In compliance with the European Data Protection Regulation – Regulation (EU) 2016/679, we provide the necessary information regarding the processing of personal data that you have provided through this website. This privacy policy is not applicable to other websites that may be accessed via links on this website.
The website address is: https://www.laffacciodellabate.it.
Data Controller
L’Affaccio dell’Abate – Casa Vacanza
Via D’Addozio, 18, 75100 Matera (MT) Italy
Data Controller’s email address: info@laffacciodellabate.it
Data Processing Manager
L’Affaccio dell’Abate – Casa Vacanza
Via D’Addozio, 18, 75100 Matera (MT) Italy
Data Processing Manager’s email address: info@laffacciodellabate.it
Types of Data Collected
Among the Personal Data collected by this Website, independently or through third parties, there are: name, email, surname, Cookies, and Usage Data.
Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or by specific information texts displayed before the data is collected. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Website.
Unless otherwise specified, all the Data requested by this Website is mandatory. If the User refuses to communicate them, it may be impossible for this Website to provide the Service. In cases where this Website specifically indicates that some Data is optional, Users are free to refrain from communicating such Data, without any consequence on the availability of the Service or its operation.
Users who have doubts about which Data is mandatory are encouraged to contact the Data Controller.
The possible use of Cookies or other tracking tools by this Website or the owners of third-party services used by this Website, unless otherwise stated, aims to provide the Service requested by the User, as well as for the additional purposes described in this document and the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website and guarantees that they have the right to communicate or disseminate them, freeing the Data Controller from any responsibility towards third parties.
Methods and Location of Data Processing
Processing Methods
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated.
Legal Basis of Processing
The Data Controller processes Personal Data relating to the User in case one of the following conditions exists:
- the User has given consent for one or more specific purposes;
- processing is necessary for the execution of a contract with the User and/or for the execution of pre-contractual measures;
- processing is necessary to comply with a legal obligation to which the Data Controller is subject;
- processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.
Location
The personal data provided may be transferred abroad, within or outside the European Union, within the limits and under the conditions set forth in Articles 44 et seq. of Regulation (EU) 2016/679, for purposes related to the transfer itself.
Specifically, the data will be transferred to:
- Third parties who collaborate with the Data Controller for the execution of contractual and pre-contractual obligations between the parties;
- Third countries for which an adequacy decision has been issued (Art. 45 Reg. EU 2016/679);
- Third parties who have contractually committed to complying with the principles in force (Art. 46(2)(c) of Reg. EU 2016/679);
- Third countries or international organizations that have provided adequate guarantees and where the data subject has enforceable rights and effective remedies (Art. 46 Reg. EU 2016/679).
If one of the transfers described above takes place, the User may refer to the respective sections of this document or request information from the Data Controller by contacting them at the details provided at the beginning.
Retention Period
Data is processed and stored for the time required by the purposes for which it was collected. Therefore:
- Personal Data collected for purposes related to the execution of a contract between the Data Controller and the User will be retained until the execution of such contract is completed.
- Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
When processing is based on the User’s consent, the Data Controller may retain the Personal Data for a longer period until such consent is revoked. Additionally, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, Personal Data will be deleted. Therefore, after the expiration of this period, the right of access, deletion, rectification, and the right to data portability can no longer be exercised.
Purposes of Data Processing
User Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes: contacting the user through the contact form, statistics, interaction with social networks and external platforms for bookings, managing contacts and sending messages, and viewing content from external platforms.
For further detailed information on the purposes of the processing and on the Personal Data concretely relevant for each purpose, the User can refer to the relevant sections of this document.
Details on the Processing of Personal Data
Personal Data is collected for the following purposes and using the following services in detail.
Contact Form (This Website)
By filling in the contact form with their Data, the User consents to its use to respond to requests for information, quotes, or any other nature indicated by the form’s header.
Personal Data collected: name, surname, email, and phone (optional).
Managing Contacts and Sending Messages
This type of service allows managing a database of email contacts, phone contacts, or any other type of contacts, used to communicate with the User.
These services may also allow for the collection of data concerning the date and time of viewing of the messages by the User, as well as the User’s interaction with them, such as information on clicks on links inserted in the messages.
Bookings
The personal data related to bookings will be processed electronically and in paper format solely to ensure room reservations under the agreed conditions: booking requests through the website can be made using the Contact Form, which involves sending an automatic email with the following user information: name, surname, email, phone (optional), and message. The user who has completed the Contact Form and sends their request consents to the processing of personal data according to the information provided in this document.
Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior on the website.
Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the collected Personal Data to track and examine the use of this website, compile reports, and share them with other services developed by Google.
Google may use Personal Data to contextualize and personalize ads in its advertising network.
Personal Data collected: Cookies and Usage Data.
For more information: Google Privacy Policy.
Interaction with Social Networks and External Platforms
This type of service allows interactions with social networks or other external platforms directly from the pages of this website. The interactions and information acquired from this website are in any case subject to the user’s privacy settings for each social network.
It is possible that, even if the User does not use the service, it collects traffic data relating to the pages where the service is installed.
For example:
Facebook Like Button and Social Widgets (Facebook, Inc.)
The Facebook Like button and social widgets are services of interaction with the Facebook social network, provided by Facebook, Inc.
Personal Data collected: Cookies and Usage Data.
For more information: Facebook Privacy Policy.
Displaying Content from External Platforms
This type of service allows you to view content hosted on external platforms directly from the pages of this website and to interact with them. If a service of this type is installed, it is possible that, even if the User does not use the service, it collects traffic data relating to the pages where it is installed.
For example:
Google Maps Widget (Google Inc.)
Google Maps is a map visualization service managed by Google Inc. that allows this website to integrate such content into its pages.
Personal Data collected: Cookies and Usage Data.
For more information: Google Privacy Policy.
User Rights
Users may exercise certain rights concerning the data processed by the Data Controller.
In particular, Users have the right to:
- Withdraw consent at any time. The User may revoke previously given consent to the processing of their Personal Data.
- Oppose the processing of their Data. The User may object to the processing of their Data when it occurs on a legal basis other than consent.
- Access their Data. The User has the right to obtain information about the Data processed by the Data Controller, certain aspects of the processing, and to receive a copy of the Data processed.
- Verify and request rectification. The User may verify the correctness of their Data and request its update or correction.
- Obtain the restriction of processing. When certain conditions are met, the User may request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than its storage.
- Obtain the deletion or removal of their Personal Data. When certain conditions are met, the User may request the deletion of their Data by the Data Controller.
- Receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to obtain its transfer without hindrance to another controller. This provision is applicable when the Data is processed by automated means and the processing is based on the User’s consent, on a contract to which the User is a party, or on pre-contractual obligations.
- Lodge a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.
How to Exercise Rights
To exercise their rights, Users can direct a request to the contact details of the Data Controller indicated in this document. Requests are filed free of charge and processed by the Data Controller as quickly as possible, in any case within one month.
Cookie Policy
This website uses Cookies. To learn more and to view the detailed information, the User can consult the Cookie Policy.
Additional Information on Data Processing
In defense of legal rights
The User’s Personal Data may be used by the Data Controller in court or in the preparatory stages for its eventual establishment to defend against abuse in the use of this Website or the related Services by the User. The User declares to be aware that the Data Controller may be obliged to reveal the Data by order of the public authorities.
Specific information
At the User’s request, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.
System logs and maintenance
For needs related to operation and maintenance, this Website and any third-party services used by it may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User IP address.
Information not contained in this policy
More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time. Please see the contact information at the beginning of this document.
Response to “Do Not Track” requests
This Website does not support “Do Not Track” requests.
To find out if any third-party services used support them, the User is invited to consult their respective privacy policies.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, on this Website as well as, where technically and legally feasible, by sending a notification to Users through one of the contact details held by the Data Controller. Please, therefore, consult this page regularly, referring to the date of the last modification indicated at the bottom.
If the changes affect processing whose legal basis is consent, the Data Controller will collect the User’s consent again, if necessary.
Last updated on: 08 August 2024