POLICY PRIVACY AND COOKIES

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Pursuant to Art. 13 of EU Regulation 2016/679 – GDPR

This Notice describes the methods of managing the website www.cadelpoeta.it with reference to the processing of personal data of users who consult it or use its services. The notice is provided exclusively for this website and does not concern other websites that may be consulted by the user via external links.

Data Controller

The Data Controller is the sole proprietorship Ca’ del Poeta di Varagnolo Paolo, with registered office at Cannaregio 3710 - ZIP 30121 Venice - Italy - VAT No. 04547780272. It is possible to contact the Controller by e-mail at: Contact e-mail: info@cadelpoeta.it and PEC: cadelpoeta@pec.it

Data Collected

The website www.cadelpoeta.it collects personal data voluntarily entered by the data subject in the “Book Now” form so that the user can make a reservation for their stay, or in the “contacts” form to allow the user to request additional information beyond that described on the website.

The sole proprietorship Ca’ del Poeta di Varagnolo Paolo does not process personal data of minors under 16 years of age nor data referred to in Art. 9 of the GDPR on its website.

On the website www.cadelpoeta.it information and technical data necessary for correct navigation are processed, or data used for extracting statistical information and for checks or controls regarding the correct functioning of the site, and these are periodically deleted also by automatic systems.

Data may be used to ascertain liability in the event of computer crimes against the site. The optional, explicit and voluntary sending of e-mail to the address indicated on this site implicitly expresses consent to processing and entails the subsequent acquisition of the sender’s address necessary to reply to requests, as well as any other personal data included in the message.

Purposes of Processing

Personal data are processed on the Controller’s equipment and systems for the purpose of:

  • responding to requests sent by the user, to follow up on a reservation or other activities related thereto such as: modification of the stay, cancellation, integration, etc. These processing operations are to be considered mandatory as they are necessary and failure to provide the data compromises the provision of the services;
  • sending information and commercial proposals via e-mail or other communication tools. This processing is optional and requires the data subject’s consent.

Place of Processing, Hosting and Extra EU Data Transfers

Processing connected to the web services of this site takes place mainly at the Controller’s premises and within the European Economic Area (EEA). The technological infrastructures and hosting servers that host the website www.cadelpoeta.it are provided by SiteGround Italia S.r.l., a company appointed by the Controller as Data Processor pursuant to Art. 28 of the GDPR, with registered office at Via Agnello 8, ZIP 20121 Milan, Italy, VAT and tax code no. 09659420963, registered with the Milan Companies Register, Italy.

User data are stored within data centers located in Europe (EU). Should extraordinary technical needs arise (e.g., thirdparty backup services or integrated cloud applications) such that some data may touch nonEU countries, the Controller guarantees that the transfer will take place exclusively to countries recognized as adequate by the European Commission (Art. 45 GDPR) or in the presence of adequate contractual safeguards, such as the Standard Contractual Clauses (Art. 46 GDPR) or the adherence of thirdparty providers to the EUU.S. Data Privacy Framework.

Data Retention Period

Personal data will be retained for the time strictly necessary to achieve the purposes for which they were collected, specifically:

  • Data for reservations (Purpose A): for the entire duration of the stay and, subsequently, for 10 years in compliance with legal obligations of a fiscal and civil nature.
  • Data for information requests (Purpose B): for the time necessary to process the request and in any case no longer than 24 months from the closing of the contact.
  • Data for Marketing (Purpose C): until the revocation of consent by the user (OptOut) and in any case no longer than 48 months from the collection of the last contact/interaction.
  • Technical navigation data (Purpose D): deleted periodically and automatically within 40 days, except where necessary for the ascertainment of crimes by the Judicial Authority.

Recipients and Disclosure of Data

Personal data will not in any way be subject to public dissemination. They may be communicated or made available exclusively to:

  • Internal staff of the sole proprietorship, expressly authorized, instructed and under the direct authority of the Controller (Art. 29 GDPR);
  • SiteGround Italia S.r.l., as provider of hosting services and Data Processor (Art. 28 GDPR);
  • Third parties external to the Controller who perform outsourced activities essential for the Controller (e.g., accounting professionals for invoicing stays, legal consultants, external IT technicians for site maintenance), who will also be appointed, where necessary, as External Data Processors (Art. 28 GDPR).

Rights of the Data Subject:

  • Withdraw consent at any time. The user may withdraw consent to the processing of their personal data previously given.
  • Object to the processing of their data. The user may object to the processing of their data when it is carried out on a legal basis other than consent. Further details on the right to object are indicated in the section below.
  • Access their data. The user has the right to obtain information on the data processed by the Controller, on certain aspects of the processing and to receive a copy of the processed data.
  • Verify and request rectification. The user may verify the accuracy of their data and request its updating or correction.
  • Obtain restriction of processing. When certain conditions apply, the user may request restriction of processing of their data. In such a case the Controller will not process the data for any purpose other than their storage.
  • Obtain deletion or removal of their personal data. When certain conditions apply, the user may request deletion of their data by the Controller.
  • Receive their data or have it transferred to another controller. The user has the right to receive their data in a structured, commonly used and machinereadable format and, where technically feasible, to obtain its transfer without hindrance to another controller. This provision applies when the data are processed by automated means and the processing is based on the user’s consent, on a contract to which the user is a party or on contractual measures connected thereto.
  • The data subject may exercise their rights (as provided by the GDPR) by sending a written request to the contact points indicated by the Data Controller. The data subject also has the right to lodge a complaint with the competent supervisory authority (for Italy, the Data Protection Authority, www.garanteprivacy.it).

Automated Decision Making Processes

The Controller does not adopt any automated decisionmaking processes, including profiling pursuant to Art. 22, paragraphs 1 and 4 of the GDPR, on the data collected through the cookies of this site, except for aggregated and anonymous statistics for the exclusive use of the sole proprietorship Ca’ del Poeta di Varagnolo Paolo.

USE OF COOKIES

What are cookies?

Cookies are small text files that websites visited by users send to their terminals, where they are stored to be retransmitted to the same sites on the next visit. Socalled “thirdparty” cookies are instead set by a website different from the one the user is visiting. This is because each site may contain elements (images, maps, sounds, specific links to web pages of other domains, etc.) that reside on servers different from that of the visited site.

What are cookies used for?

Cookies are used for different purposes: performing IT authentications, monitoring sessions, storing information on specific configurations concerning users who access the server, storing preferences, etc.

Cookie Policy

The website www.cadelpoeta.it uses Cookies to make its services simple and efficient for users viewing the site pages. Users who view the Site will have minimal amounts of information placed on their devices, whether computers or mobile devices, in small text files called “cookies” saved in the directories used by the user’s web browser. There are various types of cookies, some to make site use more effective, others to enable certain functionalities.

How can I disable cookies and manage my preferences?

Most browsers are configured to accept, control or possibly disable cookies through settings. Please note that disabling navigation or functional cookies may cause the site to malfunction and/or limit the service we offer. To disable cookies you must go to that browser’s help.

For more information on cookies and to manage your preferences on thirdparty profiling cookies we invite you to visit www.garanteprivacy.it

Types of Cookies and Applets used on the site www.cadelpoeta.it and related purposes

  • Session technical cookies
    Session cookies are used to keep track of characteristic user data such as, for example, the subpage viewed, the selected language; cookies allow subsequent statistical analyses and automatic checks.
  • Statistics (Google Analytics)
    Services: Google Analytics (Google Ireland Limited)
    Purpose: Statistical analysis of visits and traffic to optimize site performance.
    Personal Data collected: Masked cookies and usage data.
    Place of processing: Ireland (EU) / USA (in accordance with the Data Privacy Framework).
    Compliance note: The site uses Google Analytics in anonymized form (with IP masking active by default) and has disabled data sharing options with other Google products. Therefore, such cookies are equated to technical cookies and do not perform profiling.
  • Interaction with social networks and external platforms
    These services allow interactions with social networks, or with other external platforms, directly from the pages of these applications. Interactions and information acquired by these applications are in any case subject to the user’s privacy settings related to each social network. If a social interaction service is installed, it is possible that, even if the User does not use the service, it still collects traffic data relating to the pages in which it is installed.
  • Instagram button and social widgets by Instagram — Meta Platforms Ireland Limited
    The Instagram button and social widgets of Instagram are interaction services with the Instagram social network, provided by Meta Platforms, Inc.
    Personal data collected: Cookies and usage data.
    Place of processing: Ireland – Instagram Privacy Policy
  • Like button and social widgets by Facebook — Meta Platforms Ireland Limited
    The “Like” button and Facebook social widgets are interaction services with the Facebook social network, provided by Meta Platforms, Inc.
    Personal data collected: Cookies and usage data.
    Place of processing: Ireland – Facebook Privacy Policy
  • Interaction with live chat platforms
    This type of service allows interaction with live chat platforms, managed by third parties, directly from the pages of this Website. This allows the user to contact the support service of this Website or this Website to contact the user while they are browsing its pages. If a live chat interaction service is installed, it is possible that, even if users do not use the service, it still collects usage data relating to the pages in which it is installed. In addition, live chat conversations may be recorded.
  • WhatsApp button and social widgets by WhatsApp (WhatsApp Ireland Limited / Meta)
    The WhatsApp button and social widgets of WhatsApp are interaction services provided by WhatsApp Ireland Limited.
    Personal data collected: Cookies and usage data.
    Place of processing: Ireland (EU) – WhatsApp Privacy Policy
    Specific purpose: The WhatsApp function is aimed at immediate communication between users of the site www.cadelpoeta.it and the sole proprietorship Ca’ del Poeta di Varagnolo Paolo, who interact exclusively for the request of information or customer care services regarding the B&B Ca’ del Poeta or the Venice Experiences indicated on the website.
  • Sending Commercial Proposals (Marketing)
    Subject to the user’s explicit and optional consent (whether customer or potential customer), the email address may be used to send exclusive offers and commercial proposals related to the B&B’s services. Data will not be disclosed to third parties and will be retained until consent is revoked, which the user may exercise at any time.

Legal References

The text of the new Regulation and the rights of the data subject are available in extended form on the Data Protection Authority’s website at www.garanteprivacy.it.