Information pursuant to art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data and which repeals Directive 95/46 / EC (general data protection regulation)
The information in brief:
This information is intended to provide you with all the necessary information on the collection and possible processing of your data, whether they are personal or anonymous. The collection takes place for example by browsing our site or by contacting us (via the online form, e-mail, telephone, in person or through other channels with which we cooperate) to book, during check-in or check-out, to request certain services, offers or quotes. In these cases the provision of personal data is necessary.
By personal data we mean for example: name, e-mail address, telephone number, address, credit card data, date of birth and all those data that allow the identification of a person.
Pursuant to the General Data Protection Regulation (hereinafter GDPR) we disclose the following.
The owner of the data is
CASA TINA HOME HOLIDAY
I: Via Vittorio Emanuele 55, Diano d’Alba CN
T: +39 345 7671095
CF: PZZFNC51A42A124J
E: info@casatinaholiday.com
_______________________
1. What data is collected?
Pursuant to Article 13 of the Regulation (EU), we collect and process the following personal data:
personal data (name, surname, telephone, e-mail, age)
data relating to payment methods or related to payments (e.g. credit card details)
the date of arrival and the length of the stay, as well as any requests and preferences you communicate to us during your stay.
2. Purpose of the treatment
Your data is collected and processed to respond to your requests and e-mails, to be able to offer you information, services and services that meet your needs, as well as to guarantee you optimal navigation on our site.
The purposes of the processing of your data include:
data storage in order to facilitate future reservations and requests
management of all pre-contractual and contractual activities relating to your stay (booking, stay, departure, etc.)
forwarding of communications and direct telephone calls to the guest
sending by e-mail, post or other means of communication of information, offers and news regarding our structure, region, local events, etc. which we believe may interest you. The sending of these communications presupposes an explicit consent on your part. This consent can be withdrawn at any time simply by notifying us by e-mail. In the absence of consent to the processing of your personal data, we will not send you any communication on offers and news.
fulfillment of legal obligations
optimization of navigation on our site and collection of statistical data. For detailed information see the chapter “Collecting data on our site”.
Your data will be collected and processed in accordance with the provisions of the GDPR.
The consent to the processing of data takes place on a voluntary basis. In case of refusal to provide personal data, identity documents and payment details, we will not be able to fulfill contractual and legal obligations, and therefore to welcome you at our facility.
3. Legal basis of data processing
The legal basis for the processing of your data is:
management of pre-contractual and contractual activities and obligations
your explicit consent
fulfillment of legal obligations
legitimate interest (e.g. the improvement of our customer services and customer loyalty, including in direct advertising; or video surveillance to protect people and property from possible aggression, theft, robbery, damage and vandalism, to prevent fires and ensure safety at work).
4. To whom is your data transmitted?
We take the protection of your data very seriously. For this we assure you that they will not be sold or transferred to third parties.
In order to offer you an optimal service as well as to comply with legal obligations, if strictly necessary, your data will be transmitted to third parties, all reliable and professional, who in turn are required to comply with the provisions of the GDPR. They include:
(subject = natural or legal person, company or firm)
subjects whose cooperation is essential to provide certain services (e.g. our web hosting provider)
subjects in charge of technical assistance on our hardware and software
subjects who assist and advise us in the administrative, accounting, tax, legal, financial, marketing and communication fields
subjects, public authorities or public bodies to which we are required by law to transmit your personal data
persons authorized by us to process your personal data to carry out activities aimed at providing the necessary services. These subjects are required by law to the obligation of confidentiality or are committed to respecting it (eg the employees of the owner);
For more information on the transfer of your data to third parties, see the chapter “Data collection on our site”.
We reiterate once again that the subjects, bodies and public authorities that cooperate with us are obliged to comply with the provisions of the GDPR. For any additional information please do not hesitate to contact us!
5. Retention period
The retention period of personal data is established on the basis of legal obligations or contractual obligations. If collected in compliance with a legal provision or a contractual obligation, your personal data will be kept for the time strictly necessary for their processing. If instead collected with your explicit consent, they will be kept until revoked.
6. Data collection on our site
Below you will find detailed information on what happens to your data while browsing our site.
How do we collect your data?
Some data have been provided to us directly by you eg. by sending a contact form or a booking request from our site or from other portals with which we cooperate.
Other data, on the other hand, are automatically acquired by our IT systems during normal navigation. These are mainly technical data (browser, operating system, time of access, etc.).
6.1. Contact form
When you contact us via the online form, the data you enter in the form, including your contact details, are saved in our system in order to respond to your inquiry or future questions. These data will not be passed on to third parties without your consent.
The processing of the data collected via the contact form therefore takes place only with your consent (Article 6 paragraph 1). This consent can be withdrawn at any time via a simple e-mail to our address. The withdrawal of consent does not affect the lawfulness of the treatment based on consent before the withdrawal.
The data sent to us via the contact form will be kept until you request its deletion, you do not withdraw your consent to their conservation or the reason for which such data is kept expires (e.g. once the processing of your request). However, this does not apply to any legal obligations that must be respected until expiry.
6.2. SSL or TLS certificate
For security reasons and to protect the transmission of confidential content, such as eg. reservations or inquiries sent to us online, our site uses SSL or TLS certificates. A “secure” site, therefore equipped with an encrypted connection, can be identified by the web address preceded by “https” (and not by “http”) and by the padlock (green in Chrome and Firefox).
When the SSL or TLS certificate is active, the data you transmit to us cannot be read by third parties.
6.3. Log file
The provider of our website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. It is about:
type and version of your browser
operating system used
Referer URL
hostname of the device you are logging in from
time of the server request
IP address
Such data will not be associated with data from other sources.
The processing of this data is recognized in Article 6 (1) of the GDPR. The website owner has a legitimate interest in ensuring the functionality of his website as well as its optimization, and the log files are necessary for these purposes.
6.4. Analysis tools and third-party tools
When you visit our site, your navigation can be analyzed for statistical purposes. This is done through cookies and other analysis tools. Generally, the collection of navigation data takes place anonymously; it is therefore not possible to trace your identity from them.
You have the option to object to this data collection or to avoid it simply by not using certain tools. Below you will find all the information about it.
a) Cookies
To ensure the functionality and correct display of the contents, to facilitate navigation as well as to allow us to optimize it and analyze data for statistical purposes, our website uses cookies.
By disabling certain cookies it is possible that some parts of the site are not displayed or not work properly!
1a. What are cookies?
Cookies are small text files that the site sends to your device where they are stored to make the current browsing session or future accesses easier and more functional.
The cookies essential for the correct functioning of the site or its particular functions (e.g. a contact form) are stored on the basis of the principle of legitimate interest (Article 6 paragraph 1 GDPR). For other types of cookies, eg. aimed at analyzing your behavior on the net, see the chapters below.
Based on their function, cookies are mainly divided into:
Technical and analytical cookies: The Privacy Guarantor indicates among the technical cookies, which do not need the explicit consent of visitors, the following types of cookies:
Navigation and functionality cookies: strictly necessary for the proper functioning of the website and to allow navigation, as well as to access restricted or protected areas and keep the session active (areas accessed via login, protected areas for transactions or online purchases) and to store user preferences / settings (language, display, etc.)
Analytical cookies: these are cookies that allow to collect statistical data on the number of users and how they visit the site. They are assimilated to technical cookies only when used in anonymous and aggregate form.
Third party cookies
These cookies are generated and managed by parties other than the manager of the website on which the user is browsing. This is the case, for example, of social plugins such as Facebook, Google, or services such as Google Adwords, Google Maps, YouTube etc., integrated on a website. As the operator of this site, we point out that the third-party services we use on our site are subject to the rules on cookies and the protection of personal data of the third parties themselves.
For information on cookies for services provided by third parties, please consult the following links:
Youtube, Google Analytics, Google Maps, Google Plus
https://policies.google.com/technologies/cookies?hl=it
https://www.facebook.com/help/cookies/
Profiling cookies
Used exclusively by third parties other than the operator of this site to collect information on user behavior while browsing and on their interests, in order to create a “profile” and then propose personalized advertising, in line with the preferences expressed. This “profile” is anonymous and the information collected through these cookies does not allow to trace the user’s identity.
Profiling cookies require the user’s consent and are saved for a longer period than other cookies.
In order to permanently deny the use of remarketing cookies, you can deactivate targeted advertising via Google at the following link:
https://www.google.com/settings/ads/onweb/
Useful information on behavioral advertising is available on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/it/
2a. What kind of cookies do we use on our site?
Technical cookies
To view all active cookies on our site, go here: http://www.cookie-checker.com
For the use of technical cookies, explicit consent is not required, as the Guarantor recognizes that these cookies are strictly necessary to be able to view the site correctly, use its functions and access protected areas.
Analytical cookies
Among the technical cookies, the Guarantor also indicates analytical cookies that collect statistical data on visits and use of the site in an anonymous and aggregate form. Analytical cookies help us improve our site by identifying which pages and which functions are used the most.
For the statistics and analysis of our site we use “Google Analytics”, the analysis tool made available by Google Inc.
Google uses this information to analyze the use made of the site, to prepare reports on the activities that users perform on the site and to provide other services on the use of the site and the internet to the site manager directly related to this data.
The most important cookie used by Google Analytics is called __ga “.
For more information see point “c) Google Analytics”.
Third party cookies and services
Our site uses the following third party cookies:
Google Maps, Google Analytics, Google Adwords, YouTube if necessary
Profiling cookies:
This site does not currently use profiling cookies.
3a. How to manage and disable cookies
Through the settings of your browser it is possible to disable or delete the cookies already saved in the device.
By disabling some cookies it is possible that parts of the site are no longer displayed or no longer work correctly!
How to block, disable or delete cookies in various browsers:
Google Chrome
Mozilla Firefox
Internet Explorer
Safari
Mobile opera
Disable Google Analytics cookies:
To prevent the collection of your data by Google Analytics, click on the following link. An opt-out cookie will be installed which will prevent the collection of your data during future accesses:
disable Google Analytics for this site.
Third party cookies
They can be disabled individually or deleted by users. You can find instructions on how to proceed on the European Interactive Digital Advertising Alliance website:
www.youronlinechoices.eu
a) Google Maps
Our site uses an API of the Google Maps cartography service, company Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the United States, where it is stored. As the site administrator we cannot interfere with or manage the transmission of this data in any way!
On the basis of legitimate interest (Article 6, paragraph 1, letter f of the GDPR) we use the services of Google Maps to make our structure and the services we offer more easily traceable, as well as to offer a simple and fast service to customers who want to reach us. .
Further information on the use of user data can be found in Google’s privacy policy at the following link: https://www.google.de/intl/de/policies/privacy/.
b) Google Analytics
Our site uses functions of the web analysis service Google Analytics. The provider of this data is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. All information on the use of the site collected through Google Analytics cookies is usually transmitted to a Google server in the United States and saved there.
The use of Google Analytics cookies and its tools is regulated by art. 6, paragraph 1, lett. F of the GDPR. As the site operator we have a legitimate interest in analyzing user behavior to optimize both the site and our marketing activities.
c) Browser Plugin
You can prevent the storage of cookies via your browser settings. However, we would like to point out that, in some cases, by disabling certain cookies the site may not be displayed correctly and some functions may be compromised. You can also disable and prevent the use of your data by Google Analytics by downloading and installing the appropriate add-on at this link: https://tools.google.com/dlpage/gaoptout?hl=it
More information on the management of user data by Google Analytics can be found in the privacy and data protection policy at the following link: https://support.google.com/analytics/answer/6004245?hl=it
Amendment on data processing in Google Analytics
As part of our contractual agreements with Google Inc. regarding the amendment on data processing, we are committed to strictly adhering to the data protection guidelines of the GDPR.
d) YouTube
Our site uses plugins from the YouTube site, operated by Google. The operator of the websites is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
By visiting one of our web pages featuring a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our web pages you have visited.
Furthermore, YouTube can store various cookies on your device to acquire information about visitors to our site. These data are used, among other things, to compile statistics on the videos viewed, to improve the usability of the channel and to prevent fraud attempts. YouTube cookies remain on your device until you delete them.
If you are logged into YouTube when you visit, you allow YouTube to associate your surfing behavior on our site directly with your personal profile. To prevent this, simply log out of your YouTube account.
The use of YouTube takes place in the legitimate interest of effectively presenting our offers on the web (Article 6 (1) letter f GDPR.
More information on the management of user data is available in the Google privacy policy: https://policies.google.com/privacy?hl=it
e) Contact form 7: contact form used to facilitate the user’s contact with the structure. Collects the e-mail address, name and surname and the message (if indicated).
f) Cookie notice: plugin used for the processing of cookies, to adapt the site to the legislation on the protection of personal data.
Personal Data collected: Cookies and Usage Data.
More information: https://dfactory.eu/products/cookie-notice/
g) Polylang is the plugin used by the site to provide the English and French version of the site
Personal Data collected: Cookies and Usage Data.
More information on the cookies used by the plugin -> https://polylang.pro/doc/is-polylang-compatible-with-the-eu-cookie-law/
h) HBOOK is a plugin used by the theme (the graphics of the site) for the management of hotel room reservations. The aforementioned plugin makes use of Stripe to manage online payments by credit card.
More HBOOK information: https://maestrel.com/hbook/
More information STRIPE: https://stripe.com/it/privacy
i) Yoast SEO is a plugin that allows optimization, on the SEO side (criteria that search engines like), of the site’s texts and images.
7. Rights of the interested party
Right of access: based on art. 15 of the GDPR, you have the right to know which of your personal data are processed, how they were collected, their nature, if they were communicated to third parties and to whom, the purposes of their processing.
Right of rectification and cancellation: based on art. 16 GDPR you have the right to have inaccurate personal data rectified; art. 17 also establishes the right to their cancellation. In the case of data made public, you have the “right to be forgotten”, that is, the data controller is obliged to take reasonable steps, including technical ones, to delete any link, copy or reproduction of your personal data.
Right to object: based on art. 21 GDPR, you can exercise your right to object at any time and change or withdraw your consent entirely with future effect.
Right to limit (or block) processing: based on art. 18 GDPR, you can demand the restriction of the processing of your personal data. The data collected may be processed only with specific consent, or their processing will be concretely limited.
Right to data portability: based on art. 20 GDPR, you have the right to receive personal data concerning you in a structured, commonly used and machine-readable format and to transmit this data to another data controller.
According to art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority.
8. Characteristics of consent
The processing of your personal data takes place on the basis of contractual and legal obligations and in compliance with the provisions of the GDPR.
The consent to the processing of data that falls into other particular categories is given on a voluntary basis. In the absence of this consent, it is not possible to process the data also in relation to future bookings.
The consent to the processing of data to receive information, offers and news from the hotel takes place on a voluntary basis. In the absence of consent or in case of refusal to provide the necessary data, no communication will be sent
9. Changes
This information is valid from 25 May 2018.
The data controller reserves the right to make changes and / or update the information in full or in part, also by virtue of new legal provisions.
How to delete cookies?
How to delete cookies from Internet Explorer -> official guide
How to delete cookies from Google Chrome -> official guide
How to delete cookies from Mozilla Firefox -> official guide
How to delete cookies from Safari -> official guide