PRIVACY POLICY
Premise
Michele Costantini (or also Michele Costantini), as Data Controller (hereinafter: "Owner") pursuant to EU Regulation 679/2016 (hereinafter: "Regulation") - considers the privacy and the protection of personal data is one of the main objectives of its business. We therefore invite you, before communicating any personal data to the Data Controller, to read this Privacy Policy carefully because it contains important information on the protection of your personal data.
It describes the personal data processing activities carried out by the Hotel through the site www.contessa-venice.com (hereinafter: "Site"), the related commitments undertaken in this sense and constitutes an integrated part thereof in relation to the services offered. Michele Costantini may process the user's personal data when he visits the Site and uses the services and functions present on it. In the sections of the site where the user's personal data is collected, specific information is normally published pursuant to art. 13 of EU Reg. 2016/679.
Where required by EU Reg. 2016/679, the user's consent will be requested before proceeding with the processing of his personal data. If the user provides personal data of third parties, he must ensure that the communication of the data to Michele Costantini and the subsequent processing for the purposes specified in the applicable privacy information complies with EU Reg. 2016/679 and with the legislation to which it refers.
We also inform you that the processing of your personal data will be based on principles of correctness, lawfulness, transparency, limitation of purposes and conservation, minimization and accuracy, integrity and confidentiality, as well as the principle of accountability pursuant to art. 5 of the Regulation. Your personal data will therefore be processed in accordance with the legislative provisions of the Regulation and the confidentiality obligations set forth therein. By processing of personal data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, conservation , adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
We inform you that the personal data being processed may consist - also depending on your decisions on how to use the services - of textual information, photographic or video images and any other information suitable for making the interested party identified or identifiable, depending on the type of services requested.
INDEX
Below we include the index of this Privacy Policy so that you can easily find the information relating to the processing of personal data that interest you.
1. HOLDER OF THE TREATMENT
2.LAWS AND REGULATIONS
3. PERSONAL DATA SUBJECT TO PROCESSING
3.1.Navigation data
3.2. Data provided voluntarily by you
3.3. Third party data provided voluntarily by you
3.4.Personal Information We Receive from Other Sources
3.5.Data processed in the Interaction with social networks
3.6.Special categories of data
3.7.Cookies
4.PURPOSE OF THE TREATMENT
5. LEGAL BASES AND MANDATORY OR OPTIONAL NATURE OF THE PROVISION
6. RECIPIENTS OF PERSONAL DATA
7. TRANSFERS OF PERSONAL DATA
8. SECURITY AND QUALITY OF PERSONAL DATA
9. CONSERVATION OF PERSONAL DATA
10. PARTICULAR DATA SUBJECT TO SPECIAL PROCESSING
11.MINORS
12. RIGHTS OF THE INTERESTED PARTY
13. DATA PROCESSING METHODS
14.LINKS TO OTHER WEBSITES
15.CHANGES
16.CONTACTS
1. TITLE OF THE TREATMENT
The data controller is:
Michele Costantini Tax Code: CSTMHL75B17L736H, VAT number, with headquarters located in Castello 2077 30122 Venice
2. THE LAWS AND REGULATIONS
The regulatory sources to which we refer for the protection of personal data are:
"REGULATION (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and which repeals Directive 95/46 / EC (general regulation on data protection) ("GDPR");
National Code regarding the protection of personal data (Legislative Decree 30 June 2003 n. 196), as amended by Legislative Decree 101/2018;
National Supervisory Authority for the protection of personal data, through provisions and guidelines issued by the same on the subject.
3. PERSONAL DATA SUBJECT TO PROCESSING
Visiting and consulting the Site does not generally involve the collection and processing of the user's personal data except for navigation data and cookies as specified below. In addition to the so-called "navigation data", they may be subject to processing personal data voluntarily provided by the user when he interacts with the features of the Site or requests to use the services offered on the Site. Such data could consist of an identifier such as the name, his email, an online identifier or one or more elements characteristics suitable to make the interested party identified or identifiable, depending on the type of information that you yourself could report in the text of the message with which you decided to interact with us (hereinafter only "personal data").
The personal data processed through the Site are as follows:
3.1.Navigation data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site to check its correct functioning, to identify anomalies and/or abuses, and are canceled immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Site or third parties.
3.2. Data provided voluntarily by you
Except for reference to specific information, this Privacy Policy is also intended for the processing of data voluntarily provided by you through the Site to obtain information regarding the services provided by the Hotel, or when you decide to book a stay, in which case the Your name and e-mail address are required as basic data. We may also ask you for your home address, telephone number, nationality, payment details, the names of any other people traveling with you and any preferences for your stay. If you want to get in touch with us, or contact us through other means (for example on social media), we will also collect information through these channels. You may be interested in subscribing to our newsletter to receive information on advantageous promotions that we reserve for this channel. In this regard, we invite you not to enter, in the forms contained within the Site, information that may fall within the category of particular categories of personal data referred to in art. 9 of the Regulation (for example, data referring to your state of health or that of other subjects), unless you are expressly requested (see below, "particular categories of data").
3.3. Third party data provided voluntarily by you
It may be necessary to book a stay for other people traveling with you, or to make a reservation on behalf of another person. In these cases, during the booking process you will also have to provide data about them. In these cases, the information provided will only be used as described in the appropriate pages of the service, you can read all the details there. We want to specify that it is our responsibility to ensure that the people you have provided information about are aware of this, and that they have accepted the ways in which Michele Costantini uses their information (i.e. as described in this privacy statement). In this sense, we specify that if you provide or otherwise process personal data of third parties in the use of the Site, you guarantee from now on - assuming all connected responsibility - that this particular hypothesis of treatment is based on the prior acquisition - by you - of the consent of the third party to the processing of information concerning him.
3.4.Personal Information We Receive from Other Sources
In addition to the information you provide us directly, we may also receive information from various sources, for example business partners such as affiliates, independent third party sub-contractors, which may be combined with information received directly from you. For example, Michele Costantini's booking services are available not only on Michele Costantini, but are also integrated with affiliate partner services that he can find online.
When you use these services, you communicate your booking details to our business partners, who then send them to us. Furthermore, we rely on international external providers to manage payments between users and properties: these service providers share payment information, to help us manage them and take care of your reservation, so as to guarantee you the best experience possible. Partner properties can also share information about you with Michele Costantini, for example when you have questions about a reservation in progress, in case of disputes about a reservation or if there should be communications about your reservation through Michele Costantini.
3.5.Data processed in interaction with social networks
Some services allow you to interact with social networks, or with other external platforms. The interactions and information acquired are in any case subject to the User's privacy settings relating to each social network. If an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed. As an example:
Facebook and Instagram Like button and social widgetsThe Facebook "Like" button and social widgets are services allowing interaction with the social network Facebook and Instagram, provided by Facebook Ireland Ltd.Personal data collected: Cookies and navigation and usage data. Place of Processing: Ireland – Privacy Policy
Tripadvisor social widget button (Tripadvisor)The Tripadvisor social widgets are interaction services with the web review portal on hotels, B&Bs, restaurants, tourist attractions, controlled by Tripadvisor LLC through the representative appointed for the European Union. Personal data collected: Cookies and navigation and usage data. Place of Processing: USA – Privacy Policy
Linkedin social widget button The Facebook "Like" button and social widgets are services for interacting with the Facebook and Instagram social networks, provided by Likedin Corporation through the LinkedIn Ireland Unlimited Company Data Processor.
Personal data collected: Cookies and navigation and usage data. Place of Processing: USA – Privacy Policy
3.6.Special categories of data
When interacting with the Site, no information is requested that could lead to the processing of data that fall within the category of particular categories of personal data referred to in art. 9 of the Regulation.
3.7.Cookies
Information on the cookies served by the Site is available in the specific section of the site
4. PURPOSE OF THE TREATMENT
Your personal data will be processed, with your consent where necessary, for the following purposes:
4.1. allow navigation of the Site;
4.2. to find specific requests for information addressed to the Hotel and to contact you by e-mail, post, telephone or SMS, depending on the contact method you have chosen;
4.3. manage booking requests for stays, auxiliary transport services, etc. either through our online services or by means of direct contact with the structure or through external commercial partners, also through the use of the credit card of the interested party which can be used for purposes connected to guaranteeing the requested service for any debit as a penalty in the event of cancellation after the deadline agreed to exercise the right of withdrawal indicated in the booking confirmation, or in the event of no-show within the defined deadline;
4.4. fulfill any obligations established by applicable laws, regulations or community legislation, or satisfy requests from the authorities, such as, for example:
to fulfill the obligation set out in article 109 of the R.D. 18.6.1931 n. 773, which requires us to register and communicate to the Police Headquarters the personal details of the guests accommodated;
to fulfill the obligation to communicate to the Regional Tourism Observatory, in order to monitor the tourism sector through the acquisition, management and dissemination of information and statistical data relating to the flow between regional tourism supply and demand (L.R. n. 13/2007, articles 28 and 31, as amended by Regional Law no. 17/2011).
4.5. carry out direct marketing activities via e-mail for products and/or services similar to those previously purchased, unless you expressly refuse to receive such communications, which you can easily express during registration or on subsequent occasions, objecting to the processing;
4.6.with prior consent, carry out marketing activities such as:
send you informative and promotional material relating to the activities and services of Michele Costantini and its commercial partners;
send you personalized offers based on preferences, likings, customizations or other elements of the c.d. profiling ion;
send you surveys to improve the service (“customer satisfaction”);
newsletter and any other communications,
These communications may be made by e-mail or text message, by post and/or by using the telephone with operator and/or through the official Michele Costantini pages on social networks; it should be noted that the Data Controller collects differentiated consents for the marketing purposes described here and for sending newsletters, pursuant to the General Provision of the Guarantor for the Protection of Personal Data "Guidelines on promotional activities and the fight against spam" , of 4 July 2013; if, in any case, you wish to oppose the processing of your data for marketing purposes carried out with the means indicated here, you can do so at any time by contacting the Data Controller at the addresses indicated in the "Contact" section of this policy, without prejudice to the lawfulness of the treatment based on the consent given before the revocation.
4.7. for statistical purposes, without it being possible to trace your identity. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
5. LEGAL BASES AND MANDATORY OR OPTIONAL NATURE OF THE PROVISION
The legal basis concerning the processing of personal data for the purposes referred to in sections 4.1, 4.2 and 4.3 is art. 6(1)(b) of the Regulation ([…] the processing is necessary for the execution of a contract of which the interested party is a part or for the execution of pre-contractual measures adopted at the request of the same), as the processing is necessary to the provision of services. The provision of personal data for these purposes is optional, but failure to provide it would make it impossible to activate the requested services.
The purpose referred to in section 4.4 represents a legitimate processing of personal data pursuant to art. 6(1)(c) of the Regulation ([…] the processing is necessary to fulfill a legal obligation to which the data controller is subject). Indeed, once the personal data have been provided, the processing is indeed necessary to fulfill the legal obligations indicated in the purpose described above, to which Michele Costantini is subject.
The treatments carried out for the marketing and profiling purposes described in section 4.5 are based on the legitimate interest pursuant to art. 6(1)(f) of the Regulation ([…] the processing is necessary for the pursuit of the legitimate interest of the data controller or of third parties, provided that the interests or fundamental rights and freedoms of the data subject who require the protection of personal data, in particular if the interested party is a minor): for the treatments carried out for these purposes and with this legal basis, the interested party can exercise the right to object. For processing carried out for marketing purposes, the legitimate interest is applicable within the limits established by the Regulation and by art. 130c. 4 of the Code regarding the protection of personal data (Legislative Decree 196/2003), should the treatment be aimed at providing services similar to those already subscribed to or in which the interested party has expressed an interest, unless expressly refusing to receive such communications, which you can express by opposing both during registration and on subsequent occasions.
The treatments carried out for the marketing and profiling purposes described in section 4.6 are based on the release of your consent pursuant to art. 6(1)(a) ([...] the interested party has given his consent to the processing of his personal data for one or more specific purposes) and of the art. 22(2)(c) of the Regulation. The provision of your personal data for these purposes is therefore entirely optional and does not affect the use of additional services. If you wish to withdraw your consent to the processing of your data for marketing and profiling purposes, you can do so at any time by contacting the owner at the addresses indicated in the "Contact" section of this policy.
It should also be noted that the processing referred to in section 4.7 is not performed on personal data and therefore can be freely performed by Michele Costantini
6. RECIPIENTS OF PERSONAL DATA
For the purposes referred to in section 4 of this Privacy Policy, your personal data may be shared with third parties, both because you have consented to do so, and for legal reasons connected to them. These are personnel operating in the owner's organization authorized to process and/or our service providers and other third parties as detailed below:
6.1. Electronic Billing: If you receive a receipt or invoice by email, a summary of the goods and services provided to you during your stay will be sent to your payment card provider and, if you participate in a corporate billing program and use a a company payment card, the payment card provider may pass this summary on to your employer. Once we have transferred your information, the privacy policies of your employer, payment card provider and card issuer apply.
6.2. Group Events or Meetings: If you attend an event or meeting, information collected in planning that event or meeting may be shared with the organizers and, as appropriate, guests who organize or attend the event or meeting.
6.3. Business partners: We may work with other companies to provide you with products, services or offers based on your needs and experiences and share your information with our business partners accordingly. For example, we may receive assistance from our business partners for renting a car or other services and share your personal information with them to offer you the services you request.
6.4.Service Providers: We rely on third parties to provide services on our behalf and, if necessary, we may share your personal information with them. These are subjects who typically act as data controllers, i.e.:
companies that provide support in the management of booking reception services made through the Michele Costantini website;
companies that provide web mailing services for the automated sending of communications such as invitations, promotions, newsletters;
persons, companies or professional firms that provide assistance and consultancy to Michele Costantini in tax, accounting, administrative, legal, tax, financial, regulatory compliance matters;
subjects delegated to carry out technical maintenance of the IT infrastructures of the Hotel and of the website. In general, our service providers undertake by contract, through the signing of confidentiality agreements by their staff, to protect your personal information and will not be able to use or share them, unless required by law.
6.6.Other reasons: We may disclose your personal information to:
comply with applicable laws;
respond to government or public authority requests,
comply with valid legal procedure,
protect the rights, privacy, safety or property of Michele Costantini, site visitors, guests, employees or the public,
enable us to pursue available remedies or limit the damages we may sustain,
enforce terms and conditions of our websites,
deal with an emergency.
6.7.Aggregated or Anonymised Data with Personal Information Removed: We may, from time to time, provide third parties with data that has been aggregated or anonymised. This means that your personal information that could be used to identify you has been removed from the data. Data provided to third parties in this way is not personal data; however, you retain the right to object.
6.8. Credit institutes or insurance companies and brokers (only in the event of claims that may occur in the hotel).
6.9.Persons authorized by Michele Costantini to process personal data, necessary to carry out activities strictly related to the provision of services, who are committed to confidentiality or have an adequate legal obligation of confidentiality.
The complete list of data processors is available by sending a written request to the Data Controller at the addresses indicated in the "Contact" section of this policy.
7. TRANSFERS OF PERSONAL DATA
We mainly store and process your personal data in Italy/EU/European Economic Area ("EEA"). If we transfer your personal data outside the EEA, we assure you from now on that the transfer of extra-EEA data will take place in compliance with the applicable legal provisions, subject to verification of the certification of compliance with the principles and protocols adopted by the extra states -EU with the European Union
The data may be transferred outside the EEA area, if the level of data protection implemented by them has been deemed adequate by the European Commission pursuant to art. 45 of the GDPR, through a specific adequacy decision.
The owner also declares that, in the absence of an adequacy decision by the European Commission on the level of protection of data subjects guaranteed by the countries pursuant to art. 45 of the GDPR, the data transfer will take place, where possible, after signing the Standard Contractual Clauses (SCC) adopted by the European Commission pursuant to art. 46, 2, lett. c) and exceptionally, with the prior consent of the interested party.
8. SECURITY AND QUALITY OF PERSONAL DATA
Michele Costantini undertakes to protect the security of the user's personal data and complies with the security provisions established by the applicable legislation in order to avoid data loss, illegitimate or illegal use of the data and unauthorized access to the same. Furthermore, the information systems and computer programs used are configured in such a way as to minimize the use of personal and identification data; these data are processed only for the achievement of the specific purposes pursued from time to time. Michele Costantini uses multiple advanced security technologies and procedures designed to promote the protection of users' personal data; for example, personal data is stored on secure servers located in places with protected and controlled access. The user can help and contribute to updating and keeping his personal data correct by communicating any change relating to his address, his qualification, contact information, etc.
9. CONSERVATION OF PERSONAL DATA
The personal data processed for the purposes referred to in sections 4.1, 4.2 and 4.3 will be kept for the time strictly necessary to achieve those same purposes. In any case, since these are treatments carried out for the provision of services, Michele Costantini will keep personal data for the period of time foreseen and permitted by Italian legislation for the protection of one's interests (Article 2946 of the Italian Civil Code and subsequent amendments).
The personal data processed for the purposes referred to in section 4.4 will be kept up to the time required by the specific obligation or applicable law. For the purposes referred to in section 4.5, your personal data will be processed until you object to the treatment.
For the purposes referred to in sections 4.6 and 4.7, your personal data will instead be processed, as a general rule, until your consent is revoked. If you withdraw from the services provided by Michele Costantini without having revoked such consent, the data could also be processed after your withdrawal. It is envisaged that a periodic check is carried out on an annual basis on the data processed and on the possibility of being able to cancel them if they are no longer necessary for the intended purposes. With reference to the personal data subject to Processing for Marketing Purposes or Processing for profiling purposes, the same will be stored in compliance with the principle of proportionality and in any case until the purposes of the processing have been pursued or until the revocation of the specific consent by the interested party.
Specifically, the Data Controller will process the data for no more than 2 years from data collection for Marketing Purposes and one year for data collected for Profiling Purposes.
Further information regarding the data retention period and the criteria used to determine this period can be requested by sending a written request to the owner at the addresses indicated in the "Contact" section of this policy. In any case, without prejudice to the possibility for Michele Costantini to keep your personal data for the period of time foreseen and permitted by Italian law for the protection of one's interests (Article 2947(1)(3) of the Italian Civil Code).
10. PARTICULAR DATA SUBJECT TO SPECIAL PROCESSING
The term "confidential data subject to special treatment" means your information relating to racial or ethnic origin, political opinions, religion or other beliefs, trade union membership, health, sexual life or orientation, genetic information, criminal history and biometric data used to purposes of unique identification. We generally do not collect any particular data, unless voluntarily provided by the user. We may use the information you have provided about your health to better serve you and meet your particular needs (for example, by providing special access measures for people with disabilities). They are therefore data whose protection aims to guarantee freedom of thought and opinion, the dignity of the person and freedom from possible discrimination, for the treatment of which explicit consent is required, even if not necessarily written, because they concern aspects particularly private to the individual and can be used for discriminatory purposes.
11. MINORS
The new European Regulation (GDPR) has prescribed, in article 8, the obligation not to allow the direct offer of information society services (therefore registration to social networks and messaging services) to persons under the age of 16 , unless the consent of the parents is collected (it must be ascertained that the consent is given by the parental authority) or whoever takes their place.
Subscribing to an online service, therefore, is subject to the rules for the conclusion of contracts, for which the subject must be able to appreciate the nature and consequences of his consent.
In any case, parental consent does not it is always necessary. According to article 8 of the new European regulation, parental consent is required only if the processing of minors' data is legitimized on the basis of consent. If, on the other hand, the processing has another legal basis, such as compliance with a legal obligation, legitimate interests, etc., parental consent is not necessary. Furthermore, this limit can be further lowered by nation states (but the limit cannot go below 13 years). In this perspective, the Italian legislator has set the age limit to be applied in Italy at 14 years, with the decree adapting the Privacy Code.
Our website does not intend to solicit or knowingly collect personal data from persons under the age of 16. If we are notified or otherwise discover that personal information from a minor has been incorrectly collected, we will take all commercially reasonable steps to delete such information.
12. DATA PROCESSING METHODS
The processing of personal data is carried out by means of the operations indicated in art. 4 no. 2) of the EU Regulation and precisely: the collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of provision, comparison or interconnection, limitation, deletion or destruction, blocking. The processing of personal data takes place, by the persons in charge of the organization in charge of managing requests, using manual, IT and telematic tools with logic strictly related to the purposes themselves and in any case in such a way as to guarantee the security and confidentiality of the data in full compliance with the provisions of art. 32 of the EU Regulation. Filing can be done both electronically and on paper.
It should be noted that the processing methods implemented do not imply the need to subject the interested party to a decision, which may include a measure, which evaluates personal aspects concerning him, which is based solely on automated processing and which produces legal effects which concern or similarly significantly affect his person, without human intervention.
Both as regards the data present on its devices, and for any data present at the providers, the data controller has implemented adequate technical and organizational measures to guarantee an adequate level of security, in full compliance with the provisions of art. 32 of the EU Regulation.
More information is available by sending a written request to the owner at the addresses indicated in the "Contacts" section of this statement.
13. RIGHTS OF THE INTERESTED PARTY
At any time, the interested party may exercise his rights towards the Data Controller, pursuant to EU Regulation 679/2016 using the contact details indicated in the contact section of the policy:
To guarantee the correct exercise of the rights, the interested party must make himself identifiable in an unequivocal way.
Michele Costantini undertakes to provide feedback within 30 days and, in the event of impossibility to comply with these times, to justify any extension of the deadlines. The reply will take place free of charge except in cases of groundlessness (e.g. there are no data concerning the requesting interested party) or excessive requests (e.g. repetitive over time) for which an expense contribution may be charged not exceeding the costs actually incurred for the research carried out in the specific case. The rights referring to personal data concerning deceased persons can be exercised by those who have an interest of their own or act to protect the data subject or for family reasons worthy of protection. The interested party can also lodge a complaint with the supervisory authority.
In the event of a personal data breach suffered by Michele Costantini, the owner will proceed with notification of the breach to the competent supervisory authority within 72 hours of the occurrence and will also communicate the event to the interested party, except in cases of exclusion provided for by law .
Article 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679
The interested party has the right to obtain confirmation from the data controller as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and the following information:
the purposes of the processing;
the categories of personal data in question;
the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations;
the envisaged retention period of the personal data or, if this is not possible, the criteria used to determine this period;
the existence validity of the right of the interested party to ask the data controller to rectify or cancel personal data or limit the processing of personal data concerning him or to oppose their treatment;
the right to lodge a complaint with a supervisory authority;
the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.
Right pursuant to art. 17 of EU Reg. 2016/679 - right to cancellation ("right to be forgotten")
The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without unjustified delay and the data controller has the obligation to cancel personal data without unjustified delay, if one of the following reasons exists:
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
the data subject revokes the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing;
the interested party opposes the processing pursuant to article 21, paragraph 1, and there is no overriding legitimate reason to proceed with the processing, or he opposes the treatment pursuant to article 21, paragraph 2;
the personal data have been processed unlawfully;
the personal data must be erased to fulfill a legal obligation under Union or Member State law to which the data controller is subject;
the personal data have been collected in relation to the offer of information society services pursuant to article 8, paragraph 1 of EU Reg. 2016/679
Right pursuant to art. 18 Right to limitation of treatment
The interested party has the right to obtain from the data controller the limitation of the treatment when one of the following hypotheses occurs:
the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited;
although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
the interested party has opposed the processing pursuant to article 21, paragraph 1, EU Regulation 2016/679 pending the verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
Right pursuant to art. 20 Right to data portability
The interested party has the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller
Withdrawal of consent to treatment
The interested party has the right to withdraw consent to the processing of your personal data by sending a registered letter with return receipt to the address shown in the contact section, accompanied by a photocopy of his identity document, with the following text: "withdrawal of consent to the processing of all my personal data”. At the end of this operation, your personal data will be removed from the archives as soon as possible, together with the accompanying photocopy of the request.
In any case, you always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the protection of personal data), pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force.
14. LINKS TO OTHER WEBSITES
Our site may contain links to third party websites. Please note that we are not responsible for the collection, use, management, sharing or disclosure of your data and information by the aforementioned third parties. If you provide information on and use third-party sites, the privacy policies and terms of service of the aforementioned sites will apply. We encourage you to read the privacy policies of the websites you visit before submitting personal information. In some cases, these sites may be co-branded and display our logos or other trademarks. To find out if you are on our website, check the URL of the page you are visiting.
15. CHANGES
Michele Costantini reserves the right to modify or simply update the content of this Privacy Policy, in part or completely, also due to changes in the applicable legislation. L'Michele Costantini, will inform you of these changes as soon as they are introduced and they will be binding as soon as they are published on the Site. For this reason, we therefore invite you to visit this section regularly to familiarize yourself with the most recent and updated version of the Privacy Policy in order to always be updated on the data collected and on the use Michele Costantini makes of it.
16. CONTACT US
To exercise the above rights or for any other request, you can write to:
Michele Costantini
Castle 2077
30122 Venice,
Tax Code: CSTMHL75B17L736H
VAT Code:
Email: [email protected]
Phone: +39 3273526164
Michele Costantini's website http://www.contessa-venice.com
