top of page

PRIVACY POLICY

In accordance with Article 13 of Regulation (EU) 2016/679 on the protection of personal data

 

Elena Poccianti (hereinafter also referred to as the 'controller') hereby informs you, pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data ('GDPR'), that the personal data provided by you through the use of the website www.villagessa.com (hereinafter 'Website'), may be processed in compliance with the confidentiality obligations provided for by the applicable regulations.

 

1. Data controller

 

The Data Controller, who makes decisions regarding the purposes and methods of data processing, is Elena Poccianti, residing at Viuzzo Monteripaldi 2, 50125 Florence (FI), Italy.

​

2. Categories of processed data.

 

Depending on the service requested by you through access to the Website, we may process personal data of various types:

 

  • a) Navigation Data: The computer systems and software used for the operation of this website acquire, during their normal operation, certain personal data, the transmission of which is implicit in the use of Internet communication protocols. These pieces of information are not collected to be associated with identified individuals. However, due to their very nature, they could, through processing and association with data held by third parties, allow users to be identified. Among these are IP addresses or domain names of the computers used by users connecting to the site, the URLs of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, and other parameters relating to the user's operating system and computer environment. The aforementioned data is used solely for the purpose of obtaining anonymous statistical information about the use of the site and to ensure its proper functioning; they are deleted after processing.
     

  • b) Voluntarily Provided Personal Data: The Controller will process the personal and contact data communicated by you through the website, or via email or other electronic communication tool. We will process the data communicated by you in compliance with applicable regulations, assuming that they refer to you or to third parties who have expressly granted you the authorization to provide them based on a suitable legal basis legitimizing the processing of the data in question;
     

  • c) Cookie: For more information about the collection and processing of cookies on this site, please refer to the specific Cookie Policy, which is also available via a link located in the footer of each page. 

​

​

Data Update

 

At any time, you may ensure that the Personal Data processed for the purposes outlined in this notice are accurate. In the event of any changes, you may also request their update by sending an email to: info@villagessa.com.

 

3. Purposes and methods of processing, legal bases.

 

The processing of your personal data will be based on the principles of fairness, lawfulness, transparency, and protection of your privacy and rights, in accordance with the principles expressed by the GDPR.

 

Your personal data will be processed exclusively for purposes related and/or instrumental to the services requested by you, in particular:

 

  • a) ensuring the proper functioning of the website;

  • b) provision of the requested service.

​

The treatments mentioned above are legitimized by the following legal bases:

 

  • Art. 6, par. 1 lett. b) of GDPR - the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures taken at your request - with reference to the letter b) above.

  • Art. 6, par. 1 lett. f) of GDPR - the processing is necessary for the purposes of the legitimate interests pursued by the data controller - with reference to letter a).
     

The processing of the aforementioned data will take place using tools suitable to ensure their security as well as confidentiality and may be carried out using automated means designed to store, manage, and transmit the data.

 

4. Nature of data provision and consequences of any refusal to respond.
 

The provision of your personal data, except for the navigation data collected automatically when you access the Site, is optional. However, in case of failure to provide your personal data necessary for the pursuit of the purposes referred to in art. 3, letter b) above, we will not be able to provide you with the requested service.

 

5. Data retention periods.

​

Your personal data will be stored for the period strictly necessary to achieve the purposes of the processing for which they were collected, as indicated in the preceding article 3.

 

The Controller also reserves the right to retain your data for longer periods than those indicated above, if necessary for the resolution of disputes or judicial inquiries.

 

6. Communication of data

​

The Controller, for the purposes outlined in the preceding article 3, may make your personal data available to:

 

  • their collaborators who need to process personal data to perform the services for which they have been appointed;

  • third-party entities performing activities on behalf of the Controller by providing specific services as Data Processors pursuant to art. 28 GDPR. For information about the names and relevant contact details of the Data Processors (where appointed), you may contact us at the following address: Viuzzo Monteripaldi 2, 50125 Florence (FI), Italy, or by mail at the address of residence indicated in the preceding paragraph 1;

  • Judicial or supervisory authorities, administrations, public bodies, and institutions (national and foreign), in accordance with legal provisions and upon formal legitimate request by such entities.
     

Personal Data will not be transferred outside of the European Union.

​

7. Rights of the data subject


With regard to your Personal Data, you may exercise, at any time, the rights recognized by the GDPR, as listed below:

 

  • Access to personal data under Article 15: obtain confirmation as to whether or not data concerning you is being processed and, if so, access to the following information: purposes, categories of data, recipients, retention period, right to lodge a complaint with the Supervisory Authority, right to request rectification, erasure, or restriction of processing, or to object to processing, as well as the existence of automated decision-making.

  • Request for rectification of personal data under Article 16: obtain, without undue delay, the rectification of inaccurate Personal Data concerning you and, where applicable, the completion of incomplete data.

  • Erasure of personal data under Article 17: obtain, without undue delay, the erasure of Personal Data concerning you.

  • "Limitation of processing under Article 18: by 'limitation,' it is meant the marking of stored data with the aim of limiting its processing in the future. This will entail the obligation on the part of the Controller to suspend the processing of your Personal Data.

  • Data portability under Article 20: in the case of automated processing based on consent or in performance of a contract, to receive the data concerning you in a structured, commonly used, and machine-readable format.

  • Objection to processing under Article 21: object to the processing of your Personal Data, except where there are legitimate grounds for the Controller to continue processing. You also have the right to object to processing where your personal information is used for direct marketing purposes.

  • Object to automated decision-making, including profiling, under Article 22.

 

The Controller also informs that it is possible to lodge a complaint pursuant to Article 77 with the competent Supervisory Authority (for example, the one in the Member State of your habitual residence, place of work, or the place where your rights were infringed). In Italy, the competent authority is the Garante per la protezione dei dati personali (Italian Data Protection Authority), which can be contacted through the contact details provided on the website http://www.garanteprivacy.it/.

​

The aforementioned rights can be exercised by sending a specific request via email to info@villagessa.com, or by sending a registered letter to the data controller's residence.

 

Requests related to the exercise of rights will be processed without undue delay and, in any case, within 30 days of receiving the request.

​

Finally, please note that the Controller may modify or update this notice, also to comply with new obligations imposed by current laws or for technical necessities.

bottom of page