Privacy policy and cookie policy information

 

This information regulates the processing of personal data carried out by the owner, defined below, of this website. The information indicated here can also be provided orally, provided that the identity of the applicant is proven, by means of a telephone request addressed to the owner's addresses.

 

1. Identity and contact details of the data controller

The data controller is:

 

Tuttomio Home & Breakfast

Sara Mencarelli's Home & Breakfast Via della Tinaia, 15

52043 Castiglion Fiorentino (AR) ITALY

P.I. 02309150510 - CF MNCSRA77M46C319Y

 

 

Since the Owner is established / resident in Italy, no representative has been appointed.

 

 

2. Contact details of the data protection officer

The Data Controller has not proceeded to appoint a data protection officer.

 

 

 

3. Processing methods

INFORMATION ON THE USE OF COOKIES

3.1 Cookies and environmental data

 

What are cookies?

 

Cookies are small text files that are saved by a site on the computer (or tablet, or smartphone) of those who visit it; allow the web server to store information on the client (the browser) to be reused during the same visit to the site (session cookies) or later (persistent cookies).

 

Thanks to cookies, the site remembers the user's actions and preferences (e.g. login, language, display settings) so that it is not necessary to re-enter them when browsing or during subsequent visits to the site.

 

 

 

Types of cookies

 

Based on the different purposes of use, cookies can be divided into:

 

 

 

• technical cookies: they allow the correct functioning of some sections of the site. They are divided into session cookies (they are destroyed when the browser is closed) and persistent cookies (they are not destroyed when the browser is closed, but persist up to a certain established time limit). According to current legislation, in case of use of cookies of this type, direct consent from the user is not required; therefore, the presentation of the brief information (banner) is not required on the occasion of the first visit on any page of the site.

 

 

 

• profiling cookies: used to track user navigation and create profiles on his tastes and habits, both by the visited site ("first party") and by other services ("third party").

 

 

 

Third party cookies

 

The management of the information collected by "third-party" cookies is governed by the relevant information to which please refer. To ensure greater transparency and convenience, the web addresses of the various information and methods for managing cookies are shown below.

 

Google+ (information): https://policies.google.com/technologies/cookies?hl=it

 

Google+ (configuration): https://policies.google.com/technologies/managing?hl=it

 

Facebook (information): https://www.facebook.com/policies/cookies/

 

Vimeo (information): https://vimeo.com/cookie_policy

 

 

 

 

 

Google Analytics

 

This site also contains certain components transmitted by Google Analytics, a web traffic analysis service provided by Google, Inc. ("Google"). Again, these are third-party cookies collected and managed anonymously to monitor and improve the performance of the host site (performance cookie).

 

Google Analytics uses "cookies" to collect and analyze anonymous information on the behavior of use of the site (including the user's IP address). This information is collected by Google Analytics, which processes it for the purpose of drawing up reports regarding the activities on the website itself. This site does not use (and does not allow third parties to use) the Google analysis tool to monitor or collect personal identification information. Google does not associate the IP address with any other data held by Google nor does it try to connect an IP address with the identity of a user. Google can also communicate this information to third parties where this is required by law or where such third parties process the aforementioned information on behalf of Google.

 

For more information, please refer to the link below:

 

https://www.google.it/policies/privacy/partners/

 

The user can selectively disable the action of Google Analytics by installing the opt-out component provided by Google on his browser. To disable the action of Google Analytics, please refer to the link below:

 

https://tools.google.com/dlpage/gaoptout

 

 

Management of cookies by the user

 

The user can decide whether or not to accept cookies using the settings of his browser.

 

Complete navigation of the site is also possible following the total disabling of cookies.

 

 

 

The setting can be defined specifically for the different websites and web applications. Furthermore, the most popular browsers allow you to define different settings also for the various types of cookies.

 

Example: in Firefox, through the menu Tools -> Options -> Privacy, you can access a control panel where you can define whether or not to accept the different types of cookies and / or proceed with their removal.

 

The information relating to the various browsers is accessible through the following links:

 

 

 

Firefox

 

Chrome

 

Internet Explorer

 

Safari

 

Opera

 

 

 

A navigation without the use of technical and profiling cookies is possible even without changing the settings related to them, activating the so-called incognito navigation present in all the main browsers.

 

 

 

 

3.2 Data provided voluntarily by the interested party

The data optionally and freely provided by the interested party by sending e-mails to the addresses on the site may be acquired for the purposes indicated from time to time.

In particular, in addition to the email address necessary to reply to the sender, any other personal data contained in the relative communication will be processed.

Such data collected in this way will be stored and processed exclusively for the purpose of keeping correspondence and will not be used for other purposes.

 

4. Purpose of the treatment and legal basis of the treatment

In relation to the technical cookies referred to in point 3.1 and the navigation data, the processing of the personal data of the interested party is carried out in order to allow the correct use of the website; its use is necessary for navigation within the website tuttomiobb@gmail.com. In this case, the legitimate interest of the Data Controller constitutes the legal basis of the processing.

In relation to non-technical cookies, the processing of personal data carried out through them allows us to offer a personalized browsing experience through profiling. In the latter case, the data subject's consent, expressed in accordance with current legislation, constitutes a legal basis.

In relation to the data provided voluntarily by email, the processing of personal data carried out allows us to respond to requests from interested parties. The legitimate interest of the Data Controller to respond to the interested parties constitutes the legal basis of the processing.

 

5. Automated decision making and profiling

If you have given your consent to the processing of personal data for profiling purposes through cookies, they may be subject to an automated decision-making process, by means of a specific algorithm which will decide which communications are most suitable for your profile or which could be for she most of interest.

The treatment thus carried out has, as consequences provided, by way of example, the sending of highly profiled commercial communications. You have, in any case, the right to obtain human intervention in the decision-making process by the Data Controller, to express your opinion, to obtain an explanation of the decision obtained and to contest the decision itself.

 

6. Method of expression of consent

The consent to the processing of personal data through non-technical cookies can be expressed:

By clicking on a specific box presented inside a banner or checkbox.

 

7. Source from which the personal data originate

Only the data provided by the interested party in accordance with this information will be processed, collected through the website or by sending an email from the interested party.

Data from publicly accessible sources will not be processed.

 

8. Recipients and any categories of recipients of personal data

The personal data of the interested party may be recipients:

The communications companies that carry out commercial communication activities and profiling activities on behalf of the Data Controller and those that offer online platform management services, if the relative consent has been expressed, which are qualified as data processors;

Companies that offer information society services, including, in particular, those that offer hosting services;

Companies that carry out statistical and market surveys, if the relative consent has been expressed;

 

9. Categories of data

The personal data of the interested party will be processed.

 

10. Data transfer

The Data Controller intends to transfer personal data to a third country or to an international organization. Such subjects could be represented, by way of example, by:

Communications companies that carry out communication activities on behalf of the Data Controller;

Companies that offer information society services, including, in particular, those that offer hosting services;

The companies that manage the site on behalf of the Owner;

Communication company service providers.

The transfer of personal data to these subjects, if established in a third country or an international organization, is carried out in the presence of an adequacy decision of the European Commission, which has verified that the third country, the territory or one or more specific sectors within the third country, or the international organization in question, guarantee an adequate level of protection of its rights. In any case, the Data Controller - if the latter deems it appropriate anyway - reserves the right to conclude specific separate agreements which oblige these subjects to adopt adequate security measures, including organizational ones, aimed at offering appropriate guarantees regarding their rights. Google Inc., in particular, has contractually bound itself to ensure adequate protection of the rights of the interested party. The data can thus be transferred to the following countries: Italy, United States of America. To obtain a copy of this data or the place where it was made available, simply send the relevant request to the address: tuttomiobb@gmail.com

 

11. Period of retention of personal data

The personal data processed and stored in order to allow a correct use of the website are processed and stored for a period not exceeding 12 months from the date of the individual collection. The Data Controller reserves the right, in any case, to request the interested party to renew his consent to the processing and / or to verify the consents already expressed.

 

12. Optional consent and consequences of refusing consent

In relation to personal data processed through technical cookies in order to allow a correct use of the website, the communication of personal data is not a contractual obligation, but is based on the legitimate interest of the Owner, since without such treatment it could not be fully functional website made available.

Consent is to be considered optional in relation to non-technical cookies. In the latter case, failure to communicate such data will only determine the impossibility of providing a personalized service.

In relation to the data provided voluntarily by email, consent is to be considered optional. However, failure to communicate these data will make it impossible to respond to the interested parties.

 

13. Rights of the interested party

13.1 Right to object

The interested party has the right to object, at any time for reasons related to his particular situation, to the processing of personal data concerning him, pursuant to Article 6, paragraph 1, letters e) of) of the GDPR, including the profiling based on these provisions. The Data Controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.

 

13.2 Other rights

The Data Controller also intends to inform the interested party of the existence of the following rights:

Right of access of the interested party: the interested party has the right to obtain confirmation from the Data Controller that personal data concerning him or her is being processed and in this case, to obtain access to personal data and specific information, in accordance with art. 15 of the GDPR;

Right of rectification: the interested party has the right to obtain from the Data Controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration, in accordance with art. 16 of the GDPR;

Right to delete data, including the right to withdraw consent: the interested party has the right to obtain from the Data Controller the cancellation of personal data concerning him without undue delay and the Data Controller has the obligation to delete the data without undue delay personal, or to withdraw your consent, if the reasons defined by art. 17 of the GDPR. As regards the right to revocation, the interested party also has the right to withdraw consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;

Right to limitation of treatment: the interested party has the right to obtain the limitation of treatment from the Data Controller when the hypotheses defined by art. 18 of the GDPR;

Right to data portability: the interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to the Data Controller and has the right to transmit such data to another holder without impediments by the Owner in the cases and under the conditions specified by art. 20 of the GDPR.

 

14. Exercise of rights

The requests to exercise the rights indicated in this statement, including, in particular, the right to cancellation and the right to revoke the consent given must be addressed directly to the Data Controller at the email address tuttomiobb@gmail.com. Alternatively, you can exercise your rights by sending the relative communication by means of a registered letter with return receipt to the address: Tuttomio-Home & Breakfast owned by Sara Mencarelli - Via della Tinaia, 15 - 52043 Castiglion Fiorentino (AR) ITALY

 

15. Accessibility of the information

The information is accessible at www.homebreakfast.it/privacy.html, as well as at the Data Controller. If expressly requested by the interested party, the information can also be provided orally, provided that the identity of the interested party is proven, by means of a telephone request addressed to the addresses of the Data Controller.

 

16. Privacy and newsletters

If the interested party has given their consent by means of flags to receive commercial communications, the processing of their data may be carried out to send direct marketing communications, newsletters, sending advertising material, carrying out market research, by means of traditional contact systems and automated IT systems, including commercial or promotional communications by email or SMS; the consent of the interested party, expressed in accordance with this information, constitutes a legal basis. In this case, the communication of personal data is not a contractual obligation. The interested party has the right to provide personal data; in case of non-communication of such data, however, it will not be possible to carry out any marketing activity. The personal data thus processed are kept for a period not exceeding 24 months from the date of the individual collection.

 

17. Changes

The Data Controller may make changes to this Privacy Notice, also in order to implement changes in national and / or community legislation, to adapt to technological innovations or for other reasons. Any new versions of this Privacy Policy will be reported on the Site. The User is therefore invited to periodically check the Privacy Policy.

 

The document was updated on 05/25/2018 to comply with the relevant regulatory provisions.