Politique de confidentialité
SUMMARY OF THE POLICY
Personal data collected for the following purposes and using the following services:
- Contacting the User
- Contact form
Personal Data: city, email, address, name, phone number, and province - Mailing List or Newsletter
Personal Data: email and name - Interaction with social networks and external platforms
- “Like” button and social widgets from Facebook, +1 button and social widgets from Google+, and buttons and social widgets from LinkedIn
Personal Data: Cookies and Usage Data - Statistics
- Google Analytics
Personal Data: Cookies and Usage Data
Additional information about Personal Data
User Data analysis and profiling
The Data Controller may process usage data collected through this Application to create or update user profiles. This type of processing allows the Controller to evaluate user choices, preferences, and behavior for the purposes specified in the respective sections of this document.
User profiles may also be created through automated tools, such as algorithms, which may be provided by third parties. For more information on profiling activities, the User can refer to the respective sections of this document.
The User has the right to object to such profiling activities at any time. To learn more about User rights and how to exercise them, the User can refer to the section of this document related to User rights.
Contact information
Data Controller: B&B Ca’ Santo Spirito – Venice
Controller’s email address: [email protected]
FULL POLICY
Data Controller: B&B Ca’ Santo Spirito – Venice
Controller’s email address: [email protected]
Types of Data collected
Among the Personal Data collected by this Application, either independently or through third parties, there are: Cookies, Usage Data, city, name, phone number, address, province, and email.
Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or via specific information texts displayed before data collection. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application. Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service. In cases where this Application indicates some Data as optional, Users are free not to communicate such Data without any consequence to the availability or operation of the Service.
Users who have doubts about which Data is mandatory are encouraged to contact the Controller. The possible use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application, unless otherwise specified, is aimed at providing the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, if available.
The User is responsible for Personal Data of third parties obtained, published, or shared through this Application and guarantees that they have the right to communicate or disclose it, releasing the Controller from any liability toward third parties.
Methods and place of Data processing
Processing methods
The Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and strictly related to the purposes indicated. Besides the Controller, in some cases, other subjects involved in the organization of this Application (administrative, commercial, marketing, legal staff, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data, and may be appointed, if necessary, as Data Processors by the Controller. The updated list of Processors can always be requested from the Controller.
Legal basis of processing
The Controller processes Personal Data relating to the User if one of the following applies:
The User has given consent for one or more specific purposes;
Note: in some jurisdictions, the Controller may be allowed to process Personal Data without the User’s consent or another legal basis, until the User objects (“opt-out”) to such processing. This is not applicable if processing is governed by European data protection law.
Processing is necessary for the performance of a contract with the User and/or to take steps at the User’s request before entering into a contract;
Processing is necessary to comply with a legal obligation to which the Controller is subject;
Processing is necessary to perform a task carried out in the public interest or in the exercise of official authority vested in the Controller;
Processing is necessary for the purposes of legitimate interests pursued by the Controller or by a third party.
It is always possible to request the Controller to clarify the specific legal basis of each processing and, in particular, to specify whether the processing is based on law, a contract, or consent.
Place
Data is processed at the Controller’s operational offices and wherever the parties involved in processing are located. For more information, contact the Controller. User Personal Data may be transferred to a country different from the User’s. To learn more about the place of processing, the User can refer to the relevant sections of this document.
The User has the right to obtain information about the legal basis of Data transfers outside the European Union or to an international organization.
If such transfers occur, the User can refer to the respective sections of this document or contact the Controller.
Data retention period
Data is processed and stored for the time required by the purposes for which it was collected.
Therefore:
Personal Data collected for contract execution purposes will be retained until the contract is fully performed.
Personal Data collected for legitimate interest purposes will be retained until such interest is fulfilled.
When processing is based on User consent, the Controller may retain Data longer until consent is withdrawn.
The Controller may be required to retain Personal Data for a longer period to comply with legal obligations or orders of authorities.
At the end of the retention period, Personal Data will be deleted.
After that, the right of access, deletion, correction, and portability will no longer be exercisable.
Purposes of processing
User Data is collected to allow the Controller to provide its Services, as well as for the following purposes: Statistics, Interaction with social networks and external platforms, and Contacting the User.
For more detailed information on purposes and relevant Personal Data, refer to the respective sections of this document.
Details on Personal Data processing
Contacting the User
Contact form (This Application)
By filling in the contact form with their Data, the User consents to the use of such Data to respond to information requests, quotes, or other matters indicated in the form header.
Personal Data collected: city, email, address, name, phone number, and province.
Mailing List or Newsletter
By registering for the mailing list or newsletter, the User’s email address is automatically added to a contact list to which email messages containing information, including commercial and promotional content, related to this Application may be sent.
Personal Data collected: email and name.
Interaction with social networks and external platforms
These services allow interactions with social networks or other external platforms directly from this Application’s pages. Interactions and information acquired are subject to the User’s privacy settings on each social network. If an interaction service is installed, it may collect traffic data even if Users do not use the service.
Facebook “Like” button and social widgets
Provided by Facebook, Inc.
Personal Data collected: Cookies and Usage Data.
Processing location: USA – Privacy Policy.
Google+ +1 button and social widgets
Provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Processing location: USA – Privacy Policy – Privacy Shield participant.
LinkedIn button and social widgets
Provided by LinkedIn Corporation.
Personal Data collected: Cookies and Usage Data.
Processing location: USA – Privacy Policy.
Statistics
These services allow the Controller to monitor and analyze traffic data to track User behavior.
Google Analytics (Google Inc.)
Web analytics service by Google Inc. (“Google”).
Personal Data collected: Cookies and Usage Data.
Processing location: USA – Privacy Policy – Opt Out.
Additional information about Personal Data
User Data analysis and profiling
The Controller may process usage data collected to create or update user profiles for evaluating user preferences and behavior.
User profiles may be created using automated tools provided by third parties.
Users may object to profiling at any time.
User Rights
Users can exercise certain rights regarding their Data processed by the Controller.
In particular, Users have the right to:
Withdraw consent at any time; Object to Data processing based on legal grounds other than consent;
Access their Data;
Verify and request correction;
Obtain restriction of processing;
Obtain deletion of Personal Data;
Receive their Data in a structured, commonly used, machine-readable format and, where technically feasible, have it transferred to another Controller;
Lodge a complaint with the competent supervisory authority or seek judicial remedy.
Details on the right to object
Users can object to processing for reasons related to their particular situation when Data is processed for public interest or legitimate interests.
Users can object to direct marketing processing without giving reasons.
How to exercise rights
Requests can be sent to the Controller’s contact details provided in this document.
Requests are free of charge and processed within one month.
Cookie Policy
This Application uses Cookies. For more details, Users can consult the Cookie Policy.
Further information on processing
Legal defense
User Data may be used by the Controller in legal proceedings to defend against misuse of this Application.
The Controller may be required to disclose Data by public authorities.
Specific information
On request, this Application may provide additional contextual information on specific Services or Data processing.
System logs and maintenance
This Application and third-party services may collect system logs, including Personal Data such as IP addresses.
Information not contained in this policy
Additional information can be requested anytime from the Controller.
“Do Not Track” requests
This Application does not support “Do Not Track” requests.
Users are invited to check third-party privacy policies for such support.
Changes to this privacy policy
The Controller reserves the right to modify this privacy policy at any time, notifying Users via this page and, if possible, via this Application or direct contact.
Users should regularly check this page for updates.
If changes affect processing based on consent, the Controller will seek renewed consent.
Definitions and legal references
Personal Data (or Data): Any information relating to an identified or identifiable person.
Usage Data: Data collected automatically through this Application about User interaction and technical details.
User: The individual using this Application.
Data Subject: The person to whom Personal Data refers.
Data Processor: The entity processing data on behalf of the Controller.
Data Controller: The entity that determines purposes and means of processing Personal Data.
This Application: The hardware or software tool collecting and processing Personal Data.
Service: The service provided by this Application.
European Union (or EU): The current member states of the EU and the European Economic Area.
Cookie: Small piece of data stored on the User’s device.
Legal references
This privacy policy is based on various laws, including Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy policy applies only to this Application.