PRIVACY POLICY – PERSONAL DATA PROCESSING (Art. 13 GDPR)

Website: www.affittacameregolfoecinqueterre.it

1. Data Controller

Affittacamere Golfo e Cinque Terre Piazza Saint Bon, 15 19121 La Spezia (SP) – Italy Tel. +39.333.2808002 Email: info.superior@affittacameregolfoecinqueterre.it VAT No. 01196340119

2. Types of Data Processed

Browsing data: The operation of the website involves the collection of certain personal data (e.g. IP addresses), the transmission of which is implicit in the use of Internet communication protocols. Such data is managed by the hosting company, acting as data processor, in order to ensure the security and proper functioning of the website. The Data Controller does not access or directly use such information, except in compliance with legal obligations or requests from the Authorities.

Data provided voluntarily: Name, surname, email address and other data submitted via the contact details or for newsletter subscription.

Cookies: For details, please refer to the Cookie Policy.

3. Purposes, Legal Basis and Retention Periods

Purpose Legal Basis Retention Period
Response to contact requests: Management of communications sent via email or telephone. Performance of pre-contractual or contractual measures (Art. 6.1.b GDPR). Time necessary to respond to the request plus 12 months for administrative purposes.
Bookings: Reservation management. Performance of pre-contractual or contractual measures (Art. 6.1.b GDPR). Tax data: retained for 10 years (Italian Civil Code Art. 2220 and tax regulations). Data communicated to Public Security (Alloggiati Web): retained for 5 years. Other booking data: retained for 10 years. In case of booking cancellation: data deleted within 3 months.
Newsletter subscription: Sending updates and informational/professional communications. Express consent of the data subject (Art. 6.1.a GDPR). Until consent is withdrawn (opt-out) by the user.
Security and Maintenance: Prevention of fraud, abuse or technical malfunctions. Legitimate interest of the Data Controller (Art. 6.1.f GDPR). Generally 30–60 days (system logs), unless required for criminal investigation purposes.

4. Nature of Data Provision

The provision of data for contact purposes is necessary in order to receive a response; the provision of data for bookings is necessary in order to process the request: failure to provide such data will make it impossible to fulfil your request. The provision of data for newsletter purposes is optional: refusal will not affect your ability to browse the website.

5. Processing Methods and Recipients

Data is processed using electronic and, to a limited extent, paper-based tools. Your data will be accessible only to individuals authorised and instructed by the Data Controller. Data may be shared with:

An updated list of Data Processors may be requested from the Data Controller. Data will not be disclosed to the public.

6. Data Transfers Outside the EU

The Data Controller does not transfer personal data to third countries outside the European Economic Area (EEA).

7. Rights of the Data Subject

In accordance with Articles 15–22 of the GDPR, you have the right to:

How to exercise your rights: By sending a registered letter with return receipt to the Data Controller’s address or an email to: info.superior@affittacameregolfoecinqueterre.it.