Podere Casanova di Lisa Lorenzo - Privacy Policy

Information on the processing of personal data pursuant to Legislative Decree no. 196/2003 and the EU Regulation no. 679/ 2016

Pursuant to art. 13 of Legislative Decree 196/2003 "Personal Data Protection Code" and art. 13 of the EU Regulation n. 679/2016 we hereto inform you of how the site operates in relation to the processing of your personal data.

Subject of the processing

The Data Controller processes the personal, identifying data, such as name, surname, company name, address, telephone number, e-mail address, bank and payment details - hereinafter, "personal data" or even "data") which you communicated at the moment of reserving and finalizing the contract for your stay at Podere Casanova di Lisa Lorenzo.

Purpose of the processing

Your personal data are processed in a lawful and correct manner for the following purposes:

• to fulfil pre-contractual, contractual, and tax requirements deriving from the existing relationship;

• to fulfil the obligations established by Italian law, by a regulation, by European Community legislation, or by order of an Authority (for example relating to anti-money laundering);

• to exercise the rights of the Data Controller, for example the right to defence in court.

• to send, with your written consent, promotional offers about our services and updates on rates and offers applied, as well as greetings by ordinary mail or by fax or email.

Method of processing

Your personal data is processed using the methods indicated in Article 4 of the Privacy Code and Article 4 (2) of the GDPR, and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation, erasure and destruction. The personal data are subjected to both hard copy and electronic and/or automated processing.

Legal basis of the processing

The legal basis of the processing of your personal data is based on the accommodation contract with our company (Podere Casanova di Lisa Lorenzo).

As for the sending, with your written consent, of promotional offers about our services and updates on the rates applied and offers, the legal basis is based on a legitimate interest. We use your information for example to provide the most appropriate content on our site, in e-mails and newsletters, in order to improve and promote our services and the content of the site.

The data controller may also use your information for administrative, legal or fraud detection purposes.

Information collected automatically

When you use our site, we automatically collect information, some of which may be personal data. For example: language settings, IP address, location, device settings, device operating system, log-in information, usage time, requested URL, status report, user agent (such as browser version information), browsing history, result (visit or reservation), user reservation code, type of information viewed. We may also collect data automatically through cookies. For further information on how we use cookies, click here.

Nature of data provision

The granting of data is optional in relation to the personal data shown on the forms on the website (web form), the sending of newsletters, informative material or commercial offers. However failure to provide such data will make it impossible for the data controller to provide the requested services.

The nature of the provision of data by you is instead mandatory in relation to the personal data covered by the accommodation contract at Podere Casanova di Lisa Lorenzo.

Access to data

Your data may be made accessible for the performance of the contract to Ms. Lisa Lorenzo, owner of Podere Casanova di Lisa Lorenzo.

Communication of data to third parties

Your data may be communicated as a result of inspections or verifications (where requested of us) by all the inspection bodies responsible for verifications and checks concerning compliance with legal obligations. Your data may also be communicated to companies/professional firms that provide assistance, consultancy or collaborate with the Data Controller for accounting, administrative, fiscal, legal, tax and financial matters, to public administrations for the performance of institutional functions within the limits established by law or by regulations. Your personal data will not be disseminated. We share personal data with law enforcement and other government authorities when required by law or if absolutely necessary for the detection, prevention or performance of legal proceedings against fraud or offences.

Storage times

Your personal data will be stored for no. 10 (ten) years.

Existence of an automated decision-making process

There is no automated decision-making process

Data transfer to a third country or international organisations.

Your data will in no way be transferred to third countries outside the EU or to an international organization.

Data Controller

The data controller is the one-man company Podere Casanova di Lisa Lorenzo, in the person of the owner Ms. Lisa Lorenzo with registered office in (50025) Montespertoli (FI), Loc. Botinaccio, via Turbone 17.

Contact details of the data controller: info@podere-casanova.it;

certified e-mail address: poderecasanova@arubapec.it.

Withdrawal of consent

You may withdraw your consent to send promotional offers by ordinary mail or by fax or email at any time.

Data subject’s rights

You may exercise the rights referred to in art. 7 of the Privacy Code and art. 15 of the GDPR and precisely:

• obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and to their communication in an intelligible form;

• obtain information about: a) the source of the personal data; b) the purposes and methods used for processing it; c) the software used where processing is carried out with the aid of computerised tools; e) the identification details of the data controller, the data processors and the representative appointed pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors or persons appointed to perform processing;

• obtain: a) the updating, rectification or, where interested, integration of the data; b) the erasure, anonymization or blocking of data that has been unlawfully processed, including data the retention of which is unnecessary for the purposes for which it was collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been made known, also concerning their content, to the entities to whom the data was communicated or disclosed, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is being protected;

• object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if relevant to the purpose for which it was collected; b) to the processing of personal data concerning you for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communications, through the use of automated calling systems without human intervention, by email and/or through traditional marketing methods by telephone and/or mail. Please note that, with regard to direct marketing through automated methods, the data subject's right to object, as set out in point b) above, is extended to traditional methods, and that the data subject is entitled to exercise their right to object, even partially. Consequently, the data subject may choose to receive only communications via traditional means, or only automated communications, or neither of the two.

  Where applicable, the data subject also has the rights referred to in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right to restrict processing, right to data portability, right of opposition), as well as the right of complaint to the Data Protection Authority.

Methods of exercising rights

The data subject may, at any time exercise his/her rights by sending:

• a registered letter with return receipt to Podere Casanova di Lisa Lorenzo, via Turbone 17 Loc. Botinaccio - 50025 Montespertoli (FI);

• an e-mail to info@podere-casanova.it.

• a certified e-mail to poderecasanova@arubapec.it.