). Data categories: general information and contact details, date of arrival and departure;
  2. collection, storage and processing for needs related to the conclusion and / or performance of the contractual relationship established and the operational and administrative management (accounting and tax) of the contractual relationship (booking). Data categories: general information and contact details, tax code and / or VAT number, bank details, credit and debit card details provided as guarantee and / or balance, list of services and products requested and purchased, arrival and departure date;
  3. collection, storage and processing to perform anonymous and / or aggregate statistical analysis, market research, statistical and economic analysis. Categories of data: navigation data on the website pages, place of residence, length of stay, period of stay, type of room, number of minors in tow, booking or request method;
  4. collection, storage and processing for the communication of commercial information on future initiatives and announcements on new products or services, including the sending of advertising and / or promotional material and for the execution of prize games, promotional initiatives generally. Categories of data: general information and contact details, date of arrival and departure.

Legal basis of the processing

The legal basis for the processing of data of users / visitors of the Website (the “ Interested “) carried out by the Owner through the Website consists of:

    1. as regards the collection, storage and processing for the purposes of the possible establishment of the contractual relationship (check availability and online quote), from pre-contractual measures adopted at the request of the interested party pursuant to art. 6 lett. b) Reg. 2016/679 / EU;
    2. as regards the collection, storage and processing for needs related to the conclusion and / or performance of the contractual relationship established and the operational and administrative management (accounting and tax) of the contractual relationship (booking), from the execution of a contract of which the interested party is a party pursuant to art. 6 lett. b) Reg. 2016/679 / EU;
    3. as regards the collection, storage and processing to carry out anonymous and / or aggregate statistical analysis of market research, statistical and economic analysis, from the pursuit of the legitimate interest of the Data Controller pursuant to art. 6 lett. f) Reg. 2016/679 / EU;
    4. as regards the collection, storage and processing for the communication of commercial information on future initiatives and announcements on new products or services, including the sending of advertising and / or promotional material and for the execution of prize games, promotional initiatives in general, alternatively: (i) by the consent of the interested party pursuant to art. 6 lett. a) Reg. 2016/679 / EU or, in the absence of this, (ii) by the so-called soft spam pursuant to art. 130, paragraph 4, Legislative Decree 196/03. The interested party, when sending each communication made, is informed of the possibility of opposing the treatment at any time.

Target

 

In addition to the Owner, in some cases, categories of managers and authorized persons involved in the corporate organization of the Website may have access to the data, such as, but not limited to, administrative, commercial, marketing, legal, administrators of system (the “ Managers “). In addition, the Data Controller may make use of external subjects (such as third party technical service providers, carriers, hosting providers, cloud services, IT companies, communication agencies) who may be appointed external managers. The updated list of Managers can always be requested from the Data Controller by contacting the e-mail address indicated below.

Transfer to a third country

For the services offered by the Website, the Data Controller uses servers located in Italy and therefore, on the basis of Reg. 2016/679 / EU, to be considered suitable as they fall within the EU context.

The data processed by the Data Controller will never be disclosed

Place of data processing

The treatments connected to the services of the Website take place at the Data Controller’s registered office and are only handled by the technical staff in charge of the processing.

Data retention times

as regards the processing for the purpose of the possible establishment of the contractual relationship (check availability and online quote), the data retention period is 3 months from the date of collection;

      1. as regards the processing for the purpose of the possible establishment of the contractual relationship (check availability and online quote), the data retention period is 3 months from the date of collection;
      2. as regards the processing for needs relating to the conclusion and / or performance of the established contractual relationship and the operational and administrative (accounting and tax) management of the contractual relationship (booking), the data retention period is 10 years (and even longer in the event of disputes or tax assessments) from the date of collection;
      3. as regards the processing to carry out anonymous and / or aggregate statistical analysis, market research, analysis statistical and economic, the data retention period is 12 months from the date of collection;
      4. as regards the collection, storage and processing for the communication of commercial information, the data retention period is24 months from the date of collection

Optional or mandatory provision of data

Apart from that specified for navigation data that acquire data automatically, users / visitors are free to provide their personal data or not to provide it. Their absence can only make it impossible to obtain the requested service.

Rights of interested parties

The subjects to whom the personal data refer have the right at any time, pursuant to Reg. 2016/679 / EU, to obtain confirmation of the existence or not of the respective data, to know its content and origin , to verify its accuracy or request its integration or updating or correction.

In relation to the processing of the aforementioned data, the user / visitor has the right to obtain from the Owner:

  1. confirmation of the existence or not of your personal data, their communication in intelligible form and knowledge of their origin, as well as the logic on which the treatment is based;
  2. < li class = “”> the cancellation, within a reasonable period, of your data, their transformation into anonymous form or the blocking of those processed in violation of the law;

  3. the updating of the data, their correction or, when interested, their integration;
  4. the attestation that the operations referred to in points 2 and 3 above have been brought to the attention of those to whom have been communicated, provided that it is not impossible or involves a disproportionate use of means;
  5. the correction or cancellation of data concerning him or the limitation of treatment;
  6. the revocation of consent relating to optional and unrelated processing related to the execution of the contract signed with the Tit ular

    The subjects to whom the personal data refer also have the right to oppose for legitimate reasons the processing of personal data concerning them, even if pertinent to the purpose of the collection, to ask for their portability, to exercise the right to be forgotten, as well as to contact the supervisory authority responsible for the protection of personal data for any violation that they believe they have suffered.

    The owner’s references are as follows:
    VillaPoliFlora by Mangiavacchi Futura
    Via Luciano Conti 16
    53100 Siena – Italy
    email: info@villapoliflora.it