In pursuance of Section 13 of Legislative Decree no. 196/2003 Personal Data (hereinafter the “Privacy Code”), we inform you that the treatment of Personal Data (name, surname, email address and any further Personal Data indicated in the message) (the “Data”) by you spontaneously provided filling out the contact format on the website www.ancillotto.it (the “Website”) will respect the principles of fairness, legality and transparency and protection of your privacy and your rights. Please note that this Policy also contains the information required by art. 13 of Regulation (EU) 679/2016, concerning the protection of natural persons with regard to the processing of Personal Data (hereinafter "GDPR"), which will become applicable in all the Member States of the European Union and belonging to the European Economic Area from May 25, 2018.
Under the terms of art. 13 of Regulation (EU) 679/2016 (GDPR), we wish to provide you with the following information:
- DATA SUBJECT
B&B Ancillotto collects and processes your personal data (eg name, surname, email, telephone number, etc.) for purposes necessary or instrumental to the provision of services requested and provided by this site. Your data may be processed for the internal purposes of filling in lists of personal data, keeping the accounts, invoicing, management of the creditor for the satisfaction of all obligations under current regulations, statistical purposes, communications, and additional services explicitly requested by you . The legal bases of the processing, depending on the case, may be your consent, the execution of a contract of which you are a part or the fulfillment of legal obligations to which the Company is subject as the Data Controller.
- PURPOSE OF PROCESSING
a) Voluntarily-provided personal and sensible data shall be processed for following purposes, unless otherwise notified:
- to surf the current internet website;
- to fill in the forms available in the present website in order to submit quotation request and/or contact request;
- to fill in the forms in order to perform on line booking procedure;
- for administrative and accounting activities in general. Data processing for administrative and accounting purposes are those related to organizational, administrative, financial and accounting activities regardless of the nature of data processed. In particular, internal organizational activities, those following contractual obligations’ fulfilment and information activities are related to these purposes.
b) Personal data provided by filling in the forms in the website or others contact forms (e.g. name, surname, e-mail address) will be processed, with your prior consent, by Data Controller and/or Data Processor for promotional, commercial purposes, also through mailing list subscription for newsletter service.
B&B Ancillotto does not sell, rent or lease its customer lists to third parties.
The processing will be performed either manually or using electronic tools, in compliance with all the precautions necessary to ensure the security and confidentiality of information.
- ACCESS TO DATA
Access may be granted for the purposes described in clause 2. a. to the data controller’s employees and associates in charge of and/or responsible for in-house data processing and/or system managers.
- DATA AND THEIR COMMUNICATION
The personal data to be processed will be treated confidentially and will not be diffused. Your data may be shared with companies contractually involved with Agriturismo Ancillotto, within the European Community, pursuant to Legislative Decree No. 196/2003, article 42, in order to comply with contractual obligations or related purposes. Furthermore, these data may also be disclosed to following third parties: – entities that provide services for the management of the information system used by Agriturismo Ancillotto and the telecommunications networks, including e-mail service, newsletter service and website service management; – firms or companies which provide assistance and advice; – competent authorities who enforce the law and/or regulations promulgated by public bodies, on request. The above mentioned entities shall act as Data Processor or may perform their tasks fully independently, as if they were the Data Controller. The list of potential Data processor list is constantly updated and it is available at Agriturismo Ancillotto headquarter – Via S. Filippo, 41 – 30020 Meolo (Venezia). Any further communication or data diffusion shall be possible only with your explicit prior consent.
- DATA STORAGE TIMES
Subject to the five or ten year terms for storing documents containing data regarding civil, accounting and tax matters, as foreseen by current legislation, any other data will be stored for five years after the business relationship ceases, unless you withdraw your consent or require us to erase your data.
- OPTIONAL / COMPULSORY DATA PROVISION
Providing data for the purposes described in clause 2. A. is compulsory in as far as it is required by legal and contractual obligations. Refusal to provide data or failure to authorise their processing will preclude the data controller from entering into contractual relationships (the subject involved will not receive a service, contractual non-fulfilment and due liability, non-fulfilment of legal obligations and due legal sanctions, etc.). Providing data for the purposes described in clause 2. B. is optional and failure to provide them or to authorise their processing will preclude sending newsletters, commercial communications and/or advertising materials regarding the data controller’s products and services and surveying the degree of satisfaction regarding the quality of services.
- DATA CONTROLLER
Data Controller is Mr. Luciano Coppe, legal representative of Agriturismo Ancillotto – Via S. Filippo 41 – 30020 Meolo – Venezia. He can be contacted for requests, enquiries or information, including exercising your rights as described in clause 9.
- DATA SUBJECT’S RIGHTS
Subject to cases involving legal obligations, public interest or public authorities, you have the right at any time to revoke your consent, without compromising the lawfulness of processing based on consent before its withdrawal. Art. 7 of the Privacy Code and art. 15 of the GDPR grant you specific rights, which include that of obtaining confirmation as to whether or not personal data concerning you exist, communication of such data in intelligible form; the right to be informed of the source of the data, the purposes and methods of processing, the logic applied to the processing, identification concerning data controllers and the subjects to which the data may be communicated; the right to obtain updating, rectification or integration of the data, their erasure, anonymisation or blocking of unlawfully processed data; the right to object on legitimate grounds to the processing of data concerning you. The GDPR grants you the following rights: data erasure (art. 17), restriction of processing (art. 18), data portability (art. 20) and in the case of automated processes (profiling), processing by the data controller’s human intervention (art. 22). These rights can be exercised in any way and without charge.