WARNING: NON-TECHNICAL COOKIES: Merely browsing the website and/or scrolling through it does not of itself imply consent; consent needs to be obtained through an unequivocal positive act, such as clicking “ok” or “I consent” in the special banner; that banner should also contain a brief first version of this Notice, as well as a link to the Notice itself so that the user can consult it in full.
This Notice governs the processing of personal data through use of the website at www.agriturismocastellodivezio.it, provided by Vezio Srl Società Agricola, 20144 Milano – Via Vigevano, 41, telephone no. 02.58190940 or 0341.815041, email email@example.com, fax no. 02.58190932 (“the Data Controller”), in accordance with current applicable laws and regulations concerning data protection, including, in particular, the General Data Protection Regulation (“GDPR”, European Regulation 2016/679).
1. The Data Controller: identity and contact details
The Data Controller is Vezio Srl Società Agricola.
No representative has been appointed, since the Data Controller is established in the Italian jurisdiction.
2. Contact details of the Data Protection Officer
The Data Controller has not appointed a Data Protection Officer.
3. Mode of processing
3.1 Cookies and environment data
3.1.1 TECHNICAL COOKIES
So far as specifically concerns Google Analytics cookies, the user’s browser will send such information concerning his/her use of the website as can be retrieved from those cookies to Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, where it will be stored on that company’s servers.
Google’s privacy rules, which you are invited to read, can be consulted at http://www.google.com/intl/it/privacy/privacy-policy.html
The Privacy Notice relating to Google Analytics services can be consulted at http://www.google.com/intl/en/analytics/privacyoverview.html
3.1.2 NON-TECHNICAL COOKIES
Deleting or inactivating cookies
Cookies are ordinary text files, so they can be opened by a text processor. In any case you can configure your browser so as to stop it handling cookies.
How to delete/inactivate cookies in Firefox:
How to delete/inactivate cookies in Edge:
How to delete/inactivate cookies in Chrome:
3.2 Data volunteered by the Data Subject
Any data optionally and freely provided by the Data Subject in e-mailing any of the addresses given on the website may be gathered for the purposes indicated from time to time.
Specifically, in addition to the e-mail address needed for answering the sender, any other personal data contained in such communications will be processed. Data Subjects are invited not to include sensitive data (relating to their state of health, for instance) in their communications to the Data Controller.
The data gathered in this way will be stored and processed solely for the purpose of keeping a record of the correspondence and will not be used for other purposes.
4. The processing: purposes and legal basis
In the case of the browsing data and technical cookies referred to in 3.1.1 above, the Data Subject’s personal data are processed in order to enable the website to work properly; their use is essential for browsing within the website www.agritursmocastellodivezio.it In that case the legal basis of the processing is the legitimate interest of the Data Controller.
In relation to the non-technical cookies referred to in 3.1.2 above, personal data processed by means of those cookies make it possible to offer a personalized browsing experience by means of profiling. In that case the legal basis is the Data Subject’s explicit consent.
Personal data provided voluntarily in e-mails need to be processed in order to respond to the Data Subjects’ queries and requests; the legal basis of such processing is the Data Controller’s legitimate interest in responding to Data Subjects.
5. Mode of expressing consent
Consent to the processing of personal data by means of non-technical cookies can be expressed:
6. Sources of personal data
Only data provided by the Data Subject in accordance with this Notice and gathered through the website or from the Data Subject’s e-mails will be processed.
No data from sources accessible to the public will be processed.
7. Recipients of the personal data; categories of recipient (if any)
The Data Subject’s personal data may be disclosed to the following recipients:
8. Categories of data
Data Subjects’ personal data will be processed. “Sensitive data” as defined in Art. 9 of the GDPR will not be processed.
9. Data transfer
The Data Controller intends to transfer personal data to a non-EU jurisdiction or an international organization. The recipients in such cases could, for instance, be:
Personal data will only be transferred to an international organization or an organization established in a non-EU jurisdiction if the European Commission has approved them, having verified that the country, territory or specific sector(s) within the non-EU jurisdiction, or the international organization in question, guarantees an adequate level of protection of the Data Subject’s rights. In any case the Data Controller reserves the right – whenever for any reason it sees fit – to make a specific separate agreement obliging the transferee to put in place adequate security measures (including organizational measures) designed to provide appropriate guarantees concerning those rights. Google Inc., in particular, has contractually bound itself to ensure suitable protection of the Data Subject’s rights. The data may be transferred in this way to the following jurisdictions: United States of America. A copy of these details, or details of the place where such a copy can be consulted, may be obtained on request at the addresses given in this Notice
10. Period for which personal data will be kept
The personal data processed and kept for all the purposes referred to in this Notice are processed and kept for no longer than 12 months from the date on which each item was gathered;
The Data Controller reserves the right, however, to ask Data Subjects to renew their consent to the processing and/or to verify any consent already given.
11. Optional nature of consent; consequences of refusing consent
So far as concerns personal data processed by means of technical cookies to enable the website to work properly, the communication of personal data is not a contractual obligation in the case of those technical cookies where the legal basis of processing is the legitimate interest of the Data Controller, since without such processing the website could not be made to work perfectly; so far as non-technical cookies are concerned, on the other hand, consent is to be regarded as optional; failure to provide the data will in this case only make it impossible to provide a personalized service.
In the case of data provided voluntarily by e-mail, the provision of personal data is not a contractual obligation, but its processing is based on the Data Controller’s legitimate interest in replying to Data Subjects; without such processing it would not be possible to respond to the Data Subject’s queries or requests.
12. Rights of the Data Subject
12.1 Right to object
The Data Subject has the right to object at any time to processing of his/her personal data, on grounds relating to his or her particular situation, and to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The Data Controller may no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defence of legal claims.
12.2 Other rights
The Data Controller also wishes to give Data Subjects notice of the following rights:
13. Exercising these rights
The rights indicated in this Notice, including in particular the right to erasure and the right to withdraw consent provided previously, can be exercised by emailing the Data Controller directly at firstname.lastname@example.org or by sending a registered letter with recorded delivery to t the address given in this Notice.
14. Consulting the Notice
This Privacy Notice can be consulted at www.agriturismocastellodivezio.it and also at the Data Controller’s premises. On special request the information can also be provided over the telephone (on condition the identity of the applicant has been duly established), by calling the Data Controller’s number.
15. Privacy and newsletters
If the Data Subject has consented by means of tick-boxes to receiving commercial communications, the Data Controller may process his/her data for the purpose of sending direct marketing communications, newsletters or advertising material, or for carrying out market research by means of traditional forms of contact or automated (computerized) systems, including commercial or promotional communications by e-mail or SMS; the legal basis for all this is the Data Subject’s consent, expressed in accordance with this Notice. In such cases the provision of personal data is not a contractual obligation: the Data Subject can choose whether or not to provide his/her personal data, but failure to provide them will make it impossible to carry out any marketing activities. Personal data processed for this purpose are kept for no longer than 24 months from the date on which each item was gathered.