The webmaster of sardiniavalley.com, owner of personal data, can be contacted by email at the address firstname.lastname@example.org
The purpose of this is to inform the user about the methods of processing personal data concerning him, in accordance with the Legislative Decree n. 196/2003, as subsequently amended (hereinafter “Privacy Code”) and Regulation (EU) n. 2016/679 (hereinafter the “GDPR”).
2) Type of data processed
The website www.sardiniavalley.com (hereinafter the “Site”) offers informative and sometimes interactive content. While browsing the Site, the webmaster may, therefore, process the following personal data.
a) Navigation data
The computer systems and software used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and the addresses of the websites from which access was made, information on the pages visited by users within of the site, the access time, the permanence on the single page, the analysis of the internal path and other parameters relating to the operating system and the user’s IT environment. These data are used in order to obtain anonymous statistical information on the use of the Site, to check its correct functioning and to comply with the service delivery methods.
b) Persona data provided voluntarily by the user
Users of the Site, browsing it or registering, can enter their personal data in order to use the services offered.
This involves the acquisition by the webmaster of the following categories of personal data relating to users of the Site:
identifying and contact information such as name, surname, address, telephone number, geographical position and e-mail provided when registering on the Site;
3) Purpose of the processing
The above personal data are processed by the webmaster for the following purposes:
a) allow the user’s browsing on the Site and the use of the services provided therein;
b) allow the user to register on and access the Site, using the features connected to his account;
c) provide the User with the service of sending the newsletter only if the sending of this newsletter is expressly requested by the user;
d) manage complaints and disputes;
e) fulfill the applicable legal obligations and respond to the requests of the competent authorities; (hereinafter jointly defined the “Contractual Purposes”)
f) to assert and defend their rights;
g) with the prior consent of the user, to provide marketing communications relating to products and services offered by the Site through traditional communication channels such as paper mail or through automated communication tools such as emails, automatic messages and other remote communication tools;
h) with the prior consent of the user, to perform an analysis of the user’s preferences, activities and habits, in order to send the marketing communications indicated above. (hereinafter jointly the “Marketing Purposes”)
4) Legal basis of the processing
The processing of data is necessary with reference to the Contractual Purposes in that such data are necessary in order to provide the services and / or products requested in relation to the cases referred to in Section 3, letter a);
comply with the provisions of the applicable legislation as set forth in Section 3, letter b).
Should the user decide not to provide the data required for the Contractual Purposes, the webmaster will be unable to provide the requested services.
The processing of data for the Purposes of Legitimate Interest is carried out pursuant to article 6, letter f) of the GDPR for the pursuit of the legitimate interest of the webmaster which is equally balanced with the interests, rights and freedom of the user as the The data processing activity is limited to what is strictly necessary for the execution of the operations indicated therein.
The processing of data for marketing purposes is based on the user’s consent. The processing of data for Marketing Purposes is not mandatory. Therefore, in case of opposition to marketing communications or refusal to provide the relative consent, or revocation thereof, the user will not receive the marketing communications referred to in Section 3 from letters g) and h). In any case, the user can revoke the consent to the processing of data and oppose the sending of all marketing communications at any time, through the methods provided by this information.
5) Scope of data communication
For Contractual Purposes, the data can be transferred to the following third parties that carry out activities functional to those referred to in the provision of the services and / or products requested by the user located inside and outside the European Union: (a) third-party providers of assistance and consultancy services for the webmaster with reference to the activities of the sectors (merely by way of example) technological, accounting, administrative, legal, insurance; (b) subjects and authorities whose right to access the data is expressly recognized by law, regulations or provisions issued by the competent authorities.
For Marketing Purposes, the data can be transferred to the following categories of recipients, located inside and outside the European Union: (a) third parties in charge of data processing, assistance and consultancy services for the webmaster with reference to the activities of sending marketing communications.
These recipients, as appropriate, process user data as data controllers, processors or managers. The complete and updated list of the subjects dealing with the Data as data processors is available on request to the webmaster, according to the contact methods indicated in this statement.
6) Extra EU data transfer
Personal data may be freely transferred outside the national territory to countries located in the European Union as well as to countries located outside the European Union.
If the transfer of Personal Data takes place in countries that do not provide adequate protection regarding the confidentiality of personal data, such transfer will take place in compliance with the appropriate and appropriate guarantees for the transfer itself pursuant to the applicable legislation and in particular of the art. 44 and following of the Privacy Regulation.
For more information about the appropriate security guarantees adopted, the interested party will have the right to obtain a copy of the same by contacting the webmaster in the manner prescribed by this information.
7) Data processing methods
The processing of personal data may be carried out both with manual tools and with IT tools, suitable for guaranteeing security, confidentiality and avoiding unauthorized access, dissemination, modification and stealing of data thanks to the adoption of adequate technical and physical security measures and organizational.
Redirects to external sites
The Site may use the c.d. social plug-in. Social plug-ins are special tools that allow you to incorporate the social network features directly into the website (eg the “like” function of Facebook).
All social plug-ins on the site are marked by the respective logo owned by the social network platform (eg Facebook, Google, Twitter, LinkedIn).
When you visit a page on the site and interact with the plug-in (eg by clicking the “Like” button) or decide to leave a comment, the corresponding information is transmitted from the browser directly to the social network platform and from this memorized.
8) Data retention
The data will be kept for the period of time necessary for the pursuit of the purposes for which these data were collected, as stated in this statement. In any case, the following storage terms will apply with reference to the processing of the Data for the purposes indicated below:
a) for Contractual Purposes and Legitimate Interests the data is stored for a period equal to the duration of the provision of the services and / or products requested by the user and for 10 years after the end of the supply, subject to any renewals and cases in which storage for a subsequent period is required for any disputes, requests by the competent authorities or pursuant to the applicable legislation;
b) for the Marketing Purposes referred to in Section 3 letter g), the data is stored for a period of 24 months from collection;
c) for Marketing Purposes referred to in Section 3, letter h), the Data is stored for a period of 12 months from collection;
9) Rights of interested parties
Pursuant to articles 15 and following of the GDPR, the user has the right to:
a) obtain confirmation of the existence of personal data concerning him at the webmaster and be informed about the content and the source of the data;
b) know the origin of personal data, the purposes of the processing and its methods, as well as the logic applied to the processing carried out using electronic means;
c) verify the accuracy of personal data and request its integration, correction or modification;
d) obtain the cancellation, transformation into anonymous form or blocking of any data processed in violation of the law, as well as opposing, for legitimate reasons, the processing;
e) ask the webmaster for the limitation of the processing of personal data concerning him / her if the user disputes the accuracy of the personal data, for the period necessary for the webmaster to verify the accuracy of such data; the processing is unlawful and the interested party objects to the deletion of personal data and requests that its use be limited; personal data are necessary for the interested party to ascertain, exercise or defend a right in court, although the webmaster no longer needs it for processing purposes;
the data subject has opposed the processing pursuant to Article 21, paragraph 1, of the Privacy Regulation, pending verification regarding the possible prevalence of the legitimate reasons of the webmaster with respect to those of the interested party.
f) object at any time to the processing of their personal data for the purpose of legitimate interest, except in the case where the webmaster has legitimate prevailing reasons or the need to assert or defend a right in a possible judicial procedure;
g) request the deletion of personal data concerning him without unjustified delay;
h) obtain an electronic copy of their personal data, when the user intends to receive personal data concerning them or transmit them to a different data controller, in cases where the webmaster performs the processing of personal data on the basis of the contract work or personal data are processed by automated means.
Pursuant to article 2-terdecies of the Privacy Code, in the event of death of the user the aforementioned rights relating to your personal data may be exercised by those who have an interest of their own, or acts to protect the user as their representative, or for family reasons worthy of protection. The user can expressly prohibit the exercise of some of the rights listed above by the assignees by sending a written declaration to the webmaster to the email address indicated above. The declaration may be revoked or modified later in the same manner.
The user can also submit a complaint to the Guarantor for the protection of personal data (www.garanteprivacy.it).
To exercise these rights, at any time and free of charge, the user (or his successor, within the limits illustrated above) may send an email to email@example.com.
10) Changes to the Disclosure
This information may be subject to changes and additions, also as a consequence of the applicability of the GDPR and any subsequent amendments and / or regulatory additions. The changes will be available to the User who may view the text of the Information constantly updated on the website.