Privacy Policy of www.campingmolveno.it

Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR), this information concerns your personal data, i.e. the information relating to you, processed by Società Incremento Turistico Molveno S.P.A. (S.I.T.M.) as part of the website https://www.campingmolveno.it/it/.

1. Identity and contact details of the controller

1.1. The Data Controller is Società Incremento Turistico Molveno S.P.A. (S.I.T.M.), with registered office in Via Lungolago 27 - 38018 Molveno (TN), VAT 00180390221.

1.2. Contact information: a) telephone: 0461 586978; b) e-mail address: info@campingmolveno.it.

2. Purpose, legal basis of the processing, nature of the provision, personal data processed and storage period

2.1. In this paragraph, in relation to each purpose, the following will also be indicated: the personal data processed, the legal basis of the processing, the nature of the provision and the retention period.

• A. Website navigation. Personal data processed: personal data transmitted implicitly during the use of internet communication protocols (IP, domain names of the computers used to connect to the site, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response,  the numerical code indicating the status of the response to the server and other parameters relating to the operating system and the computer environment to the user). Purpose: to allow navigation and consultation of the website. Legal basis: art. 6.1 lett. f) GDPR as the processing is necessary for the pursuit of the legitimate interest of the data controller. Nature of the provision: necessary to be able to browse the website. Retention period: the entire duration of the browsing session in relation to the data collected during it and for a maximum period of seven (7) days, without prejudice to a further period if it is necessary to ascertain responsibility for any computer crimes.
• B. Request for information. Personal data processed: name, surname, e-mail address, telephone number, data relating to the overnight stay (date of arrival, date of departure, number of guests) and other information that the data subject voluntarily transmits. Purpose: to respond to requests for assistance or information. Legal basis: Art. 6.1 lit. b) GDPR as the processing is necessary for the performance of a contract to which the data subject is a party or for the execution of pre-contractual measures adopted at the request of the same. Nature of the provision: necessary to be able to make requests for assistance or information. Retention period: for as long as necessary to respond to your requests for assistance or information.
• C. Newsletter. Personal data processed: e-mail address. Purpose: to send via e-mail the newsletter containing news, promotions and events promoted by the data controller. Legal basis: consent pursuant to Art. 6.1 lit. a) GDPR. Consent can be revoked at any time by contacting the data controller at one of the points indicated in this policy or by following the appropriate cancellation procedure available from the communications transmitted. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Nature of the provision: optional. Retention period: until you revoke your consent and in any case no later than 24 months from the last contact.
• D. Fraud prevention. Personal data processed: behaviour on the website, including IP addresses. Purpose: security and prevention of fraudulent conduct, for which the data controller uses an automatic control system that involves the detection and analysis of user behavior on the site associated with the processing of personal data, including the IP address. Legal basis: art. 6.1 lett. f) GDPR as the processing is necessary for the pursuit of the legitimate interest of the data controller. Nature of the provision: necessary to be able to browse the website. Retention period: seven (7) days, unless an abnormality occurs. In this case, the data will be stored until the conduct is ascertained and, in the event of legal action, until the end of the same.

2.2. In relation to cookies, please read the cookie policy available on this website.

2.3. Your personal data may be processed, if necessary and after it has been provided for the purposes set out above, to ascertain, exercise or defend a right in court, on the basis of the legitimate interest of the data controller (Article 6.1 letter f) GDPR).

3. Possible recipients of the data

3.1. In order to provide the services requested, the data controller may entrust your personal data to various service providers, with whom it has drawn up a specific contract aimed at protecting your personal data and complying with the legislation on the protection of personal data. These are subjects identified as data processors, who may process your personal data on the basis of a specific assignment pursuant to art. 28 GDPR, following the instructions and directives provided by the data controller.

The complete list of data processors is available by sending a request to the data controller at one of the contact points indicated in this policy.

3.2. The Data Controller may communicate his/her personal data to subjects, bodies or authorities to whom communication is mandatory by virtue of legal provisions or orders of the authorities. These subjects will operate as independent data controllers.

3.3. Your personal data may be processed by persons authorised by the data controller pursuant to Article 29 of the GDPR, who have committed themselves to confidentiality or have an appropriate legal obligation of confidentiality, such as the controller's employees.

4. Data transfer to non-EU countries and/or international organizations

4.1. The management and storage of personal data carried out by the Data Controller will take place on servers located within the EEA.

4.2. In relation to cookies, please read the cookie policy available on this website.

5. Rights of the data subject and complaint

5.1. With regard to the same data, the data subject, or a person delegated in writing, may exercise the following rights, also by writing to the contact points of the data controller indicated in this policy: a) the right of access pursuant to art. 15 GDPR; b) the right to rectification pursuant to art. 16 GDPR; c) the right to be forgotten pursuant to Article 17 GDPR; d) the right to restriction of processing when one of the hypotheses provided for by art. 18 GDPR; e) the right to receive certification that the transactions carried out pursuant to art. 16, 17 and 18 GDPR have been brought to the attention of those to whom the data have been disclosed, unless this proves impossible or involves a disproportionate effort (art. 19 GDPR); f) the right to data portability pursuant to art. 20 GDPR; f) the right to object to the processing of personal data pursuant to art. 21 GDPR; g) the right not to be subject to a decision based solely on automated processing pursuant to art. 22 GDPR; g) the right to withdraw consent at any time pursuant to art. 7 GDPR; h) the right to lodge a complaint with a supervisory authority pursuant to art. 77 GDPR.

5.2. Consent may be withdrawn at any time, in the manner described in this policy, but the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

6. Additional Information

6.1. The Data Controller remains available for any clarification and, should the processing be modified with respect to that described in this document, the Data Controller will provide a specific updated information.

6.2 The protection of your data and compliance with the principles provided for by the legislation, with particular reference to the principle of transparency, are values of primary importance to us, we would be grateful if you would help us by pointing out any misunderstandings of this document or suggesting improvements at the data controller's references as indicated above.

7. Data Protection Officer

7.1. The Data Protection Officer is Sicurdata S.r.l. in the person of Claudia Giugni and can be contacted for all matters relating to the processing of personal data and the exercise of rights deriving from the GDPR at the following addresses: a) cell: +39 3487035239; b) telephone: 055750808; c) e-mail: dpo.sicurdata@opendata.it.