Privacy Policy

Disclaimer as per art. 13 GDPR 679/2016

  1. Data controller.

    CIEFFE SRL (henceforth referred to simply as Data Controller), with head office in in via di Rocchette Snc - 58043 Castiglione Della Pescaia (GR), tel +390564941092 is the processing controller for all personal data that is collected through the website. Data Controller autonomously defines the processing purposes and methods.

    e-mail address:info@baiaazzurra.it

  2. Data processing location

    The main data processing for the web services related to this website is done in ITALY.

  3. Data processing security and methods

    As required by art. 32 GDPR, personal data are processed using computerised tools that are appropriate to guarantee an adequate security level against risks. Communications to and from the web server are by means of secure communications protocols with encryption algorithms TLS/SSL.

    The Data Controller takes all appropriate security measures to prevent any unauthorised access, disclosure, change or destruction of the personal data. Processing is by means of automated computer and/or telematic tools, with organisational methods and logics strictly correlated to the indicated purposes. Furthermore, in certain cases other parties involved in the organisation of the website could also have access to the data (admin, commercial, marketing, legal staff, system administrators) or external parties (e.g. technical service providers, postal couriers, hosting providers, IT companies, communications agencies) who are appointed when necessary as Processing Managers by the Data Controller. The up to date list of processing managers can be requested at any time from the Data Controller.

  4. Why do we collect your data?

    We use your data to provide our services, for example sending your requests for information/quotations/ bookings at the holiday structures you select, to propose holiday packages and/or holiday structures, to keep you up to date about the best offers and news in open-air holidays. Data is collected if one of the following circumstances is applicable:

    • The user has consented for one or more of the specified purposes.
    • Processing is necessary in order to enforce a contract with the user and/or the preliminary contract measures.
    • Processing is necessary to satisfy a legal obligation applicable to the Data Controller.
    • Processing is necessary to pursue the user’s legitimate interests.
    • The data are necessary for the technical functions of the website and/or for anonymous statistics.


    Information may be requested from the Data Controller to explain the legal basis for each type of processing and, in particular, to specify whether processing is based on a law, a contract or necessary to conclude a contract.

  5. Types of processed data

    Surfing data
    Among the data collected by this Website, independently or through third parties, there are Cookies and usage data. This information is not collected to be associated with identified users but could, through processing and association with data held by third parties, allow users to be identified. These data are collected to obtain anonymous statistical data on the use of the site, to check its correct functioning and in some cases for legal obligations. This category of data includes the IP addresses, the browser identifier (user agent), the addresses in the Uniform Resource Identifier (URI) of the requested resources, the time of the request, the method used in submitting the request to the server, the numeric code indicating the status of the response given by the server (e.g. successful, error) and other parameters related to the operating system and the user's computer environment. Please refer to the specific section in this document for details on the use and collection of cookies and usage data.

    Data given voluntarily by the user
    To provide some services through the website, it may be necessary to enter some identifying data such as name, surname, telephone number, e-mail and various other types of data. The mandatory or optional nature of the provision of data is specified from time to time - with reference to the requested data - in the data collection forms and the mandatory information is marked with an asterisk (*). If you refuse to communicate the data marked as mandatory, it will be impossible to achieve the main purpose of collecting specific data. Such refusal could, for example, make it impossible to complete a request, a purchase or execute the contract of sale of the chosen product or provide other services available on the site (such as assistance, contacts with Customer Service, sending e-mails, use of specific site functions). Full details on each type of collected data are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data are collected. In cases where this website indicates some data as optional, users are free to refrain from communicating such data without this having any consequence on the availability of the service or its operation. Users who have doubts about which data are mandatory should contact the Data Controller.

    Optional data provision
    Apart from what has been specified for surfing data, the user is free to provide the requested personal data or otherwise to use the services provided through the site. Failure to provide data relating to the fields marked with an asterisk (mandatory) will make it impossible to use the service offered. The user is responsible for the personal data of third parties that are obtained, published or shared via this website and guarantees to have the right to communicate or disseminate them, releasing the Data Controller from any liability to third parties.

  6. Data storage period

    The data are processed and stored for the time required for the purposes for which they were collected and then for a further period of 24 months. If the requested data is subject to economic and fiscal reporting purposes (e.g. online transaction) they are stored for 10 years. These indications are generally valid for all data processed by the site, except for processing subject to explicit consent by the user when a different storage period is indicated. With regards the technical data managed by the site, such as cookies, the storage period is defined by the technical characteristics of the cookies themselves and indicated in the specific section.

  7. Which of your data we collect online

    Communicating your personal data to the Data Controller, in the various ways in which they are collected on our site, could be essential to achieve the desired result. The mandatory or optional nature of the provision of data is specified from time to time - with reference to the required data - in the data collection forms and the mandatory information is marked with an asterisk (*).

    If you refuse to communicate the data marked as mandatory, it will be impossible to achieve the main purpose of collecting specific data. Such refusal could, for example, make it impossible to complete a request, purchase or execute the contract of sale of the chosen product or provide other services available on the site (such as assistance, contacts with Customer Service, sending emails, use of specific site functions).

    Communicating additional data, other than those marked as mandatory, is optional and a denial of such data will not have any consequence for the main purpose of the collection (on the use of the website and its services, for example).

    You have the right to ask Data Controller for all the details about your personal data held by us.

  8. How we use your data

    The personal data is mainly processed by means of computer systems and electronic devices by Data Controller and third parties, who are carefully selected for their reliability and competence, and for carrying out essential operations to achieve the purposes strictly connected to the use of the website, its services and online sales of products through the website.

    In general, the data are processed for the purposes indicated below:

    1. The request for information and/or reservations
    2. The subscription to specific services, such as, for example, the newsletter
    3. Sending informative and promotional communications, also of a commercial nature, advertising material and/or offers of goods and services
    4. Market research, economic analysis and statistics.

    The activities referred to in points b), c) and d) are subject to explicit consent by you and may be carried out by any means including, but not limited to, mail, internet, telephone, email, MMS , SMS, from Italy or from abroad (also from countries not belonging to the European Community), by Data Controller, its parent companies, subsidiaries and/or affiliates, as well as by third parties with whom Data Controller has contractual relationships connected to the performance of the aforesaid activity.

  9. Processing data sent by filling in the form in the website

    The user must give express consent for the use of data given by filling in the forms and said data are processed as follows:
    1. Personal Data collected: surname, email address, first name, telephone number and various types of data necessary for the provision of the requested service.
    2. The collection methods are those indicated in section 7 of this disclaimer.
    3. The data are used for purposes strictly connected to the management of the service. These data will not be disclosed to third parties in any way.

    "According to article 13 of GDPR 679/2016, the communicated data can be used for the sole purpose of providing the requested service. It is expressly forbidden to use the data for different purposes and/or share or communicate them to third parties, either in the EU or outside the EU. In relation to the processing, the Customer may exercise the rights provided by articles 15 to 22 of GDPR 679/2016 on each communication".

  10. Newsletter and direct marketing

    To subscribe to the newsletter, the information collected will be processed as follows:

    1. Registration is voluntary and subject to explicit consent by the User.
    2. Data storage period: the registration and related processing are considered valid until the user unsubscribes or after 24 months since the registration.

  11. Booking on-line

    Processing of data sent by Booking on-line
    For any requests sent by filling in the form of Booking on-line, the user has to give express consent and the collected data will be processed in the manner described in the Privacy Policy provided from the platform BOOKING EXPERT.
    Link at the foot of the data collection form.
    Newsletter
    To register with the newsletter in the form of Booking on-line, which is voluntary and subject to the user’s express consent, the collected data will be processed in the manner described in the Privacy Policy provided from the platform BOOKING EXPERT.
    Link at the foot of the data collection form.

  12. Extended information on the use of cookies

    View the Cookie Policy

  13. Links to other websites

    Our site includes deep links to other websites that may or may not have any relationship with us. Data Controller has no control or monitoring of such websites or their content. Data Controller cannot be held responsible for the content of these sites and for the rules they apply, including as regards your privacy and the processing of your personal data while browsing their pages. We therefore invite you to be careful when accessing one of these sites via links on our site and to read their privacy policy and terms of use carefully. Our Privacy Policy does not apply to the websites of other companies. Our site provides links to these sites exclusively to facilitate our users in their research and surfing and to facilitate hyperlinks to other sites on the internet. These links do not represent any kind of recommendation, approval or promotion of access by browsing the site, and no guarantee is given of the content, services and products that they can offer or sell to internet users.

  14. Interaction with social networks

    These services allow you to interact with social networks directly in the pages of our site. It is assumed that every user of social networks has already given their authorization for their personal data when they registered with the network. Every operation carried out through the social networks is therefore subject to the user's privacy settings relating to each social network.

  15. Users’ rights

    The users (subjects to whom personal data refer) may at any time exercise the rights envisaged by the Regulations using the contacts listed in section 1 "Data Controller” of this disclaimer.
    In particular, subjects can legitimately ask for the rights envisaged from art. 15 to art. 23, and specifically:

    1. The cancellation of all data.
    2. The correction/modification.
    3. The limitation.
    4. Portability.
    5. The right to oppose the automated decision-making process (profiling).

    If necessary, you can also file a complaint with the local Privacy Guarantor. Here you will find the contact details of the Privacy Guarantors operating in the EEA area.
Call A.I. CHAT Book now &
Get a quote