Processing of personal data

With this information – Art.13 of EU Regulation n.2016/679
Villaggio Turistico Le Palme srl
based in Viale Esperia, 1 – 84046 Ascea (SA), Cilento National Park, Campania, Italy
e-mail: info@villaggiolepalme.com
VAT number: 02445770650
Share capital: € 30600 fully paid up

(hereinafter also Company or Holder) intends to inform visitors of the domain www.villaggiolepalme.com (hereinafter the “Site”), about the policy adopted in the matter of protection of personal data emphasizing their commitment and attention to the protection of their privacy.

Navigation within the Site is free, free and requires no registration.
However to guarantee the use of some services (eg purchase of products online, sending information request, etc.) Villaggio Turistico Le Palme srl (hereafter Villaggio Le Palme) will provide the user with the necessary tools with indication of the purposes and methods of use of the data, as well as the right to request at any time the update and/or cancellation of the same.

Villaggio Le Palme is committed to safeguarding your privacy.
By using this Site and / or the services available to it, you consent to the processing of your personal data as described in this statement.

Definitions used

Personal data: any information relating to an identified or identifiable natural person;
Processing: any operation or set of operations performed on personal data or on personal data;
Data subject: a natural person whose personal data has been processed;
Children: a person under 16 years of age;

Summary

1. Principles on data protection
2. Data Controller and Data Protection Officer
3. Purpose and legal basis of the processing
4. Categories of data processed
5. Recipients of the data processed
6. Partners
7. Children
8. Data protection mode
9. Rights of the interested parties
10. Complaint or report to the guarantor for the protection of personal data
11. Last update

01. PRINCIPLES ON DATA PROTECTION

We will do our best to ensure the accuracy, integrity and confidentiality of data.
We will strive to follow the following data protection principles, therefore the processing of the latter will be:

• lawful, fair, transparent: our processing activities have legitimate reasons, we always consider your rights before processing your personal data and, upon your request, we will provide you with information about the processing;
• performed with minimum data: we collect and process only the minimum amount of personal data required for each purpose;
• limited to the purpose: our processing activities correspond to the purpose for which the personal data were collected;
• limited to a period of time: we will not store your personal data for a longer period than necessary.

02. HOLDER OF THE TREATMENT AND RESPONSIBLE OF DATA PROTECTION

The Data Controller is Villaggio Turistico Le Palme srl based in Viale Esperia, 1 – 84046 Ascea (SA), Cilento National Park, Campania, Italy.

The Company has appointed one Data Protection Officer (DPO) pursuant to articles 37 and ss. of the Regulations, domiciled at the registered office.
The DPO, as data protection officer, he can be contacted at the Data Protection Office of Villaggio Turistico Le Palme Srl in Viale Esperia, 1 – 84046 Ascea (SA), Cilento National Park, Campania, Italy, or at the e-mail address: info@villaggiolepalme.com.

03. PURPOSE AND LEGAL BASIS OF TREATMENT

Villaggio Turistico Le Palme srl processes personal data of natural persons, legal entities, sole proprietorships and / or freelancers (“interested parties”) for the following purposes:

• online purchase of the Villaggio Le Palme branded products.
  The legal basis that legitimizes the resulting processing is the conferment by the data subject by registering a user account that initially provides the provision of an e-mail address and a password.
  Subsequently the user will have access to his profile and will be able to manage all personal information at all times (Name, Surname, E-mail address, Password, Billing and/or shipping address, orders, etc.). This transfer is not mandatory. The lack of such data does not determine any negative consequence except for the impossibility to start the normal purchasing procedures.
• request information through appropriate contact forms.
  The legal basis that legitimizes the resulting processing is the conferment by the data subject (name and surname, e-mail address and possibly telephone/mobile number, date of birth, etc.).
  This transfer is not mandatory. The lack of such data does not lead to any negative consequences except for the impossibility of communicating with Villaggio Le Palme.
• registration to the newsletter.
  The legal basis that legitimizes the resulting processing is the conferment by the interested party of an e-mail address that will be used as a recipient of news and/or events, promotion and / or sale of products of Villaggio Le Palme and/or of third-party companies, including carrying out market research (so-called direct marketing) etc. However, the provision of data necessary for these purposes is not mandatory. The refusal to supply them does not determine any negative consequence except for the impossibility of receiving commercial communications and not.
• the need to comply with legal obligations (eg obligations under the anti-money laundering legislation, instructions issued by the Supervisory Authority, the Magistrates, etc.).
  This need represents the legal basis that legitimizes the resulting treatments. Providing the data necessary for these purposes is a legal obligation; in the absence of these Villaggio Le Palme it would be impossible to establish relationships and could have the obligation to make reports
• promotion and sale of “dedicated” products and services of Villaggio Le Palme and/or of third-party companies, identified through processing and analysis – also through the use of techniques or systems automated, e.g. big data – of preferences, habits, consumption choices etc. which allow the subdivision of data subjects into homogeneous groups according to specific behaviors, characteristics and/or parameters (user profiling) and also the enrichment of data of the same with information acquired from third parties (enrichment). The legal basis that legitimizes the resulting processing is the consent of the interested party that can be revoked at any time. However, the provision of data necessary for these purposes is not mandatory. The refusal to supply them does not lead to any negative consequences except for the impossibility of receiving dedicated, commercial and non-commercial communications.

04. CATEGORIES OF DATA PROCESSED

Villaggio Le Palme processes personal data collected through the conferment by the user – or more generally of the interested party – which may be personal data (name, surname, residential address, etc.), contact (e-mail, telephone number, number of mobile, fax, etc.), related to personal accounts (personal profile Facebook, Instagram, Twitter, LinkedIn, etc.) and other data related to the above categories.
We also process data related to the connection and navigation to the Villaggio Le Palme web spaces (eg information on the shopping cart, purchase history, IP addresses, URI of requested resources, time of request, method of the request to the server, file size obtained in response, numeric code of the server response status (successful, error, etc.), other parameters related to the operating system and the user’s computer environment, which are collected and used anonymously for the sole purpose of processing statistical information on its use, to verify its correct functioning and / or to improve the user experience, the use of Villaggio Le Palme services, the contents present on the web spaces and the activities carried out on the same could be registered.
The data could also be used to ascertain responsibility in case of hypothetical computer crimes.
Finally we collect information from our partners and/or third-party companies with the certainty of the presence of legal bases about their sharing (provided by the interested party directly or collected for other legal reasons) or publicly available information.

05. ADDRESSEES OF DATA PROCESSED

Villaggio Le Palme processes personal data collected through the conferment by the user – or more generally of the interested party – which may be personal data (name, surname, residential address, etc.), contact (e-mail, telephone number, number of mobile, fax, etc.), related to personal accounts (personal profile Facebook, Instagram, Twitter, LinkedIn, etc.) and other data related to the above categories.
All data in question will be processed exclusively to implement the purposes requested by the customer.

06. PARTNERS

We work only with partners able to guarantee an adequate level of personal data protection. We disclose your personal data to third parties and / or public officials only if we are legally obliged to do so. Finally we may disclose your personal data to third parties if and only if your authorization exists or other legal reasons.

Our partners:

• truebag.
• Sky
• FcWagen
• Banca del Cilento, Sassano e vallo Di Diano e della Lucania
• Guatemala Coffee

07. CHILDREN

We do not intend to collect or collect information from children knowingly.
We do not direct children to our services.

08. DATA PROTECTION PROCEDURE

We do our best to keep your personal information safe.
We use secure protocols for communication and data transfer (eg HTTPS) and anonymity where possible and / or suitable, we monitor our systems constantly and protect them from possible vulnerabilities and attacks by means of firewalls and perform periodic backups of our systems (internal and online).
In any case, we will never be able to guarantee 100% information security.
Therefore, in the event of a violation, we will undertake to notify you to the competent authorities and we will inform you if there is any threat to your rights or interests.
Finally we remind you that it is necessary to protect the login data – login and password – if you were an account holder on our systems.

09. RIGHTS OF THE INTERESTED

According to the current legislation on data protection, the data subject has specific rights and can exercise the right to contact the Data Controller at any time.

The rights exercisable by the interested party are:

• Access rights;
• Right of rectification;
• Cancellation policy;
• Right of limitation;
• Right to portability;
• Right of opposition.

The optional consent can be changed at any time and without any limitation.

Right of access

The interested party can know which personal data referring to them are treated by Villaggio Le Palme. At any time you can request a free copy.
It will contain the purposes of the processing, the categories of data processed, the expected retention period, the guarantees applied in case of transfer of data to other countries, etc.

Right of correction

The interested party can obtain the updating or correction of inaccurate or incomplete data concerning him.

Right to cancel (“oblivion”)

Specifically, Art.17 provides that the person concerned has the right to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller is obliged to cancel the data without unjustified delay. personal data, if one of the following reasons exists:

• personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
• the interested party revokes the consent on which the treatment is based and if there is no other legal basis for the treatment;
• the interested party opposes the processing and there is no legitimate overriding reason to proceed with the processing;
• personal data has been processed unlawfully;
• personal data must be deleted to fulfill a legal obligation under Union law or the Member State to which the data controller is subject;
• personal data have been collected in relation to the provision of information society services.

This right can be exercised even after the withdrawal of consent.

Right of limitation

The interested party can exercise the right of limitation in case of violation of the conditions of lawfulness of the treatment, as an alternative to the deletion of data and request for rectification of data (pending correction) or opposition to their processing (pending decision of the holder).
Without prejudice to the conservation, any other processing of the data whose limitation is requested is prohibited.

Right to portability

The interested party may use his/her data in the possession of Villaggio Le Palme for other purposes.
The interested party may request and obtain the personal data referred to him or request the transfer to another holder, in a structured format, in common and legible.
In particular, the data that can be object of portability are the personal data (eg name, surname, address, date of birth, address of residence, etc.), as well as the data generated by the activities of the interested party from/to the systems of Villaggio Le Palme (eg number of purchases, amounts paid, methods/types of payment, date of transactions, etc.). The right to portability does not apply to non-automated treatments (eg archives or paper records).

Opposition rights

The interested party can oppose at any time the processing of personal data concerning him for reasons related exclusively to his situation.

To exercise their rights, requests must be addressed to Villaggio Le Palme Servizio Privacy, Viale Esperia,1 – 84046 Ascea (SA), Parco Nazionale del Cilento, Campania, Italia, Campania, Italia, in the person of the Data Protection Officer (DPO), by sending an e-mail to the address info@villaggiolepalme.com.

The deadline for obtaining the answer is one (1) month.
In cases of particular complexity the term can be extended to (2) months; however, the interested party will receive an interlocutory communication within one (1) month.
The exercise of rights is, in principle, free;
if the DPO evaluates the processing of the request of particular complexity and / or in the case of unfounded, excessive or urgent requests, it reserves the right to request a contribution.
The DPO has the right to request and obtain further information necessary for identification purposes of the data subject.

10. COMPLAINTS OR REPORTING TO THE GUARANTOR FOR THE PROTECTION OF PERSONAL DATA

If the interested party considers that he has suffered a violation of his rights, he can lodge a complaint or make a report to the Data Protection Authority or appeal to the Judicial Authority.

The contacts of the Guarantor for the Protection of Personal Data can be consulted on the website www.garanteprivacy.it

11. LAST UPDATE

Our information may be changed, even without notice.
The date of the last update is 24 May 2018.