Newsletter

PRIVACY DISCLAIMER
 
Dear Customer,
in accordance with current legislation on the protection of personal data (EU Reg. 2016/679 - GDPR and current Privacy Code), we wish to inform you that the processing of your personal data is carried out correctly and transparently, for lawful purposes and protecting your confidentiality and your rights.
Therefore, in compliance with the aforementioned legislation, we provide you with the following information:
 
1. Owner and manager of the treatment
Data controller: Emporio Vacanze Srl, with registered office in Portoferraio (LI), Loc. Cacciò 3, VAT number: 01623880497, PEC: emporiovacanze@pec.it
Responsible for processing: Administrator
 
2. Processing methods.
The treatments are carried out both by electronic means (also through our websites www.emporiovacanze.com and www. ufficio-vacanze.it) and with the aid of paper means for the performance of the services offered.
 
3. Nature of the data processed.
If you register in our contacts or if you request news or buy our products, we will process your personal and fiscal data, as well as data of an economic nature that are necessary for the conduct of relations between you and our company. Generally, we do not process any sensitive or judicial data, but if this becomes necessary we will do it only by first asking for your consent. In carrying out our services as requested by you, the communication of personal data relating to minors may be necessary: ​​in such cases we will take all the measures prescribed by current legislation.
 
4. Purpose of the processing and their legal basis.
Emporio Vacanze Srl processes the above data for:
1) Receive requests for information and quotes; enter into contracts; provide the agreed services and any other services that may be required e perform maintenance and technical assistance relating to the services requested. Since these are necessary treatments for the definition of the contractual agreement and for its subsequent implementation, your consent is not required (Article 6, paragraph 1, letter b) EU Reg. 2016/679), except in the case in which data belonging to particular categories are provided, as per art. 9 EU Reg. 2016/679. In case of refusal to provide personal data, we will not be able to confirm the reservation or provide the requested services.
3) Manage payments, including through banking / financial third parties. Since these are necessary treatments for the definition of the contractual agreement and for its subsequent implementation, your consent is not required (Article 6, paragraph 1, letter b) EU Reg. 2016/679). The data are processed by us and by our representatives and are communicated externally only in compliance with legal obligations. In case of refusal to provide the data necessary for the aforementioned obligations, we will not be able to provide you with the requested services.
4) Manage billing. For these purposes, the processing is carried out without the need to acquire your consent (Article 6, paragraph 1, letter c) EU Reg. 2016/679). The data are processed by us and by our representatives and are communicated externally only in compliance with legal obligations. In case of refusal to provide the data necessary for the aforementioned obligations, we will not be able to provide you with the requested services. The data acquired for these purposes are stored by us for the time required by current legislation (10 years and even longer in the case of tax assessments).
5) Management of any complaints and / or disputes. For these purposes, the processing is carried out without the need to acquire your consent (Article 6, paragraph 1, letter f) EU Reg. 2016/679).
6) If it is necessary to perform a task of public interest or connected to the exercise of public authority of which the data controller is invested, processing is carried out without the need to acquire your consent (Article 6, paragraph 1, letter e), EU Reg. 2016/679).
7) in some cases there may be theprevalent interest of the data controller, if, for example, there is a breach of contract by the counterparty, such as to induce the holder to give rise to proceedings for the recovery of the credit. In such cases it is not necessary to acquire your consent (Article 6, paragraph 1, letter f) EU Reg. 2016/679).
8) Subject to your express consent and up to the revocation of the same (art. 6, par. 1, lett. A) and art. 7 EU Reg. 2016/679), to be provided following timely and exhaustive information illustrated before the acquisition of consent, your personal data may be processed directly or through third parties - even through one or more remote communication techniques ( e-mail, telephone, fax) - as well as for the purposes referred to in points 1) -7) of the information also for purposes not strictly connected to the provision of the requested services, namely for:
a) promotional initiatives on products and / or services of Emporio Vacanze Ltd.;
b) sending, also by SMS, e-mail and / or telephone channels, advertising, information and commercial information;
c) interactive commercial communications;
d) promotional initiatives on products and / or services of third-party companies;
e) studies and statistical and market research.
 
5. Transfers of data to third countries or international organizations
The transfer of personal data beyond the borders within which the GDPR operates involves the risk that the legislation applicable in the place of transfer does not present the same standards of guarantees. Therefore, it becomes relevant for the interested party to be made aware of the potential risks relating to data security and protection.
Our treatments do not provide for the transfer of personal data outside the boundaries of applicability of the GDPR.
 
6. Retention period
The data are processed until the complete execution of the service and also afterwards, in compliance with legal obligations and for administrative and commercial purposes.
 
7. Data voluntarily provided by the interested party.
In the event that you choose to make the payment in one of the forms provided (bank transfers or credit cards), in addition to the data requested in the contact form (name, surname, telephone number, e-mail) you will be required to give us all the data necessary for the completion of these practices. Failure to communicate even only some of these data makes it impossible to perform the service.
The express and voluntary sending of data by filling in the forms specifically prepared on our website entails our subsequent acquisition of the same data. All the requested data are necessary for us to respond to your requests and / or fulfill the performance you require. Specific summary information is prepared and / or displayed on the individual pages of the site used for carrying out particular services on request.
 
8. Obligation or right to provide data and consequences of any refusal.
The data listed above (name, surname, telephone number, e-mail) are necessary for us to be able to carry out the requested services: failure to provide them in whole or in part consequently implies the impossibility of giving rise to the execution of the service itself.
While browsing our site or during your telephone contacts, you may be asked to also communicate additional data that are not strictly necessary for the fulfillment of the main service (offer of accommodation and accommodation services), but become so for the execution of any ancillary services that will be represented from time to time. Their failure to provide is evaluated case by case, and determines the consequent decisions according to the importance we recognize to the data requested but not provided by you.
Whenever we intend to offer you an accessory service, the specifically pursued purposes will be described promptly and your express consent will be requested.
Failure to provide the data required for a specific service or the failure to issue the relative and consequent consent to their use does not affect the possibility of requesting and consenting to the provision of other different ancillary services (nor, much less, prevents or excludes the main service) .
 
9. Communication and dissemination of the collected data.
The data collected are not "disseminated" by us, in other words, they are not disclosed to indeterminate subjects in any way, including by making them available or consulting; however, they can be "communicated" by us, that is, they are given knowledge to one or more specific subjects, in particular to:
- third parties, to whom Emporio Vacanze Srl entrusts certain activities (or part of them) functional to the provision of the services mentioned above. In this case, the same subjects will operate as independent Data Controllers or will be designated as Data Processors or Trustees. Any designated Managers or Officers will receive adequate operating instructions, with particular reference to the adoption of minimum security measures, in order to guarantee the confidentiality and security of the data.
- subjects who can access the data in fulfillment of a legal obligation, within the limits established by the law itself;
- the credit and / or financial institution, if payment by electronic money is required;
- the partner companies, if consent has been given to the sending of advertising and direct marketing by the same
 
10 I rights of the interested party (articles 13/22 and 77/79 of EU Regulation 2016/679)
In your capacity as an interested party, you have the rights referred to in Articles. 13/22 and 77/79 EU Reg. 2016/679, and precisely the rights of:
- withdraw consent at any time. The interested party can always revoke the consent to the processing of their personal data previously expressed (Article 13, paragraph 2, letter c) EU Reg. 2016/679);
- oppose the processing of their data. The interested party may oppose the processing of their data in the cases referred to in art. 21 EU Reg. 2016/679;
- access their data. The interested party has the right to obtain information on the data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the data processed (Article 15 of EU Reg. 2016/679);
- verify and ask for rectification. The interested party can verify the correctness of their data and request its updating or correction (Article 16 EU Reg. 2016/679);
- obtain the limitation of the processing. When certain conditions are met, the interested party can request the limitation of the processing of their data. In this case we will not process the data for any other purpose other than their conservation (Article 18 of EU Reg. 2016/679);
- obtain the cancellation or removal of their personal data. When certain conditions are met, the interested party may request the cancellation of their data by the Data Controller (Article 17 of EU Reg. 2016/679). In these cases we will certainly cancel as soon as possible.
- receive their data or have them transferred to another owner (data portability).
- The interested party has the right to receive their data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain their transfer without obstacles to another owner. This provision is applicable when the data are processed with automated tools and the processing is based on the consent of the interested party, on a contract of which the interested party is a party or on contractual measures connected to it (Article 20 of EU Reg. 2016/679 );
- propose a complaint. The interested party can lodge a complaint with the competent personal data protection supervisory authority (Article 77 EU Reg. 2016/679)
- act in court (art.79 EU Reg. 2016/679).
 
11. Procedures for exercising rights
You can exercise your rights at any time by contacting the Data controller at one of the addresses indicated.
You can also, at any time, lodge a complaint with the Privacy Guarantor by registered A / R addressed to: Guarantor for the protection of personal data, Piazza Venezia 11, 00186, Rome. Or by means of a certified e-mail message (pec) addressed to: Protocol@pec.gpdp.it (art.77 EU Reg. 2016/679), or resort to the ordinary judicial authority (art.79 EU Reg. 2016/679) .