Information on the protection of personal data pursuant to EU Regulation 2016/679 (GDPR)
Dear User,
Villa Aromata, with its registered office at Viale Gallura, 18, 07020 Montelittu SS (hereinafter, the “Controller”), is the Data Controller for the processing of the data you provide when submitting a request via the contact form on the website, or otherwise collected while providing the services you may access. You can send any requests or communications to the Controller at the email address villaaromata@gmail.com.
Access to the site does not require entering your personal details. If you wish to request information or make a booking, you must fill out the appropriate forms or send an email to villaaromata@gmail.com.
The data entered will be processed using security measures that meet current technological standards, in compliance with the obligations set out in Regulation (EU) 2016/679 on the protection of personal data (“GDPR”).
In accordance with the aforementioned law, this processing will be governed by the principles of fairness, lawfulness, and transparency, protecting your privacy and your rights. This privacy notice applies solely to this site and does not apply to other websites that may be consulted by the user via redirect links located on the pages of our site. No data arising from browsing the web service is communicated or disclosed. Pursuant to Article 13 of the GDPR, we hereby provide you with the following information:
1. The Controller collects and processes your personal data for purposes necessary or instrumental to providing the services you request and that are provided through this site, including the communication of data to third-party companies as indicated in Article 5 of this Privacy Notice, for technical and administrative management purposes. Your data may be processed for internal purposes such as creating customer lists, accounting management, billing, to fulfill all obligations required by current regulations, for statistical purposes, as well as for communications and additional services you explicitly request. Depending on the circumstances, the legal bases for the processing may be your consent or the need to comply with legal obligations to which the Controller is subject.
2. Your data may also be processed: (a) to send information about services you have requested, unless you object to such processing by sending an email to villaaromata@gmail.com, and, if you have given your explicit consent, (b) to send promotional and informational material.
3. The processing will be carried out both manually and by using electronic tools, in compliance with all necessary precautions to ensure the security and confidentiality of the information.
4. Your data may be processed by the Controller and by all processing staff appointed in writing by the Controller and trained on the Privacy Law obligations.
5. The data may be disclosed to third parties solely for technical and operational needs strictly connected to the purposes listed above, and in particular to the following categories of entities: (a) bodies, professionals, companies, or other structures commissioned by us to carry out data processing related to the fulfillment of administrative, accounting, commercial, and management obligations associated with the ordinary course of our economic activity; (b) public authorities and administrations for purposes connected to meeting legal obligations;
6. Your personal data will be stored on servers used by the Controller.
The Controller does not transfer personal data to countries outside the European Union.
7. The personal data related to the execution of requested services will be stored for a period not exceeding the statute of limitations provided by law.
8. The provision of your personal data is optional, it being understood that the refusal to disclose data or to consent to processing as described in point 1 of this privacy notice will make it impossible for us to provide any requested services and to fulfill legal obligations. In the event of refusal to process personal data as described in Article 2 of this notice, processing will be limited to the complete performance of obligations arising from the provision of services you have requested, as well as to meeting obligations under laws, regulations, and EU legislation.
9. The Data Controller is TERESA GIAGHEDDU. The list of any data processors is available at the Controller’s offices and may be requested by sending an email to villaaromata@gmail.com.
10. You may exercise your rights at any time with respect to the Data Controller, pursuant to Articles 15-22 of the GDPR, which we summarize below for your convenience.
In particular, you have the right:
- to obtain the cessation of the processing in cases where your personal data is processed for direct marketing purposes, including those services identical to those already requested by you (the so-called right to object);
- to obtain information regarding the purposes for which your personal data is processed, the duration of processing, and the entities to which the data is disclosed (the so-called right of access);
- to obtain the correction or supplementation of inaccurate personal data concerning you (the so-called right to rectification);
- to obtain the erasure of personal data concerning you in the following cases:
(a) the data is no longer necessary for the purposes for which it was collected;
(b) you have withdrawn your consent to the processing of the data if it is processed based on your consent;
(c) you have objected to the processing of the personal data concerning you, if it is processed for our legitimate interest; or
(d) the processing of your personal data does not comply with the law.