PRIVACY POLICY
Information provided pursuant to Article 13 of EU Regulation 679/2016 (hereinafter GDPR) to those who interact with the website of the B&B Casa Margot company and who use the services offered by the same.
B&B Casa Margot based in Neive - Via Roma n. 9, hereinafter referred to as the Data Controller, has defined this Privacy Policy in order to illustrate to users how to manage the processing of personal data collected through access to the bbcasamargot.com site.
The information is provided only for the service offered directly by B&B Casa Margot and not for other sites or web applications that may be consulted by the user via links and which may indirectly refer to the Company. This information has been drawn up on the basis of the principles of lawfulness, correctness, transparency, proportionality and relevance as well as in compliance with the provisions of the GDPR.
PURPOSE OF THE TREATMENT
The data provided by the user through the Site will be processed for:
-
Manage user requests;
-
Manage reservations;
-
Fulfill the obligations established by law, regulations or community legislation.
The provision of data for the aforementioned purposes is mandatory and the refusal to give the relative consent to the processing will make it impossible for the Data Controller to process the related requests. The data provided will also be processed for:
-
marketing activities including the forwarding of advertising and / or information material;
-
management of the "request more information" section.
The provision of personal data for the purposes referred to in points 1, 2 is always optional although necessary for the aforementioned purposes. By not providing the requested information, you may not be able to use all the services offered by this website.
For all the aforementioned purposes, the Data Controller may appoint external suppliers to whom only and exclusively the data strictly necessary for the performance of the assignment will be transmitted.
The Suppliers will act as Data Processors, appointed pursuant to art. 28 of the GDPR. The list of Managers is available by making a request to the Data Controller and using the contacts indicated in this policy.
THE DATA CONTROLLER
The Data Controller is the B&B Casa Margot based in Neive - Via Roma 9. The list of data processors and persons in charge of the processing is available at our office.
PLACE OF DATA PROCESSING
The treatments connected to the web services of this site take place at the headquarters of B&B Casa Margot in Neive - Via Roma 9 and are handled only by the Owner and / or Manager and / or staff in charge of processing on Italian web servers. The place of storage of the data, and therefore of the company web server, is managed by Principi ADV as a hosting provider.
DATA PROCESSING METHOD
The treatment will be carried out by means of the operations indicated in art. 4 of the GDPR and more precisely: collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or other forms of making available, comparison or interconnection, limitation, cancellation or destruction of data .
The treatment will be carried out, in relation to the purposes indicated above, through paper and computer media by the Data Controller, by the Managers and / or by the person in charge (s) with the observance of every precautionary measure that guarantees its security and confidentiality.
The Data Controller and the Managers will process the personal data of the users by adopting the appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of personal data.
The processing may be carried out on behalf of the Data Controller with the same methods and criteria indicated above, by authorized personnel involved in the organization of the Site (administrative, commercial, marketing, system administrator) or by external subjects (such as suppliers of technical services , IT companies, communication agencies) appropriately appointed as Managers pursuant to art. 28 of the GDPR.
DATA STORAGE
Users' personal data will be kept for the time necessary to pursue the purposes for which they were purchased. The data retention period depends on the purposes for which they are processed and therefore could vary.
The data collected for marketing purposes will be kept for a maximum period of 10 years from when the interested party gives his consent. At the expiry of the term, if the interested party does not confirm consent to the processing of his data for marketing purposes, such data will be deleted.
DATA PROCESSED
1. Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
The IP addresses of the users are always anonymized and the domain names of the PCs used by the users who connect to the site are not registered.
The URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server ( successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing.
The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this possibility, the data on web contacts do not currently persist for 24 months.
2. Optional data freely provided by users
The optional, explicit and voluntary sending of requests via the forms and e-mails to the addresses indicated on the Site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered therein. The same applies to users / customers who provide their personal data to use the B&B services by telephone or personally at the accommodation facility.
Specific summary information will be progressively reported and / or displayed on the pages of the Site prepared for particular services on request.
3. Cookies
No personal user data is acquired by the site in this regard. Cookies are not used to transmit information of a personal nature, nor are persistent cd cookies of any kind used, or systems for tracing users.
The use of so-called session cookies (which are not stored permanently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow the safe and efficient exploration of the site.
The so-called session cookies used on this site avoid the use of other IT techniques that are potentially prejudicial to the confidentiality of users' browsing and do not allow the acquisition of the user's personal identification data.
DATA COMMUNICATION
The processing of the data collected is carried out by internal staff of the B&B identified and authorized for this purpose, according to specific instructions given in compliance with current legislation, as well as a specific training course.
The data collected, if necessary or instrumental for the execution of the aforementioned purposes, may be processed by third parties, appointed as external data processors or, depending on the case, communicated to them as independent owners and precisely:
-
people, companies, associations or professional firms that provide assistance and advice to our Company;
-
companies, organizations, associations that perform services connected and instrumental to the execution of the aforementioned purposes (market analysis and research service, management of payments by credit card, maintenance of IT systems);
-
public bodies and public administrations for legal obligations and for compliance with the Consolidated Law on Public Safety.
The personal data collected will never be disclosed for needs other than the services requested.
RIGHTS OF THE INTERESTED PARTIES
The subjects to whom the personal data refer have the right at any time, pursuant to articles 15 - 22 of the GDPR, to exercise the right to:
-
obtain from the Data Controller confirmation as to whether or not personal data concerning them is being processed and, in this case, obtain access to it;
-
obtain information on the purposes and methods of processing, the categories of personal data provided, the recipients and / or categories of recipients to whom the data have been or will be communicated and, when possible, the retention period;
-
obtain the rectification, integration and deletion of data; obtain the limitation of the processing;
-
obtain data portability, i.e. receive them from the Data Controller, pursuant to art. 20 of the GDPR 2016/679, "in a structured format, commonly used and readable by an automatic device" and transmit them to another Data Controller without impediments;
-
oppose the processing at any time, even in the case of processing for direct marketing purposes;
-
revoke the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
-
propose a complaint to the Guarantor Authority, in the event that they believe that the processing of personal data relating to them carried out through this Site is in violation of the provisions of the Regulation.
Requests should be addressed to the Data Controller, by registered mail with return receipt, to the following address Via Roma, 9 Neive, 12052, Cuneo or by email to bbcasamargot@gmail.com
CHILDRENS
The services offered by the B&B Casa Margot are aimed exclusively at adults.
As for minors, in the absence of valid parental consent or a legal representative, the Data Controller will have the right to cancel the relative booking and to proceed with the cancellation of any data acquired.
BOOKING
The request for availability for a stay at the B&B can be made through the Booking Form on this site.
To confirm the reservation, a non-refundable bank transfer equal to 30% of the total amount of the room / s will be requested to guarantee the reservation (The balance is paid in the structure. Tourist tax excluded.)
INTERACTION WITH SOCIAL NETWORKS AND EXTERNAL PLATFORMS
This Site allows interaction with social networks or other external platforms directly from its pages.
The interactions and information acquired from this Site will in any case be subject to the User's privacy settings relating to each social network.
This Site allows interaction with social networks or other external platforms directly from its pages. The interactions and information acquired from this Site will in any case be subject to the User's privacy settings relating to each social network.