PERSONAL DATA PROCESSING NOTICE
The Data Controller is
Colazione da Augusta di Roberta Tocco
Via Bernardo Vittone, 3 – 10131 TORINO (TO)
P.IVA 11503540012-Numero REA: TO – 1218079
The Data Controller guarantees the security, confidentiality and protection of the personal data in its possession, at every stage of the processing thereof.
Purpose of processing
The personal data voluntarily and optionally provided by users who submit requests to receive information about the services of the property (prices, room availability, etc.), sign up to any newsletters, make online bookings, or simply submit requests by sending information (e.g. CVs) in electronic form, are used solely to carry out the requested service or performance and are not disclosed to third parties unless such disclosure is required by law or is strictly relevant and necessary to fulfil the requests.
In particular, the personal data voluntarily provided by data subjects will be collected electronically and processed, including with the aid of electronic means, directly and/or through delegated third parties (email service providers, website hosting providers) for the following purposes:
– to allow the booking to be made and confirmed by providing credit card details as a guarantee;
– to carry out the specific services requested at the time of booking;
– to use the credit card provided as a guarantee for any charge by way of penalty in the event of cancellation beyond the term granted to exercise the right of withdrawal set out in the booking confirmation, or in the event of failure to arrive on the agreed date (no-show procedure);
– to assess any CVs received, compatibly with any internal needs;
– for statistical purposes in anonymous form (to assess the number of visits, etc.);
– to comply with current administrative, accounting and tax obligations, as well as to comply with laws and regulations.
The data we process may include special category data as defined by EU Regulation 2016/679 (GDPR), i.e. personal data capable of revealing racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations of a religious, philosophical, political or trade-union nature, as well as personal data capable of revealing health status and sex life, voluntarily provided by you in the notes field of the booking form, insofar as they are instrumental to the provision of our services (food allergies, persons with disabilities, health information, etc.).
Such data will be processed in accordance with the general authorisation of the Italian Data Protection Authority (Garante) No. 5, issued solely with regard to the data and operations indispensable to fulfil the obligations, including pre-contractual ones, which the property undertakes in its own field of activity, in order to provide specific goods, services or performances requested by the data subject.
Pursuant to EU Regulation 2016/679 (GDPR), any special category data will be processed by us with the utmost confidentiality and will not be disclosed.
Recipients of the data
The personal data processed by the Controllers is not disclosed, that is, made known to unspecified persons, in any possible form, including making it available or allowing simple consultation. It may be communicated to employees working for the Controllers and to certain external parties who collaborate with them. It may also be communicated, to the extent strictly necessary, to parties who, in order to fulfil your requests, must supply goods or carry out services or performances on behalf of the Controllers. Lastly, it may be communicated to parties entitled to access it by virtue of legal provisions, regulations or EU legislation.
In particular, on the basis of the roles and duties performed, employees have been authorised to process personal data, within the limits of their competence and in accordance with the instructions given to them by the Data Controllers.
External parties operating under the authority of the Controllers have also been duly authorised on the basis of the type of service provided, the processing carried out, and the nature of the data processed.
External parties to whom the Controllers have entrusted the processing of personal data have been designated as Data Processors.
Data transfer
Under no circumstances does the Data Controller transfer your personal data to third countries or to international organisations.
However, it reserves the right to use cloud services; in that case, service providers will be selected from among those offering adequate safeguards, as provided for by Art. 46 of GDPR 679/16.
Data retention
The Data Controller retains and processes personal data for the time necessary to fulfil the purposes indicated. Subsequently, the personal data will be retained, and not further processed, for the time established by applicable civil and tax law provisions.
Rights of the data subject
With reference to Articles 15 – right of access, 16 – right to rectification, 17 – right to erasure, 18 – right to restriction of processing, 20 – right to data portability, 21 – right to object, 22 – right to object to automated decision-making of GDPR 679/16, data subjects may exercise their rights by writing to the Data Controller at the address given above, or by email to info@colazionedaaugusta.it, specifying the subject of the request, the right they wish to exercise, and attaching a photocopy of an identity document proving the legitimacy of the request.
Further information on the rights of the data subject is provided at the end of this section.
Lodging a complaint
Each data subject has the right to lodge a complaint with the supervisory authority of their state of residence.
Automated decision-making
Under no circumstances does the Controller carry out processing consisting of automated decision-making on your data.
Through browsing the website, by email or by phone, you may interact with Colazione da Augusta and its organisation for many reasons:
- requesting information,
- requesting to be contacted,
- requesting a service,
In these cases you should know that:
Source of the data: the personal data processed is that provided by you when making your requests.
Purpose of processing: your personal data is always processed to:
1) fulfil, or otherwise follow up, your requests;
2) send by email further information, communications, and promotional material concerning the activities and services provided by Colazione da Augusta
Legal basis for processing: the legal basis for processing is:
– the performance of a contractual or pre-contractual obligation for the purpose referred to in points 1 and 2;
Withdrawal of consent: with reference to Art. 6 of GDPR 679/16, the data subject may withdraw at any time any consent given.
Withdrawal of consent, if the requester has no ongoing contractual relationship (e.g. bookings for future stays) with Colazione da Augusta, will result in the cessation of sending information and communications by email. In the event of ongoing contractual relationships (e.g. bookings for future stays) it will have no consequences.
Refusal to provide data: making the requests listed above is always on a voluntary basis; therefore, refusal to provide data may prevent or compromise the fulfilment of, or follow-up to, your requests.
Further information on data recipients: personal data acquired through the receipt of CVs is entered into the Controllers’ “candidates” database and is processed by authorised staff for purposes related to the assessment and selection of candidates, or to possibly propose other job offers consistent with the professional profile.
In particular, if you browse our website, you should know that:
The website [www.colazionedaaugusta.it](https://www.colazionedaaugusta.it) belongs to Colazione da Augusta, which has full responsibility for and control over it and manages it with the support of a provider based in Italy.
Colazione da Augusta guarantees the security, confidentiality and protection of the data in its possession, at every stage of the processing thereof.
All data and information in the possession of Colazione da Augusta, collected via the Internet or by other means, is used in compliance with the rules set out by GDPR 679/16 and with respect for trade secrets.
The site contains links to other websites not managed by Colazione da Augusta, which is therefore not responsible for their content or for their compliance with data protection and confidentiality regulations or directives. The Site, at the URL [www.colazionedaaugusta.it](https://www.colazionedaaugusta.it), has a single database physically located in Italy, at the provider’s premises.
Data collection
The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols.
This is information that is not collected in order to be associated with identified data subjects, but which, by its very nature, could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, various time-related aspects of the visit (e.g. the time spent on each page), and details relating to the path followed within the site, with particular reference to the sequence of pages consulted, and to parameters relating to the user’s operating system and computing environment.
This data is used solely to derive anonymous statistical information on the use of the site and to monitor its correct functioning, and is deleted immediately after processing.
The data may be used to establish liability in the event of hypothetical computer crimes to the detriment of the site.
The data necessary to enable access to online services is collected through traditional means and through direct contact with those requesting access.
The forms used within online services are mostly intended for the collection of data in anonymous form. In any case, each of them includes a link to the corresponding specific notice and, where necessary, a request for consent has been provided.
COOKIES
Cookies are pieces of information placed in the user’s browser when visiting a website or using a social network with their PC, smartphone or tablet.
Each cookie contains various data such as, for example, the name of the server it comes from, a numerical identifier, etc.
Cookies may remain in the system for the duration of a session (i.e. until the browser used for web browsing is closed) or for longer periods, and may contain a unique identification code.
- Technical cookies
Some cookies are used to perform computer authentication, session monitoring and storage of specific information about users accessing a web page.
These so-called technical cookies are often useful because they can make browsing and using the web faster and easier, for example by facilitating certain procedures when making online purchases, when logging into restricted-access areas, or when a website automatically recognises the language you usually use.
A particular type of cookie, known as analytics cookies, is used by website operators to collect information, in aggregate form, on the number of users and how they visit the site, and thus to compile general statistics on the service and its use.
- Profiling cookies
Other cookies may instead be used to monitor and profile users while browsing, to study their movements and web browsing or consumption habits (what they buy, what they read, etc.), including for the purpose of sending targeted and personalised advertising for services (so-called Behavioural Advertising). These are referred to as profiling cookies.
A web page may contain cookies originating from other sites and contained in various elements hosted on the page itself, such as advertising banners, images, videos, etc. These are known as third-party cookies, which are usually used for profiling purposes.
Given the particular intrusiveness that profiling cookies (especially third-party ones) may have on users’ private sphere, European and Italian law require that the user be adequately informed about their use and must give valid consent to the installation of cookies on their device.
- Cookies used
This site uses cookies to make the site’s services simpler and more efficient for users viewing the web pages. Users accessing the site will receive very small amounts of information on their devices, whether computers or mobile devices, in the form of small text files, i.e. “cookies”, stored in the directories used by their browser.
The cookies used make it possible to:
- store the preferences entered,
- avoid re-entering the same information multiple times during the visit,
- analyse the use of the services and content provided by the site in order to optimise the browsing experience and the services offered.
More specifically, the technical cookies used by this site are:
Technical cookies
| Cookie | Name | Type | Purpose | Information | Expiry |
|---|---|---|---|---|---|
| Colazione da Augusta | displayCookieConsent | Strictly necessary cookies / Technical | Used to verify acceptance of cookies | 1 day | |
| Colazione da Augusta | _icl_current_language | Strictly necessary cookies / Technical | Used to identify the language in which to display information | 1 day | |
| Colazione da Augusta | pinpoint_ounicutevdxxtvpl | Strictly necessary cookies / Session | Used to identify the user’s session | Session | |
| Colazione da Augusta | woocommerce_cart_hash | Strictly necessary cookies / Session | Used to identify the user’s session | Session | |
| Colazione da Augusta | wordpress_sw_installed | Strictly necessary cookies / Session | Pending | 2914937 days | |
| Google Analytics | _ga | Analytics / performance cookies | These cookies are used to distinguish users. | More info | 2 years |
| Google Analytics | _ga_TVSFHETTZX | Analytics / performance cookies | These cookies are used to speed up access requests. | More info | 2 years |
| Google Analytics | _gat | Analytics / performance cookies | These cookies are used to speed up access requests. | More info | 10 minutes |
| Google Analytics | _gid | Analytics / performance cookies | These cookies are used to distinguish users. | More info | 2 days |
| _fbp | Advertising cookies | Used by Facebook to deliver a range of advertising products such as real-time bidding from third-party advertisers. | 3 months | ||
In addition, [www.colazionedaaugusta.it](https://www.colazionedaaugusta.it) uses Google Analytics.
In this case, the information generated by the cookie about use of the site is transmitted to Google Inc. and stored on its servers. Google uses this information to produce reports on the site’s activity, intended for the Controller or parties appointed by it.
Google does not associate the IP address with other data it holds, thereby in fact processing anonymous data. It is possible to refuse the provision of browsing data by selecting the appropriate setting in your browser (in this regard, please refer to the notices published on Google’s website at https://www.google.it/intl/it/policies/privacy/ and to the browser add-on for disabling Google Analytics
https://tools.google.com/dlpage/gaoptout?hl=it ).
This choice may, however, prevent you from using all the features of the site. Conversely, by accepting the use of cookies as described above and continuing to browse, the user freely and unconditionally consents to the processing of personal data by Colazione da Augusta and Google Inc. in the manner and for the purposes indicated above.
Lastly, if the user arrives at the site after clicking on a banner published on another site, they should know that the advertising network operator, designated as an external processor, has assigned cookies necessary to detect throughput and the amount of any purchases made. Responsibility for managing these cookies lies with the advertising network operator, whose notice can be consulted on its own institutional website.
DISABLING/ENABLING COOKIES
At any time, the user will nonetheless have the option to accept or refuse the use of cookies by changing their browser settings. However, if cookies are disabled, it will not be possible to use all the services and features of the site.
Firefox:
- Open Firefox
- Press the “Alt” key on the keyboard
- In the toolbar at the top of the browser, select “Tools” and then “Options”
- Then select the “Privacy” tab
- Go to “History Settings:” and then to “Use custom settings”. Uncheck “Accept cookies from sites” and save your preferences.
Internet Explorer:
- Open Internet Explorer
- Click the “Tools” button and then “Internet Options”
- Select the “Privacy” tab and move the slider to the privacy level you wish to set (upwards to block all cookies or downwards to allow them all)
- Then click OK
Google Chrome:
- Open Google Chrome
- Click the “Tools” icon
- Select “Settings” and then “Advanced settings”
- Select “Content settings” under “Privacy”
- In the “Cookies” tab you can deselect cookies and save your preferences
Safari:
- Open Safari
- Choose “Preferences” in the toolbar, then select the “Security” panel in the dialog box that follows
- In the “Accept cookies” section you can specify if and when Safari should save cookies from websites. For more information, click the Help button (marked with a question mark)
- For more information about the cookies stored on your computer, click “Show Cookies”