Privacy Policy
PRIVACY POLICY IN ACCORDANCE WITH GDPR 679/2016
This privacy notice is provided pursuant to Article 13 of Legislative Decree no. 196 of 30 June 2003 (“Personal Data Protection Code”) and Article 13 of EU Regulation 679/2016 (“General Data Protection Regulation – GDPR”).
Data Controller
The Data Controller for the processing of personal data is Service Valdera di Antonelli Serena S.a.s., with registered office at Via Meucci n. 14 – 56036 Palaia (PI), Italy.
The Controller can be contacted at the following email address: servicevaldera@libero.it
The personal data you provide through the information request form available on our Website are used by the Data Controller in order to respond to your messages and requests.
The legal basis for this processing is Article 6(1)(b) of the GDPR, namely the performance of a contract or the implementation of pre-contractual measures taken at the request of the data subject.
Please note that providing your personal data for this purpose is optional but necessary: failure to provide such data will prevent the Data Controller from responding to your request.
Purpose of Data Processing
The purpose for which we request your personal data is to create a personal account, which will allow us to:
- Manage reservations
- View quotations
- Check invoices and payments
- Manage consents
- Create a wishlist
- Access generated documents
- Access the catalogue of services offered by our suppliers
The same data may also be used to complete a new booking, if requested, together with the additional information necessary for the reservation.
With prior consent, telephone contact details may be used through instant messaging systems to request or receive information related to the ongoing stay.
Data Recipients
Personal data processed by the Data Controller will be kept strictly confidential and will not be disclosed to third parties in any form, including making them available or accessible for consultation.
However, they may be communicated, within the limits strictly necessary, to:
- External suppliers providing services requested by the customer
- Parties involved in issuing orders or providing information and quotations
- Subjects required to supply goods and/or perform services requested directly by the customer
- Entities authorized to access such data under legal provisions, regulations, or European legislation
Data Retention
The personal data mentioned above will be stored in the company’s archives and retained in accordance with legal requirements and, where applicable, until a request for modification or deletion is made by the data subject.
Data will be retained for the time necessary to fulfill the stated purposes and in compliance with the guidelines of the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
Subsequently, personal data necessary for commercial and administrative management will be stored for the period required by current civil and fiscal regulations.
Rights of the Data Subject
The data subject has the right to:
- Right to Information – to receive clear and transparent information about the processing of their personal data and its origin.
- Right of Access – to request and obtain a copy of their personal data being processed, as well as information regarding purposes, recipients, retention criteria, and any transfers to third countries.
- Right to Rectification – to request the correction of inaccurate personal data or the completion of incomplete data.
- Right to Erasure (“Right to be Forgotten”) – to request the deletion, even partial, of personal data, for example when it is no longer necessary for the purposes for which it was collected.
- Right to Restriction of Processing – to request the temporary suspension of data processing, for example if the accuracy of the data or the lawfulness of the processing is contested.
- Right to Data Portability – to receive personal data in a structured, commonly used, machine-readable format and transmit it to another controller, where technically feasible.
- Right to Object – to object to the processing of personal data for reasons related to their personal or legal situation.
- Right Not to Be Subject to Automated Decision-Making – not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect the individual.
Additionally, the data subject may:
- Request confirmation of the existence of personal data concerning them
- Know the origin of the data
- Receive intelligible communication of the data
- Obtain information about the logic, methods, and purposes of processing
- Request updating, rectification, integration, deletion, anonymization, or blocking of data processed unlawfully, including data no longer necessary for the purposes for which it was collected
- In cases where processing is based on consent, receive their data provided to the controller in a structured and commonly used electronic format
- Lodge a complaint with the Supervisory Authority (Italian Data Protection Authority – Garante Privacy)
- Exercise all rights provided by applicable laws
Consent and Withdrawal
Pursuant to Article 23 of Legislative Decree 196/2003 (as amended) and Article 6 of GDPR 679/2016, the data subject may withdraw their consent at any time.
However, certain processing activities may still be lawful even without consent when necessary to fulfill contractual obligations, legal requirements, or legitimate interests.
Complaints
The data subject has the right to lodge a complaint with the Supervisory Authority of their country of residence (Data Protection Authority) if they believe their personal data is being processed improperly.
Refusal to Provide Data
The data subject may refuse to provide their personal data to the Controller. However, providing such data is necessary for the proper and efficient management of the contractual relationship.
Therefore, refusal to provide personal data may partially or entirely compromise the contractual relationship.
Service Valdera S.a.s. does not carry out automated decision-making processes based on personal data obtained through contracts with customers or suppliers.