Pursuant to Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes the methods for processing the personal data of users who consult the websites accessible electronically at the following addresses: Resort Villa Rosa.
This information does not apply to other websites, pages, or online services accessible via hyperlinks that may be published on the websites but refer to external resources outside the domain of the Data Controller.
Please note that the Privacy Policy may be subject to changes from time to time, in line with the activation of new services or in response to updates in the law. Therefore, it is advisable to periodically check for any updates by consulting the mentioned website. This page describes the management of the site concerning the processing of personal data of users who consult it. It also constitutes an information notice pursuant to Article 13 of the Regulation (EU) on the protection of individuals regarding the processing of personal data, provided to those who interact with the web services of VILLA ROSA di S. LEOLINO S.A.S. di AVURI NERI & C., accessible electronically from the address Resort Villa Rosa. Further and eventual data processing is defined in the privacy and cookie policy found on the homepage of the official Resort Villa Rosa website.
This information notice applies only to the Resort Villa Rosa website and not to other websites that the user may consult via links. This privacy policy also adheres to Recommendation No. 2/2001 that the European data protection authorities, gathered in the Group established by Article 29 of Directive No. 95/46/EC, adopted on May 17, 2001, to set minimum requirements for collecting personal data online. This includes the methods, timing, and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purposes of the connection, and further updates following the implementation of the GDPR and the Italian law connecting it.
Data Controller
As a result of consulting this site, data related to identified or identifiable persons may be processed.
The “data controller” of their processing is VILLA ROSA di S. LEOLINO S.A.S. di AVURI NERI & C., located at Via S.Leonino, 65 – 50022 Greve In Chianti FI, VAT No: 02241620489.
Data Protection Officer
The Data Protection Officer (DPO) can be contacted at the following email: [email protected].
Legal Basis for Processing
The personal data indicated on this page is processed by VILLA ROSA di S. LEOLINO S.A.S. di AVURI NERI & C. for the performance of its activities. Consent, execution of a contract, fulfillment of a legal obligation, as well as the pursuit of a legitimate interest, are the legal bases depending on the data processing carried out on the mentioned website.
Location of Data Processing
Data related to web services of this site are processed within the European Union, managed by the service provider Semplify Srl and handled by technical personnel of Network Service Srl (data processor), as well as by other staff of Network Service Srl during updating and maintenance operations. No data derived from the web service is disseminated. Personal data provided voluntarily by users for contact requests is used solely to perform the requested service or provision, possibly through external service providers.
Types of Data Processed and Purposes of Processing
Browsing Data
The IT systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers and devices used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.), and other parameters related to the user’s operating system and computing environment.
These data, necessary for the use of web services, are also processed for the purpose of:
• Obtaining statistical information on the use of services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);
• Checking the correct functioning of the services offered.
Data Provided by Users
The optional, explicit, and voluntary sending of messages to VILLA ROSA di S. LEOLINO S.A.S. di AVURI NERI & C. contact addresses, as well as the completion and submission of the forms on the Resort Villa Rosa website, result in the acquisition of the sender’s contact details, necessary to reply, as well as any other personal data included in the communications.
Specific information will be published on the Resort Villa Rosa website pages set up for the provision of certain services.
Cookies and Other Tracking Systems
No cookies are used to profile users.
Instead, session cookies (non-persistent) are used strictly to the extent necessary for secure and efficient navigation of the sites. The storage of session cookies in user devices or browsers is under the control of the user, whereas on servers, at the end of HTTP sessions, information related to cookies remains recorded in the service logs, with retention times depending on each third-party service provider. Data possibly acquired through cookies and how to manage them are described in detail in the “cookie policy” document.
Browsing Data
These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning. They are deleted immediately after processing. The information collected automatically may be used by VILLA ROSA di S. LEOLINO S.A.S. di AVURI NERI & C. to ascertain liability in case of hypothetical computer crimes against the site, for statistical purposes, or to improve site navigation and content. Data possibly acquired through cookies are described in detail in the “cookie policy.”
Data Provided Voluntarily by Users
The optional, explicit, and voluntary sending of data via the data collection forms (forms) or by email to the addresses listed on this site results in the acquisition of the sender’s address, necessary for responding to requests, as well as any other personal data included in the message. Personal and/or corporate data entered into the forms on the Resort Villa Rosa website are protected by VILLA ROSA di S. LEOLINO S.A.S. di AVURI NERI & C. and used to respond to user inquiries, provide requested information, and deliver requested services.
Optional Data Provision
Apart from what is specified for browsing data, the user is free to provide personal data through the request forms to VILLA ROSA di S. LEOLINO S.A.S. di AVURI NERI & C. Whenever such data are requested, specific information will be provided and, where necessary, consent requested.
Processing Methods
Personal data are processed using automated tools strictly for the time necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access. Please note that, to provide a complete service, there are links to other websites managed by other controllers. No responsibility is assumed for errors, content, cookies, immoral or illegal content, advertising, banners, or files not in compliance with current legal regulations and respect for privacy laws by sites not managed by us, which are referenced.
Data Recipients
The following entities, appointed by VILLA ROSA di S. LEOLINO S.A.S. di AVURI NERI & C. pursuant to Article 28 of the Regulation, are the recipients of the data collected as a result of consulting the websites listed above:
• Network Service srl as the provider of development and maintenance services for the web platform;
• Semplify srl regarding the site as the provider of services for the development, delivery, and operational management of the technological platforms used.
Personal data collected are also processed by VILLA ROSA di S. LEOLINO S.A.S. di AVURI NERI & C. staff, acting based on specific instructions regarding the purposes and methods of the processing.
Transfer of Data Abroad
Third Countries: Data are not communicated to third countries.
Data Subject Rights
You have the right to request from the data controller the deletion (right to be forgotten), restriction, updating, rectification, portability, or opposition to the processing of personal data concerning you, and, in general, to exercise all the rights provided for by Articles 15 to 22 of the GDPR, where applicable concerning the purposes of the data processing.
