Subject: Information on the processing of personal data provided pursuant to Art. 13 Reg. 2016/679/EU.
This is to inform you that our company processes your personal data. The processing is carried out in compliance with the criteria established by the European regulation on personal data protection, Reg. 2016/679/EU (hereinafter G.D.P.R.) and any other national legislative text, provision, or authorization from the competent Authority connected thereto. According to the indicated regulations, the processing must be based on principles of fairness, legality, and transparency, as well as the protection of your privacy and your rights.
1) Data Controller: The data controller is CACEFFO MARCO, sole proprietorship, represented by Mr. Marco Caceffo, based at Strada Staffalo, 15 - 37066 Sommacampagna (VR), tel. 045 24 29 197, email info@agriturismoprincipeamedeo.it.
2) The collected data will be used for the following purposes:
a) Sending requested information, for which explicit consent is not required (Art. 6.1 letter a), G.D.P.R.);
b) Commercial marketing, for which explicit consent is required (Art. 6.1 letter a) and f), G.D.P.R.).
3) Methods: Personal data is processed by the controller and duly appointed processors for the proper fulfillment of the purposes indicated in point 2) through electronic tools and paper archives, as well as with the use of security measures to ensure the confidentiality of personal data and to prevent unauthorized access.
4) Communication: Data may be communicated to duly appointed internal and external subjects who carry out activities on behalf of the data controller. There is no provision for communication to third countries outside the EU, nor is there any provision for dissemination (e.g., social networks, websites, etc.). The data controller does not use solely automated processes to achieve the purposes outlined in this notice and does not perform profiling.
5) The Data Controller will process personal data for the time necessary to fulfill the above purposes and in any case for no longer than 2 years from the end of the relationship for the indicated purposes.
6) The data subject has the right to request access to their personal data from the data controller, as well as the rectification or deletion of the same or the restriction of processing concerning them, or to object to their processing, in addition to the right to request data portability.
The request can be made by email, fax, or registered letter with the subject: “request from the data subject” specifying in the request the right the data subject wishes to exercise (deletion, rectification, portability, oblivion), along with a valid email/PEC address to which the response should be sent.
The data controller or anyone appointed by them will proceed to fulfill the request within 30 days from the date of receipt. If the response is complex, the time may be extended by an additional 30 days, with timely communication to the data subject.
If you deem it appropriate to assert your rights, you have the right to lodge a complaint with the competent supervisory authority, corresponding to the National Privacy Guarantor, located at Piazza Venezia, 11 - 00187 Rome, garante@gpdp.it.
