Art. 13 and 14 of Regulation 2016/679 / EU (hereinafter also "GDPR")
Pursuant to the articles 13 and 14 of Regulation 2016/679 / EU (hereinafter "GDPR") Sayonara Bathing Establishment of EuropaImmobiliare SRL & C. Sas Cornelio Tonino, in his capacity as "Data Controller", informs you that your personal data collected for of the conclusion of the contract with the Customer and / or Supplier and in the execution and / or stipulation of the same will be treated in compliance with the aforementioned legislation, in order to guarantee the rights, fundamental freedoms, and dignity of natural persons, with particular reference to privacy and personal identity. We inform you that if the activities provided to you provide for the processing of personal data of third parties in its ownership, it will be your responsibility to ensure that you have complied with the provisions of the law in relation to the interested parties in order to make their treatment legitimate on our part.
Sayonara Beach Resort of EuropaImmobiliare SRL & C. Sas
Cornelio Tonino Tax ID / VAT number: 00982220675 is the data controller of the personal data concerning you.
The registered office is in Viale Sirena Sn 64018 Tortoreto (TE) and for any question regarding the
privacy you can write to firstname.lastname@example.org or by phone at 3342466789
The website is located at: www.sayonarabeach.it
Type of data collected
Although in relation to the activity carried out the information dealt with in the relationships with Customers and Suppliers are above all relative to legal persons, the different referents generate processes that may include processing of personal data.
By "personal data", we mean any information that can identify, directly or indirectly, a natural person (so-called "Interested").
The personal data processed are those of contact, as well as additional information of an identification and economic-financial nature in the case of contractual relationships with natural persons.
The processing of personal data can be performed for all natural persons who, by virtue of contracts or collaborations stipulated, or even being finalized, relate to subjects belonging to the Sayonara Beach Resort of EuropaImmobiliare SRL & C. Sas Euripedes Azevedo Marques Junior .
Description of treatment: Processing of personal data relating to contracts for the supply of goods and services of customers and suppliers.
Categories of interested parties: clients, potential customers, agents, representatives, employees / entrepreneurs / administrators of client companies and suppliers, suppliers, consultants and freelancers.
Origin of Personal Data
The data is partly collected from the interested party and in part can be collected from third parties.
Description of the source: Data collection from interested parties, via email, telephone, fairs, website contact form. The data can come from a publicly accessible source.
Legal bases and purpose of the processing
The processing of your personal data is carried out by Stabilimento Balneare Sayonara of EuropaImmobiliare SRL & C. Sas Cornelio Tonino for the purpose of concluding the contract with the Customer / Supplier and in the context of execution and / or stipulation thereof. In addition, it is possible for the processing of personal data of third parties communicated by the Customer to the Company. With respect to this hypothesis, the Customer acts as an independent data controller and assumes the consequent legal obligations and responsibilities, relieving the Company of any dispute, claim and / or request for compensation for treatment damage that may be received by the Company from third parties concerned.
In compliance with current legislation on the protection of personal data and without the need for specific consent by the Data Subject, the Data will be stored, collected and processed by the Company for the following purposes:
fulfillment of contractual obligations, execution and / or stipulation of the contract with the Customer and / or management of any pre-contractual measures;
fulfillment of any legal obligations, to the fiscal and tax provisions deriving from the performance of the business activity and to obligations connected to administrative-accounting activities;
litigation management, including through third-party companies;
I send, directly or through third parties suppliers of marketing and communication services, newsletters and communications for direct marketing purposes by email, sms, mms, push notifications, fax, paper mail, telephone with operator, in relation to products supplied by other companies to pursuant to art. 130 c. 1 and 2 of Legislative Decree 196/03 (hereinafter the "Code");
communication of Data to third-party companies for the purpose of sending newsletters and marketing communications via email, sms, mms, push notifications, fax, paper mail, telephone with operator pursuant to art. 130 c. 1 and 2 of the Code.
The legal bases of the processing for the purposes a) and b) above are the arts. 6.1.b) and 6.1.c) of the Regulation, in that the processing is necessary for the execution of a contract of which the interested party is a party or the execution of pre-contractual measures adopted at the request of the same; processing is necessary to fulfill a legal obligation to which the data controller is subject. The provision of Data for the aforementioned purposes is optional, but failure to provide the Data itself and the refusal to supply it would make it impossible for the Company to execute and / or enter into the contract and provide the services required by the same.
The legal basis of the processing for the purpose c) is the pursuit of the legitimate interest of the data controller.
The legal basis for the processing of personal data for the purposes d) and e) is the art. 6.1.a) of the GDPR as the treatments are based on consent; it is specified that the Data Controller may collect a single consent for the marketing purposes described herein, pursuant to the General Provision of the Guarantor for the protection of personal data "Guidelines on promotional activity and contrast to spam" of 4 July 2013. The giving consent to the use of the data for marketing purposes is optional and if the interested party wishes to object to the processing of the Data for marketing purposes performed with the means indicated herein, and to revoke the consent given, he may at any time do so without no consequences (except for the fact that it will no longer receive marketing communications) by following the instructions provided in the "Rights of the interested party" section of this Statement.
Finally, please note that for the processing carried out for the purpose of sending direct advertising material or direct sales or for carrying out market research or commercial communications in relation to products or services similar to those used by the Customer, the Company can use e-mail addresses or personal data in accordance with and within the limits allowed by art. 130, paragraph 4 of the Code and by the provision of the Guarantor Authority for the protection of personal data of June 19, 2008 even in the absence of explicit consent. The legal basis for data processing for this purpose is art. 6, paragraph 1, lett. f) of the GDPR, without prejudice to the possibility of opposing such processing at any time, following the instructions in the "Rights of the interested party" section of this Statement.
Methods of processing the collected data
The Data Controller uses appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using manual, IT and / or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Owner, in some cases, other parties involved in the organization (administrative, commercial, marketing, legal, system administrators) or external parties (such as third party technical service providers, postal couriers, hosting providers, computer companies, communication agencies) also appointed, if necessary, Data Processors by the Owner. The updated list of Data Processors may always be requested from the Data Controller.
Your personal data is not subject to an automated decision-making process.
Place of processing of collected data, areas of communication and data transfer.
The Data are processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. There is no transfer of data of the interested party to countries outside the EU or to international organizations. The Personal Data of the interested party may be transferred to a country other than that in which the interested party is located. In order to obtain further information on the place of treatment, the interested party may refer to the section concerning the details on the processing of personal data. For the processing of the information and data that will be communicated to these subjects, the equivalent levels of protection adopted for the processing of personal data of their employees will be required. In any case, only the data necessary to achieve the intended purposes will be communicated and the regulatory instruments envisaged by Chapter V of the GDPR will be applied. We may also disclose personal data to our commercial service providers, for marketing reasons, for this purpose appointed as external processors. In addition, personal data may be communicated to the competent public bodies and authorities for the purpose of complying with regulatory obligations or for ascertaining responsibility in the case of computer crimes against the site as well as disclosed to, or allocated to, third parties (as a responsible or, in the case of electronic communication service providers, independent data controllers), who provide IT and telematic services (eg hosting services, website management and development) and for which the Data Controller uses performance of tasks and activities of a technical and organizational nature instrumental to the functioning of the website. The subjects belonging to the above categories operate as distinct Data Controllers or as Managers appointed for this purpose by the Company. The data may be disclosed to third parties appointed as data processors pursuant to Article 28 of the GDPR and in particular to banking institutions, companies active in the insurance field, service providers strictly necessary for the performance of business activities, or to consultants of the company, where this proves necessary for fiscal, administrative, contractual reasons or for needs protected by current regulations. Your personal data, or the personal data of third parties in its ownership, may also be communicated to external companies, identified from time to time, to which the Sayonara Bathing Establishment of EuropaImmobiliare SRL & C. Sas Euripedes Azevedo Marques Junior entrusts the execution of obligations deriving from the assignment received to which only the data necessary for the activities requested will be transmitted. All employees, consultants, temporary workers and / or any other "natural person" who carry out their activities on the basis of instructions received from Stabilimento Balneare Sayonara of EuropaImmobiliare SRL & C. Sas Euripedes Azevedo Marques Junior, pursuant to art. 29 of the GDPR, are appointed "Data Processors" (hereinafter also "Appointees"). To Appointees or Managers, possibly appointed, Sayonara Bathing Establishment of EuropaImmobiliare SRL & C. Sas Euripedes Azevedo Marques Junior. gives adequate operating instructions, with particular reference to the adoption and compliance with security measures, in order to guarantee the confidentiality and security of data. With reference to the aspects of protection of personal data, the Customer is invited, pursuant to art. 33 of the GDPR to report to Euripedes Azevedo Marques Junior at the Sayonara Bathing Establishment of EuropaImmobiliare SRL & C. Sas any circumstances or events from which a potential "breach of personal data (data breach)" may descend in order to allow an immediate evaluation and adoption of any actions aimed at countering this event by sending a communication to Stabilimento Balneare Sayonara of EuropaImmobiliare SRL & C. Sas Euripedes Azevedo Marques Junior to the published addresses.
The data will not be disclosed.
The obligation of Stabilimento Balneare Sayonara of EuropaImmobiliare SRL & C. Sas Cornelio Tonino to communicate the data to Public Authorities on specific request remains unaffected.
Period of conservation
The processing will last no longer than is necessary for the purposes for which the data was collected. The data will be processed for the entire duration of the established contractual relationship and also subsequently, for the fulfillment of all legal obligations, as well as for future commercial purposes. Even after the termination of the contractual relationship, Sayonara Beach Resort of EuropaImmobiliare SRL & C. Sas
Cornelio Tonino and any other authorized parties may keep your personal administrative-accounting data - also for compliance with legal and regulatory obligations (eg 10 years for tax maintenance, as well as for defensive purposes of their own or third parties) or for the fulfillment of specific legal obligations, up to the expiry of the storage period legally applicable on a case by case basis.
Your data is collected and recorded in a lawful and correct manner for the purposes indicated above in compliance with the principles and provisions of art. 5 c 1 of the GDPR.
Rights of the interested party
In compliance, within the limits and under the conditions established by the legislation on the protection of personal data regarding the exercise of the rights of the Interested parties (Articles 15 to 22, art.77 of the GDPR), with regard to the processing subject of this Information, as an interested party, users may exercise certain rights with reference to the data processed by the owner.
In particular, the interested party has the right to:
Revoke the consent at any time: the interested party can revoke the consent to the processing of his personal data previously expressed. Oppose the processing of your data: the interested party may object to the processing of their data when it takes place on a legal basis other than consent. Further details on the opposition right are indicated in the section below. Accessing Your Data: The interested party has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
Verify and ask for rectification: the interested party can verify the correctness of his / her Data and request its updating or correction.
Obtaining the processing limitation: when certain conditions are met, the Data Subject may request the limitation of the processing of his / her Data. In this case, the Data Controller will not process the Data for any other purpose than to retain them. Obtain the cancellation or removal of your Personal Data: when certain conditions are met, the Interested party may request the deletion of their Data by the Owner.
Receive your data or have it transferred to another owner: the interested party has the right to receive his / her data in structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain its transfer without obstacles to another holder. This provision is applicable when the Data is processed by automated tools and the processing is based on the consent of the Interested Party, on a contract of which the Interested Party is a party or on contractual measures connected to it.
Propose a complaint: the interested party can propose a complaint to the competent personal data protection supervisory authority or act in court, if he considers that the treatments concerning you violate the GDPR rules, pursuant to art. 77 of the GDPR.
If you wish to request further information on the processing of your personal data or for the possible exercise of your rights, you may contact us at email@example.com
Details on the right to object
When Personal Data is processed in the public interest, in the exercise of public powers vested in the Data Controller or in pursuing a legitimate interest of the Data Controller, Users have the right to object to processing for reasons connected to their particular situation.
Users are reminded that, if their Data is processed for direct marketing purposes, they may oppose the processing without giving any reason. To find out if the Data Controller is processing data for direct marketing purposes, Users can refer to the respective sections of this document.
How to exercise rights
To exercise the rights of the data subject, the interested parties may address a request to the contact details of the owner indicated in this document. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month.
The Owner reserves the right to make any changes to this information regarding the processing of personal data that are deemed appropriate or made mandatory by current regulations, at its sole discretion and at any time. On such occasions, users will be informed of the changes that have occurred.
Last modification: 10 June 2019