DISCLOSURE ON THE PROCESSING OF PERSONAL DATA
Art. 13 of the EU Regulation 2016/679
The European Regulation (EU) 2016/679 establishes rules concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data. In compliance with the principle of transparency (Article 5), Lignano Sabbiadoro Gestioni spa, in its quality of data controller, provides you with the following information pursuant to Art. 13 of the Regulation:
Contact data of the Data Controller
Lignano Sabbiadoro Gestioni spa
via Latisana, 44 – 33054 Lignano Sabbiadoro (UD)
Tel. 0431/724033 - Fax 0431/721887
Email: info@lignanosabbiadoro.it
Pec: lisagest@pec.it
Contact data of the Data Supervisor
rpd@lignanosabbiadoro.it For all questions relating to the processing of your data and the exercising of your rights arising from the Regulation, you may contact the Data Supervisor (DS) at the following e-mail address: dpo@avvocatocorsini.it
Methods of data processing
The personal and contact data voluntarily provided by you through the registration form, present on our website www.lignanosabbiadoro.it, will be processed, both by paper and electronic means, in compliance with the provisions on the protection of personal data and in particular of the adequate technical and organizational measures pursuant to art. 32.1 of the Regulation.
Purposes of the processing and legal basis
The personal data that you shall provide by means of the booking on line form shall be processed, both by paper means as well as by computers, for the following reasons:
- manage the registration to the site necessary to access our services
- manage your reservations
- fulfill the consequent accounting, tax and administrative obligations;
- send commercial communications relating to our services (by email, sms, Whatsapp / other instant messaging systems)
- send promotional newsletters relating to new services, events, participation in surveys on the services offered.
The legal basis for the purposes referred to in point 1) and 2) is the execution of a contract of which the data subject is a party. The communication of data is a necessary requirement for the conclusion of the contract; failure to provide it will make it impossible for us to offer the requested service.
The legal basis for the purposes referred to in point 3) is the legal obligation.
The legal basis for the purposes referred to in point 4) and 5) is the consent that can be revoked by you at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.
Categories of recipients
Your data will be communicated in the EU to the following categories of recipients:
- data processors
- administrative board, board of statutory auditors
- credit institutions
- professionals, consultants, service providers (by way of example and not limited to website maintainers)
- insurance companies (in the event that it is necessary to manage an accident)
In order to know the list of data processors, please contact the addresses indicated above.
Data transfers to a third country / international organization
For the management of our services, your data will not be transferred to third countries/international organizations.
The use, at the request of the interested party, of the WhatsApp channel and the transit of data (name, surname, telephone number) could temporarily involve the transfer of the same to non-EU countries since WhatsApp Ireland Limited, Data Controller based in Ireland , declared this in its privacy policy available at https://www.whatsapp.com/legal/privacy-policy-eea#privacy-policy-our-global-operations
Storage of the data
The data necessary for the purposes referred to in point 1), 2) and 3) will be preserved for the duration of the contractual relationships established and also subsequently for the fulfilment of all legal obligations related to tax, accounting and administrative obligations.
Instead for the purposes referred to in points 4) and 5) they will be stored for a period of 2 years unless consent is revoked.
In case of failure to use the services by the user for 2 years, his personal data will be deleted.
Rights of the Data Subject
You may exercise your rights (articles 15-22 of the Regulation) at any moment by sending a communication to the e-mail of the data supervisor. More specifically, you will have the right to:
- access to the personal data
- their rectification;
- their erasure;
- the restriction of processing
- the right to object to their processing;
- data portability, i.e. the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format
Right to lodge a complaint with a supervisory authority
If the conditions are met, you have the right to lodge a complaint with the Garante (Data Protection Supervisory Authority as a supervisory authority. To know about the modalities of lodging a claim, please visit the following link:
http://www.garanteprivacy.it/web/guest/home
Automated Decision-Making Process
The Data Controller shall not use automated decision-making processes, including profiling.