This page describes how the website is managed with regard to the processing of personal data of users who consult it. This information is also provided pursuant to Article 13 of the EU Regulation 2016/679 applicable from May 25, 2018 – General Regulations for the Protection of Personal Data (hereinafter referred to as GDPR) to those who interact with the web services of AnBo Società Agricola S.r.l. accessible by electronic means from the address:

https://www.piecorto.it

The information is provided only for website  https://piecorto.it  and not also for other websites that may be consulted by the user through links for which AnBo Società Agricola S.r.l. is not responsible.

DATA CONTROLLER

Pursuant to Article 4 point 7) of GDPR 2016/679, the Data Controller is AnBo Societa Agricola S.r.l – Agricultural Society, with registered office in Località Piecorto n.2 – 53036 – Poggibonsi (SI)

DATA PROCESSORS

Pursuant to Article 28 of GDPR 2016/679, the Data Processor for reservations is the company E4J s.r.l. via delle Cantine, 27 – 50041 Calenzano, Florence (FI) – Italy

PLACE OF DATA PROCESSING

Data processing related to the web services of this site takes place at the headquarters of the owner and those responsible for processing. No data from the web service is disclosed to third parties or disseminated.

By using third-party cookies, processing may also take place outside the European community by Google and companies that install third-party cookies. In this regard, please refer to the relevant Cookie Policy.

TYPES OF DATA PROCESSED

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and are deleted immediately after processing. The data could be used to ascertain liability in case of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than thirty days.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.

The interested party is sent to read this privacy policy when filling in the data acquisition forms on the site.

PROCESSING METHODS

Personal data are processed by automated tools for the time necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

PURPOSE, LEGAL BASIS AND NATURE OF CONFERMENT

The Personal Data you provide through the Site will be processed by AnBo Società Agricola S.r.l for the following purposes:

a)     purposes inherent to the execution of a contract to which you are a party or to the execution of pre-contractual measures taken at your request (e.g.: reservations, joining special offers, contact requests, etc.). Consent Not required. The legal basis is based on Article 6 par. 1 letter b) of GDPR 2016/679 i.e. the processing is necessary for the performance of a contract to which the data subject is party or the execution of pre-contractual measures taken at the data subject’s request;

b)     purposes for registration to the company’s newsletter. Consent Required. The legal basis is based on the consent of the data subject pursuant to Article 6 part.1 lett. a) of GDPR 2016/679

c)     purposes related to sending promotional and commercial material via email in the exercise of soft spam for bookings that have been contracted. Consent not Required The legal basis is to pursue pursuant to Article 6 part.1 lett. f) of GDPR 2016/679 a legitimate interest on the part of the data controller and in accordance with Article 130 paragraph 4 of Legislative Decree 196/2003;

d)     to evaluate possible job applications by acquiring resumes via email or online ads. Requires explicit consent. The legal basis is under Article 111 bis of Legislative Decree 196/200

e)       possible profiling purposes through third-party cookies; Consent required as per Cookie Policy. The legal basis is based on Article 6 par. 1 lit. a) of GDPR 2016/679 in accordance with Directive 2009/136/EC of November 25, 2009  direttiva 2009/136/CE del 25 novembre 2009

f)     research and statistical analysis on anonymous aggregate data, aimed at measuring the functioning of the Site, measuring traffic and evaluating usability and interest to make it more functional and performant; Consent not necessary as there is no processing of personal data

g)     purposes related to compliance with laws and regulations; Consent not Required The legal basis is according to Article 6 par. 1 lett. b) of GDPR 2016/679;

h)      purposes necessary to establish, exercise or defend a right in court or whenever judicial authorities exercise their jurisdictional functions. Consent not Required The legal basis is under Article 6 para 1 lett. c) of GDPR 2016/679that is, the processing is necessary for the pursuit of a legitimate interest of the data controller;

TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

IThe data controller undertakes to circumscribe the areas of circulation and processing of personal data (e.g., storage, archiving, retention of data on its servers) to countries that are part of the European Union, with an express prohibition to transfer them to non-EU countries that do not guarantee (or in the absence of) an adequate level of protection, i.e., in the absence of protection tools provided by the EU Regulation 2016/679 – CHAPTER V (adequacy decision,  Standard Contractual Clauses  or explicit consent from the data subject).

AREAS OF COMMUNICATION OF PERSONAL DATA

Personal data acquired through this website may be communicated to:

• to Public Bodies or Offices in accordance with legal and/or contractual obligations;
• persons authorized to the processing of the company AnBo Società Agricola S.r.l;
• companies of the group as subsidiaries, which provide hotel and restaurant services for the individual hotels of the Brand (for details please refer to the individual privacy policies of the hotels’ web pages);
• the external manager E4J s.r.l. for the management of the booking platform;
• companies that provide management and technical support services for the IT infrastructure of the company An Bo Società Agricola S.r.l and its subsidiaries;
• third parties that manage profiling and analytical cookies such as Google for example (according to the cookie policy);
• to debt collection companies and banking institutions for the management of collections and payments arising from the execution of the stay;
• to any consultants and external companies specifically appointed to carry out tax and fiscal consulting activities on our behalf;
• to collaborators or companies providing services when the communication is necessary for the use by the interested party of the hotel’s services;
• third-party companies that install profiling cookies;

An updated list of external data controllers appointed under Article 28 of GDPR 2016/679 can be obtained from the data controller.

DATA RETENTION

AnBo Società Agricola S.r.l will process the user’s Personal Data for the time strictly necessary to achieve the purposes indicated in this statement and until the time allowed by Italian law to protect its interests (Art. 2947(1)(3) c.c.).

The user will remain registered in the company’s newsletter until he/she exercises the right to unsubscribe exercisable simply by a click directly from the email received.

AUTOMATED PROCESSING

AnBo Società Agricola S.r.l does not carry out any processing based on automated decision-making, including profiling that produces legal effects or that may significantly affect those who interact with the website.

For details of the cookies installed by the external technology manager and their interaction with social tools see the Cookie Policy of the website.

RIGHTS OF DATA SUBJECTS

You may freely exercise your rights under Articles 15 et seq. of GDPR 2016/679 viz:

• withdraw consent at any time. The User may revoke the consent to the processing of his/her Personal Data previously expressed;
• object to the processing of their Data. The User may object to the processing of its Data when it is done on a legal basis other than consent;
• access their Data. The User has the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed;
• verify and request rectification. The User may verify the correctness of its Data and request its update or correction;
• obtain the restriction of processing. When certain conditions are met, the User may request the limitation of the processing of its Data. In this case, the Data Controller will not process the Data for any purpose other than its preservation;
• obtain the deletion or removal of their Personal Data. When certain conditions are met, the User may request the deletion of their Data by the Data Controller;
• Receive their Data or have their Data transferred to another owner. The User has the right to receive his or her Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred unimpeded to another data controller. This provision is applicable when the Data are processed by automated means and the processing is based on the User’s consent, a contract to which the User is a party or contractual measures related thereto;
• Propose Complaint. The User may propose a complaint to the competent data protection supervisory authority or take legal action.

HOW TO EXERCISE YOUR RIGHTS

To exercise the above rights, the data subject may contact the management of the company at the email address: info@piecorto.it