Privacy Policy

PRIVACY POLICY

Pursuant to Article 13 of EU Regulation 679/2016 – General Data Protection Regulation (GDPR)

This document provides information regarding the processing of personal data of visitors and users of this website.

DATA CONTROLLER

The Data Controller of the personal data collected on this website is:

Ciasa de Zeno, located in Str. Plaiac 22 – La Val 39030 (BZ), VAT no.: 02275440218, email: ciasadezeno@hotmail.it.

The Data Controller will collect and process personal data voluntarily provided by users of the website in full compliance with the provisions dictated by EU Regulation no. 679/2016 (GDPR) and national implementing legislation on the processing of personal data.

PERSONAL DATA, PURPOSE AND LEGAL BASIS

Technical navigation data

During normal user navigation, the browser transmits certain data to the site such as IP address, operating system used, access time, browser type and device used. This data is not accompanied by any additional personal information.

Data provided voluntarily by the user

Users may voluntarily provide their data by
– compilation by the user of forms on the website (e.g. contact page and property sheets)
– direct contact by the user via email, telephone, fax or other channels made available by the agency.

The data collected can be, for example: first name, surname, landline and/or mobile phone, email address, interest in tourist rental flats, photos and flat data.

Processing methods

The user’s data may be processed by means of electronic, computerised and telematic tools as well as by manual processing for the purposes for which the personal data were collected and with tools and methods that guarantee adequate levels of security and confidentiality of the information.

Data retention periods

The data will be kept for a period of time not exceeding the duration of the contractual relationship and for the time strictly necessary to fulfil legal obligations. Subsequently, the data will be deleted or transformed into anonymous form.

Communication and dissemination of data

The data collected is processed by in-house staff and may be communicated to third parties exclusively for the purposes listed above and in particular

to entities, professionals, companies or other structures entrusted by us with the processing related to the fulfilment of administrative, accounting, commercial and management obligations connected with the ordinary course of our business activity
to public authorities and administrations for purposes connected with the fulfilment of legal obligations
to providers of technical and IT services;

This website is hosted on servers located in Italy

The data collected will not be transferred outside the European Union

Links to third-party sites

This website may contain links to other sites that are not governed by this privacy policy, such as the social pages Facebook, LinkedIn, Twitter, Instagram.

User rights

At any time, the user may exercise, pursuant to Articles 15 to 22 of EU Regulation No. 2016/679, the right to:

to obtain the cessation of processing in cases where your personal data are processed for direct marketing purposes, including in relation to services identical to those already purchased from the Data Controller (so-called right to object);
to obtain information in relation to the purposes for which your personal data are processed, the period of processing and the subjects to whom the data are communicated (so-called right of access)
to obtain the rectification or integration of inaccurate personal data concerning you (so-called right of rectification);
to obtain the deletion of personal data concerning you in the following cases (a) the data is no longer necessary for the purposes for which it was collected; (b) you have withdrawn your consent to the processing of the data if it is processed on the basis of your consent; (c) you have objected to the processing of personal data concerning you if it is processed for our legitimate interest; or (d) the processing of your personal data does not comply with the law. However, we would like to point out that the retention of personal data by the Controller is lawful if it is necessary in order to comply with a legal obligation or in order to establish, exercise or defend a right in court (so-called right of erasure);
to obtain that the personal data concerning him/her be only stored without any other use being made of them in the following cases (a) the user contests the accuracy of the personal data, for the period necessary to allow us to verify the accuracy of such personal data; (b) the processing is unlawful but the user nevertheless objects to the deletion of the personal data by us (c) the personal data are necessary for the establishment, exercise or defence of legal claims; (d) you object to the processing and are awaiting verification as to whether our legitimate grounds for processing override those of the data subject (c. d. right of restriction);
to receive in a commonly used, machine-readable and interoperable format the personal data concerning him/her processed by automated means, if they are processed under contract or on the basis of his/her consent (so-called right of portability).

You have the right to contact the Garante per la protezione dei dati personali (Piazza di Monte Citorio, 121 – 00186 Roma RM) to assert your rights in relation to the processing of your personal data.