Privacy Policy

This information is provided pursuant to Art. 13 EU Regulation 2016/679 for the protection of personal data. The data processed will be those of web users.

The Data Controller is:

Astrid Giovagnoli P.zza Umberto Balducci n.1 info@villapaolotti.comPartita VAT: Fiscal Code: GVG SRD 75E47 E230P
Nature of provision

Provision of data is optional. Refusal to provide data will make it impossible to be contacted for the purposes indicated below. The provision of data for marketing purposes is optional and does not imply the impossibility of being contacted for the other purposes.

Purposes of the processing and legal basis

performance of obligations arising from contracts entered into with the Data Controller and/or fulfilment, prior to the conclusion of the contract, of specific requests made by the data subject;

fulfilment of obligations laid down by law, regulations or EU legislation and defence in court;

With regard to the purposes under a) and b), we inform you that the processing and communication of your personal data by the Controller does not require your consent as the processing is necessary for the performance of obligations arising from the contract itself and/or for the performance of services requested by you prior to the conclusion of the contract as well as to comply with legal obligations.

Legitimate interest

The data controller does not use legitimate interest to process personal data other than for the protection of its own rights, or to establish, exercise or defend a right in court.

Data processing methods

The data collected are processed by computer.

Appropriate security measures are observed to prevent the loss of data, unlawful or incorrect use and unauthorised access.

Who processes your data

The processing of personal data is carried out by authorised personnel or by duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the DPO.

Data transfer

Data will be transferred within the EU. Some data may be transferred to the USA to those companies that are certified for the Data Privacy Framework.

Data Retention Period

The retention period for user choices related to cookies is six months as required by the measure.

The retention time for cookies varies depending on the type of cookie. For third party profiling cookies the specifications on the relevant sites can be consulted directly.

Personal data processed for contact or economic purposes will be processed for the mandatory time periods required by the relevant laws.

Rights of data subjects ex art 15 EU 2016/679

Data subjects have the right to obtain from the Data Controller, in the cases provided for, access to their personal data and the rectification or erasure thereof or the restriction of processing concerning them or to object to processing (art. 15 et seq. of the Regulation). Requests should be made to the Data Controller at the references given at the beginning of this notice.

Right of complaint

Interested parties who believe that the processing of personal data relating to them carried out through this site is in breach of the provisions of the Regulation have the right to lodge a complaint with the Garante, as provided for by Art. 77 of the Regulation itself, or to take legal action (Art. 79 of the Regulation).