PRIVACY POLICY

In accordance with the commitment and care that “Casa Balat B&B” called “Data Controller”, dedicates to the protection of personal data we inform you on the methods, purposes and scope od communication and dissemination of your personal data and your rights, in compliance to the art. 13 of the GDPR.

1. CATEGORIES OF PERSONAL DATA PROCESSED BY DATA CONTROLLER

To offer you the services provided by its websites, the Data Controller must process some data necessary for the provision of the services.
This data may be provided implicitly by tools you use to access and use the services or may be provided explicitly by you.
The Data Controllers may process the following categories of users’ personal data:
- Technical navigation data relating to the IP address, the identification codes of the devices used by the user to use to the site or services, the characteristics of the browser and access times;
- Navigation data aimed at profiling provided indirectly through the use of the services itself and obtained and analyzed with the iser’s prior consent;
- Common identification data provided by the user (e.g. name, surname, email, telephone, number, etc.) for the use of the products and services;

2. PURPOSE AND LEGAL BASIS OF THE PROCESSING
The data and cookies received from you will be processed by the Data Controllers exclusively with methods and procedures necessary to provide you with the services requested and for the additional purposes for which you have expressed consent. Only with your express consent can the data be used to carry out statistical analyses, market surveys, promotional activities via social media and sending commercial information on the products and promotional initiatives of the Data Controllers. (Direct marketing purposes). Always with your consent, the data may used for profiling purposes conducted automatically by collecting information on the browsing you do during access and the use of the services of the service and, using statistical correlation traits and group similar ones within classes of interest. By assigning your browser to an interest class, our systems will subsequently be able to offer you content that is closest to your tastes and will present advertising contributions that best meet your needs and better address the interests of advertisers by reducing the level disturbing use. As of the date you read this Policy, the Data Controllers use profiling data to aggregate marketing profiles, to manage relationships with advertising investors and improve their campaigns, to infer patterns of use of our products and services and to assisit management commercial in the development of digital strategies (profiling purposes). Finally, with your explicit consent, your data may provided to other companies operating in the publishing, financial automotive insurance, energy, consumer goods, humanitarian and charitable organizations sectors which may contact you as Owners of autonomous initiatives - the listupdated is at your disposal and can be requested from the Data Controller of the Data Controllers at the address below - for statistical analyses, market surveys and sending commercial information on products and promotional initiatives. (Marketing purposes by third parties).

Communications for market surveys or commercial information on products and promotional initiatives may be made via postal mailing, e-mail, telemarketing, sms, mms. We inform you that some activities may be implemented through suppliers, specifically appointed ad Data Processors, including those resident outside the European Union. The legal bases of the purposes described above are the execution of your request as interested party and the consents expressed by you.

3. DISSEMIANTION, COMMUNICATION AND PARTIES WHO ACCESS THE DATA

Your personal data will not be disclosed, but may be communicated where necessary for the provision of the services to third parties (such as third-party technical services providers, postal couriers, hosting providers, IT companies) appointed, if necessary, Data Processors by the Data Controllers for the technical or organizational tasks instrumental to the provision of services.
Access to the data is also permitted to categories of person in charge of the Data Controllers involved in the organization for data processing (administrative, commercial, marketing, customer service, system administrators). The listupdate of the Managers can always be requested from the Data Controllers. The right of communication to third parties remains unaffected if you have given specific and optional consent.

4. TRANSFER OF DATA ABROAD

Your personal data wil be processed by the Data Controllers within the territory of the European Union. Of for technical and/or operational reasons it is necessary to make use of subjects located outside the European Union, or it is necessary to transfer some of the data collected to technical system and services managed in the cloud and located outsides the area of the European Union, the processing will be regulated in compliance with the provisions of Chapter V of Regulation and authorized on the basis of specific decisions of the European Union. All necessary precautions will therefore be adopted in order to guarantee the most complete protection of personal data by basing this transfer: a) on adequacy decisions of the recipient third countries expressed by European Commission; b) on adequate gurantees expressed by the third party recipient pursuant to art. 46 of the Regulation; c) on the adoption of binding corporate rules, CD. Corporate binding rules.

5. DURATION OF PROCESSING AND STORAGE OF PERSONAL DATA

The Data Controllers in accordance with Art. 5.q e) of the GDPR will process the data provided by your for the entire duration of the execution of the requested services and will keep them for the following 12 months for the purpose of completing administrative activities, as well as for the time necessary to fulfill legal obligations. If you have authorized profiling processing, the anonymous data observed from time to time will be deleted 12 months after the start of the processing.

6. RIGHTS OF THE INTEREST PARTY

The Data Controllers guarantee that you can exercise the rights provided for by the art. at any time. 12 of the GDPR. In particular, you have the right:
to know whether the Data Controllers hold and/or process personal data relating to you and to acess them in full including obtaining a copy (art. 15 Right to access);
to the rectification of a inaccurate personal data or the integration of incomplete personal data (art 16 Right of rectification);
to the cancellation of personal data held by the Data Controllers if one of the reasons provided for the by the GDPR exists (Right to Erasure, Art. 17);
to ask the Data Controllers to limit the processing to only some personal data, if one of the reasons provided for by the Regulation exists (Art. 18 Right to limit processing);
to request and receive all your personal data processed by Data Controllers, in a structured, commonly used anf machine-readable format or request transmission to another data controller without impediments (Art. 20, Right to Portability);
to object in whole or in part to the processing of data for the purpose of sending advertising material and market research (so-called Consent) (art. 21 Right to object)
to object in whole part to the processing of data in automatic or semi-automatic mode for profiling purposes (so-called Consent).
Data Protection Officer/Personal Data Processing Office: Casa Balat Contrada Mezzogregorio snc 96017 Noto (SR) Italy or by sending an email to the address: info@casabalat.com
The exercise of the rights can be exercised by communicating the one of the Data Controllers/Data Protection Officers whose contact details are indicated in the appropriate section of this information. Furthermore, you always have the right to lodge a complaint with the Personal Data Protection Authotity, which can be contacted at garante@gpdp.it or via the website http://www.gpdp.it .

7. PRIVACY OFFICER

The Data Controllers have identified and appointed, pursuant to art. 37 of the GDPR a Data Protection Officer and has equipped itself with an internal figure in charge of managing requests relating to the privacy of ots user and customers.
To exercise the rights guaranteed to you, you can contact the following contact details:

8. LATEST UPDATE
This Privacy Policy was updated on 25/09/2023.