GIORGETTI DEMEZIA director of the company G.P. DI GIORGETTI DEMEZIA & C. sas, with registered office in Via San Giovanni Bosco 81 in Porto Recanati (MC), Postcode 62017, VAT number 01078850433, Tel. +39 071 7590996, E-mail: info@balneareantonio.it, Tax code: GRGDMZ62B68H211S as data controller (hereinafter referred to as the “controller”), in accordance with the legislation indicated, the information that the processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.

I therefore provide you with the following information pursuant to EU Regulation no. 2016/679 (hereinafter, “GDPR”).

1. Object of the treatment

The Data Controller processes personal, identifying and non-sensitive data such as

First Name
Surname
Company Name
Address
Tax ID
VAT No.
Email
Telephone Number
Website
IP Address
(hereinafter, “personal data” or “data”) provided by you during registration and/or when sending a message or requesting assistance through the Data Controller’s website.

2. Purpose of processing

The sensitive data you provide will be processed, by way of example but not limited to, for the following purposes:

• Management of customer/supplier personal data
• Administrative management
• 
  Information on the services offered
• Legal obligations
• Receive assistance.
• Make invoices.
• fulfill pre-contractual, contractual and tax obligations arising from existing relationships;
• fulfill obligations established by law, by a regulation, by community legislation or by an order of the Authority;
• exercise the rights of the Data Controller, for example the right to defense in court.

Statistics – Google Analytics

I servizi contenuti nella presente sezione permettono al Titolare del Trattamento di monitorare e analizzare i dati di traffico e servono a tener traccia del comportamento dell’Utente.

Google Analytics with anonymized IP (Google Inc.).

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other Google services.

Google may use Personal Data to contextualize and personalize the ads of its own advertising network.

This Google Analytics integration anonymizes your IP address. This anonymization works by shortening Users’ IP addresses within the member states of the European Union or in other countries party to the Agreement on the European Economic Area.
Only in exceptional cases will the IP address be sent to Google’s servers and shortened within the United States.

Place of processing:
United States – Privacy Policy

Hosting and backend infrastructure

This type of service has the function of hosting Data and files that allow this Application to function, allow its distribution and provide a ready-to-use infrastructure to provide specific features of this Application.

Some of the services listed below, if any, may operate on geographically distributed servers, making it difficult to determine the actual location where the Personal Data is stored.

Serverplan srl societá unipersonale

All site data is present on the Serverplan Datacenters.

Personal Data collected:
Usage data; various types of data as specified in the service’s privacy policy.

Place of processing:

Italy – Privacy Policy

3. Purpose of processing

Your personal data is processed using the operations indicated in Article 4 of the Privacy Code and Article 4(2) of the GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data.
Your personal data is processed both on paper and electronically.

4. Duration of treatment

Personal data subject to Processing will be retained in compliance with the principle of proportionality and, in any case, until the purposes of the processing have been achieved or until the data subject withdraws their specific consent, whichever is earlier.
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and, in any case, for no longer than 10 years from the termination of the Service Purposes relationship.

5. Communication of data

Without the need for express consent (pursuant to Article 24, letters a), b), and d) of the Privacy Code and Article 6, letters b) and c) of the GDPR), the Data Controller may communicate your data for the purposes referred to in Article 2) to judicial authorities as well as to those entities to whom communication is required by law for the fulfillment of the aforementioned purposes.

These entities will process the data in their capacity as independent data controllers.

Your data will not be disclosed.

6. Data transfer

Personal data is stored on Serverplan servers located in Italy, within the European Union.
It is understood that the Data Controller, if necessary, will have the right to move the servers outside the EU.
In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with applicable legal provisions, subject to the stipulation of the standard contractual clauses provided by the European Commission.

7. Rights of the interested party

As the data subject, you have the rights set forth in Article 7 of the Privacy Code and Article 15 of the GDPR, specifically the rights to:

obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and communication of such data in an intelligible form;
Obtain information on: a) the source of the personal data; b) the purposes and methods of the processing; c) the logic applied in the event of processing carried out with the aid of electronic means; d) the identification details of the data controller, data processors, and the designated representative pursuant to Article 5, paragraph 2 of the Privacy Code and Article 3, paragraph 1, of the GDPR; e) the entities or categories of entities to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors, or persons in charge;
Obtain: a) the updating, rectification, or, where interested therein, integration of the data; b) the erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been notified, including their content, to those to whom the data were communicated or disseminated, except where such disclosure proves impossible or involves a manifestly disproportionate effort compared to the right being protected;
object, in whole or in part: a) for legitimate reasons, to the processing of your personal data, even if pertinent to the purpose of collection; b) to the processing of your personal data for the purpose of sending advertising or direct sales materials or for conducting market research or commercial communications, through the use of automated calling systems without the intervention of an operator, by email and/or through traditional marketing methods by telephone and/or post.
Where applicable, you also have the rights set forth in Articles 16-21 GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Guarantor Authority.

8. How to exercise your rights

You may exercise your rights at any time by sending:

a registered letter with return receipt to G.P. DI GIORGETTI DEMEZIA & C sas, with registered office at Via San Giovanni Bosco 81 in Porto Recanati (MC), zip code 62017;
an email to the address: info@balneareantonio.it

9. Data controller and data processor

GIORGETTI DEMEZIA – G.P. DI GIORGETTI DEMEZIA & C. sas, with registered office in Via San Giovanni Bosco 81 in Porto Recanati (MC), Postcode 62017.