Privacy Policy

The purpose of the Privacy Policy is to provide the utmost transparency regarding the information that the website collects and how such is utilised.

In compliance with the obligations prescribed by national legislation (Italian Legislative Decree No. 196 of 30 June 2003, the Data Protection Code, as amended) and European legislation (European General Data Protection Regulation No. 679/2016, GDPR), this website respects and protects the privacy of visitors and users, implementing every possible and proportionate effort not to infringe users’ rights.

1. Data Controller

The Data Controller is the Company Welcome to the castle with registered office in Via Bricherasio 7 – 10128 Turin in the person of the pro – tempore legal representative Carola Bianco di San Secondo Biondi (hereinafter the “Company”), which guarantees compliance of the regulations on the protection of personal data by providing the following information on the processing of data communicated or otherwise collected during navigation on this website.

You can contact the Company at the following telephone number: +39 011.541170 or to the following e-mail address:  info@welcometothecastle.it/en

2. Data collected automatically

As with all Websites, this Website also utilizes log files in which information garnered from User visits is automatically collected and stored.

• Internet domani and IP protocol;
• type of browser and computer operating system used;
• date, time and length of site;
• visited pages and possibly the number of clicks;
• Web page of the origin and exit of the Visitor:
• any search engine through which you entered the site.

 

This information is not collected to be associated with identified data subjects but by its very nature could, through processing and association with data held by third parties, enable users to be identified. The automatically collected information can be used by the Company:

in case of suspected use in violation of the current law; for statistical purposes; to improve navigation and site content

The legal basis that legitimizes the processing of such data is the need to make usable the functionality of the site as a result of user access. Consent is not required for the provision of such data.

3. Personal data voluntarily disclosed

Except as indicated in art. 2) above, your personal data are processed for the following purposes: promotional communications, including personalized ones, market surveys, economic / statistical analysis, prize programs, surveys of the degree of customer satisfaction through the sending of advertising posters and documentation promotional paper, e-mail, sms, mms and telemarketing.

4. Mandatory or optional provision of data

Outside the purposes indicated in art. 2) above, the legal basis that legitimizes the processing in relation to your personal data for the purposes referred to in art. 3) the foregoing is the freely given consent.

The provision of personal data is always optional: failure to provide it will make it impossible for the Company to send newsletters, advertising material or to carry out any other promotional initiative.

5. Processing methods and data retention time

The collected data will be processed using electronic or in any case automated, IT and telematic tools, or through manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in order to guarantee their safety in any case Personal data are kept for the time strictly necessary for the management of the purposes for which the data are collected in compliance with current regulations and legal obligations.

6. Subjects authorized to process data, data processors and communication of data

The recipients of the data provided are the Data Controller, as well as the employees and collaborators of the latter, in their capacity as persons in charge and / or internal data processors and / or system administrators.

The data may also be processed by professionals and / or companies in charge of carrying out technical, development, managerial and administrative-accounting activities.

The data may also be communicated to the following categories of recipients:

supervisory bodies, judicial and / or public authorities, as well as to those subjects to whom communication is mandatory by law for the accomplishment of said purposes; entities that provide services for the management of the Company’s IT system and telecommunications networks (including e-mail); studies or companies in the context of assistance and consultancy relationships; subjects who carry out checks, audits and certification of the activities carried out by the Company also in the interest of customers;

In addition, the data may be transferred to companies belonging to the sectors of e-commerce, mail order, editorial, utilities, tourism, sports, communication, entertainment, financial, insurance, automotive, consumer goods, for sending material advertising and other promotional and commercial purposes, by web, mail, e-mail, telephone (sms, mms, telemarketing).

The data collected may also be transferred abroad, even outside the European Union in the forms and ways provided for by current legislation, ensuring in any case an adequate level of protection.

7. Rights of the data subject

You may exercise your rights at any time, pursuant to Art. 7 of Legislative Decree no. 196/2003 and articles 15 to 22 of EU Regulation no. 2016/679, the right to:

• confirmation as to whether or not their personal data are available;
• obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data has been or will be communicated and, where possible, the storage period;
• obtain the rectification and erasure of the data;
• obtain the restriction of the processing;
• data portability, i.e. to receive personal data from the data controller in a structured, commonly used and machine-readable format and have the right to transmit such data to another controller without hindrance;
• object to the processing at any time, including in the case of processing for direct marketing purposes;
• object to an automated decision-making process concerning individuals, including profiling;
• ask the data holder to have access and rectify or delete personal data or to limit data processing concerning the person, or to oppose data processing, besides the right to data portability;
• withdraw consent at any time, without affecting the lawfulness of any processing based on consent given prior to revocation;
• lodge a complaint with a supervisory authority.

 

8. Methods of exercising rights

You can exercise the rights indicated in art. 7) above, by sending an email to: info@welcometothecastle.it