INFORMATION NOTICE on personal data processing

This policy is provided pursuant to art. 13 of EU Reg. 2016/679 (hereinafter GDPR) to all Users who interact with the website www.castelloerranteresidenza.it (hereinafter, the “Site”).

The validity of the information contained on this page is limited to the Site only and does not extend to other websites or third-party services that may be consulted via hyperlink.

The user is informed that:

• Data controller

The data controller is the company Occhi di Giove S.r.l. (VAT no 14064531008) in the person of the pro tempore legal representative, with registered office in Via Otranto 39 – 00192, Rome; contact e-mail address for data subjects: info@occhidigiove.it

• Personal data handler

The personal data of the data subject that may be processed are as follows:

• Purpose of processing – Legal basis – Provision

The personal data processing is aimed at:

For session details and for details strictly required for the running of the Site, the provision is required and does not require user content. Failure to provide these details may result in the inability to browse the Site.

Sending requests through the contact form and subscribing to the newsletter are optional, however the provision of details does not allow to satisfy the data subject’s request. It is possible to withdraw the consent expressed for this purpose at any time, by sending a notice to the Data Controller using the contact form available at the link indicated in point a).

• What types of cookies does the Site use

This site uses:

Technical cookies used:

• How to manage cookies

Users can manage preferences relating to Cookies directly from their browser and device and prevent their installation. Furthermore, it is also possible to delete installed cookies from the browser settings.

Information relating to cookie management for the most commonly used browsers:

With regard to third-party cookies, Users can also manage their preferences and withdraw their consent by using the tools described in the third party’s privacy policy or by direct contact.

• Data processing methods

The processing will be carried out with the aid of electronic tools in addition to the paper method, in compliance with the provisions laid down by the Data Protection Code (Legislative Decree 196/2003) and by the GDPR (Reg. EU 2016/679), guaranteeing the security and confidentiality of personal data.

The processing is carried out by the data controller and/or by the persons authorised to carry out the processing under the direct authority of the data controller, appointees, and/or by the data processors such as professionals or service companies operating on behalf of the data controller (by way of example, webmasters, host providers, external collaborators and consultants, personnel providing technical support to IT systems).

• Data disclosure

The personal details collected through the use of the Site may be disclosed to third parties to fulfil the obligations required by law or by order of the Judicial Authority.

• Data dissemination

No personal data will be disclosed.

• Data retention period

The browsing data will be retained for the time required to pursue the processing purposes indicated above.

In case of subscription to the newsletter, the data will be retained for the entire duration of the service, until the request to unsubscribe or withdraw consent by the user. 

In the event of a request being sent through the contact form, the data will be kept for the period required to process the data subject’s requests.

• Data profiling

The data collected will not be used for profiling activities of any kind.

• Data transfer to non-EEA countries

The personal data processed by the Data Controller are managed within countries belonging to the European Economic Area (EEA).

• Rights of the data subject

Pursuant to Articles 13 and 15-22 of the GDPR, the data subject has the right:

• to obtain access to personal data, to the rectification or erasure thereof or the limitation of the processing concerning him/her;
• to object to the processing;
• to data portability;
• to withdraw his/her consent to the processing at any time;
• to lodge a complaint with the supervisory authority, which in Italy is represented by the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority), which may be contacted through the references available on the website http://www.garanteprivacy.it.

The aforementioned rights may be exercised by sending a specific request to the Data Controller at the contact addresses indicated in point a) of this information notice. Requests relating to the exercise of the user’s rights will be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity and in the number of requests can this deadline be extended by a further 2 (two) months.