In compliance with the provisions of EU Regulation 2016/679 (European Regulation for the protection of personal data), we provide you with the necessary information regarding the processing of the personal data provided. This information is not to be considered valid for other websites that may be consulted via links on the websites of the owner, who is not to be considered in any way responsible for third-party websites. This is an information document rendered pursuant to Article 13 of EU Regulation 2016/679 (European Regulation for the protection of personal data) and also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC on Cookies, as well as the provisions of the Decision of the Data Protection Authority of 08.05.2014 on Cookies and the EDPB Guidelines 05/2020 on consent under the GDPR, adopted on 04.05.2020.
“Personal data”: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity; (C26, C27, C30).
The computer systems and software procedures used to operate a website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment (for more information see the cookie policy of this site).
The optional, explicit, and voluntary sending of messages to the contact addresses, as well as the filling out and submission of forms on the Owner’s website, involves the acquisition of the sender’s contact data, necessary to respond, as well as all personal data included in the communications.
Specific information will be present on the pages of the Site in relation to particular services or data processing provided.
For more information on the cookies used by this website, see the cookie policy.
The Data Controller, pursuant to Articles 4 and 24 of EU Regulation 2016/679, is Societa’ Agricola Semplice Locanda In Tuscany Di Giuliani Claudia & C with registered office at Case Sparse Moro Fiacchi 13 – 53023 Castiglione d’Orcia (SI), represented by the legal representative pro tempore. To contact the Data Controller: email info@locandaintuscany.com
THE CATEGORIES OF DATA REQUESTED FOR THE FOLLOWING PURPOSES ARE STRICTLY NECESSARY FOR THE EXECUTION OF THE PROCESSING, FOR ANY FURTHER REQUESTS FOR PERSONAL DATA, SPECIFIC CONSENT WILL BE REQUESTED. Purpose A) Browsing the website. • LEGAL BASIS: legitimate interest (Art. 6, para. 1 letter f) and Recital 47 GDPR): the processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject which require the protection of personal data do not prevail, taking into account the reasonable expectations of the data subject based on their relationship with the data controller. Activities strictly necessary for the operation of the site and for the provision of the navigation service on the platform. • DATA RETENTION PERIOD: until the duration of the browsing session. See cookie policy • NATURE OF THE PROVISION: necessary to allow website browsing. Purpose B) Possible data collection form for contacts. • LEGAL BASIS: legitimate interest | request of the data subject (Art. 6, para. 1 letter f) and Recital 47 GDPR). • DATA RETENTION PERIOD: for the time necessary to provide a response to the request and in any case no longer than 2 years. • NATURE OF THE PROVISION: the provision of data is necessary to allow the data controller to respond to requests received via the form. Failure to provide data will make it impossible to obtain the requested information. Purpose C) Commercial and promotional newsletter activities • LEGAL BASIS: consent to processing (Art. 6 para. 1 letter a) • DATA RETENTION PERIOD: for the time necessary to provide a response to the request and in any case no longer than 12 months. The data subject can oppose the processing easily and for free. • NATURE OF THE PROVISION: The provision of data is optional and without it, your data will not be processed for this purpose, the denial of the provision will not affect the usability of other services. Purpose D) Accommodation booking through the portal https://www.simplebooking.it/ • LEGAL BASIS: legitimate interest | request of the data subject (Art. 6, para. 1 letter f) and Recital 47 GDPR). • DATA RETENTION PERIOD: for the time necessary to provide a response to the request and in any case no longer than 2 years. • NATURE OF THE PROVISION: the provision of data is necessary to allow the data controller to respond to requests received via the form. Failure to provide data will make it impossible to obtain the requested information.
The personal data provided will be shared with entities that will process the data as data processors (Art. 28 of EU Regulation 2016/679) and/or as individuals acting under the authority of the Data Controller and the Data Processor (Art. 29 of EU Regulation 2016/679), for the purposes listed above. Specifically, the data will be shared with: – companies contractually bound to Societa’ Agricola Semplice Locanda In Tuscany Di Giuliani Claudia & C.; – entities that provide services for the management of the information system used by Societa’ Agricola Semplice Locanda In Tuscany Di Giuliani Claudia & C. and telecommunications networks; – freelancers, firms, or companies within the context of assistance and consultancy relationships; – entities that provide services for the management of the activities indicated above (communication, printing brochures, flyers, websites, videos); – managers of platforms for the services listed above (website hosting, YouTube); – commercial partners/sponsors, only with prior consent; – competent authorities to fulfill legal obligations and/or orders from public authorities, – other associates upon request. The list of Data Processors is constantly updated and available by writing to info@locandaintuscany.com or at the Data Controller’s registered office.
Personal Data is not transferred to countries outside the European Union and the European Economic Area. Should such transfer become necessary and/or unavoidable for organizational needs of the Data Controller, it is noted that: it will only occur to countries for which there is an adequacy decision by the European Commission; if it is a country other than those mentioned above, should it become necessary to transfer your data to non-EU countries, this will take place in compliance with the limits and conditions of Articles 44 et seq. of EU Regulation 2016/679.
We do not use decision-making processes based on automated processing, including profiling.
You may exercise your rights as expressed in Articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679 by contacting the Data Controller at info@locandaintuscany.com. You have the right, at any time, to request access to your personal data, rectification, erasure of the same, restriction of processing, and data portability from the Data Controller. Furthermore, you have the right to object, at any time, to the processing of your data based on legitimate interest and, in the cases provided, you have the right to revoke the consent given without affecting the lawfulness of the processing based on the consent before the revocation. To no longer receive information and/or promotional/commercial communications, it will be sufficient to write an email at any time to info@locandaintuscany.com or use our automatic unsubscribe systems provided for emails only. You have the right to lodge a complaint with the Data Protection Authority (Supervisory Authority www.garanteprivacy.it). In the case of a data portability request, the Data Controller will provide you with your personal data, subject to paragraphs 3 and 4 of Article 20 of EU Regulation 2016/679.
The Data Controller reserves the right to modify, update, add, or remove parts of this privacy notice at its discretion and at any time. To facilitate this verification, the notice will contain the date of updating. Date of update: 29/06/2021
