Information notice on the processing of personal data - Information document pursuant to and for the purposes of Article 13, EU Regulation 2016/679

In compliance with the provisions of EU Regulation 2016/679 (European Regulation on the protection of personal data), we provide you with the required information regarding the processing of the personal data provided.
This notice is not to be considered valid for other websites that may be accessed through links present on the websites belonging to the controller’s domain, for which the controller shall not be held responsible in any way.
This notice is provided pursuant to Article 13 of EU Regulation 2016/679 (European Regulation on the protection of personal data) and is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, concerning cookies, as well as by the measure issued by the Italian Data Protection Authority on 08/05/2014 regarding cookies.

1. Data Controller

The Data Controller, pursuant to Articles 4 and 24 of EU Regulation 2016/679, is Muratore Remo, P.zza Marconi 3, 18030 Olivetta San Michele, VAT No. 01381970084, info@remolidays.com.

2. Types of data processed

Personal data: “personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person; (C26, C27, C30)

Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user’s operating system and IT environment.

Legal defense

The User’s Personal Data may be used for the defense of the Controller in court or in the preparatory stages leading to possible legal proceedings, against abuse in the use of the website or related services by the User. The data may be used to ascertain liability in the event of hypothetical computer crimes against the website.

Maintenance

The User’s Personal Data may be processed using additional methods and for additional purposes connected with maintenance.

Data voluntarily provided by the user

The optional, explicit, and voluntary sending of emails to the addresses indicated on this website and/or the completion of data collection forms entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included.

Specific information notices

Specific information notices may be presented on the pages of the Website in relation to particular services or processing of Data provided by the User or Data Subject.

Cookies

Please see the cookie policy at the following link: Cookie Policy

3. Purposes and legal basis of the processing

The personal data provided will be processed in compliance with the lawfulness conditions under Article 6(f) of EU Regulation 2016/679 for the following purposes, until objection:

• browsing this website;
• any contact request, with the sending of information requested by you;
• general administrative and accounting activities. For the purposes of applying the provisions on personal data protection, processing carried out for administrative and accounting purposes refers to processing connected with the performance of organizational, administrative, financial, and accounting activities, regardless of the nature of the data processed. In particular, these purposes include internal organizational activities, activities functional to the fulfillment of contractual and pre-contractual obligations, and information activities.
• marketing activities, including, for example, the sending of periodic news about promotional offers and the sending of personalized offers. The data subject may unsubscribe from marketing communications at any time easily and quickly by clicking the “Unsubscribe” link included in each newsletter.

The processing of data for the purposes in question is based on Article 6, paragraph 1, letter f): (Recital 47), taking into account the reasonable expectations of the data subject at the time and in the context of the collection of personal data, when the data subject can reasonably expect processing for this purpose to take place.

4. Recipients or categories of recipients of the data

Your data, subject to processing, will not be disclosed except within the limits expressed in this notice and after obtaining consent, and may be communicated to companies contractually linked to Muratore Remo abroad within the European Union, in accordance with and within the limits of Articles 44 et seq. of EU Regulation 2016/679, in order to comply with contracts or related purposes.
The data may be communicated to third parties belonging to the following categories:

• entities that provide services for the management of the information system used by Muratore Remo and telecommunications networks, including email;
• professional firms or companies within assistance and consultancy relationships;
• competent authorities for compliance with legal obligations and/or provisions issued by public bodies, upon request.

The entities belonging to the aforementioned categories act as Data Processors and/or as natural persons acting under the authority of the Controller and the Processor (Article 29 of EU Regulation 2016/679), for the purposes listed above, or operate entirely independently as separate Data Controllers. The list of appointed Data Processors is available at the registered office of Muratore Remo, the data controller. Any further communication or disclosure will take place only with your explicit consent.

5. Transfer of data to a third country and/or international organization and safeguards

The personal data provided will not currently be transferred to non-EU countries or international organizations.

6. Data retention period or criteria used to determine the period

Processing will be carried out in automated and/or manual form, using methods and tools designed to ensure maximum security and confidentiality, by specifically authorized persons. The data will be retained for a period no longer than the purposes for which the data were collected and subsequently processed. Specifically:

• browsing this website: session duration;
• any contact request, with the sending of information requested by you: maximum 12 months;
• general administrative and accounting activities: 10 years or a different period provided by law;
• marketing activities: maximum 10 years.

7. Nature of data provision

Except for what is specified regarding browsing data, the user is free to provide personal data.
You are free to provide personal data in the dedicated areas of the website. Failure to provide personal data will make it impossible to use the services offered by the data controller.

8. Rights of data subjects

You may exercise your rights as set out in EU Regulation 2016/679 by contacting the Controller, by sending an email to info@remolidays.com or by writing a letter and sending it to the Controller’s registered office indicated above. In particular, these rights include: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, the right to obtain access to such data and other information, such as: the type of personal data; the recipients or categories of recipients of the data; the retention period of the data or the criteria used to determine it; the right to request rectification, erasure, or restriction of the processing of personal data; the right to object to the processing of data; the right to lodge a complaint with the supervisory authority; where the data are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling pursuant to Article 22 GDPR; the appropriate safeguards in the event of transfer of data to a third country or international organization pursuant to Articles 44 et seq. GDPR; and the right to obtain a copy of the personal data undergoing processing.
If you contact the controller, please provide your email address, name, address, and/or telephone numbers, in order to allow the request to be handled correctly.

Last updated: 18/10/2021