Information on privacy and cookies
WHY THIS NOTICE
This page describes how to manage the site with reference to the processing of personal data of users who consult it.
It is a disclosure that is drawn up on the basis of multiple legislative systems, including articles 13 and 14 of Regulation (EU) 2016/679 and available to those who interact with the web services of Mistral Srl for the protection of personal data, accessible electronically from the address: https://www.mistralresidence.it corresponding to the initial page of the site.
The information is provided only for the site https://www.mistralresidence.it and not for other websites that may be consulted by the user via links. The indications provided below are also inspired by the Recommendation n. 2/2001 of the Group of European Guarantors for the protection of personal data adopted on 17 May 2001 pursuant to art. 29 of directive no. 95/46/CE, concern in particular the collection of personal data on the Internet and aim to identify the minimum measures that must be implemented in relation to the persons concerned to guarantee the loyalty and lawfulness of such practices (in application of article 6 of the Regulation).
It is a disclosure that is drawn up on the basis of multiple legislative systems, including articles 13 and 14 of Regulation (EU) 2016/679 and available to those who interact with the web services of Mistral Srl for the protection of personal data, accessible electronically from the address: https://www.mistralresidence.it corresponding to the initial page of the site.
The information is provided only for the site https://www.mistralresidence.it and not for other websites that may be consulted by the user via links. The indications provided below are also inspired by the Recommendation n. 2/2001 of the Group of European Guarantors for the protection of personal data adopted on 17 May 2001 pursuant to art. 29 of directive no. 95/46/CE, concern in particular the collection of personal data on the Internet and aim to identify the minimum measures that must be implemented in relation to the persons concerned to guarantee the loyalty and lawfulness of such practices (in application of article 6 of the Regulation).
THE “OWNER” OF THE TREATMENT
Following consultation of this site, data relating to identified or identifiable persons may be processed. The "owner" of their treatment is www.mistralresidence.it in the person of Maria Paola Roncaglia Via Marina Garibaldi 23 - 98055 Canneto Lipari (Me) and can be contacted at the following email address liparimistralresidence@gmail.com. Mistral Srl has appointed a Data Protection Manager and her office is registered in Via Marina Garibaldi 23 – 98055 Canneto Lipari (Me) and can be contacted at the following email address liparimistralresidence@gmail.com.
PLACE OF DATA PROCESSING
The treatments connected to the web services of this site are carried out at the aforementioned headquarters and are only handled by technical personnel of the Office in charge of processing, or by persons in charge of occasional operations of maintenance. No data deriving from the web service is communicated or disseminated. The personal data provided by users who submit service requests are used for the sole purpose of performing the service or provision requested and are not communicated to third parties, unless the communication is imposed by legal obligations or is strictly necessary for the fulfillment of requests.
CONSERVATION PERIOD
Data are processed and stored for the time required by the purposes for which they were collected.
Therefore:
Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed. Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until such interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
Personal data collected for promotional marketing purposes will be kept in accordance with the guidelines on promotional activity and the fight against spam - 4 July 2013. The Data Controller may be obliged to keep the Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
TYPES OF DATA PROCESSED
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication.
This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are canceled immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
Data provided voluntarily by the user
Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Application.
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site, or by subscribing to our newsletters, involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.
Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.
COOKIES
No personal user data is acquired by the site for this purpose. Cookies are not used to transmit information of a personal nature, nor are persistent cookies of any kind, i.e. systems for tracking users, used.
The use of session cookies (which are not stored permanently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow the 'safe and efficient exploration of the site.
The session cookies used on this site avoid the use of other IT techniques that could potentially compromise the privacy of users' browsing and do not allow the acquisition of personal identification data of the user .
OPTIONAL PROVISION OF DATA
Apart from what is specified for navigation data, the user is free to provide the personal data contained in the request forms or in any case indicated in contacts with the Office to request the sending informative material or other communications.
The failure to provide them may make it impossible to obtain what has been requested.
For the sake of completeness, it should be remembered that in some cases (not subject to the ordinary management of this site) the Authority may request news and information pursuant to Article 32 of Regulation (EU) 2016/679, for the purpose of controlling the processing of personal data .
METHOD OF TREATMENT
Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
The Data Controller adopts the appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in the organization of this Application (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Managers can always be requested from the Data Controller.
Legal basis of the treatment
The Data Controller processes Personal Data relating to the User in the event that one of the following conditions exists:
•the User has given consent for one or more specific purposes; Note: in some jurisdictions, the Data Controller may be authorized to process Personal Data without the User's consent or another of the legal bases specified below, as long as the User does not object ("opt-out") to such treatment. However, this is not applicable if the processing of Personal Data is governed by European legislation on the protection of Personal Data;
•the processing is necessary for the execution of a contract with the User and/or for the execution of pre-contractual measures;
• the processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
• the treatment is necessary for the execution of a task of public interest or for the exercise of public powers vested in the Data Controller;
• the processing is necessary for the pursuit of the legitimate interest of the Data Controller or of third parties.
However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.
PURPOSE OF THE PROCESSING OF THE DATA RECEIVED
The User Data is collected to allow the Owner to provide its Services, as well as for the following purposes: Interaction with external social networks and platforms, Statistics, Contact the User, Commercial affiliation, Advertising, Remarketing and behavioral targeting, Displaying content from external platforms, Payment management, Content commenting, Social features, Access to accounts on third-party services, Address management and sending email messages, Interaction with third-party platforms live chat, Registration and authentication, Tag management and Content and functionality performance testing.
To obtain further detailed information on the purposes of the processing and on the Personal Data concretely relevant for each purpose, the User can refer to the relevant sections of this document.
Mailing Lists or Newsletters
By registering with the mailing list or newsletter, the User's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional nature, relating to this Application. The User's email address could also be added to this list as a result of registering with this Application or after making a reservation.
Contact form
By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other kind indicated by the header of the module.
Contact by phone
Users who have provided their telephone number may be contacted for commercial or promotional purposes related to this Application, as well as to satisfy support requests.
RIGHTS OF THE INTERESTED
Users can exercise certain rights with reference to the Data processed by the Owner.
In particular, the User has the right to:
• withdraw consent at any time. The User can revoke the previously expressed consent to the processing of his Personal Data.
• oppose the processing of their Data. The User can object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are set out in the section below.
• access their Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed.
• check and ask for rectification. The User can verify the correctness of his Data and request its updating or correction.
• obtain the limitation of the treatment. When certain conditions are met, the User can request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose than their conservation.
• obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Owner.
• receive their Data or have them transferred to another holder. The User has the right to receive their Data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain its transfer without obstacles to another holder. This provision is applicable when the Data are processed with automated tools and the processing is based on the User's consent, on a contract of which the User is a party or on contractual measures connected to it.
• propose a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority or take legal action. To do this you can use a model made available by the Privacy Guarantor: download the model. Pursuant to the same article, one has the right to request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing
Details on the Right to Object
When Personal Data is processed in the public interest, in the exercise of public powers vested in the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.
Users are reminded that, if their Data is processed for direct marketing purposes, they may object to the processing without giving any reasons. To find out if the Data Controller processes data for direct marketing purposes, Users can refer to the respective sections of this document.
HOW TO EXERCISE YOUR RIGHTS
To exercise the User's rights, Users can send a request to the contact details of the Owner indicated in this document. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within a month.
CHANGES TO THIS PRIVACY POLICY
The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, on this Application as well as, if technically and legally feasible, by sending a notification to Users via one of the contact details held by the Owner. Therefore, please consult this page regularly, referring to the date of the last modification indicated at the bottom.
Date of last modification: 07/03/2023