Information about Article 13 of Regulation (EU) 2016/679
In order to be able to provide its services, this website collects and performs processing operations on the data provided by users. This page provides the data subject with information regarding the processing of their personal data as required by the EU General Data Protection Regulation 679/2016 ("GDPR")
The Data Controller
The personal data of the data subject are used by the Data Controller in accordance with the principles of Regulation (EU) 2016/679.
The Data Controller is Immobiliare Turistcasa di Stefania Boido - VAT: IT01533470595
Head Office Via Roma, 2 - 04027 Ponza (LT), IT
The categories of data collected by the data controller vary depending on the type of use the user makes of the site.
- Site Consultation
- Request Contact
- Newsletter subscription/commercial communications
- Registered User
- Rights of the data subject
Last date of publication: 06/09/2022
Category of Data
If the user uses the site for consultation purposes, the data controller collects browsing data, which is anonymous and cannot be traced back to the data subject. This category of data includes e.g. IP addresses or domain names of computers used by users connecting to the site, URI notation addresses of requested resources, time and other parameters related to the user's operating system and computer environment.
Purposes and legal basis of the processingThe purposes of the processing of these data are technical-functional access to the site, analysis of aggregated traffic data and information security. These data are processed in order to derive technical information about the use of the site, to control its proper functioning, and to monitor and analyze aggregate traffic data. These data, while remaining anonymous, by their very nature, through processing and association with data held by third parties, may allow the identification of users if, for example, it should be necessary for an assessment of responsibility in case of hypothetical computer crimes.
In the site in order to improve and speed up the user's navigation are used cookies, small text files that the visited sites send to the user's terminal where they are stored, to then be retransmitted to the same sites on the next visit. For this purpose, technical cookies are used to facilitate the user's navigation, access and use of the site and anonymized analytical cookies are used to collect statistical information in aggregate form.
The legal basis for processing is compliance with legal obligations and the legitimate interest of the owner. The provision of telematics traffic data is technically necessary as it is indispensable for navigation.
Recipients of the processing
Without prejudice to the communications that may be carried out at the request of the authority in charge for security investigations, all anonymous data and in aggregate form may be communicated only to authorized internal persons for purposes of technical fulfillment.
Method of processing
The owner, processes the personal data of the data subject related to computer traffic to the extent strictly necessary and proportionate to ensure the proper functionality of the site, network and information security. Anonymous personal data are processed by automated means only for the purposes indicated above and for the time strictly necessary to achieve the purposes for which they were collected. The necessary security measures have been taken to prevent data loss, illicit or incorrect use and unauthorized access.
Period of retention of personal data
Anonymous data collected during navigation/consultation on the site are kept for the time required by law.
Category of Data
The visitor of the site in the contact section can make a of information request by sending an e-mail or filling out the contact form. In this case the data controller receives the following information: e-mail address, first name, last name, telephone.
Purpose and Legal Basis of the Processing.
Legal basis of the processing is the consent of the data subject, which is given by express request from the data subject and for the following purposes: Sending communications, commercial and otherwise, of products and services.
Recipients of the treatment
The data provided by the data subject may be communicated exclusively for the purposes of performing the requested service to authorized internal persons.
Method of processing
The processing will be carried out with manual and computerized tools and with logics of organization strictly related to the purposes themselves.
Period of storage of personal data
The data will be kept for the time necessary to fulfill the request.
3. Newsletter subscription/commercial communications
Category of Data
The site visitor can subscribe to newsletters. In this case, the data controller receives the following information from the data subject: first name, last name, e-mail address
Purpose and Legal Basis of the Processing.
Legal basis of the processing is the consent of the data subject, the provision of data is optional and is done by explicit approval and only for the following purposes:
- Sending commercial communications of products and services;
Recipients of the treatmentThe data provided by the data subject may be disclosed exclusively for the purposes of performing the requested communication service to the following categories of recipients, for the purposes described:
Internal persons in charge of processing. Purposes: technical-commercial fulfillments related to the requested service.
Third parties suppliers. Purpose: technical delivery of the service.
The data controller imposes on the recipients of the processing compliance with security measures equal to those taken against the Data Subject by restricting the scope of action to the service expressly requested.
Modalities of the treatment
With the registration to the newsletters, the user's e-mail address is automatically included in a list of contacts to whom e-mail messages containing information, also of a commercial and promotional nature, related to this site may be transmitted. Personal data, for purposes strictly related to the provision of this service, may be disclosed to third parties based in countries where the GDPR is not applied (non-EU countries), but for which in any case it appears that an adequacy provision on the level of data protection by the European Commission is in force.
Retention period of personal data
Optional data, collected on the basis of consent, are retained for 24 months without prejudice to the rights of the data subject, in particular to deletion, as explained in the appropriate section "Rights of the data subject".
Category of DataIn case the visitor registers on the site, the data controller receives the following information: first name, last name, title, e-mail address, date of birth (optional),
In case of placing an order on the site, the data controller receives the following additional categories of data concerning the data subject: Delivery/delivery address(es) (street, municipality of residence and province, nationality), telephone (landline and/or mobile), C.F.
Bank/postal coordinates. The collection of these data depends on the payment system used. With electronic payments, the data are acquired directly by the service provider and are not received and processed by this site.
Purpose and Legal Basis of Processing.The data subject's personal data will be processed for the services and products offered by the e-commerce website with the purposes described below, distinguished according to the legal basis of the processing (lawfulness) and the type of contribution.
Operations preliminary to the completion, execution and conclusion of the contract, customer management.
Legal basis of processing: execution of pre-contractual and contractual measures. The provision of data is mandatory.
Fulfillment of obligations under laws, regulations and/or EU regulations or other legitimized authorities.
Legal basis for processing: legal obligations. Provision of data is mandatory.
Performance of administrative-accounting activities.
Legal basis for processing: legitimate interest, which will be exercised by balancing the interests of the data controller and the data subject. The provision of data is mandatory.
Any refusal to provide the data, in whole or in part, may result in the impossibility of following up the requested service.
Recipient CategoriesWithout prejudice to communications performed in fulfillment of legal obligations, all data collected and processed may be communicated to the following categories of recipients, exclusively for the purposes described:
Internal persons authorized to process data.
Purposes: Commercial, administrative, accounting and related to contractual performance.
Third parties suppliers.
Purpose: Provision of services (support, maintenance, product delivery/shipping, provision of additional services, providers of electronic communication networks and services) related to the requested performance.
Credit and digital payment institutions.
Purpose: Management of collections, payments, reimbursements related to contractual performance.
External professionals/consultants and consulting companies.
Purpose: Fulfillment of legal obligations, exercise of rights, protection of contractual rights, credit recovery.
The legal basis for such processing is the performance of services inherent to the contractual relationship established and the legitimate interest of the owner to carry out processing necessary for these purposes.
Methods of processing
The processing will be carried out both with manual tools (e.g. registration forms, order forms, etc.) and computer/telematic tools (management software, accounting, etc.) with logics of organization and processing strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity, confidentiality and availability of the data in compliance with the organizational, physical and logical measures provided for by the provisions in force. The owner imposes on its Third parties suppliers compliance with security measures equal to those adopted in respect of the Data Subject by restricting the scope of action to the requested service.
Period of retention of personal data
Data necessary for the purpose of user registration on the site and contractual data are kept for the time necessary for the conduct of the business relationship. Accounting data will be kept for the time required by legal obligations.
In relation to the other processing operations described in this Notice, the data subject may exercise the rights enshrined in Articles 15 to 21 of the GDPR and in particular, the following rights:
- To access personal data;
- to obtain the rectification of inaccurate personal data and/or the integration of incomplete personal data;
- To obtain the deletion of personal data;
- to obtain the restriction of processing;
- to data portability;
- to object to the processing of personal data subject to any legitimate interests for the owner;
- to revoke consent where provided (in which case revocation does not affect the lawfulness of the processing based on the consent given before revocation);
- to produce a complaint to the Guarantor Authority for the Protection of Personal Data (Piazza di Montecitorio n. 121, 00186, Rome)
The above rights may be exercised, vis-à-vis the data controller, by contacting him/her at the references given here. The exercise of rights as a data subject is free of charge. However, in the case of requests that are manifestly unfounded or excessive, including because of their repetitiveness, the data controller may charge a reasonable expense contribution, in light of the administrative costs incurred in handling the request, or deny satisfaction of the request.
What are cookies?A cookie is a text file that is stored by your Internet browser on your computer or other device and is sent by a website server that will be able to retrieve it and read its contents. Cookies are used to make websites work more efficiently, to improve their performance and the user's browsing experience. It contains some anonymous information and allows the website to remember, for example, the user's browsing settings preferences.
Users can manage cookies at any time by changing the settings of their Internet browser, disabling or deleting them. Such deactivation may slow down or prevent access to certain parts of the site.
Necessary technical cookies
Statistical cookies are used to understand how visitors interact with the website. These cookies allow us to count the number and source of visits. They help us to know what pages are viewed and to improve the performance of our site. All information collected by cookies is aggregated and therefore anonymous.
Profiling cookies are used to provide visitors with relevant ads and campaigns. These cookies track visitors on various websites and collect information to provide personalized ads.
Social media cookies
These cookies allow interaction with various social media platforms directly from the pages of the website. The interactions and information captured are subject to the data processing policies for each social network
Third parties cookies
This website uses Third parties analytical cookies in order to anonymously monitor and analyze traffic data. They track user behavior to collect statistical information in aggregate form used to monitor the performance of the site and improve its operation.
How to disable cookies from the browser?
Below we provide Users with links explaining how to manage or disable cookies for the most popular internet browsers:
Internet Explorer: http://windows.microsoft.com/it-IT/internet-explorer/delete-manage-cookies
Google Chrome: https://support.google.com/chrome/answer/95647
Mozilla Firefox: http://support.mozilla.org/it/kb/Gestione%20dei%20cookie
Safari: https://support.apple.com/kb/PH19255For more information about Third parties cookies and how not to accept them, please visit the following sites: