Privacy notice

Introduction

In this information sheet, we provide all the information you need about how we collect and use your personal data when you browse or use our services.

The data provided by B&B Cuore Di Vieste (www.cuoredivieste.com) will be treated in compliance with the current privacy legislation, which is based on the D.Lgs. 196/2003 “Rules in the field of personal data protection” (Privacy Decree) and on the EU Regulation 2016/679 (GDPR).

This Privacy Policy has the purpose of informing the user about the ways in which their personal data will be treated as simple and in as much detail as possible. This policy is obviously relevant only for this website and does not apply to third-party websites which the user may consult through links.

Data Controller

We inform you who the data controller is and how you can contact them to ask questions or exercise your rights.

The data controller and the responsible party for the treatment of personal data is Roberta Natella, Via Cimaglia, 2 – Vieste (FG) – 71019 (info@cuoredivieste.com), hereinafter “the Owner”.

Types of personal data

We explain which data may subject to processing while surfing pages on this website.

The website offers informational and, sometimes, interactive content. While browsing the site the Owner may, therefore, collect informations on the visitor, in the following ways:

Browsing data

Our systems and/or third-party companies’ with which we have estabilished agreements directly or indirectly, may capture some connection data regarding your browsing session: IP address, date and time of access, viewed resource’s address (URL), potential previous web page (referrer), browser and operative system used. Such data may, only pursuant potential investigations carried out by the legal authorities, allow to trace the identity of the owner of the Internet access. Under no circumstances our staff may trace independently the visitors’ identity through such browsing data and under no circumstances will it be consolidated with other informations owned by us or by third-party companies.

Cookies

Our systems and/or third-party companies’ with which we have estabilished agreements directly or indirectly, may send to the user’s device (the machine with which the concerned party browses the web) cookies of various nature and with various purposes. To learn more about the cookies and their usage on our part and/our on third-party companies’, please continue reading this document and it will allow you to check the detailed notice.

Voluntary data

In order to access to certain services or benefits, the user may be asked to fill forms (e.g. contact forms) that require to provide personal data (e.g. an email address). The data collection, where intended, is the necessary condition to access the services we offer. We understand as “voluntary data” that provided by emails to contact any representative of ours as well.

Purpose of the processing

We explain why we collect and process your data regarding specific purposes.

We utilize browsing data, cookies and data provided voluntary by the users only for intended purposes. In some cases such data may possibly be disclosed, processed and/or stored with the help of third-party companies, specified each time in correspondence of the relative disclosure/process/storage.

Log files and similar

For security reasons, and in order to fulfill specific legal obligations, technical data regarding the users’ connection is collected inside text files that are stored in our server to monitor the correct functioning of the website and to protect our system from potential cyber-attacks. Additional software installed on our systems might perform similar operations for information security related purposes.

Third-party widgets

There might be, in certain pages of the website, tools provided by third-parties, e.g. videos, social network elements and other remote functionalities. Such tools could interact with the user’s system by sending cookies. To learn about purposes, types and methods with which said third-parties collect, process, utilize and maintain personal data, as well as ways in which you can exercise your rights, please check their corresponding privacy policies.

Contact forms

Personal data provided voluntarily inside the appropriate forms are processed:

• in order to reply to contact requests sent through said forms

Legal basis for the processing

We explain the legal basis on which data processing is performed by the site and we explain which are the validity requirements of your potential consent to the processing of your personal data.

For some data processing no consent is needed from the subject. In particular, there is no provision for giving or denying consent regarding the registration of log files, the measurement of statistics of access to the site and the sending of cookies that are strictly necessary to the technical functioning of the website. In each of these cases, in fact, there is legitimate interest on the Owner’s part to have their online business working properly.

In all other circumstances, the processing is based on the subject’s consent and it is at the subject’s discretion whether to give it or not. The subject’s consent is indispensable for marketing purposes, e.g. sending commercial informations via email or accepting profiling cookies to display personalized advertising messages.

Subject’s consent

In all cases in which the subject’s consent is required for processing data, such consent must be aware, free and unconditional. The lack of data provision, however, may result in the impossibility of obtaining certain services or benefits (e.g. you can’t subscribe to the newsletter if you don’t give the corresponding consent).

For the consent’s validity, the subject is required to be at least 16 years of age. Therefore, usage of all our services that provide for some data processing on a voluntary basis is intended to be precluded to those who have not reached such age limit.

Methods of data processing

We explain the way your data is handled.

Personal data processing is carried out prevalently through electronic medias and procedures (DB, CRM platforms, etc.) for the time strictly necessary to achieve the purpose for which they were collected and, in any case, in accordance with the principles of lawfulness, fairness, non-excess and relevance estabilished by current privacy legislation.

Linking from/to third-party sites

We explain what happens when you connect to third-party sites.

From this website it is possible to connect, through special links, to other third-party sites, i.e. it is possible for third-party sites to connect to our website. The Owner declines any responsability in regard to the potential request and/or release of personal data to the third-party sites and, consequently, to the management of authentication credentials provided by a third-party.

Data retention

We tell you where the data we collect first-hand is kept.

The data we directly process is stored within our systems, physically inside our facilities.

Technical data relating to the website’s functioning is stored within the systems of Aruba SPA, to which we rely on for the management of our website’s IT infrastructure.

Subjects authorized to access the data

We tell you who can access the data that we handle first-hand.

Access to our systems is granted to our representatives and to the staff of the company we rely on to manage our IT infrastructure.

Security measures

We tell you how we protect your data.

We comply with appropriate security measures to prevent data loss, tampering, illecit usages and unauthorized accesses. In order to grant the confidentiality of communications from and to our IT systems, we implemented the SSL protocol on every page of this website. Moreover, where appropriate, user data is processed and stored in encrypted form.

Processing period

We let you know how long your data will be processed inside our systems.

The data is processed for the time necessary to perform the service requested by the user or by the purposes described herein. The user can always ask for the interruption of specific processings (e.g. asking to cancel subscription from a specific service) or for the complete deletion of their data.

Certain data might be retained even after the deletion for a range of time required to comply with legal obligations, as long as there is no necessity to further store them in order to defend or assert a right, or to comply with additional legal obligations or orders of the authorities.

Subject’s rights

We let you know what are your rights and how you can exercise them.

The subjects, whom the personal data we mentioned above is referred to (“data subject”), are entitled to exercise their rights in accordance with the modalities and within the limits laid down by the current privacy legislation.

• access: the data subject has the right to ask whether a data processing that concerns them is in place and, if so, they have the right to know such data.
• rectification: the data subject can request to rectify or to integrate data that they supplied or otherwise at our disposal, if such data is incorrect.
• deletion: the data subject can request deletion of their data if said data is no longer needed for the intended purposes, if the consent has been withdrawed, if the processing has been objected against or illecit, or in any other case where legal obligation to delete the data applies;
• restriction: the data subject can request to restrict the processing of their personal data, as provided by the Article 18 of the GDPR; in this case, their data won’t be processed, other than for retention purposes, without their consent, with the exception of what’s referred to in paragraph 2 of the same Article.
• objection: the data subject can, at any given moment, object to the processing of their data executed on a legitimate interest basis, unless legitimate reasons to proceed with the processing that prevale on the data subject’s reasons exist, e.g. the functioning of our agency or our defense in court.
• portability: the data subject can request to receive their data, or have it sent to another holder appointed by the data subject themselves, in a structured, common use format readable by automatic devices.

Moreover, in accordance with art. 7., par. 3, GDPR, we let you know that you might exercise at any given moment your right to withdraw your consent, without jeopardising the legality of the processing based on the previously given consent.

To exercise such rights, report problems or request clarifications about the processing of your personal data, you can contact the Owner at the addresses indicated above. Should the user feel like they didn’t obtain an adeguate and timely response to their request regarding privacy matters, they have the right to get in touch with the relevant authority.

Policy changes

We let you know what is going to happen if we change the privacy notice.

The potential implementation of new industry regulation, as well as the constant examination and update of user services, might result in the necessity to change terms and conditions described in the current notice. Therefore such document may be subject to modifications in the future. Thus, we kindly ask you to consult this page periodically.

We will post any changes to this notice in this page and, should such changes be relevant, we will report them to you with a more visible notification.

Cookie policy