Information of B&B Le Strazzigne managed by Leiden srls for the processing of personal data

1. Data subject to processing

The data subject to this processing are the following Data referred to you: name, surname, e-mail address, telephone number, Behavior data, purchase choices/preferences, company to which you belong. In order to better understand what has just been indicated, it should be noted that Personal Data are defined by current European legislation as "any information concerning an identified or identifiable natural person ('data subject'); the natural person who can be identified, directly or indirectly, with particular reference to an identifier such as name, identification number, location data, an online identifier or one or more elements characteristic of his physical, physiological, genetic, psychic, economic, cultural or social identity" is considered identifiable.

2. treatment

The processing of your data is carried out by means of the operations indicated in art. 4 no. 2) of the GDPR and precisely, by way of example: collection, registration, organization, structuring, conservation, adaptation, modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation cancellation, destruction.

3. Purpose and Legal Basis of The Processing

1. without your express consent (art. 6 of the GDPR) – since the processing in question is necessary to be able to follow up your express request – for the following Purposes:
1. comply with your requests for information;
2. allow and manage your Registration to the Site, as well as the performance of the activities reserved for you by virtue of registration to the Site.
2. Only with your informed, specific and distinct consent (Art. 130 of D.Legislative decree. 30.6.2003 No 196 as subsequently amended by D.Lgs 10 August 2018, n.101, below "Privacy Code" and art. 6 and 7 of the GDPR) – since to carry out the processing in question it is necessary to obtain your Consent – for the following Purposes:
1. carry out profiling activities, such as the analysis of habits and consumption choices dealing mainly with: the Data entered during registration on the Site, the Purchasing Data, the Data provided by you during surveys and market research;
2. send informative and promotional communications, including commercial communications, newsletters, advertising material and/or offers of products and services also personalized and carry out statistical and/or market studies and researches both with traditional methods of contact (paper mail, calls by operator) and automated (e-mail, fax, sms, mms, call without operator) from Italy or abroad (also from countries not belonging to the European Community) by Le Strazzigne;
3. send informative and promotional communications, including of a commercial nature, newsletters, advertising material and/or offers of products and services also personalized and carry out statistical and/or market studies and researches both with traditional methods of contact (paper mail, automated calls (e-mail, fax, sms, mms, operatorless call) from Italy or abroad (also from countries outside the European Union) by parent companies, subsidiaries and/or subsidiaries of Le Strazzigne, as well as by entities contractually linked to Le Strazzigne that manage the distribution and sale of Le Strazzigne products and services (including any distributors of Le Strazzigne).

4. Nature of the Conferment and consequences of refusal

The provision of data for the purposes referred to in point (i) of the previous Article 3, although optional, is necessary in order to correctly comply with your requests and therefore failure to provide you will preclude the possibility of providing you with adequate feedback. The provision of data for the purposes referred to in point (ii) of the previous article 3, although optional, is necessary in order to correctly comply with your request for registration on the Site and therefore failure to provide it will preclude the possibility for you to correctly conclude the registration procedure on the Site. The provision of data as well as the relative consent to the processing of the same for the purposes referred to in the .b), points (i), (ii) and (iii), of the previous art. 3 is optional. However, any refusal and/or provision of inaccurate and/or incomplete information may prevent the development of profiles, the analysis of your preferences and also prevent the carrying out of so-called marketing activities including the carrying out of statistical and/or market studies and research. In case of consent, you have the right, at any time to revoke it. We remind you that the withdrawal of consent, pursuant to and for the effects of art. 7 of the GDPR, may not prejudice the lawfulness of the processing based on the consent conferred by you before the revocation.

5. How to treat

The processing of your Personal Data will be carried out through appropriate electronic and /or telematic tools with logics closely related to the above purposes and, in any case, in such a way as to guarantee the security and confidentiality of the Data themselves. Without prejudice to any provisions provided for in the appropriate Cookie Policy of the Site, Le Strazzigne informs the Interested Parties that no type of automated decision-making will be used, meaning by "automated decision-making" what is provided for pursuant to art. 22 of the GDPR, i.e. "a decision based solely on automated processing, including profiling, which produces legal effects that affect him or that similarly significantly affects his person".

6. Data retention

The Data will be stored at/through Server/Cloud System located within the European Union.

Your personal and contact data will be used and stored for the purposes referred to in the previous art. 3) for a time not exceeding 5 years (five), without prejudice to a different timing as defined by the current legislation of the sector for the fulfilment by the Owner of specific legislative obligations as well as in case of establishment of any litigation (e.g. judicial disputes). Your purchase data will be used and stored for the purposes referred to in the previous art. 3) for a time not exceeding 2 years (two).

In order to guarantee the updating and correctness of the Data as well as the consents you may express, Le Strazzigne will send you every 12 months a specific communication with which you will be again indicated the methods and contacts – specified in the following Articles 11), 12) and 13) – through which you can manage your Registration.

At the end of the retention period, the Data will be deleted and deleted from all paper and/or IT media in a safe manner and in full compliance with the time-to-time legislation in force regarding the protection of Personal Data or will be anonymized by Le Strazzigne for the purpose of carrying out statistical and/or historical analysis, therefore without any possibility for Le Strazzigne and/or third parties to identify the data subjects of the processing.

7. Security measures

We care about the protection of your information. We are therefore committed to taking all appropriate and reasonable steps to protect you from misuse, loss or unauthorized access to the Personal information we hold. To this end, we have put in place a series of appropriate technical and organizational measures. Measures to deal with any suspected data breach are included.

8. Subjects authorized to process data

1. Employees and collaborators of the company functions of Le Strazzigne responsible for the pursuit of the above purposes that have been authorized to process in advance and that have received adequate operational instructions.
2. Companies such Booking.com which manage the distribution and sale of Le Strazzigne.b's products and services for the purposes set out in paragraph (iii) of the preceding Article 10 of the Directive. 3.

9. Communication and Dissemination of Data

The Data Controller may communicate your Data to supervisory bodies and/or judicial authorities as well as to all other subjects to whom communication is mandatory by law for the performance of the said purposes. Your Data will not otherwise be disclosed and/or communicated.

10. Data Transfer

The management and storage of Personal Data will take place on/through server/cloud system located within the European Union belonging to the Data Controller and/or third-party companies in charge and duly appointed as External Data Processors. In any case, it is understood that a subsequent and possible transfer of data outside the European Union will take place in accordance with the applicable legal provisions – including Articles 44, 45 and 46 of the GDPR – as well as the adequacy decisions taken by the European Commission and also if necessary and in the absence of adequacy decisions, by concluding agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided for by the European Commission. In detail, with regard to a possible and subsequent transfer of data to companies present in the United States, the same will happen with regard to those companies that have joined the so-called "Privacy Shield", in compliance with the decision of the European Commission that has recognized the Agreement called "EU-U.S. Privacy Shield" an adequate level of protection of Personal Data transferred from the European Union to organizations resident in the United States that self-certification in the system and the subsequent Authorization to transfer Data abroad through the agreement called "EU-U.S. Privacy Shield" adopted by the Italian Data Protection Authority on 27 October 2016.

11. Rights of the person concerned

1. pursuant to and for the effects of art. Article 10 of the Directive is applicable to the 15 and 77 of the GDPR, the right to lodge a complaint with a competent authority;
2. pursuant to and for the effects of art. 15 of the GDPR, the right of access to information related to the processing of data, including: the purposes of the processing; the types of Personal Data processed; the expected time of storage of Personal Data or, if not available, the criteria used to determine it; the recipients or categories to whom the Data have been or will be communicated; possible transfers of data to third countries; if the Data had not been collected from the data subject, the available source information; the existence of automated decision-making, the logic applied to user segmentation for profiling activities and the importance of such processing for the data subject.
3. pursuant to and for the effects of art. 16 of the GDPR, the right to obtain the rectification of inaccurate data and the integration of incomplete data;
4. pursuant to and for the effects of art. 17 of the GDPR, the right to request deletion and obtain it in case there are certain reasons, including: the Data are not necessary in relation to the purposes for which they were collected; Personal Data have been unlawfully processed; Personal Data must be deleted as a result of a legal obligation established by European Union or Member State law and which applies to the data controller; the data subject has withdrawn his consent This right will not be exercisable in the event that the Data are necessary for the management of complaints.
5. pursuant to and for the effects of art. 18 of the GDPR, the right to obtain the limitation of processing in case certain hypotheses are used, among which: the Personal Data available to Le Strazzigne are inaccurate; the data subject does not agree with the use of their Data but opposes their deletion and therefore requires a limitation of their use; The Strazzigne does not need to keep the Data but the data subject needs it for any complaints. In case of request for limitation, the Data will be processed, except for their storage, only for certain reasons, including: complaints from the data subject; express consent of the data subject; protection of the rights of other natural or legal persons or for reasons of public interest at the level of the European Union or a given Member State.
6. pursuant to and for the effects of art. 20 of the GDPR, the right to receive their Data in structured format, common and legible use and to transmit them to another data controller in the cases provided for by the indicated legislation.
7. pursuant to and for the effects of art. 21 of the GDPR, the right to object – at any time and for reasons related to its particular situation – to the processing of its Data, including the processing of data for profiling and direct marketing purposes. In this case, Le Strazzigne will refrain from further processing the Data, subject to the exceptions provided for by the indicated legislation.

12. Data Controller

The data controller is Leida srls, based in Viale Giovanni Paolo II n. 11 – 73100 Lecce, Tax Code and VAT 04910880758.

13. How rights are exercised

In order to exercise the rights referred to in art. 11), you can write to the Data Controller at the following addresses: B&B Le Strazzigne – Via Roma 55, 73030 – Marittima di Diso (LE); email: info@lestrazzigne.it

14. Changes to this Policy

This Data Processing Policy may be subject to change. It is therefore advisable to check this Policy regularly and refer to the most up-to-date version.

In the event that you do not accept the changes made, you may at any time cancel your Registration to the Site or modify and/or revoke the Consents previously expressed through the contacts indicated above.

Last updated: May 20, 2021