Dear Customer,

In accordance with the regulations in force on the protection of personal data (EU Regulation No. 679 of 2016), we would like to inform you that the processing of your personal data is carried out with fairness and transparency, for lawful purposes and while protecting your privacy and your rights.

The processing is also carried out with the aid of electronic means for the following purposes:
To acquire and confirm your booking of accommodation services and ancillary services, and to provide the requested services.
Since these are processing operations necessary for the definition of the contractual agreement and for its subsequent execution, your consent is not required, except where particular data, so-called sensitive data, are provided. In case of refusal to provide personal data, we will not be able to confirm the booking or provide you with the requested services. The processing will cease upon your departure, but some of your personal data may or must continue to be processed for the purposes and in the manner indicated in the following points;

To fulfil the obligation set out in the “Consolidated Law on Public Security” (Article 109 of Royal Decree 18.6.1931 No. 773), which requires us to communicate to the Police Headquarters, for public security purposes, the personal details of guests, in accordance with the procedures established by the Ministry of the Interior (Decree of 7 January 2013).

The provision of this data is mandatory and does not require your consent, and in case of refusal to provide it, we will not be able to accommodate you at our facility. The data collected for this purpose is not retained by us, unless you give your consent to its retention as provided for in point 4;

To comply with current administrative, accounting and tax obligations. For these purposes, the processing is carried out without the need to obtain your consent. The data is processed by us and by our staff, and is disclosed externally only in compliance with legal obligations. In case of refusal to provide the data necessary for the aforementioned requirements, we will not be able to provide you with the requested services. The data collected for these purposes is retained by us for the period required by the respective regulations (10 years, and even longer in case of tax audits);

To speed up the registration procedures in case of your subsequent stays at our facility. For this purpose, subject to obtaining your consent, which may be revoked at any time, your data will be retained for a maximum period of ONE YEAR, and will be used when you are once again our guest, for the purposes indicated in the previous points;

To perform the function of receiving messages and phone calls addressed to you during your stay. Your consent is required for this purpose. You may withdraw your consent at any time. The processing will in any case cease upon your departure;

To send you our promotional messages and updates on rates and offers available. For this purpose, subject to obtaining your consent, your data will be retained for a maximum period of ONE YEAR and will not be disclosed to third parties. You may withdraw your consent at any time;

For the purposes of protecting people, property and company assets through a video surveillance system covering certain areas of the facility, identifiable by the presence of appropriate signs.

Your consent is not required for this processing, as it pursues our legitimate interest in protecting people and property against possible assaults, thefts, robberies, damage, acts of vandalism, and for fire prevention and workplace safety purposes.

Recorded footage is deleted after 24 hours, except on public holidays or other cases of business closure, and in any case no later than one week. It is not disclosed to third parties, except where it is necessary to comply with a specific investigative request from the judicial authority or judicial police.

We would also like to inform you that the European Regulation grants you certain rights, including the right of access and rectification, or erasure or restriction or objection to processing, as well as the right to data portability, if and to the extent applicable (Articles 15 to 22 of EU Regulation No. 679 of 2016).

You may also lodge a complaint with the supervisory authority, in accordance with the procedures set out in current legislation.
For any further information, and to exercise the rights granted to you under the European Regulation, you may contact:
Data Controller (first and last name or company/entity name): Revisionando SRL (contact details) Loc Cardete, 12 - Città della Pieve PG
Data Processor (if appointed): (first and last name or company/entity name) Simone Della Giovampaola (contact details) +39 378 3035305

This Application collects certain Personal Data from its Users.

Types of Data collected

Among the Personal Data collected by this Application, independently or through third parties, are: Cookies, Usage Data, First Name, Last Name, Phone Number and Email.

Other Personal Data collected may be described in other sections of this privacy policy or through informational texts displayed at the time the Data is collected.

Personal Data may be freely provided by the User, or collected automatically while using this Application.

Any use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application, unless otherwise specified, is aimed at identifying the User and recording their preferences for purposes strictly related to the provision of the service requested by the User.

Failure by the User to provide certain Personal Data may prevent this application from providing its services.

The User assumes responsibility for the Personal Data of third parties published or shared through this Application and guarantees that they have the right to communicate or disseminate them, releasing the Data Controller from any liability towards third parties.

Methods and place of processing the Data collected

Methods of processing

The Data Controller processes the Personal Data of Users by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Personal Data.

Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, Data may be accessed by certain types of persons in charge, involved with the organization of the site (administrative, sales, marketing, legal, system administration personnel) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Data Controller. The updated list of Processors may be requested from the Data Controller at any time.

Place

The Data is processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.

Retention period

Data is processed for the time necessary to provide the service requested by the User, or as required by the purposes outlined in this document, and the User can always request the suspension of processing or the deletion of the Data.

Purpose of Processing the Data collected

The User's Data is collected to allow the Data Controller to provide its services, as well as for the following purposes: Statistics, Interaction with social networks and external platforms and Contacting the User.

The types of Personal Data used for each purpose are indicated in the specific sections of this document.

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contacting the User

Contact form (This Application)

By filling in the contact form with their Data, the User consents to its use to reply to requests for information, quotes, or any other kind of request as indicated by the header of the form. Personal Data collected: Last name, Email, First name and Phone number.

Interaction with social networks and external platforms

These services allow interaction with social networks, or other external platforms, directly from the pages of this Application.

The interactions and information obtained by this Application are always subject to the User's privacy settings for each social network.

If a service enabling interaction with social networks is installed, it may still collect traffic data for the pages where the service is installed, even when Users do not use the service.

Like button and Facebook social widgets (Facebook, Inc.)

The “Like” button and Facebook social widgets are services allowing interaction with the Facebook social network, provided by Facebook, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy

Statistics

The services contained in this section enable the Data Controller to monitor and analyze traffic data and are used to track User behavior.

Google Analytics (Google Inc.)

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google developed services.

Google may use the Personal Data collected to contextualize and personalize the ads of its own advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: USA – Privacy Policy – Opt Out

Further information about processing

Defense in Court

The User's Personal Data may be used by the Data Controller in court or in the stages leading to possible legal action arising from improper use of this Application or the related services by the User.

The User declares to be aware that the Data Controller may be required to reveal personal data upon request of public authorities.

Specific information

At the User's request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific services, or the collection and processing of Personal Data.

System logs and maintenance

For operational and maintenance needs, this Application and any third-party services it uses may collect System Logs, i.e. files that record interactions and may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

More information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

Exercise of rights by Users

Subjects to whom Personal Data refer have the right at any time to obtain confirmation from the Data Controller as to whether or not such data exists, to know its content and origin, to verify its accuracy or request its integration, cancellation, updating, correction, transformation into anonymous form or blocking of Personal Data processed in violation of the law, as well as to object, in any case, on legitimate grounds, to its processing. Requests should be sent to the Data Controller.

This Application does not support “Do Not Track” requests. To determine whether any of the third-party services it uses support them, please refer to their privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page. Please therefore check this page frequently, referring to the date of the last modification shown at the bottom. In the event that the User does not accept the changes made to this privacy policy, the User is required to stop using this Application and may request that the Data Controller remove their Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to the Personal Data collected up to that point.

Information about this privacy policy

The Data Controller is responsible for this privacy policy, drawn up starting from templates provided by Iubenda and stored on its servers.

Definitions and legal references

Personal Data (or Data)

Personal data means any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.

Usage Data

These are the information automatically collected by this Application (or by third-party applications used by this Application), including: the IP addresses or domain names of the computers used by Users connecting to this Application, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's response (success, error, etc.), the country of origin, the features of the browser and operating system used by the visitor, the various time details of the visit (e.g. the time spent on each page) and the details of the path followed within the Application, with particular reference to the sequence of pages visited, and the parameters relating to the User's operating system and computer environment.

User

The individual using this Application, who must coincide with, or be authorized by, the Data Subject, and whose Personal Data are being processed.

Data Subject

The natural or legal person to whom the Personal Data refer.

Data Processor (or Processor)

The natural person, legal person, public administration or any other body, association or organization appointed by the Data Controller to process Personal Data, as set out in this privacy policy.

Data Controller (or Controller)

The natural person, legal person, public administration or any other body, association or organization which, either alone or jointly with another controller, is responsible for decisions regarding the purposes, methods of processing personal data and the means used, including security aspects, in relation to the operation and use of this Application. Unless otherwise specified, the Data Controller is the owner of this Application.

This Application

The hardware or software tool by which Users' Personal Data is collected.

Cookie

A small piece of data stored on the User's device.

Legal references

Notice to European Users: this privacy policy is drawn up in fulfillment of the obligations set out in Art. 10 of Directive No. 95/46/EC, as well as the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding Cookies.

This privacy policy relates solely to this Application.

last updated: 14/04/2022