Dear user, we would like to inform you that the “European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data” (hereinafter “GDPR”) provides for the protection of individuals and other subjects regarding the processing of personal data.
Agriturismo I Tre Archi, as “Holder” of the treatment, in accordance with Article 13 of the GDPR, therefore, provides the following information:
CATEGORIES OF DATA: Agriturismo I Tre Archi will process personal and / or sensitive data and health that will be included in the form.
SOURCE OF PERSONAL DATA: The personal data that Agriturismo I Tre Archi will be in possession of are collected directly from the person concerned at the time of filling out this form.
DATA CONTROLLER: The data controller is Agriturismo I Tre Archi di Balbi Elena, Reale & C. S.A.A.S. – Podere I Gessi, 142 – 56045 Pomarance (PI), VAT no. 01714420500.
PURPOSE OF DATA PROCESSING AND LEGAL BASIS: The processing of your data, collected and stored in relation to the compilation of this form, has as its legal basis your consent and is carried out for the following purposes: to respond to requests for information sent through the form.
DATA PROVIDERS: Within the limits relevant to the purposes of processing indicated, your data may be disclosed to partners, consulting firms, private companies, appointed by the Data Controller. Your data will not be disclosed in any way. The Managers and Persons in Charge of the processing in office are punctually identified in the Privacy Document, updated periodically.
TRANSFER OF DATA EXTERNally: the data collected will not be transferred abroad.
PERIOD OF STORAGE: The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed (“principle of limitation of storage”, art.5, GDPR) or according to the deadlines provided by law. The check on the obsolescence of data stored in relation to the purposes for which they were collected is carried out periodically.
RIGHTS OF THE INTERESTED PARTIES: The interested party always has the right to ask the Owner for access to his own data, the rectification or cancellation of the same, the limitation of the treatment or the possibility to oppose the treatment, to ask for the portability of the data, to revoke the consent to the treatment by asserting these and the other rights provided by the GDPR by simple communication to the Owner. The data subject may also lodge a complaint with a supervisory authority.
OBLIGATION OR LESS OF DATA CONFERENCE: we inform you that the provision of data is mandatory and failure to provide it will NOT send the form.
MANDATORY OF CONSENT: The provision of consent to the processing of data by ticking the appropriate box is optional, but essential to proceed with sending the form.
METHOD OF DATA PROCESSING: The personal data provided will be subject to processing operations in compliance with the aforementioned legislation and the obligations of confidentiality which inspires the activities of the Owner. The data will be processed by computer, on paper or on any other suitable medium, in compliance with appropriate technical and organizational security measures provided by the GDPR.