Information regarding the processing of personal data

This information is provided for the website “https://www.lezitelle.it” (thereafter “Site”) owned by “Le Zitelle” Soc. Agr. S.S. with its company seat in Piazza Mons. Alvise Dal Zotto 2 Valdobbiadene TV 31049 IT, and registered in the Chamber of Commerce with VAT no. 04213980263 (thereafter “Holder”).
Le Zitelle, as the Data Holder, informs you, pursuant to art. 13 of (EU) Regulation 2016/679 of the European Parliament and Council dated 27 April 27th 2016 (thereafter “GDPR”) that your data will be processed in the following manner and for the following purposes.

1) OBJECT OF THE DATA PROCESSING

The data Holder processes personal and identifying information (such as name, surname, full name, telephone, e-mail), hereinafter referred to as “data“, communicated by users.

2) LEGAL BASIS AND PURPOSE OF DATA PROCESSING

The processing of the provided personal data is intended with the aim of fulfilling a specific request received through the compilation of the relative booking form. Providing data for this scope is necessary in order to proceed with the request as it will not be possible to supply the requested service without it.

3) TREATMENT MODALITY AND FILING PERIOD

The processing of your personal data is carried out through the operations indicated in art. 4 no 2) of the GDPR, namely the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, use, limitation, communication, cancellation and destruction of said data. Your personal data is processed both on paper and using electronic/digital devices.
The Holder will treat your personal information as long as necessary to fulfil the purposes referred to in paragraph 2) except in cases when the Holder needs to file such data for longer periods, connected with the need to establish, exercise or defend a legal claim or in case when the courts exercise their functions.

4) CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA.

Within the limits and for the purposes referred to in previous paragraphs, your personal data may be communicated to people (internal employees and contractors duly instructed) acting under the authority of the Holder and/or any Sub-processors where appointed as well as to organizations and public Institutions to which the data communication must be made in fulfilment of the obligation imposed by a law, by regulations or by Community legislation or in order to comply with a court order, and to any other third parties, in cases expressly provided for by law, or in cases where communication will be necessary for the protection of the holder in court.
In any case, users may request to be informed about data relating to processors or sub-processors where appointed, by forwarding a written request to the contacts provided in section 6.

5) DATA REGARDING DEBIT CARDS AND PAYPAL

On the site it is possible to book and pay for a room using the PayPal payment tool. In this case, you will be directed to a page external to the Site, where you must indicate the personal data requested by PayPal which will act as an independent data controller - to complete the purchase process. Personal data will not pass through the website’s server which, therefore, will not process such data in any way. The processing of your personal data is necessary to allow the conclusion of the online purchase contract with the data Holder. Failure to provide this data, therefore, will not allow you to complete the online purchase process.

6) USER RIGHTS

As a user, you have the rights acknowledged by art. 15, 16, 17, 18, 20 and 21 of the GDPR and precisely the rights to:

1. Access: the interested party has the right to obtain from the holder the confirmation whether or not an ongoing processing of personal data relating to him/her and, if so, obtain access to personal data, to information relating to the processing goals, the categories of processed personal data, the recipients or categories of recipients, the filing period (if possible), the right of rectification, of cancellation, limitation, opposition, claim to authority;
2. Correction: the interested party has the right to obtain from the holder of the treatment amendment of inaccurate personal data concerning him/her without undue delay;
3. Cancellation (“right to be forgotten“): the interested party has the right to obtain from the Holder of the treatment the deletion of data concerning him/her without undue delay in cases provided for in article 17 of the GDPR;
4. Limitation of treatment: the interested party has the right to obtain from the holder of the treatment the restriction of the processing of personal data where the hypothesis of art. 18 of the GDPR;
5. Data portability: the interested party has the right to receive in a structured format, commonly used and readable by an automated device, personal data provided to a Holder and has the right to transmit such information to a different treatment Holder without being prevented by the Holder who provided them in accordance to what is disciplined by art. 20 of the GDPR;
6. Opposition: the interested party has the right to object at any time to the processing of personal data concerning him/her in the cases contemplated in article 21 of the GDPR;
7. Revocation: the interested party has the right to withdraw the authorization issued to the holder at any time without affecting the lawfulness of the processing based on consent given prior to the revocation;
8. Put forward a claim to the controlling authority (Italian Privacy Supervisor).

7) HOW TO EXERCISE YOUR RIGHTS

Users have the right to exercise their rights at any time either by sending an e-mail to the address: info@lezitelle.it or by writing to Le Zitelle Soc. Agr. S.S. piazza Mons. Alvise Dal Zotto 2 – 31049 Valdobbiadene TV