Privacy policy

 

Subjects of the treatment

 

The data controller in accordance with the laws in force is the site administrator, Marrubiu Resort Note di Stelle, who can be contacted via the email address at the bottom of the page.

 

Legal basis of the processing

 

We process data mainly on the basis of user consent. The granting of consent takes place through the communication or service request forms specifically prepared, with which the consents relating to the specific purpose of the service are collected. The provision of data and therefore the consent to the collection and processing of data is optional, the User can deny consent, and can revoke a consent already provided at any time (via the browser settings for cookies, or the Contact link ). However, denying consent may make it impossible to provide some services and the browsing experience on the site may be reduced.

The data for site security and for the prevention of abuse and SPAM, as well as data for the analysis of site traffic (statistics) in aggregate form, are processed on the basis of the legitimate interest of the Data Controller in protecting the site and of the users themselves. In such cases, the user always has the right to object to the processing of data (see par. User rights).

The data provided for professional consultancy or assignments are processed on the basis of the fulfillment of a contract and the fulfillment of a legal obligation. In such cases, specific information is provided.

 

Purpose of the treatment

 

The processing of the data collected by the site, in addition to the purposes connected, instrumental and necessary for the provision of the service, is aimed at the following purposes:

 

- Statistics (analysis)
Collection of data and information in an exclusively aggregated and anonymous form in order to verify the correct functioning of the site. None of this information is related to the natural person-User of the site, and does not allow identification in any way. Consent is not required.

 

- Security
Collection of data and information in order to protect the security of the site (spam filters, firewalls, virus detection) and of the Users and to prevent or unmask fraud or abuse to the detriment of the website. The data are recorded automatically and may possibly also include personal data (IP address) that could be used, in accordance with the laws in force on the subject, in order to block attempts to damage the site itself or to cause damage to other users, or in any case harmful activities. or constituting a crime. These data are never used for the identification or profiling of the User and are periodically deleted. Consent is not required.

 

- Ancillary activities
Communicate data to third parties who perform functions necessary or instrumental to the operation of the service, and to allow third parties to carry out technical, logistical and other activities on our behalf. Suppliers have access only to personal data that are necessary to carry out their duties, and undertake not to use the data for other purposes, and are required to process personal data in accordance with current regulations.

 

- Consultancy and professional assignments
In case of spontaneous sending of data in order to ask for professional consultancy or for a professional assignment, the data will be used for the sole purpose of evaluating the assignment and for the eventual fulfillment of the same. In such cases, specific information will be provided.

 

Collected data

 

We collect user data in two ways.

 

- Data collected in an automated manner
During the navigation of the Users, the following information may be collected and stored in the log files of the server (hosting) of the site: - internet protocol address (IP); - type of browser; - parameters of the device used to connect to the site; - name of the internet service provider (ISP); - date and time of visit; - web page of origin of the visitor (referral) and exit; - possibly the number of clicks.

These data are used for statistical and analytical purposes, in an exclusively aggregated form. The IP address is used exclusively for security purposes and is not crossed with any other data.

 

- Data provided voluntarily

The site may collect other data in the event of voluntary use of services by users, such as commenting, communication services (contact forms, for consulting requests), and will be used exclusively for the provision of the requested service:
- name; - email address; - any further data sent spontaneously by the user.

 

Data retention period

 

The data collected during the operation of the site are kept for the time strictly necessary to carry out the specified activities. Upon expiry, the data will be deleted or anonymised, unless there are other purposes for their conservation.

The data (IP address) used for site security purposes (blocking attempts to damage the site) are kept for 30 days.
Data for analytics (statistics) purposes are stored only in aggregate form. The data collected for requests for consultancy or for professional assignments are kept for the time necessary to carry out the assignment and for ancillary purposes (judicial protection, etc ... ).

 

Transfer of collected data to third parties

 

The data collected by the site are generally not provided to third parties, except in specific cases:
- legitimate request by the judicial authority and only in the cases provided for by law; - if it is necessary for the provision of a specific service requested by the User ; - for the execution of security checks or site optimization.

 

Transfer of data to non-EU countries

 

We may have to share some of the data collected with services located outside the European Union area. In particular with Google, Facebook and Microsoft (LinkedIn) through social plugins and the Google Analytics service. The transfer is authorized on the basis of specific decisions of the European Commission, or on the basis of the Standard Contractual Clauses of the individual services (see the paragraphs relating to third party services).

 

Security measures

 

We treat visitor / user data in a lawful and correct manner, adopting appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data. We are committed to protecting the security of your personal data while it is being sent, using Secure Sockets Layer (SSL) software, which encrypts information in transit. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, categories of employees involved in the organization of the site or external subjects (such as third party technical service providers, hosting providers) may have access to the data.

​

​

​

​

​

​

​

​

​

​

 

Cookies

 

We use cookies, text files that are recorded on the user's terminal or that allow access to information on the user's terminal. Cookies allow information on visitor preferences to be stored, they are used in order to verify the correct functioning of the site and to improve its functionality by customizing the content of the pages based on the type of browser used, or to simplify navigation by automating procedures (eg . Login, site language), and finally for the analysis of the use of the site by visitors.

We use the following categories of cookies:

- technical cookies , used for the sole purpose of transmitting an electronic communication, to ensure the correct display of the site and navigation within it. Furthermore, they allow to distinguish between the various connected users in order to provide a requested service to the right user (Login), and for site security reasons. Some of these cookies are deleted when the browser is closed (session cookies), others have a longer duration (such as the cookie necessary to keep the user's consent in relation to the use of cookies, which lasts 1 year). Consent is not required for these cookies;

- analysis cookies , used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site. They are assimilated to technical cookies if the service is anonymized.

- profiling and marketing cookies , used exclusively by third parties other than the owner of this site to collect information on the behavior of users while browsing, and on interests and consumption habits, also in order to provide personalized advertising.

 

By clicking "Accept" on the banner present at the first access to the site, the visitor expressly consents to the use of cookies and similar technologies, and in particular to the registration of these cookies on his terminal for the purposes indicated in this document, or to access via cookies to information on your terminal.

 

Disabling cookies

 

The user can refuse the use of cookies and at any time can revoke a consent already provided. Since cookies are connected to the browser used, they can be disabled directly from the browser, thus refusing / revoking consent to the use of cookies, or through the banner at the bottom of the page (Cookie settings).

DISABLING cookies may prevent the correct use of some functions of the site itself, in particular the services provided by third parties may not be accessible, and therefore may not be viewable. For example:
- YouTube videos or other video sharing services; - social network buttons; - Google maps.

 

User rights

 

Pursuant to the European Regulation 679/2016 (GDPR), the User can, according to the methods and within the limits established by current legislation, exercise the following rights:

- object in whole or in part, for legitimate reasons, to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication;
- request confirmation of the existence of personal data concerning him (right of access); - know its origin; - receive intelligible communication; - have information about the logic, methods and purposes of the processing; - request its updating , rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected; - in cases of treatment based upon consent, receive, at the cost of any support, your data provided to the owner, in a structured and readable form by a data processor and in a format commonly used by an electronic device; - the right to lodge a complaint with the Authority control (Privacy Guarantor); - as well as, more generally, to exercise all the rights that are recognized by the current provisions of the law.

Requests should be addressed to the Data Controller.

 

Updates

 

This privacy statement is updated as of January 13, 2022.

​