Privacy policy

Pursuant to the General Data Protection Regulation (EU Regulation 2016/679)

Dear Data Subject, According to the aforementioned law, our data processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights. Pursuant to Article 13 of the GDPR 2016/679, we hereby provide the following information:

Processing referred to in the policy:

Request for information, newsletter subscription, registration and authentication, purchase procedure

Categories concerned:

Customers and potential customers

Data processed:

Request for information: Number of person, Date, Schedule, Name and surname, Business name, Province, City, E-mail, Address, Telephone number, Nation, Message, Arrival date, Departure date, Rooms, Guests, Promo Code

Newsletter subscription: Email

Registration and authentication: First name, Surname, E-Mail, Date of birth, Birth place, Fiscal Code, Address, City, Province, Postal code, Web address, Telephone number, Fax, Nation, Information on how you met the company

Purchase procedure: Information on the delivery address as: name indicated on the door and complete address, Telephone number, Country, Special information for the courier

The data is processed in these ways:

Electronically

Purpose of the processing:

The collected data is used for the provision of information and services to the User, account registration, provisioning of the service or product requested.

Upon the provision of consent, it will be used for sending promotional and informative messages.

The Personal Data collected to complete the payment may be those relating to the credit card, the bank account used for the transfer or other payment instruments provided. The payment details collected by this Application depend on the payment system used and are processed according to the privacy policy of the relevant payment service.

The Data Processor and Data Controller ensure that the data subjects are processed only for the stated purpose and only using that strictly necessary for processing. They also undertake, within the limits of reasonableness, to modify and correct all data that subsequently proves to have been modified from that received originally, to keep it updated and to delete all data exceeding the declared processing.

Data concerning minors:

No data concerning minors is handled in the "Customer Management" processing.

Health, biometric and judicial data:

Health, biometric and judicial data is not handled in the "Customer Management" processing.

Duration of the processing:

Processing for "Site Management" purposes has an indefinite duration.

The company Marchesi Mazzei Spa Agricola declares the "Site Management" processing has an indefinite duration as it will be kept continuously active in order to continue business operations. The Data Controller and the Data Processor will ensure that the data subjects can be assured that, once the purposes of this processing have been reached, the data will be deleted.

Profiling:

The processing does not concern automated or profiling processes.

Transfer of data for this processing:

Data is not transferred to non-EU countries.

In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice.”

Data controller:

Marchesi Mazzei Spa Agricola nella persona di Marchesi Mazzei – - P.I. 00758320527 - Email: mazzei@mazzei.it

Data processor:

Marchesi Mazzei mazzei@mazzei.it

Rights of the Interested Parties:

At any time, you may exercise your rights contacting the Data Controller via email, mail or telephone:

• accessing your personal data;
• obtaining the correction or the deletion of your personal data or the restriction of the relative processing;
• objecting to the processing;
• availing of data portability;
• revoking consent, where provided, it being understood that the withdrawal of consent does not affect the lawfulness of the processing based on the consent given prior to the revocation;
• submitting a complaint to the Supervisory Authority (Privacy Guarantor)