The following information notice is provided pursuant to Articles 13 and 14 of EU Regulation no. 679/2016 (“GDPR”) and the subsequent amended national legislation in adoption of the GDPR (jointly with the GDPR “Privacy Law”) to users who access services available from the website www.thesummerhouses.it (www.thesummerhouses.com; www.jesololidodesigndistrict.it; www.jesololidodesigndistrict.com). While browsing the website, user’s data which constitutes personal data according to the Privacy Law may be collected. The term personal data refers to the de nition provided under Article 4, point 1) of the GDPR, namely “any information relating to an identi ed or identi able natural person (‘data subject’); an identi able natural person is one who can be identi ed, directly or indirectly, in particular by reference to an identi er such as a name, an identi cation number, location data, an online identi er or to one or more factors speci c to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person” (“Personal Data”).
Under the provisions of GDPR, before proceeding to the processing of Personal Data – understood according to the relative definition provided under Article 4, point 2) GDPR as “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction” (“Processing”) – the person to whom the Personal Data belongs must be informed of the reasons for which the Personal Data is requested and how it will be used.
To that end, this document is intended to provide, in a simple and intuitive manner, all useful and necessary information so that you can supply your Personal Data in fully aware and informed manner and, at any time, request and obtain clari cations and/ or corrections.
This information notice, therefore, has been written based on the principle of transparency and all the elements required by Article 13 of the GDPR, and is structured into individual sections, each of which deals with a speci c topic so that it can be quickly read and easily understood (“Information Notice”). This Information Notice is provided exclusively with reference to the aforementioned website and does not relate to any other website accessible by the user through the links contained therein.
The Personal Data controller is Stelladelmar S.r.l. with registered office in
Piazza Le Corbusier, 30016 Jesolo VE (“Company”).
Categories of Personal Data Processed
• Browsing data
IT systems and software processes responsible for the operation of this website acquire some Personal Data in the course of their normal activity, the communication of which is implicit in the use of internet communication protocols.
The information used is not collected to be associated with identified persons but by nature could, after processing and association with data in the possession of others, make it possible to for the users to be identified. This category of data would include, for example, the IP addresses and domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.) and other parameters pertaining to the operating system and the computing environment used by the user.
This data is used solely for the purposes of monitoring the correct functioning of the website and is deleted 7 days following its collection at the latest; except in cases in which it must be used to assess liability in the event of cybercrime detrimental to the website: in this case the information will be kept available to the authorities for the time it takes to ensure that the Company exercises its right to a defence.
• Data provided by the user on a voluntary basis
The optional, explicit and voluntary completion of the form at the following link www.thesummerhouses.it leads to the subsequent acquisition of at least the information marked by the * symbol (name, surname, email address); as well as other information entered voluntarily by the user.
The site uses so-called technical cookies to ensure the functionality of the site itself.
Voluntary Provision of Data
Apart from the specifications concerning browsing data, the user is free to provide his/her Personal Data or to disclose it to request the sending of informative materials or other communications. Failure to provide Personal Data may, on the other hand, makes it impossible to obtain the materials requested. Additionally, where the user expresses its consent, the Personal Data may be processed for the additional purposes specified below.
Purposes of Processing and Legal Basis
Any Personal Data collected will be processed for the following purposes and pursuant to the specified legal basis:
|Purpose||Legal basis for processing|
|a) Responding to requests for information, as described above||Processing of Personal Data is necessary to fulfil a pre-contractual request by the user|
|b) Marketing activities: any activities used to promote products and services sold and/or provided by the Company fall under this category||The consent of the user|
|c) Communication to third-parties: The Company may sell the Personal Data collected to other subjects operating in the same sector to allow these companies to process the Personal Data for their own marketing purposes||The consent of the user|
Communication and Dissemination of Personal Data
Personal Data may be communicated to specific subjects considered to be the recipients of this Personal Data. Article 4 point 9) GDPR defines a recipient of Personal Data as “a natural or legal person, public authority, agency or another body, to whom the personal data are disclosed, whether a third party or not” (“Recipient”).
From this perspective, in order to accurately performing all Processing activities necessary to achieve the purposes referred to in this Information Notice, the following subjects may be in the position to process your Personal Data:
- third-parties carrying out part of the Processing activities and/or any activities connected and instrumental to such Processing activities on behalf of the controller. These subjects have been designated as data processors;
- Individuals, employees and/or collaborators of the Personal Data controller to whom specific and/or other Personal Data Processing has been entrusted and who have been given specific instructions on the security and correct use of Personal Data;
- Where required by law or to prevent or suppress the committing of a crime, Personal Data may be communicated to public authorities or law enforcement agencies without them being de ned asRecipients. Indeed, pursuant to Article 4 point 9) GDPR “public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients”.
Any Personal Data collected will not be disseminated under any circumstances.
One of the principles applicable to the Processing of your Personal Data concerns the limitation of the retention period, governed by Article 5, paragraph 1, point e) of GDPR, which states that Personal Data shall be “kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject”.
In light of this principle, your Personal Data will be processed by the controller within the limits necessary to fulfil the purposes referred to under point A) of this Information Notice.
In relation to the Processing carried out for the purposes referred to in points B) and C), Personal Data may be processed until the willingness to withdraw consent to one or all of the purposes for which it was collected it is communicated, in one of the modalities provided for in the present Information Notice. Any withdrawal of consent will effectively result in the termination of the Processing of Personal Data for these purposes. In any case, the Company will delete the Personal Data after 48 months from the collection of consent.
Data Subjects’ Rights
The user can exercise the rights established by the Privacy Law including,
by way of example only, the right (I) to access its Personal Data (and to know the source, objectives and the purposes of the Processing, as well as information regarding the subjects to whom his/her Personal Data has been communicated, the period for which Personal Data will be retained or the criteria used to determine such period), (ii) to request rectification of Personal Data (iii) to request erasure if Personal Data is no longer necessary, incomplete, erroneous or was collected in violation of the law, (iv) to request that the Processing be restricted to only part of the data subject’s information; (v) to receive, to the extent that it is technically possible, the information relating to him/her in a structured format for its to be transmitted to the user or to third parties specified by the user (so-called “portability”). In this case, it will be your responsibility to provide us with the exact details of the new controller to whom you would like to transfer your Personal Data, by providing us with written authorisation; (vi) to withdraw your consent at any time, in the event that this constitutes the basis of the Processing. Withdrawal of consent shall not affect the lawfulness of Processing based on consent carried out prior to its withdrawal.
The aforementioned rights can be exercised by written request and without formalities to the controller at the specified registered office or by way of communication to the following e-mail address firstname.lastname@example.org
Without prejudice to its right to lodge a complaint with any other administrative or jurisdictional body, the Company informs the user that, shall the latter consider the Processing of Personal Data conducted by the controller to be in violation of the GDPR and/or the Privacy Law, he/she will have the right to lodge a complaint with the competent Data Protection Authority.
Latest update: May 2018