In compliance with the Italian Legislative Decree No 196 dated June 30, 2003 on Privacy Code, together with subsequent amendments and additions, we herewith provide you with the necessary information on the purposes and methods of the processing of your Personal Data. This privacy statement applies only to our site and does not apply to other websites that the user may consult via links on the websites under the data controller’s domain name that shall not be held liable under any circumstances for websites of third parties. This information notice is provided pursuant to Article 13 of Legislative Decree No 196/2003 - Personal Data Protection Code. The information notice has also been based on the Recommendation No 2/2001 which was adopted on May 17, 2001 by the European Data Protection Authorities that convened as part of the Working Group under Article 29 of Directive No 95/46/EC. The purpose of this Recommendation was to identify certain minimum requirements for the on-line collection of personal data and, in particular, the methods, timescales and nature of the information the data controllers must provide to users when they visit web pages, regardless of the purpose of their visit, including the provisions provided for by Directive 2002/58/EC, and updated by Directive 2009/136/EC, on cookies.
1. DATA CONTROLLER is Villa D’Este SpA in the person of its pro-tempore legal representative, pursuant to Article 28 of the Italian Personal Data Protection Code.
DATA PROCESSOR is Achille Di Carlo c/o Villa La Massa, Via della Massa 24, Candeli-50012 Firenze, pursuant to Article 29 of the Italian Personal Data Protection Code.
2. TYPES OF DATA UNDERGOING PROCESSING
Personal identification data
‘Personal Data’ shall mean all information relating to a natural person, identified or identifiable, even indirectly, through reference to any other information, including a personal identification number. ‘Identification Data’ shall mean all of your personal information which permit direct identification of the Data Subject (e.g. first name, last name, date of birth, address, telephone number, email address etc.) .
During their ordinary course of operation, the IT systems and software procedures required to run this website acquire certain Personal Data, whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified Data Subjects but, by its very nature, it could enable identification of the users through the processing and matching of data held by third parties.
This data category includes IP addresses or domain names of computers used by the users who visit the site, as well as the URI addresses (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in reply, the numerical code indicating the status of the reply from the server (done, error, etc.) and other parameters related to the operating system and the IT environment of the user.
These data are only used to obtain anonymous statistical information on the use of the website and to control its correct functioning. They are cancelled immediately after processing.
The user’s Personal Data may be used by the owner of the website in a legal defence, or during the preparatory stages of potential proceedings, against any abuse by the user of the website or its connected services. The data may be used to ascertain responsibility in the event of any potential computer crimes against the site.
The User's Personal Data may be processed due to additional procedures and purposes linked to maintenance.
Data provided voluntarily by the user
The optional, explicit and voluntary dispatching of electronic mail to the addresses indicated on this website and/or the completion of a data collection form entails the subsequent acquisition of the sender’s address, necessary to publish all comments received on the web site, as well as other personal data included in the email message.
3. PURPOSES OF PERSONAL DATA PROCESSING FOR WHICH CONSENT HAS BEEN GRANTED WHEN REQUESTED (ARTICLE 23 OF THE ITALIAN LEGISLATIVE DECREE NO 196/03)
Personal Data and any other Sensitive Data spontaneously provided shall be processed, unless the Data Subject objects to the processing, exclusively for the purposes of:
- browsing on this website;
- performing general administrative/accounting activities;
- providing the information requested / disseminating your Personal Data and the comment You live in / through the data collection form in the specific sections of this website.
4. PROCESSING METHODS AND DATA RETENTION
The processing shall be carried out automatically and/or manually, with methods and instruments that guarantee maximum security and confidentiality, carried out by authorised persons only in accordance with the provisions of Article 31 et seq. of the Italian Legislative Decree No 196/03. The data shall be retained for a period that does not exceed the purposes for which the data have been collected and subsequently processed.
5. SCOPE OF DATA COMMUNICATION AND DISSEMINATION
- entities that provide management services for the computer system and the telecommunications networks (including e-mails) used by Villa D’Este SpA;
- offices and organisations as part of support and consultancy relationships;
- competent authorities to comply with legal obligations and/or provisions from public bodies, as requested.
The third parties that fall under these categories shall perform the role of Data Processors or operate in complete autonomy as separate Data Controllers. The list of Data Processors is constantly updated and available from the head offices of Villa D’Este SpA. Any further communication or dissemination shall be possible only after the explicit consent of the Data Subject.
6. NATURE OF DATA PROVISION AND REFUSAL
The provision of data is necessary for browsing this website. Failure to provide them may make it impossible to browse the site.
The provision of data for the other purposes set out above is optional but necessary. As a matter of fact, if you refuse to provide the required data, we will not be able to perform closely related essential activities, such as providing you with any requested information/material or allowing you to benefit from the services of the Data Controller.
7. DATA SUBJECT RIGHTS
You may exercise your rights as expressed under Articles 7, 8, 9 and 10 of the Italian Legislative Decree No 196 dated June 30, 2003, by contacting the Data Controller, by calling our head offices at the following phone number +39-055-62611 – Mr. Achille Di Carlo, or by sending an e-mail to the following address firstname.lastname@example.org. You have the right to obtain confirmation at any time on the existence, or not, of your data and to know its contents and origin, to verify its accuracy or to request that it is supplemented, updated or corrected (Article 7 of the Italian Personal Data Protection Code). Pursuant to the same Article, you also have the right to request the cancellation, anonymisation or blocking of any data being processed illegally. You are also entitled to reject any processing of these data on legitimate grounds.
When contacting the Data Controller, please provide your e-mail address, name, address and/or telephone number(s) so your request can be handled correctly.
Last update: December 4th 2015
The Data Controller is Villa D’Este SpA, via Regina 40, 22012 Cernobbio (CO) Italy, in the person of its pro tempore legal representative.
The Data Processor is Achille Di Carlo c/o Villa La Massa, Via della Massa 24, Candeli-50012 Firenze.