*updated at Reg UE 2016/679 (GDPR)

This page describes the processing of personal data carried out through this website in reference to users who consult it and/ or interact with web services provided through the site itself.

1 – DATA CONTROLLER and DATA PROTECTION OFFICER (DPO/RPD)

The data controller of the processing carried out through the site is Antichi Sapori Estensi srl – Email ilcaffe@antichisaporiestensi.it- tel and fax +39 0532 350508 The Data Protection Officer (DPD/DPO) can be contacted at: ilcaffe@antichisaporiestensi.it

2 – TYPES OF DATA PROCESSED, PURPOSE AND LEGAL BASIS FOR PROCESSING

2.1 – Data voluntarily provided by the User for requested Services

If the user, to access the services/ information offered, voluntarily provides some of his personal data, collected through appropriate forms on the site, this action involves the acquisition of such data by the Data Controller in order to provide the requested services. In particular: Newsletter/ Marketing/ Commercial communications: with the consent of the User, personal data may be collected for the aforementioned purposes. Request for sending promotional material: the address is collected to provide free shipping of promotional material (brochures, maps, guides). Request at accommodation facilities or ancillary services: identification data such as name, surname, email address are collected, in addition to additional optional personal information about the User to allow the processing of the request for information. Booking at accommodation facilities or ancillary services: personal and contractual data are collected for the reservation, payment and provision of the requested services. Statistics: some data collected from users (such as nationality) are used, only and exclusively in aggregate form, for statistical analysis. Some of the data requested in the forms are necessary for the provision of the service and are indicated with an asterisk. Other data is merely optional and may be entered by the User to allow a more complete and personalized service or, subject to consent in the cases provided for by current legislation, to receive informative and commercial communications or to analyse personal interests and information or consumer habits or choices. The purposes of processing are therefore, depending on the services requested: – Performance of the service requested by the User through the compilation of the website formats; – Performance of contractual and legal, administrative and accounting obligations related to the booking, payment, provision of the requested services; – Communication with the customer regarding the requested service; – Marketing activities and sending related commercial communications upon consent of the data subject; – Prevention of fraud and abuse to the detriment of the site. The legal basis of the processing consists in the fulfilment of contractual obligations if and as requested by the User, as well as for optional services carried out with the consent of the data subject. Specific summary information and any requests for consent, if necessary, will be progressively reported or displayed on the pages of the site prepared for particular services on request.

2.2 – Navigation data

In addition to the following provisions regarding cookies, the computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implied by the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but that by its very nature could, through processing and associations with data held by third parties, allow users to identify. This category of data includes the IP addresses or domain names of computers used by users connecting to the site, the addresses in notation URI (Uniform Resource Identifier) of resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the reply given by the server (good end, error, etc.) and other parameters related to the User’s operating system and computer environment. This data is used to obtain anonymous statistical information about the use of the site and to check its proper functioning. The data could be used to identify liability in case of possible computer crimes against the site.

2.3 – Cookie and tracking

A cookie, and similar technologies, are small pieces of information used to store technical and/or personal details on the computer, identify Users of a service and enable certain functionalities. These cookies are used by the Data Controller and its partners for technical, statistical and/or profiling purposes. You can configure your browser so that the acceptance of cookies is, in principle, refused or you receive a notification before a cookie is stored. The legal basis for processing is therefore the legitimate interest of the controller in the case of technical cookies and the consent of the data subject for profiling cookies.

3 – DISCLOSURE OF DATA TO THIRD PARTIES

3.1 – Data voluntarily provided by the User

The personal data provided by the User are managed by internal subjects of the Data Controller companies (collaborators and employees). Some data may be communicated to: external subjects/ companies/ and to which the communication of personal data is necessary or otherwise functional for the execution of the service requested or management of the contractual relationship with the interested party (consulting, strategic, information technology companies, hosting companies or services that manage on behalf of the Owners, or sending documentation or material, insurance companies) in the ways and for the purposes described above.

3.2 – Dissemination of data

No data derived from web services is disseminated, by this term being meant to give knowledge in any way to a plurality of undetermined subjects.

4 – Transfer to third countries

The personal data provided by the User and other types of processed data and navigation data may be processed or transferred to countries outside the EU, for the purposes indicated above, in compliance with the current legislation on data transfer to third countries pursuant to art 44 and ss EU Reg 2016/670 (GDPR) and local legislation.

5 – Methods of processing

The personal data provided by the User and other types of processed data and navigation data may be processed or transferred to countries outside the EU, for the purposes indicated above, in compliance with the current legislation on data transfer to third countries pursuant to art 44 and ss EU Reg 2016/670 (GDPR) and local legislation.

6 – Data retention period

Data provided by the User: The personal data provided by the User are kept for the period necessary to perform the/ and purposes indicated and, if necessary, to fulfill contractual obligations, tax, legal for the period provided by local legislation in force.

7 – Automated processes

Automated decision-making processes (e.g. cookies) can be carried out for the site’s functionalities and/or automated processes aimed at analysing the User’s habits, choices, navigation modes, using cookies or third party services, with the consent of the data subject as specified below.

8 – PROVISION OF DATA AND CONSEQUENCES OF FAILURE TO PROVIDE

Except as specified for browsing data, the User is free to provide personal data in the request forms of the services of the site. The failure to provide data provided as mandatory, however, does not allow the performance of the service requested. Failure to provide the data indicated as optional instead could result in the provision of an incomplete service and the impossibility of carrying out further activities of the Controller.

9 – RIGHTS OF DATA SUBJECTS, RIGHT TO SUBMIT A COMPLAINT AND WITHDRAWAL OF CONSENT

The subjects for whom personal data has been collected, according to the procedures described in this Policy, have the right at any time to request, if there are legal requirements, access to their personal data, rectification, deletion, the limitation of the same, to oppose the processing and to exercise the right to data portability. The data subject has the right to revoke at any time the consent given to the processing of data, without prejudice to the lawfulness of the processing based on the consent given before the revocation. Please note that once your personal data is deleted, it can no longer be recovered and the stored content will also be permanently deleted. Your personal data will also be deleted when they are no longer necessary for the purposes for which they were originally collected. To exercise the rights provided for by current legislation on personal data protection and to know the complete list of external processors appointed for each area and activity or to have information regarding the transfer of data to Countries outside the EU and their guarantees can write to the caffe@antichisaporiestensi.it We will check your request as soon as possible, in any case, within a maximum of 30 days. The data subject also has the right to lodge a complaint with a data processing supervisory authority, in particular in the Member State where he or she is habitually resident or in the Member State where he or she works or where the alleged infringement took place.

10 – MINORS, VERACITY OF THE DATA ENTERED AND USER OBLIGATIONS

This site does not address its Services to children and minors, as intended by local law. By registering for one of the Services and accepting this Privacy Policy, you confirm that you are of age in your country to be able to sign a contract or request the services provided. Further, you confirm that you have previously obtained the parental/guardian consent required in the country where applicable. We reserve in any case to contact the User and verify that these requirements are met and, if they are not met, the right to interrupt or suspend the services provided.

11 – CHANGES TO THIS PRIVACY POLICY

This Privacy Policy will be updated periodically in case of changes to the processing or services provided or regulatory compliance. Please consult this page frequently, taking as a reference the last modification date given at the bottom.