PI 012 540 600 88 - CF RBDRRT75E26I138I - CITRA: 008043-AG-0002 - CIN: IT008043B5JRYIZTBX
INFORMATION PURSUANT TO ART. 13 OF LEGISLATIVE DECREE 196/2003 AND ART. 13 OF REGULATION (EU) 2016/679
Information pursuant to art. 13 of Legislative Decree 196/2003 and art. 13 of Regulation (EU) 2016/679
AGRITURISMO AL PAGAN, headquartered in Regione Pagan snc – Pigna (Im) (hereinafter “Controller”), as the data controller, informs you pursuant to art. 13 of Legislative Decree 196/2003 (hereinafter “Privacy Code”) and art. 13 of Regulation (EU) 2016/679 (hereinafter “GDPR 2016/679”), containing provisions for the protection of individuals and other subjects with regard to the processing of personal data, that the personal data you provide will be processed in compliance with the aforementioned legislation and the confidentiality obligations to which this Company is bound, and will be processed in the following ways and for the following purposes:
1) SUBJECT OF THE PROCESSING
The Data Controller processes personal, identifying, and non-sensitive data (by way of example but not limited to, first name, last name, company name, address, telephone, tax code, VAT number, email – hereinafter, "personal data" or simply "data") communicated by you on the occasion of a specific verbal request or with a reservation sent via email by filling out the form on the website www.alpagan.it, directly to the address info@alpagan.it.
2) PURPOSE OF THE PROCESSING
Your personal data is processed without your express consent (art. 24 lett. a), b), c) Privacy Code and art. 6 lett. b), e) GDPR), for the following Service Purposes:
a. fulfillment of contractual and legal obligations;
b. organizational, administrative and commercial management of contracts;
while it is optional, and only with your specific and separate consent (Articles 23 and 130 Privacy Code and Article 7 GDPR), for the following Service Purposes:
c. Email address, for sending communications;
d. the contact information.
3) METHODS OF PROCESSING
The processing of your personal data is carried out through the operations indicated in art. 4 of the Privacy Code and art. 4 no. 2) GDPR, namely: collection, recording, organization, storage, consultation, selection, comparison, use, communication, deletion, and destruction of data. Your personal data is processed both on paper and electronically and/or automatically (using computer systems hosted at our premises). The Data Controller notes that, in compliance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to art. 5 GDPR 2016/679, the retention period of your personal data is established for a period not exceeding the achievement of the purposes described in point 2), for which they are collected and processed, in compliance with the time limits prescribed by law and provisions aimed at ensuring security and confidentiality, as well as their updating and relevance.
4) NATURE OF THE PROVISION
The provision of your personal data is mandatory in order to carry out the activities described in point 2) a. and b.: any refusal to provide such data would make it impossible for the Data Controller to proceed with the contractual relationship, and therefore to guarantee the services you have requested. The provision of data is, however, optional in relation to the purposes set out in point 2) c. and d.
5) SCOPE OF DATA COMMUNICATION AND DISCLOSURE
The data collected will never be disclosed and will not be communicated to private third-party companies without your explicit consent, except for communications required by law, which may involve the transfer of data to public institutions.
6) TRANSFER OF PERSONAL DATA
Pursuant to Articles 44 et seq. of the GDPR 2016/679, in order to ensure better management in terms of adequacy and security, the Data Controller, should it become necessary, may, having obtained your explicit consent for the purposes and in the manner set out in this information notice, transfer your personal data both to Member States of the European Union and to third countries outside the European Union. The Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, following the signing of the standard contractual clauses provided by the European Commission.
7) SECURITY
The Data Controller has adopted appropriate security measures to protect your data against the risk of loss, misuse or alteration and, in particular, those referred to in Articles 32-34 of the Privacy Code and Article 32 of the GDPR.
8) DATA ACCESS
Your data may be made accessible for the purposes referred to in point 2):
to employees and collaborators of the Data Controller, in their capacity as persons in charge and/or internal managers of processing and/or administrators of the systems used;
to third-party companies or other entities that collaborate with the Data Controller, in their capacity as data processors.
9) RIGHTS OF THE DATA SUBJECT
At any time, you may exercise, pursuant to Article 7 of the Privacy Code and Articles 15-22 of GDPR 2016/679, the right to:
1. a. request confirmation of the existence or otherwise of their personal data, even if not yet recorded, and their communication in an intelligible form;
2. b. obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, where possible, the retention period;
3. c. obtain the rectification and deletion of the data;
4. d. obtain the restriction of processing;
5. e. obtain data portability, that is, to receive them from a data controller in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;
6. f. to object to the processing at any time for legitimate reasons to the processing of personal data concerning you, even if relevant to the purpose of the collection, and also in the case of processing for direct marketing purposes;
7. g. object to automated decision-making relating to individuals, including profiling.
10) METHODS OF EXERCISING RIGHTS
You may exercise your rights at any time:
with a written request sent to the Data Controller, at the registered office postal address;
by sending an email to info@alpagan.it .
11) DATA CONTROLLER AND DATA PROCESSOR
The Data Controller is AGRITURISMO AL PAGAN, located in Regione Pagan snc – Pigna (Im). The Data Processor is Roberto Rebaudo.
12) INSIGHTS
For more information, you can visit the website of the Privacy Guarantor www.garanteprivacy.it and https://eur-lex.europa.eu/homepage.html?locale=it
Rebaudo Roberto
Agriturismo Al Pagan
Regione Pagan snc
18037 Pigna (Im)
PI 012 540 600 88 - CF RBDRRT75E26I138I - CITRA: 008043-AG-0002 - CIN: IT008043B5JRYIZTBX