PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH GDPR 2016/679
This notice governs the processing of personal data carried out by our company within this website, in accordance with current data protection regulations, in particular, the EU Regulation 2016/679 (hereinafter “GDPR”)
Data Controller: Hotel de la Poste S.r.l.
Headquarters: Piazza Roma, 14, Cortina d’Ampezzo, BL
Contact information: manaigo@delaposte.it
The Data Controller is responsible to you for the lawful and correct use of your personal data and can be contacted for any information or requests regarding such processing.
Privacy Policy
This page describes how the site is managed with regard to the processing of personal data of users who consult it.
This is an information notice provided in accordance with the new GDPR 2016/679 on the protection of personal data to those who interact with the web services accessible electronically from the address: https://www.cortinagin.it/
The information is provided only for the site in question and not also for other Web sites that may be consulted by the user through links. The guidance provided below deals specifically with the collection of personal data on the Internet by aiming to identify the minimum measures that will have to be implemented with respect to the persons concerned to ensure the fairness and lawfulness of such practices.
Place of data processing
Processing related to Web services on this site takes place at the aforementioned location and is handled only by employees, collaborators or persons in charge of processing, or by any persons in charge of occasional maintenance operations. No data from the Web service is disclosed or disseminated. Personal data provided by users who submit requests for the sending of informative material are used only for the purpose of performing the service or provision requested and are communicated to third parties if this is necessary for that purpose.
Data, purpose and legal basis
Computer systems and computer programs used for the operation of the site collect some personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses or domain names of computers used by users connecting to the site, the URI -Uniform Resource Identifier- addresses of the requested resources, time of the request, method used in submitting the request to the server, size of the file obtained in response, numeric code about the status of the response rendered by the server – successful, error, etc.- and other parameters related to the user’s operating system and computer environment). Although this information is not collected to be associated with identified data subjects, by its nature it could, through processing and association with data held by third parties, allow users to be identified.
These data are used for the sole purpose of obtaining statistical information not associated with any user identification data on the use of the site and to check its correct operation and are deleted immediately after processing. The data could be used to ascertain liability in case of hypothetical computer crimes against the Site.
The optional, explicit and voluntary sending of your personal data (name, surname, telephone number, e-mail address, etc…) to the address indicated on this site or by filling in the form for requesting a quote or for more information about our activity, entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message.
Newsletter and processing of your data
If you have provided your consent by “flag” to receive commercial communications, the processing of your data may be carried out to send direct marketing communications, newsletters, activities of sending advertising material, carrying out market research, by means of traditional contact systems and automated computer systems, including commercial or promotional communications by e-mail or SMS; this constitutes the consent of the person concerned, expressed in accordance with this notice. In this case, consent to the processing of personal data is not a contractual obligation. The interested party has the option to provide personal data; however, if this data is not provided, no marketing activities can be carried out. The Data Controller makes it known that, in relation to the right to object to the processing of personal data for marketing purposes, the possibility of exercising this right in part, i.e. objecting, for example, only to the sending of promotional communications carried out through automated and/or digital means or, alternatively, to traditional means, remains unaffected.
Recipients and transfers outside the European Union.
Your data will not be started to third parties or resold for any reason. Your personal data will not be transferred to any non-EU country or international organization, and may be processed by formally appointed external data processors (a list of which is available upon your request) who belong to categories of individuals who support the owner in providing the services offered through this site (e.g., software developers, website operators).
Communication
Your data are processed within the company by the following categories of individuals authorized and appointed by the Data Controller:
• Marketing department
• Information systems
Your data may be disclosed to third parties, in particular to:
• External provider OVH
• Companies that perform routine and extraordinary maintenance of the website
• Third-party companies providing third-party services
We may manage some of your personal data with services located outside the European Union area, for example with the MailChimp service. The transfer is authorized according to specific Decisions of the European Union and the Data Protection Supervisor, in Decision 1250/2016 in particular (Privacy Shield – here the Italian Guarantor’s information page), for which no further consent is needed. The providers used guarantee their adherence and compliance with the Privacy Shield.
Mode of treatment
Personal data are processed by automated means for the time strictly necessary to achieve the purposes for which they were collected, unless the same information is the subject of other processing by the same Data Controller. Specific security measures are observed to prevent data loss, illegal or incorrect use in compliance with obligations to comply with minimum security measures.
In any case upon withdrawal of consent the data will no longer be processed.
We also inform you of the following rights you may have against the Data Controller:
Right to request access to your personal data (art.15).
Right to rectification (Art.16) or right to erasure of personal data (Art.17).
Right to restriction (art.18) or right to object to processing (art.21).
Right to data portability (art.20).
Right to revoke consent provided for one or more specific purposes, at any time, without prejudice to the processing carried out prior to the revocation of consent (Art. 7).
Right to file a complaint with the Data Protection Authority (Art.77).
Requests to exercise the rights set forth in this policy, including, in particular, the right to cancellation and the right to revoke the consent given should be addressed directly to the Holder at the email address: manaigo@delaposte.it