INFORMATION NOTE ON THE PROCESSING OF PERSONAL DATA

Pursuant to Articles 13 and 14 of European Regulation No. 679/2016 and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018

The European Regulation No. 679/2016 GDPR and the harmonisation laws of the Member States recognize to each subject the protection of his personal data, which are subject to be processed by third parties, as an expression of respect for human dignity and for the fundamental rights and freedom of people.

In conformity with the provisions of the European and internal rules currently in force, the processing of the subject’s data will be carried out in full compliance with the principles of lawfulness, correctness, relevance, proportionality and transparency and protection of confidentiality, in accordance with legal requirements.

Data controller

Mrs Maria Fausta Marino Vat no 13944141004

1.Type of data processed through the Site

The visit and consultation of the Site does not generally involve the collection and processing of the user’s personal data except for browsing data and cookies as specified below. In addition to the so-called “browsing data” (see below), personal data voluntarily provided by the user may be treated when he interacts with the features of the Site or asks to use the services offered on the Site.

2. Purposes and methods of data processing

Mrs. Maria Fausta Marino may process your common personal data for the following purposes:

1.Browsing the site, including the compilation of the forms present therein, at the address www.ripagrandeatrastevere.com;

2. For the execution of a contract of which the User is a party or for the execution of pre-contractual measures taken at the request of the same. The data provided by the User will be processed, without the prior consent of the User, pursuant to art. 6lett.b) GDPR;

3. For the User’s use of services and features on the Site:

4. To allow the holder to exercise his rights in court and to repress illegal conduct;

5. For the elaboration of statistics, anonymously to improve the quality and structure of the Site, as well as to create new services, features and/or characteristics of the same;

6. To process a possible contact request submitted by the User by filling in the appropriate contact form or by e-mail;

7. To comply with legal or regulatory obligations;

8. For the communication of future commercial initiatives and/or provision of new services by Mrs. Maria Fausta Marino (Ripagrande a Trastevere) through registration to the newsletter;

All personal data are processed in electronic form in full compliance with the EU Reg 2016/679, including security and confidentiality profiles, and is inspired by the principles of correctness and lawfulness of processing.

3.Cookies and browsing data

– The Site uses “cookies”. By using the Site, you consent to the use of cookies in accordance with this Privacy Policy. Cookies are small files stored on the hard disk of the User’s computer. There are two macro-categories of cookies: technical cookies and profiling cookies.

– Technical cookies are necessary for the proper functioning of a website and to allow the User to navigate; without them the User may not be able to view the pages correctly or use some services.

– Profiling cookies have the task of creating user profiles in order to send advertising messages in line with the preferences expressed by the same while browsing.

– “Third-party” cookies, generated and managed by subjects other than the operator of the website on which the User is browsing.

4.Cookies used on the site

The Site uses the following types of cookies. At the first access, the User has the possibility to give selective consent to the installation or not of the cookies available on the basis of a Cookie Policy, containing all the relevant information to make a conscious decision:

Own session and persistent cookies, necessary to allow navigation on the Site, for internal security and system administration purposes;
Third-party session and persistent cookies, necessary to allow the User to use multimedia elements present on the Site, such as images and videos;
Third-party, persistent cookies, used by the Site to send statistical information to the Google Analytics system, through which to carry out statistical analysis of accesses / visits to the Site. The cookies used only pursue statistical purposes and collect information in aggregate form. Through a pair of cookies, one of which is persistent and the other session (expiring at the end of the browser), Google Analytics also saves a register with the start times of the visit to the Site and the exit from the same. Google can prevent data collection via cookies and subsequent data processing by downloading and installing the browser plug-in from the following address: http://tools.google.com/dlpage/gaoptout?hl=it;
Persistent third-party cookies used by the Site to include the buttons of some social networks (Facebook, Twitter and Google+) on its pages. By selecting one of these buttons, the user can publish on his personal page of the related social-network the contents of the website of the Site he is visiting;
Security cookies to authenticate Users and prevent fraudulent use of login credentials as well as to block, for example, attempts to steal the contents of forms filled out on web pages.

The Site may contain links to other sites (so-called third-party sites). ripagrandeatrastevere.com does not make any access or control over cookies, web beacons and other use-tracking technologies that could be used by third-party sites that the User can access from the Site; ripagrandeatrastevere.com does not carry out any checks on contents and materials published by or obtained through third-party sites, nor on the relative methods of processing your personal data, and expressly disclaims all related responsibility for such eventualities. The User is required to verify the privacy policy of the third-party sites accessed through the Site and to inquire about the conditions applicable to the processing of their personal data. This Privacy Policy applies only to the Site as defined above.

5. Storage, protection, security and quality of personal data

Ripagrande a Trastevere, in the person of Mrs. Maria Fausta Marino, is committed to guaranteeing and protecting the security of the User’s personal data and respects the security provisions provided for by the applicable legislation in order to avoid data loss, unlawful or illegal use of data and unauthorized access to them.

The server operating system, where the website and database are allocated, is installed on a cloud computing-based hardware infrastructure provided by Aruba Business s.r.l. – P.IVA 01497070381 that can guarantee high levels of integrity, availability and confidentiality of information.
The data held by the owner of the site (e-mails and names of any contacts) are stored inside computers and are accessible only to the owner and protected by login passwords and external antivirus and anti-intrusion systems. Any other external iCloud systems will further ensure data retention according to applicable regulations.

The User can help Ripagrande a Trastevere to update and keep correct their personal data by communicating any changes related to their address, contact information, etc.

6. Duration of treatment

In accordance with EU Reg 2016/679, the data are kept for as long as necessary to ensure the provision of the service and the fulfillment of the contract. Once the contractual purpose has been exhausted, the billing data are kept as long as necessary to comply with the tax, civil and litigation management regulations.

For the commercial purposes referred to in point 2.8) until the withdrawal of consent.

7. Nature of the contribution

The provision of data in points 2.2, 2.3, 2.4, 2.6, 2.7 is mandatory and the failure due to the inaccurate, even partially, provision of data by the data subject, entails the impossibility for Ripagrande a Trastevere to provide and, for the data subject to use, the service or contract.

The provision of navigation data in 2.1) is implicit in the use of the internet communication protocols.

8. Access to data

The data provided by the User may be accessed for the above purposes:

employees and/or collaborators of the Data Controller, in their capacity as data controllers and/or internal data controllers and/or system administrators;

companies or third parties (for example, IT service providers, suppliers, credit institutions, professional firms, etc.) that carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data controllers.

9. Data communication
The data provided by the User may be communicated, even without your consent, for the above purposes to control bodies, law enforcement agencies or the judiciary that will process them, at their express request, as autonomous data controllers for institutional purposes and/or by law during investigations and controls. The data may also be communicated to third parties (for example, partners, freelancers, agents, etc.), as autonomous data controllers, for carrying out activities instrumental to the above purposes.

10. Data transfer
The personal data provided by the User can only be used to allow the sending of communications related to the requested service, by e-mail or telephone for initiatives and/or services proposed by the site and/or, in case of specific consent, newsletters containing insights with respect to the main themes related to the services offered.

Outside of this case, the management and storage of data will take place on servers located within the European Union or the U.S.A. and/or, in particular for the web servers where the website’s web space resides (Aruba Business, which provides for its privacy policy – https://business.aruba.it/informativa_arubabusiness.pdf). The data acquired with the User’s consent according to point 2 on the Purpose of the Processing, will not be transferred outside the European Union.

11. Rights of data subjects

At any time, pursuant to Art. 15 to 22 of the GDPR You have the right, also in relation to profiling activity, to:

Right of access: ask the data controller for access to your personal data and information relating to it; the rectification of inaccurate data or the integration of incomplete data;
Right of deletion and limitation: the deletion of personal data concerning you (at the occurrence of one of the conditions indicated in Article 17(1) of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article);
Limitation of processing of your personal data (to the use of one of the hypotheses indicated in Article 18(1) of the GDPR);
Portability right: request and obtain from the data controller – in cases where the legal basis of the processing is the contract or consent, and the same is carried out by automated means – your personal data in a structured format that can be read by automatic device, also in order to communicate such data to another data controller (so-called right to portability of personal data);
Right of objection: object at any time to the processing of your personal data to the use of special situations concerning you;
Withdrawal of consent: If the processing is based on consent, pursuant to art. 7 of EU Regulation 2016/679, the right to withdraw is granted, limited to those cases where the processing is based on your consent for one or more specific purposes and concerns common personal data (e.g. date and place of birth or place of residence), or particular categories of data (e.g. data revealing your racial origin, political opinions, religious beliefs, state of health or sexual life). The processing based on consent and carried out before the withdrawal of the same retains, however, its lawfulness;
Complain to a supervisory authority (Guarantor Authority for the Protection of Personal Data – garanteprivacy.it).

12. Right of revocation:
The data subject has the right to withdraw his consent at any time. The withdrawal of consent does not affect the lawfulness of the consent-based processing prior to revocation.

Procedures for exercising rights

The interested party can at any time ask Ripagrande a Trastevere in the person of Mrs. Maria Fausta Marino and obtain the exercise of his own rights by sending a request to the following e-mail box: [email protected]

The data subject has the right to lodge a complaint with the Guarantor Authority for the protection of personal data, www.garante.it