PRIVACY POLICY

Disclaimer as per art. 13 GDPR 679/2016

  1. Data controller.

    CIEFFE SRL (henceforth referred to simply as Data Controller), with head office in in via di Rocchette Snc - 58043 Castiglione Della Pescaia (GR), tel +390564941092 is the processing controller for all personal data that is collected through the website. Data Controller autonomously defines the processing purposes and methods.

    e-mail address:info@baiaazzurra.it

  2. Data processing location

    The main data processing for the web services related to this website is done in ITALY.

  3. Data processing security and methods

    As required by art. 32 GDPR, personal data are processed using computerised tools that are appropriate to guarantee an adequate security level against risks. Communications to and from the web server are by means of secure communications protocols with encryption algorithms TLS/SSL.

    The Data Controller takes all appropriate security measures to prevent any unauthorised access, disclosure, change or destruction of the personal data. Processing is by means of automated computer and/or telematic tools, with organisational methods and logics strictly correlated to the indicated purposes. Furthermore, in certain cases other parties involved in the organisation of the website could also have access to the data (admin, commercial, marketing, legal staff, system administrators) or external parties (e.g. technical service providers, postal couriers, hosting providers, IT companies, communications agencies) who are appointed when necessary as Processing Managers by the Data Controller. The up to date list of processing managers can be requested at any time from the Data Controller.

  4. Why do we collect your data?

    We use your data to provide our services, for example sending your requests for information/quotations/ bookings at the holiday structures you select, to propose holiday packages and/or holiday structures, to keep you up to date about the best offers and news in open-air holidays. Data is collected if one of the following circumstances is applicable:

    • The user has consented for one or more of the specified purposes.
    • Processing is necessary in order to enforce a contract with the user and/or the preliminary contract measures.
    • Processing is necessary to satisfy a legal obligation applicable to the Data Controller.
    • Processing is necessary to pursue the user’s legitimate interests.
    • The data are necessary for the technical functions of the website and/or for anonymous statistics.


    Information may be requested from the Data Controller to explain the legal basis for each type of processing and, in particular, to specify whether processing is based on a law, a contract or necessary to conclude a contract.

  5. Types of processed data

    Surfing data
    Among the data collected by this Website, independently or through third parties, there are Cookies and usage data. This information is not collected to be associated with identified users but could, through processing and association with data held by third parties, allow users to be identified. These data are collected to obtain anonymous statistical data on the use of the site, to check its correct functioning and in some cases for legal obligations. This category of data includes the IP addresses, the browser identifier (user agent), the addresses in the Uniform Resource Identifier (URI) of the requested resources, the time of the request, the method used in submitting the request to the server, the numeric code indicating the status of the response given by the server (e.g. successful, error) and other parameters related to the operating system and the user's computer environment. Please refer to the specific section in this document for details on the use and collection of cookies and usage data.

    Data given voluntarily by the user
    To provide some services through the website, it may be necessary to enter some identifying data such as name, surname, telephone number, e-mail and various other types of data. The mandatory or optional nature of the provision of data is specified from time to time - with reference to the requested data - in the data collection forms and the mandatory information is marked with an asterisk (*). If you refuse to communicate the data marked as mandatory, it will be impossible to achieve the main purpose of collecting specific data. Such refusal could, for example, make it impossible to complete a request, a purchase or execute the contract of sale of the chosen product or provide other services available on the site (such as assistance, contacts with Customer Service, sending e-mails, use of specific site functions). Full details on each type of collected data are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data are collected. In cases where this website indicates some data as optional, users are free to refrain from communicating such data without this having any consequence on the availability of the service or its operation. Users who have doubts about which data are mandatory should contact the Data Controller.

    Optional data provision
    Apart from what has been specified for surfing data, the user is free to provide the requested personal data or otherwise to use the services provided through the site. Failure to provide data relating to the fields marked with an asterisk (mandatory) will make it impossible to use the service offered. The user is responsible for the personal data of third parties that are obtained, published or shared via this website and guarantees to have the right to communicate or disseminate them, releasing the Data Controller from any liability to third parties.

  6. Data storage period

    The data are processed and stored for the time required for the purposes for which they were collected and then for a further period of 24 months. If the requested data is subject to economic and fiscal reporting purposes (e.g. online transaction) they are stored for 10 years. These indications are generally valid for all data processed by the site, except for processing subject to explicit consent by the user when a different storage period is indicated. With regards the technical data managed by the site, such as cookies, the storage period is defined by the technical characteristics of the cookies themselves and indicated in the specific section.

  7. Which of your data we collect online

    Communicating your personal data to the Data Controller, in the various ways in which they are collected on our site, could be essential to achieve the desired result. The mandatory or optional nature of the provision of data is specified from time to time - with reference to the required data - in the data collection forms and the mandatory information is marked with an asterisk (*).

    If you refuse to communicate the data marked as mandatory, it will be impossible to achieve the main purpose of collecting specific data. Such refusal could, for example, make it impossible to complete a request, purchase or execute the contract of sale of the chosen product or provide other services available on the site (such as assistance, contacts with Customer Service, sending emails, use of specific site functions).

    Communicating additional data, other than those marked as mandatory, is optional and a denial of such data will not have any consequence for the main purpose of the collection (on the use of the website and its services, for example).

    You have the right to ask Data Controller for all the details about your personal data held by us.

  8. How we use your data

    The personal data is mainly processed by means of computer systems and electronic devices by Data Controller and third parties, who are carefully selected for their reliability and competence, and for carrying out essential operations to achieve the purposes strictly connected to the use of the website, its services and online sales of products through the website.

    In general, the data are processed for the purposes indicated below:

    1. The request for information and/or reservations
    2. The subscription to specific services, such as, for example, the newsletter
    3. Sending informative and promotional communications, also of a commercial nature, advertising material and/or offers of goods and services
    4. Market research, economic analysis and statistics.

    The activities referred to in points b), c) and d) are subject to explicit consent by you and may be carried out by any means including, but not limited to, mail, internet, telephone, email, MMS , SMS, from Italy or from abroad (also from countries not belonging to the European Community), by Data Controller, its parent companies, subsidiaries and/or affiliates, as well as by third parties with whom Data Controller has contractual relationships connected to the performance of the aforesaid activity.

  9. Processing data sent by filling in the form in the website

    The user must give express consent for the use of data given by filling in the forms and said data are processed as follows:
    1. Personal Data collected: surname, email address, first name, telephone number and various types of data necessary for the provision of the requested service.
    2. The collection methods are those indicated in section 7 of this disclaimer.
    3. The data are used for purposes strictly connected to the management of the service. These data will not be disclosed to third parties in any way.

    "According to article 13 of GDPR 679/2016, the communicated data can be used for the sole purpose of providing the requested service. It is expressly forbidden to use the data for different purposes and/or share or communicate them to third parties, either in the EU or outside the EU. In relation to the processing, the Customer may exercise the rights provided by articles 15 to 22 of GDPR 679/2016 on each communication".


  10. Newsletter and direct marketing

    To subscribe to the newsletter, the information collected will be processed as follows:

    1. Registration is voluntary and subject to explicit consent by the User.
    2. Data storage period: the registration and related processing are considered valid until the user unsubscribes or after 24 months since the registration.

  11. Booking on-line

    Processing of data sent by Booking on-line
    For any requests sent by filling in the form of Booking on-line, the user has to give express consent and the collected data will be processed in the manner described in the Privacy Policy provided from the platform BOOKING EXPERT.
    Link at the foot of the data collection form.
    Newsletter
    To register with the newsletter in the form of Booking on-line, which is voluntary and subject to the user’s express consent, the collected data will be processed in the manner described in the Privacy Policy provided from the platform BOOKING EXPERT.
    Link at the foot of the data collection form.

  12. Extended information on the use of cookies

    Extended information on the use of cookies pursuant to the provision of the Privacy Authority n. 229/2014.

    In order to make our services as efficient and user friendly as possible, this site uses cookies. Therefore, when visiting the site, a minimum amount of data is entered into the user's device, such as small text files called "cookies", which are saved in the user's web browser directory. There are different types of cookies, but basically the main purpose of a cookie is to make the site work more effectively and to enable certain features. Cookies are used to improve the user's global surfing experience.

    If you wish, cookies can be deleted from your hard drive. Most browsers are automatically set to accept the use of cookies, but you can also change the settings to prevent them from being used.

    If you do not wish to receive a cookie from the site, you must set up your browser in order to activate the notification when you receive a cookie, so that you can decide whether to accept it or not. In any case, please consider that if you disable cookies in your browser, you will not be able to take full advantage of all the features of the site such as automatic links and other custom features

    Types of cookies

    According to the features and use, cookies are divided in different categories:

    • Technical cookies: Cookies of this type are necessary for the proper functioning of some areas of the site. Cookies in this category include both persistent cookies and session cookies. In the absence of these cookies, the site or some parts of it may not work properly. Therefore, they are always used regardless of user preferences. Cookies in this category are always sent from our domain.
    • Performance Cookies: Cookies of this type are used to collect information on the use of the site. The Data Controller uses this information for statistical analysis, to improve the site and simplify its use, as well as to monitor its correct functioning. This type of cookie collects anonymous information on the activity of users on the site and the way in which they arrived at the site and the pages they visited. Cookies in this category are sent from the site itself or from third-party domains.
    • Third-party tracking cookies: Cookies of this type are used to collect information on the use of the website by visitors, the keywords used to reach the site, the websites visited and the origins of the traffic from which visitors come for marketing campaigns. The Data Controller may use this information to compile reports and improve the site. Cookies collect information in an anonymous form. Cookies of this type are sent from the site itself or from third-party domains.
    • Cookies for the integration of third-party functions: Cookies of this type are used to integrate third-party functions on the site (for example, comment forms or icons of social networks that allow visitors to share the site contents). Cookies in this category can be sent from the domains of the partner sites or in any case offer the function present on the site. The Data Controller is not required to request the user's consent for technical cookies, as these are strictly necessary for the provision of the service. For other types of cookies, consent may be expressed by the user in accordance with current legislation through specific browser configurations and computer programs or devices that are easy and user friendly. The Data Controller reminds the user that cookie preferences can be changed at any time. Cookies can also be disabled from the browser at any time, but this operation may prevent the user from using certain parts of the Website.
      Based on the provisions of art. 122 of the Privacy Code, in cases where the use of cookies is strictly necessary in order to use the requested service, we will use this technology necessarily for the provision of the service. In other cases, if your browser is configured to accept cookies, we will have the right to use this technology with you.

      Certain particular cases

    • Google Analytics:The site may include components transmitted by Google Analytics, a web traffic analysis service provided by Google Inc. ("Google"). These are third-party cookies used to collect and analyse anonymous information on the behaviour of site use by visitors. These cookies are used to store non-personal information. Google Analytics protects the privacy of your data. For more information, please refer to the link below: https://support.google.com/analytics/answer/6004245. The user can selectively disable the action of Google Analytics by installing on their browser the opt-out component provided by Google: https://tools.google.com/dlpage/gaoptout.
    • Heat mapping and session recording:The heat mapping services are used to identify which areas of a page are the object of the cursor or click of the mouse in order to detect which of them attract the most interest. These services allow monitoring and analysing traffic data and are used to keep track of user behaviour. Some of these services may record sessions and make them available for later viewing.
    • Hotjar Heat Maps & Recordings (Hotjar Ltd.) Hotjar is a heat mapping and session recording service provided by Hotjar Ltd.
      Hotjar respects the generic "Do Not Track" headers. This means that the browser can tell the script not to collect any data from the user. This is a setting that is available in all major browsers. Further information on the opt-out from Hotjar can be found here.
      Personal Data collected: Cookies, usage data and various types of data as specified in the privacy policy of the service. Processing location: Malta – Privacy Policy – Opt Out.

      How to disable cookies through the browser

      Most internet browsers are initially set up to accept cookies automatically. The user can change these settings to block cookies or to warn them when cookies are sent to their device. Each browser has different procedures for managing the settings. Click on one of the links below to get specific instructions: Microsoft Windows Explorer - Google Chrome - Mozilla Firefox - Apple Safari. If you do not use any of the browsers listed above, you can refer to the instruction manual or the help screen of your browser to find out how to adjust or change settings. In the case of different devices (for example, computers, smartphones, tablets, etc.), the user must ensure that each browser on each device is adjusted to reflect their preferences regarding cookies.

      Activating and deactivating cookies

      In addition to being able to use the tools provided by the browser to activate or deactivate individual cookies, we inform you that the website www.youronlinechoices.com lists the main providers who work with the website operators to collect and use information useful for behavioural advertising. You can deactivate or activate all the companies or alternatively adjust your preferences individually for each company. To do this you can use the tool in the page www.youronlinechoices.com/it/le-tue-scelte. Further useful information on cookies is available at these addresses: www.allaboutcookies.org

  13. Links to other websites

    Our site includes deep links to other websites that may or may not have any relationship with us. Data Controller has no control or monitoring of such websites or their content. Data Controller cannot be held responsible for the content of these sites and for the rules they apply, including as regards your privacy and the processing of your personal data while browsing their pages. We therefore invite you to be careful when accessing one of these sites via links on our site and to read their privacy policy and terms of use carefully. Our Privacy Policy does not apply to the websites of other companies. Our site provides links to these sites exclusively to facilitate our users in their research and surfing and to facilitate hyperlinks to other sites on the internet. These links do not represent any kind of recommendation, approval or promotion of access by browsing the site, and no guarantee is given of the content, services and products that they can offer or sell to internet users.

  14. Interaction with social networks

    These services allow you to interact with social networks directly in the pages of our site. It is assumed that every user of social networks has already given their authorization for their personal data when they registered with the network. Every operation carried out through the social networks is therefore subject to the user's privacy settings relating to each social network.

  15. Users’ rights

    The users (subjects to whom personal data refer) may at any time exercise the rights envisaged by the Regulations using the contacts listed in section 1 "Data Controller” of this disclaimer.
    In particular, subjects can legitimately ask for the rights envisaged from art. 15 to art. 23, and specifically:

    1. The cancellation of all data.
    2. The correction/modification.
    3. The limitation.
    4. Portability.
    5. The right to oppose the automated decision-making process (profiling).

    If necessary, you can also file a complaint with the local Privacy Guarantor. Here you will find the contact details of the Privacy Guarantors operating in the EEA area.

developed by Genial srl