Pursuant to the General Data Protection Regulation (EU Regulation 2016/679)
Dear Data Subject, According to the aforementioned law, our data processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights. Pursuant to Article 13 of the GDPR 2016/679, we hereby provide the following information:
Processing referred to in the policy:
Request for information, newsletter subscription, registration and authentication, purchase procedure
Customers and potential customers
Request for information: Number of person, Date, Schedule, Name and surname, Business name, Province, City, E-mail, Address, Telephone number, Nation, Message, Arrival date, Departure date, Rooms, Guests, Promo Code
Newsletter subscription: Email
Registration and authentication: First name, Surname, E-Mail, Date of birth, Birth place, Fiscal Code, Address, City, Province, Postal code, Web address, Telephone number, Fax, Nation, Information on how you met the company
Purchase procedure: Information on the delivery address as: name indicated on the door and complete address, Telephone number, Country, Special information for the courier
The data is processed in these ways:
Purpose of the processing:
The collected data is used for the provision of information and services to the User, account registration, provisioning of the service or product requested.
Upon the provision of consent, it will be used for sending promotional and informative messages.
The Data Processor and Data Controller ensure that the data subjects are processed only for the stated purpose and only using that strictly necessary for processing. They also undertake, within the limits of reasonableness, to modify and correct all data that subsequently proves to have been modified from that received originally, to keep it updated and to delete all data exceeding the declared processing.
Data concerning minors:
No data concerning minors is handled in the "Customer Management" processing.
Health, biometric and judicial data:
Health, biometric and judicial data is not handled in the "Customer Management" processing.
Duration of the processing:
Processing for "Site Management" purposes has an indefinite duration.
The company Marchesi Mazzei Spa Agricola declares the "Site Management" processing has an indefinite duration as it will be kept continuously active in order to continue business operations. The Data Controller and the Data Processor will ensure that the data subjects can be assured that, once the purposes of this processing have been reached, the data will be deleted.
The processing does not concern automated or profiling processes.
Transfer of data for this processing:
Data is not transferred to non-EU countries.
Marchesi Mazzei Spa Agricola nella persona di Marchesi Mazzei – - P.I. 00758320527 - Email: firstname.lastname@example.org
Marchesi Mazzei email@example.com
Rights of the Interested Parties:
At any time, you may exercise your rights contacting the Data Controller via email, mail or telephone:
- accessing your personal data;
- obtaining the correction or the deletion of your personal data or the restriction of the relative processing;
- objecting to the processing;
- availing of data portability;
- revoking consent, where provided, it being understood that the withdrawal of consent does not affect the lawfulness of the processing based on the consent given prior to the revocation;
- submitting a complaint to the Supervisory Authority (Privacy Guarantor)