Privacy

WHY THIS NOTICE
This page describes the ways in which the personal data of users who consult the site of this Residence are managed and processed.
This information is provided, pursuant to EU Regulation 2016/679 (hereinafter "GDPR") [1], to those who interact with the web services of the Residence Le Terrazze, accessible electronically at the address: www.leterrazzealba.com (hereinafter the "website").
The information is provided only for the website www.leterrazzealba.com of the Residence Le Terrazze and not for other websites that may be consulted by the user via links.
The information is also based on Resolution no. 13 of 1 March 2007 on "e-mail and internet" of the Privacy Guarantor [2] to identify some minimum requirements for the collection of personal data online and, in particular, for the methods, timing and nature of the information that the data controllers must provide users when they connect to web pages, regardless of the purpose of the connection.
Following consultation of the site of this residence, data relating to identified or identifiable persons may be processed.

PLACE OF DATA PROCESSING
The treatments connected to the web services of this site take place at the registered office of the Residence Le Terrazze located in Alba Adriatica, Lungomare Marconi n. 170. These treatments are carried out only by technical staff of the Office in charge of the treatments, or they are carried out by any persons in charge of occasional maintenance operations.
The hosting / housing / cloud servers are located at ARUBA S.p.A which is located in the European Economic Area and acts in compliance with European standards (Privacy Policy).
No data deriving from the web service is communicated or disseminated.

TYPES OF DATA PROCESSED
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties but which, by its very nature, could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.
These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this possibility, at present the data on web contacts do not persist for more than 30 days.

Data provided voluntarily by the user
To use the services offered by the Residence Le Terrazze, you may be required to fill in contact request forms and / or registration forms, containing fields for the provision of mandatory and optional personal data.
The provision of personal data indicated as mandatory is necessary to complete the contact request or registration procedure, therefore the failure or partial provision of such data makes it impossible to subscribe to the services and / or use them. The provision of non-mandatory data is optional; therefore their failure or partial conferment does not prevent registration and / or use of the Services.
The personal data required by Residence Le Terrazze for registration to the Services may differ depending on the registration forms used.
The voluntary and explicit sending of e-mails to the addresses indicated in the different access channels of this site does not involve a request for consent and involves the acquisition of the sender's address and data, necessary to respond to requests, as well as any other data personal data included in the message. These data are voluntarily provided by the user at the time of the request to provide the service.

COOKIES
As better explained in the "Cookie policy", the Website uses "cookies", intended as short fragments of text (letters and / or numbers) that allow the web server to store information on the client (the browser) to be reused during the same visit to the website (session cookies) or later, for further visits to the same website (persistent cookies).
For more information, you can visit the Cookie Policy page where you can set the types of cookies to be used

PURPOSE AND LEGAL BASIS OF DATA PROCESSING
The Personal Data provided through the Site will be processed for the following purposes:

1. Purposes aimed at the marketing of products and services available through the Site (eg: contact request through the forms on the site, registration of an account, purchases of products and services, etc.);
2. Purpose of statistical research / analysis on aggregate or anonymous data, therefore without the possibility of identifying the user, aimed at measuring the functioning of the Site and its operational functions, including the resolution of any technical problem;
3. Purposes aimed at preventing or preventing fraudulent activities or improper use that could damage the site, or compromise the security of operations;
4. Purposes related to the fulfillment of a legal obligation to which we are subject;
5. Purposes necessary to ascertain, exercise or defend a right in court or whenever the judicial authorities exercise their judicial functions.
6. Purpose for sending advertising, information, promotional material and periodic updates on initiatives, services, products and events of the Residence Le Terrazze (so-called marketing)

The processing of personal data for the purposes from letter a) to letter e) does not require your express consent (Article 24, letter a) and b) of the Code [3] and art. 6 lett. b) and e) of the G.D.P.R.) as they are part of a service contract, and the legal basis of the processing is based on the legitimate interest of the Data Controller to perform contractual obligations towards the interested parties based on their respective requests.

The processing of personal data for the purposes in point f) above requires your express consent (Article 23 of the Code and Article 7 of the G.D.P.R.). This consent concerns both the automated communication methods and the traditional ones described above.
You will always have the right to easily and free of charge, in whole or in part, to the processing of your data for these purposes, for example by excluding automated contact methods and expressing your desire to receive commercial and promotional communications exclusively through traditional methods of contact.
The legal basis of the processing is based on the consent of the interested party.

DETAILS ON THE PROCESSING OF PERSONAL DATA
Personal Data is collected for the following purposes and using the following services:

Direct contact
Contact form
By filling in the contact form with their data, the User consents to their use to send and receive requests for information or quotes or any other nature indicated by the form header.
Personal data collected: email.

Contact by phone
Users who have provided their telephone number could be contacted for information or promotional purposes by the Residence Le Terrazze, as well as to satisfy requests for support.
Personal Data collected: telephone number.

Interaction with social networks and external platforms
This type of services allow interaction with social networks or other external platforms directly from the pages of the website.
The interactions and information acquired from the website are in any case subject to the User's privacy settings relating to each social network.
In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.

Like button and Facebook social widgets (Facebook, Inc.)
The "Like" button and Facebook social widgets are interaction services with the Facebook social network, provided by Facebook, Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA - Privacy Policy.

Youtube embedded video (Google Inc.)
Youtube embedded videos, i.e. videos directly present within the website, are interaction services with the YouTube social network, provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA - Privacy Policy - Terms of use.

Google Maps (Google Inc.)
The Google maps present within the website are interaction services with the Google Maps system, provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA - Privacy Policy - Terms of use.

Platform monitoring
This type of service allows the web to monitor the use and behavior of the website, to allow the improvement of its performance and functionality, maintenance or troubleshooting.
The Personal Data processed depend on the characteristics and methods of implementation of these services, which by their nature filter the website activity.

Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.

Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of the website, compiling reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualise and personalize the advertisements of its own advertising network. The IP Anonymization service is active on the website
Personal Data collected: Cookies and Usage Data.
Place of processing: USA - Privacy Policy - Opt Out.

Google AdWords conversion tracking (Google Inc.)
Google AdWords conversion tracking is a statistics service provided by Google Inc. that links data from the Google AdWords ad network with actions performed on the website.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA - Privacy Policy.

Facebook Ads conversion tracking (Facebook, Inc.)
Facebook Ads conversion tracking is a statistics service provided by Facebook, Inc. that connects data from the Facebook ad network with actions performed on the website.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA - Privacy Policy.

Statistics collected directly
The website may use an internal statistics system, which does not involve third parties, for the purpose of further statistics.
Personal Data collected: Cookies and Usage Data.

RIGHT TO PROVIDE DATA
Apart from that specified for navigation data, the user is free to provide personal data contained in the request forms or indicated in contacts with the Office to request the sending of orders, materials, information or other communications.
Therefore your refusal, even partial, to provide such data would make it impossible to establish and manage the relationship itself and to provide the requested service.

METHOD OF TREATMENT
The data processing takes place both on paper and with the aid of automated electronic tools (by means of our computer system and in this case the data will be recorded on protected computer media) for the time strictly necessary to achieve the purposes for which they were collected.
These supports, both electronic and paper, will be correctly maintained and protected by us for all the time necessary for processing through procedures suitable for guaranteeing their security and confidentiality to prevent the loss of data in compliance with the security measures referred to in art. 32 of the G.D.P.R. 2016/679, from illicit or incorrect use and from unauthorized access.

DURATION OF TREATMENT AND PERIOD OF CONSERVATION OF PERSONAL DATA
The collected data are processed for the time necessary for the purposes for which they were collected, and in any case no later than the time prescribed by law. The data necessary for tax purposes are kept until the assessments relating to the corresponding tax period are defined, therefore for at least 10 years and more if the related annuity is not yet prescribed for tax purposes. At the expiry of this term, the data will be deleted or anonymized, unless there are other purposes for the conservation of the same (eg guarantee supply obligations, tax obligations).
Personal data that are no longer necessary, or for which there is no longer a legal prerequisite for its conservation, are irreversibly anonymised (and thus can be kept) or destroyed in a secure manner.
Below are the storage times in relation to the different purposes listed above:

1. Fulfillment of contractual obligations: the data processed to fulfill any contractual obligation may be kept for the entire duration of the contract and in any case no later than the next 10 years, in order to verify any pending, including accounting documents (e.g. invoices).
2. Operational management and purposes strictly connected to this for accessing the website: they may be kept for 12 months from the date on which we obtained your last consent for this purpose (with the exception of the opposition to receiving further communications) after which they will be destroyed or anonymized.
3. Purpose of customer satisfaction surveys: the data processed for this purpose may be kept for 2 months from the date on which we obtained your last consent for this purpose (with the exception of the opposition to receiving further communications).
4. Disputes: in the event that it is to defend or act or even make claims against you or third parties, we may retain the personal data that we reasonably deem necessary to process for these purposes, for as long as such claim can be pursued.
5. If the data collected were processed on the basis of explicit consent, they will be processed until revocation of the same, or at the end of the service provided and in the absence of it, they will be kept for a maximum period of 12 months after which they will be destroyed or anonymized.

SOCIAL NETWORK PLUGIN
This site may also incorporate plugins and / or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plugins are programmed so as not to set any cookies when accessing the page, to safeguard the privacy of users. Eventually cookies are set, if so provided by social networks, only when the user makes effective and voluntary use of the plugin. Please note that if the user browses being logged into the social network then he has already consented to the use of cookies conveyed through this site at the time of registration to the social network. The collection and use of information obtained through the plugin are governed by the respective privacy policies of the social networks, to which please refer.

• Facebook - (Cookie information link)
• Youtube - (Cookie information link)
• Google Maps - (Cookies information link)

RIGHTS OF THE INTERESTED PARTIES
We inform you that in your capacity as an interested party, you have, pursuant to articles 15 to 23 of the GDPR, the rights listed below that you can assert by making a specific request to the Data Controller and / or the data processor, in addition to the right to lodge a complaint with a supervisory authority:

Art. 15-Right of access
The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and information regarding the processing.

Art. 16 - Right of rectification
The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.

Art. 17 - Right to cancellation (right to be forgotten)
The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller has the obligation to cancel the personal data without undue delay.

Art. 18 - Right to limit the processing
The interested party has the right to obtain from the data controller the limitation of the processing when one of the following hypotheses occurs:

1. the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
2. the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that their use be limited;
3. although the data controller no longer needs them for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
4. the interested party opposed the processing pursuant to article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

Art. 20 - Right to data portability
The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller to whom he provided them.
In exercising his rights regarding data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.

Art. 21 - Right to object
The interested party has the right to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions.

Art. 22 - Right not to be subjected to automated decision-making, including profiling
The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way.

COMMUNICATION AND DIFFUSION
Your data will not be "disclosed" by us (with this term we mean giving knowledge to indeterminate subjects in any way, including by making them available or consulting, unless specific consent is granted by the interested party with a separate deed) .
Your data may instead be "communicated" by us (with this term we mean giving knowledge to one or more specific subjects) in the following cases:

• to subjects appointed within the Residence Le Terrazze to process your data, and in particular to the employees of the administrative and commercial offices;
• to subjects who can access the data by virtue of the provision of law, regulation or community legislation, within the limits established by these rules;
• to subjects who need to access your data for purposes auxiliary to the relationship between you and us, within the limits strictly necessary to carry out the auxiliary tasks entrusted to them;
• to our consultants, within the limits necessary to carry out their assignment at the Residence Le Terrazze, or under the Outsourcing regime, as external Data Processors following our letter of appointment which imposes the duty of confidentiality and security in the processing of your data.

METHOD OF EXERCISE OF RIGHTS
You may at any time exercise your rights or withdraw your consent by sending a communication to the addresses and in the manner indicated below.

THE "OWNER" OF THE TREATMENT
The Legal Representative is Mr. Davide Ciabattoni
We inform you that the Data Controller is Residence Le Terrazze, in the person of the Legal Representative, with registered office in Via Trento 2/C – 64011 Alba Adriatica (TE), to which the communications for the exercise of the rights recognized to the interested party must be sent as per articles 15 to 23 of the G.D.P.R. by registered letter, PEC or e-mail where the complete list of subjects to whom the data may be communicated is also available.
Requests should be addressed to:
(e-mail address) info@leterrazzealba.com;
(PEC) apriallochefsrls@pec.it;
(landline) +39 0861 710 042
(mobile phone) +39 353 36 79 646

This privacy policy is updated on 14/01/2021

[1] - Regulation on the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data: https://eur-lex.europa.eu/legal-content/IT/TXT/?uri=CELEX:32016R0679#d1e40-1-1
[2] - See: https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/1387522
[3] - Code regarding the protection of personal data, Legislative Decree no. 196 of 30 June 2003