Privacy Policy pursuant to Regulation UE 679/2016
Dear Interested Party,
We wish to inform you that “European Regulation 2016/679 concerning the protection of natural persons with regard to the Processing of Personal Data, as well as the free circulation of said data” (referred to hereafter as “GDPR”) provides that the protection of personal data referring to persons is to be considered an individual’s fundamental right. Pursuant to article 13 of the GDPR, therefore, we must inform you of the following.
1. CATEGORIES OF DATA
SAG S.r.l. will process your personal data, such as:
Data gathered automatically. During the course of their normal operation, the IT systems and applications dedicated to the operation of this website record certain data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. Included in the data gathered are the IP addresses and domain names of the computers used by users who connect to the site, addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (completed, error, etc.) and other parameters concerning the operating system, browser and IT environment used by the user. These data are processed for the time strictly necessary for the sole purpose of obtaining statistical information on the use of the site and to check that it is functioning properly. The conferring of said data is obligatory, as it is directly associated with the web browsing experience.
Cookies. The web page of S.A.G. S.r.l. has its own cookie policy, which can be consulted on the site at the specific item cookie policy.
Data gathered via app (downloadable by users on Android or iOs), where used: S.A.G. S.r.l. makes the Castles of Cannero app available to users, through which specific categories of data can be processed, such as
- technical data (device ID)
- usage data (interaction with the app, functionality)
- diagnostic data (for any anomalies)
- geolocation data (subject to consent)
2. SOURCE OF PERSONAL DATA:
The personal data are gathered through the use of contact information referring to the holder and published online. Each time you visit https://terreborromeo.it/, we will gather generic information on the geographical origin of visitors, on their IT systems, but this will be done strictly anonymously. All these data are included in files that are the responsibility of the staff of S.A.G. S.r.l.
We gather the personal data:
· to allow you to communicate with our staff;
· to create a database for consultation purposes, to which solely the staff of S.A.G. S.r.l. have access.
3. DATA CONTROLLER
The data controller is S.A.G. S.r.l. with registered address at Via Borromei 1/A - 20123 Milan at the email address privacy@isoleborromee.it
3.1 PURPOSE AND LEGAL BASIS OF THE DATA PROCESSING
The processing of your data has your free, spontaneous and aware choice to transfer these data to the Controller through the communication channels published on the website https://terreborromeo.it/ as its legal basis and is carried out for the purpose of responding: to your information requests.
The data gathered via the app (downloadable by users on Android or iOs), where used, are processed for the following purposes:
- To supply the app and improve its functionality;
- To provide assistance to users;
- To send technical communications, updates and/or notifications concerning the app.
3.2 METHOD OF DATA PROCESSING
The personal data provided by you will be the object of processing operations, respecting the regulations in force and the obligations of confidentiality by which the Controller’s activity is inspired. The data will be processed both using IT tools and on paper and any other type of suitable medium, respecting measures that are adequate for security pursuant to art 5, par. 1, letter F of the GDPR.
3.3 RECIPIENTS OF THE DATA
Within the limits pertinent to the purposes of processing indicated, your data may be communicated to partners, consultancy companies, private companies, those named as Data Processing Supervisors by the Data Controller, either due to legal obligations or to fulfil your specific requests. Your data will not be the object of diffusion in any form. The Data Processing Supervisors and the Persons in Charge of Processing currently in office are identified precisely in the Privacy Document, which is updated periodically.
3.4 TRANSFER OF DATA ABROAD
The data gathered may not be transferred outside the European Union.
3.5 DIFFUSION OF DATA. DATA PROFILING.
The data are not subject to diffusion. The data are not subject to profiling.
3.6 PERIOD OF STORAGE
The data gathered will be stored for a period no longer than the time necessary for the purposes for which they are processed (“principle of limitation of storage”, art. 5, GDPR) or on the basis of the expiry dates provided for by the legal norms. The verification of the obsolescence of the data stored in relation to the purposes for which they have been gathered is conducted periodically.
3.7 RIGHTS OF THE INTERESTED PARTY
The interested party always has the right to ask the Controller for access to their data, for the rectification or cancellation of same, the limitation of the processing or the possibility of objecting to the processing, to request data portability, to revoke consent to the processing, asserting these rights and the other rights provided for by the GDPR, by simple communication to the Controller. The interested party may also lodge a claim with a supervisory authority or by sending an email to the address privacy@isoleborromee.it.
3.8 OBLIGATORY NATURE OR NOT OF THE CONSENT
The conferring of your data is not obligatory during browsing on our website.
3.9 SECURITY OF THE INTERESTED PARTY’S PERSONAL DATA
S.A.G. S.r.l. hereby declares that the personal data gathered are processed in a lawful way and in accordance with propriety, that they are gathered and recorded for the purposes indicated and used in other operations that are compatible with these purposes. S.A.G. S.r.l. undertakes to adopt the preventive security measures that are appropriate in order to safeguard the confidentiality, integrity, completeness and availability of the interested party’s personal data.
The personal data are processed in paper format and/or with automated instruments, for the time necessary to achieve the purposes for which they have been gathered.
Specific security measures are observed to prevent losses, also accidental, alterations, improper use, unlawful or unfair uses and unauthorised access. S.A.G. S.r.l. is not deemed liable as regards untruthful information sent directly by the user of the site to the address privacy@isoleborromee.it (example: correctness of the email address or credit card details or postal address), and also information concerning them that has been provided by a third party, also fraudulently.
3.10 CONSULTATION, MODIFICATION AND CANCELLATION OF PERSONAL DATA
As provided for by Regulation UE 679/2016, the interested party has the right to obtain the following from the Controller of the data processed at any time: confirmation of the existence of the data and the communication of same; the updating, rectification, supplementation, cancellation, transformation, as well as the blocking of data processed in violation of the law, and may object to the processing of their personal data by sending an email to privacy@isoleborromee.it.