Privacy Policy & Cookie Law of the users visiting the website

Pursuant to Article 13 of the EU Regulation 2016/679

WHAT IS THIS INFORMATION?

The following disclosure pertains to the use of personal data and cookies on this website.

Regarding cookies, this information is provided to the user/navigator in compliance with the measures of the Data Protection Authority of 10th June 2021, “Guidelines on cookies and other tracking tools,” and in accordance with Article 13 of EU Regulation 2016/679 on the protection of personal data.

Under Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes the processing of personal data of the user/navigator during the use of the website’s services and the options for contact and acquisition of the user’s personal data, fully respecting Article 13 of EU Regulation 2016/679 on the protection of personal data, concerning users accessing these websites accessible online through the following addresses:

Holidays apartments in Bellagio with swimming-pool and jacuzzi

This information does not concern other websites, pages, or online services accessible through hyperlinks that may be published on the sites but refer to external resources outside of these domains.

DATA CONTROLLER

Following the consultation of the aforementioned sites, data relating to identified or identifiable individuals may be processed.

The Data Controller is:

Villa Vitali Srl
Via Aureggio, 7 22021 Bellagio (CO)
info@villavitali.it
Vat ID: 03642720134

LEGAL BASIS FOR THE PROCESSING

The personal data indicated on this page is processed by the Data Controller in the performance of the services provided by the website and subsequently, if provided by the website itself, in compliance with contractual or legal obligations.

In case there are specific sections for newsletter subscriptions or marketing services, they will be managed through specific information notices.

CATEGORIES OF PERSONAL DATA AND PURPOSES OF THE PROCESSING

Navigation Data

The computer systems and software procedures used to operate this website acquire certain personal data during their normal operation, the transmission of which is inherent in the use of Internet communication protocols.

This category of data includes, by way of example but not exhaustively, IP addresses or domain names of computers and terminals used by users, the URI/URL addresses (Uniform Resource Identifier/Locator) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the operating system and the user’s IT environment.

These data, necessary for the use of web services, are also processed for the purpose of:

– obtaining statistical information on the use of services (most visited pages, number of visitors per time or day, geographical areas of origin, etc.);

– checking the proper functioning of the services offered.

Navigation data does not persist for more than the time strictly necessary and is deleted immediately after its aggregation (except when necessary for the detection of crimes by the judicial authorities).

Data Provided by the User

The optional, explicit, and voluntary sending of messages to the contact addresses of the Data Controller, as well as the completion and submission of forms on the website, entail the acquisition of the sender’s contact data, necessary to respond, as well as all personal data included in the communications.

Specific information notices will be published on the Data Controller’s websites pages dedicated to the provision of specific services.

Cookies and other tracking devices

This website uses cookies to ensure the correct use of the site’s contents.

The site uses technical and session cookies (non-persistent) strictly limited to what is necessary for safe and efficient navigation of the site. The storage of session cookies on terminals or browsers is under the user’s control. On the servers, at the end of HTTP sessions, information relating to cookies remains recorded in the service logs, with retention times strictly necessary for proper functioning.

Banner operation

The privacy management banner activated on this site does not allow any profiling cookies to be activated until the user has given their consent. If the user clicks the “I agree” button, all profiling cookies will be activated. If the user decides to click the “Personalize” button, they can customize their choices and decide which profiling cookies to activate. If the user clicks on the “Reject” button or the “X” in the top right of the banner, no profiling cookies will be activated.

The user’s choices will be stored for six months through a technical cookie that will be installed on the device used by the user to access the site. It is essential to explain that if the user changes their device, for example, from a computer to a mobile phone, the choices cannot be transferred to the new device for technical reasons, and they will need to be selected again on the new device.

The user’s choices can be changed at any time by accessing the control panel from the privacy control icon. The new configuration will last for six months.

The site uses cookies for third-party profiling as specified below.

Which cookies are installed on this site?

Video Vimeo (Vimeo, LLC)

Vimeo is a video content visualization service provided by Vimeo, LLC. This service is used to integrate content of this kind on its pages.

Personal information collected: Tracker; Usage Data.

Place of processing: USA – Privacy Policy

My Agile Pixel – Google Analytics

Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google Ireland Limited is owned by Google LLC USA. Google uses the Personal Data collected to track and examine the use of this website, compile reports on its activities, and share them with other services developed by Google.

For greater compliance with GDPR regarding the transfer of data outside the EU, it is advisable to transfer data only in an anonymous form. Sole anonymization is not optimal as it provides lesser protection for the exported personal data outside the EU. For this reason, data transferred to GA, which may also be visible outside the EU, will be anonymized through a proxy system called “My Agile Pixel.” This system will replace your personal data, such as your IP address, with anonymous data that cannot be traced back to you. In this case, if data were to be transferred outside the EU or to the USA, it would not be your personal data but rather data rendered anonymous and not attributable to you.

Personal Data collected: None

Place of processing: Ireland –  Privacy Policy – Opt Out.

Madeep

Madeep is a service provided by Madeep S.R.L.

Madeep collects and stores the personal data of booking parties who make reservations from the various distribution channels with which Madeep is connected.

Personal data collected: Tracker; Usage Data; various types of Data as specified in the privacy policy of the service.

Place of processing: Italy

Google reCAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited.
The use of reCAPTCHA is subject to the Google privacy policy and terms of use.

Personal information processed: Tracker; Usage Data; answers to questions; clicks; keypress events; motion sensor events; mouse movements; scroll position; touch events

Place of processing: Ireland –  Privacy Policy.

Gravatar

Gravatar is an image visualisation service provided by Automattic Inc. that allows this Website to incorporate content of this kind on its pages.

Place of processing: United States –  Privacy Policy.

DATA RECIPIENTS

The recipients of the data collected following the consultation of the sites listed above are the subjects designated by the Data Controller, according to Article 28 of the Regulation, as data processors. The complete list of data processors is available at the Data Controller’s office and can be requested by email.

The collected personal data is also processed by staff authorized to process it, who act based on specific instructions provided regarding the purposes and methods of the same processing.

OPTIONALITY OF DATA SUPPLY

As provided by the resolution of 10 June 2021 “Guidelines on cookies and other tracking tools”, the user of the site is free to authorize or not authorize profiling cookies according to their free choice and will. In some cases, such as the Google reCaptcha cookie, blocking such profiling cookie prevents being able to send the request via data acquisition forms. If necessary, it will be possible to re-enable the cookie from privacy preferences, or possibly if you decide to keep the cookie block, send such a request via email.

Apart from what specified for navigation data, the user is free to provide personal data reported in the request forms present on the sites or otherwise indicated in contacts with the structures to request the sending of the newsletter, of informative material or other communications.

Their failure to provide may result in the impossibility of obtaining what is requested.

PROCESSING METHODS

Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

DATA CONSERVATION PERIOD

The retention time of the user’s choices relating to cookies is six months as required by the measures.

The time for retaining cookies changes depending on the type of belonging. For third-party profiling cookies, the specifics can be consulted directly on their relative sites.

Personal data processed for contact or economic purposes will be processed for the times mandatory under the laws of competence.

RIGHTS OF THE DATA SUBJECTS

Data subjects have the right to obtain from the Data Controller, in the cases provided for, access to their personal data and the rectification or cancellation of the same or the limitation of the processing that concerns them or to object to the processing (articles 15 and following of the Regulation). Requests should be forwarded to the Data Controller at the references listed at the beginning of this information notice.

RIGHT TO COMPLAIN

Data subjects who believe that the processing of personal data referred to them carried out through this site occurs in violation of what is provided by the Regulation have the right to lodge a complaint with the Guarantor, as provided for by Article 77 of the same Regulation, or to take action in the appropriate judicial venues (Article 79 of the Regulation).