WEBSITE PRIVACY POLICY:HTTPS://PALAZZOUTINI.COM/
I – GENERAL INFORMATION ON THE PRIVACY POLICY OF THE WEBSITE
1. This section contains information and details relating to the methods of management and processing of users’ personal data by the owner “PALAZZO UTINI S.R.L.”, with registered office in -43015 – Noceto (PR), VIA GRAMSCI N. 6, VAT and Tax Code: 03059310346, in the person of its pro tempore legal representative and with reference to activities connected and related to the use of the website. We are committed to being transparent about how we collect, store, use and share information about you. More precisely, the purpose of this information, provided pursuant to art. 13 EU Regulation 2016/679 – General Data Protection Regulation (“Regulation”) and Legislative Decree no. 196/2003, is to allow you to understand:
1. What information we collect about you;
2. How we use the information we collect;
3. How we share the information we collect;
4. How you can access your data and how you can control it;
5. How we transfer the information we collect internationally;
6. Other important information about privacy.
2. This privacy policy covers the information we collect about you when you purchase our products or use our services when you interact on the site HTTPS://PALAZZOUTINI.COM/This policy represents your options in relation to the management of the information we collect, highlighting how each user can object to certain uses of the information and how you can access and update it. If you do not agree with this policy, do not access, use, or interact with HTTPS://PALAZZOUTINI.COM/ and the products or services it offers.
3. In this policy, when we refer to “PALAZZO UTINI S.R.L.”, “we”, “this Website” or “the Website”, we mean “PALAZZO UTINI S.R.L.”, with registered office in -43015 – Noceto (PR), Via Gramsci n. 6, VAT and Tax Code: 03059310346, in the person of its pro tempore legal representative, who manages and controls the information collected by the site HTTPS://PALAZZOUTINI.COM/ when you use its Services.
4. This information is valid for the purposes of Article 13 of Legislative Decree No. 196/2003, Personal Data Protection Code, as well as for the purposes of Article 13 of EU Regulation No. 2016/679, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, for subjects who interact with “PALAZZO UTINI S.R.L”, and can be reached at the address corresponding to the home page:HTTPS://PALAZZOUTINI.COM/
5. The information is valid and effective only for “PALAZZO UTINI S.R.L.”, and for the data processed and managed by it, but not for other website managers that may be consulted or accessible by the user through related links or consulted through HTTPS://PALAZZOUTINI.COM/
6. The information may be subject to changes due to the introduction of new legal provisions, which must be considered immediately applicable to this policy, as well as by the modification by the owner, the additions to which must be considered valid and effective after 2 (two) days from the publication of the following site. We therefore invite you to check this page periodically.
7. If the user is under sixteen years of age, pursuant to art. 8, paragraph 1 of EU Regulation 2016/679, must legitimize his/her consent through the authorization of his/her parents or guardians. Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children under the age of 16. If we become aware that a child under the age of 16 has provided us with personal information, we will delete that information. If you become aware that a child has provided us with personal information, please contact our support services.
II – DATA PROCESSING
1. Data Controller
1. The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. He also deals with security profiles.
– With regard to this website, the data controller is “PALAZZO UTINI S.R.L.”, with registered office in -43015 – Noceto (PR), Via Gramsci n. 6, VAT and Tax Code: 03059310346, in the person of its pro tempore legal representative and for any clarification or exercise of the user’s rights, may contact him at the following email address: _______________________________or PEC PALAZZOUTINI@PEC.IT
• Data Processor
o The controller is the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
o Pursuant to Article 28 of EU Regulation no. 2016/679, upon appointment of the data controller, the data processor of the HTTPS://PALAZZOUTINI.COM/ site is “PALAZZO UTINI S.R.L.”, with headquarters in -43015 – Noceto (PR), Via Gramsci n. 6, VAT and Tax Code: 03059310346.
o With regard to the place of data processing, and unless otherwise specified, the data processing generated by the use of the HTTPS://PALAZZOUTINI.COM/ takes place at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located, in accordance with the organizational needs of the data controller and the data processor.
o The data necessary to carry out the newsletter service may be processed by the data controller or persons appointed by him for this purpose at the relevant office. Such data may be managed through the use of the software called “mailchimp.com”, in order to be able to render the newsletter service in the interest of registered users.
The user declares to know and accept that “PALAZZO UTINI S.R.L.” makes use of external technicians, service companies and IT consultants, both for the management of the functions of the site, as well as the archiving and storage of data at special servers and that, therefore, it is not responsible for any data breaches, interferences or intrusions referred to tasks managed by third parties.
Types of cookies
1. The site HTTPS://PALAZZOUTINI.COM/ uses cookies to make the user’s browsing experience easier and more intuitive.
2. Cookies do not record any personal information and any identifiable data will not be stored. If you wish, you can prevent some or all cookies from being stored. However, in this case the use of the site and the services offered may be compromised. To proceed without changing the options relating to cookies, simply continue browsing.
3. Below are the types of cookies that the site may use and the methods of data processing.
4. Technical cookies: the use of technical cookies allows the safe and efficient use of the website. The cookies that are inserted in the browser and retransmitted through Google Analytics or through the blogger statistics service or similar are technical only if used for the purpose of optimizing the website directly by the owner of the site itself, who may collect information in aggregate form on the number of users and how they visit the site. Under these conditions, the same rules apply, in terms of information and consent, to Analytics cookies as to technical cookies.
Third-party cookies
Most third-party cookies are tracking cookies used to identify online behavior, understand interests and thus personalize advertising proposals for users. Third-party analytical cookies may be installed. They are sent from the domains of these third parties external to the website. Third-party analytical cookies are used to detect information on user behavioron HTTPS://PALAZZOUTINI.COM/. The survey is anonymous, in order to monitor performance and improve the usability of the website through Google Analytics, or other programs. Third-party profiling cookies are used to create profiles relating to users on HTTPS://PALAZZOUTINI.COM/ in order to propose advertising messages in line with the choices expressed by the users themselves. The use of these cookies is governed by the rules prepared by the third parties themselves. Therefore, users are invited to read the information to manage or disable the cookies published on the relevant web pages.
• Profiling cookies
Profiling cookies are those aimed at creating profiles for the user and which are used in order to send messages of advertising offers in line with the preferences expressed by the same in the context of web browsing.
The user authorizes and grants explicit consent to any profiling activity that the data controller may carry out for the purposes indicated below.
The data and information may be used by third parties, including through the following services: Google tag manager, Facebook Pixel, Youtube, Mailchimp.
IV- DATA PROCESSED
1. Data processing methods
• Like all websites, this site also uses log files in which information collected automatically during user visits is stored. The information collected, including through the compilation of forms or questionnaires, may be the following:
• First and last name of the user;
• Email address, phone number, and address of the company headquarters;
• Internet protocol (IP) address;
• Type of browser and parameters of the device used to connect to the site;
• Name of the internet service provider (ISP);
• Date and time of visit;
• The visitor’s referring and exiting web page;
• pages visited, actions taken and duration of sessions;
• tax and payment data, such as VAT number and bank account details;
• geolocation data, such as exact geographic coordinates derived from a GPS;
• The aforementioned information is tested rate in automated form and collected in aggregate form only in order to verify the correct functioning of the site and for security reasons. Such information will be tested rate based on the legitimate interests of the owner.
o For security purposes (anti-spam filters – Google recaptcha-), firewall, virus detection) the automatically recorded data may also include personal data such as the IP address, which could be used, in accordance with the laws in force on the subject, in order to block attempts to damage the website itself or to cause damage to other users or harmful or criminal activities. These data are never used for the identification or profiling of the user, but only for the purpose of protecting the site and its users, such information will be used according to the legitimate interests of the owner.
o If the website allows the insertion of comments, or in the case of specific services requested by the user, the site automatically detects and records some identifying data of the user, including the email address. These data are intended to be voluntarily provided by the user at the time of the request to provide the service. By posting a comment or other information, the user expressly accepts the privacy policy and, in particular, agrees that the content posted is also freely disseminated to third parties. The data received will be used exclusively for the provision of the requested service and only for the time necessary for the provision of the service.
o The information that users of the site will consider to make public through the services and tools made available to them, is provided by the user knowingly and voluntarily, exempting this website from any responsibility for any violations of the law. It is up to the user to verify that they have the permissions to enter personal data of third parties or content protected by national and international regulations.
• Purpose of data processing
The data and information collected will be used for an institutional purpose and related to the mapping of distribution channels and the promotion of the company’s services and products. In particular, the services are indicated as follows:
• Booking and acceptance procedures for overnight stay and catering services
o Promote the sale of products or services;
o Provide support and assistance in after-sales activities
o marketing;
o Planning and organizing events;
o Newsletter.
The data collected by the website during its operation are used exclusively for the purposes indicated above and stored for the time strictly necessary to carry out the specified activities and, in any case, no longer than 2 years.
The data used for security purposes (blocking attempts to damage the website) are kept for the time strictly necessary to achieve the purpose indicated above.
3. Data provided by the user
As indicated above, the optional, explicit and voluntary sending of e-mails to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
Specific summary information will be progressively reported or displayed on the pages of the website prepared for particular services on request.
V- USER RIGHTS
Art. 13 par. 2 of EU Regulation 2016/679 lists the rights of the user of which this policy informs and makes the user aware:
a. the right of the data subject to ask the data controller for access to personal data (art. 15 EU Regulation), their updating (art. 7, par. 3, letter a of Legislative Decree 196/2003), rectification (art. 16 EU Regulation), integration (art. 7, para. 3 lett. a Legislative Decree 196/2003), limitation of processing concerning him/her (art. 18 EU Regulation) or to object, for legitimate reasons, to their processing (art. 21 EU Regulation), in addition to the right to data portability (art. 20 EU Regulation);
1. The right to request the erasure (art. 17 of the EU Regulation), the transformation into anonymous form or the blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed (art. 7 par. 3, letter b of Legislative Decree 196/2003);
2. The right to obtain certification that the operations of updating, rectification, integration of data, cancellation, blocking of data, transformation, have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfilment proves impossible or involves the use of means manifestly disproportionate to the protected right (art. 7 para. 3, letter c of Legislative Decree 196/2003).
3. Requests can be addressed to the data controller at the aforementioned email address (without formalities) or using the template provided by the Italian Data Protection Authority.
4. If the processing is based on art. 6 paragraph 1 letter a – express consent to use – or on art. 9 paragraph 2 letter a – express consent to the use of genetic, biometric, health-related data, revealing religious, philosophical or trade union beliefs, revealing racial or ethnic origin, political opinions – the user has the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
5. Likewise, in the event of a violation of the legislation, the user has the right to lodge a complaint with the Italian Data Protection Authority, as the authority responsible for controlling the processing in the Italian State.
6. For a more in-depth examination of the rights to which the user is entitled, see art. 15 et seq. of EU Regulation 2016/679 and art. 7 of Legislative Decree 196/2003, the indications and provisions of which are fully referred to in this policy and form an integral part of it.
VI – OBLIGATIONS
The Data Controller will be required to process and store confidentially and secretly only if the data concerning the processing concerns:
a. genetic, biometric or data indicating the geographical location of persons or objects by means of an electronic communications network;
b. data suitable for revealing the state of health and sex life, processed for the purposes of assisted reproduction, provision of health services by telematic means relating to databases or the supply of goods, epidemiological investigations, detection of mental, infectious and diffusive diseases, HIV positivity, organ and tissue transplantation and monitoring of health expenditure;
c. data suitable for revealing sexual life or the psychic sphere, processed by non-profit associations, bodies and organizations, even if not recognized, of a political, philosophical, religious or trade union nature;
d. data processed with the aid of electronic tools aimed at defining the profile or personality of the data subject or analysing consumer habits and choices or monitoring the use of electronic communication services with the exclusion of processing that is technically indispensable to provide the same services to users;
e. sensitive data recorded in databases for the purpose of personnel selection on behalf of third parties as well as sensitive data used for opinion polls, market research and other sample research;
f. data recorded in special databases managed with electronic tools and relating to the risk on economic solvency, the financial situation, the correct fulfilment of obligations, illegal or fraudulent conduct.
VII – SECURITY OF THE DATA PROVIDED
This Website processes user data in a lawful and correct manner, adopting the appropriate security measures aimed at preventing unauthorized access, disclosure, modification or unauthorized destruction of data. The processing is carried out using IT and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated.
In addition to the data controller, in some cases, categories of persons in charge involved in the organization of the site (administrative, marketing, commercial, legal, system administrators) or external parties such as (such as third-party technical service providers, postal couriers, hosting providers (siteground.com), IT companies, communication agencies) may have access to the data.
VIII – AMENDMENTS TO THIS DOCUMENT
This document, published at the address: HTTPS://PALAZZOUTINI.COM/ constitutes the privacy policy of this website.
This document, and the conditions contained herein, may be subject to periodic changes or updates. If there are significant changes and updates, these will be notified to users with appropriate notifications. Please consult this page often, taking as a reference the date of last modification indicated at the bottom.
In the event of non-acceptance of the changes made to this privacy policy, the User is required to cease using this Site and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to the Personal Data collected up to that moment and no responsibility can be attributed to the Data Controller for any modification of this policy.
The document was updated on 05.09.2022 and complies with the regulatory provisions of EU Regulation 2016/679.
More information in relation to the processing of Personal Data can always be requested at any time from the Data Controller using the contact information.