S.I.T.L.A. S.r.l. – headquartered in Via Porciglia, 15 – 35121 Padua (Italy), VAT registration number 00373980283 (hereinafter the “Data Controller”), owner of the websites https://www.unionlido.com - https://booking.mare.unionlido.com - https://mare.unionlido.com - https://www.casagiotto.it - https://booking-casagiotto.pod.camp (hereinafter the “Sites”), in its capacity as the personal data controller pertaining to users who browse and are registered on the sites (hereinafter the “Users“) hereby provides its privacy policy pursuant to the provisions of Art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter referred to as the “Regulation” or the “GDPR” or the “Applicable Legislation”).
These Sites and any services offered through the Sites are reserved for people who are 18 years of age and over. The Data Controller does not collect personal data relating to persons under the age of 18, unless entered by users over the age of 18 who declare that they can exercise parental responsibility. At the request of Users, the Data Controller will promptly erase all personal data unintentionally collected and relating to persons under the age of 18.
The Data Controller takes the utmost account of the right to privacy and protection of the personal data of its Users. For any information in relation to this privacy policy, Users may contact the Data Controller at any time, in one of the following ways:
Please note that, after an assessment of specialist knowledge of the provisions on personal data protection, the Company has appointed the Personal Data Protection Officer. The Personal Data Protection Officer monitors compliance with the legislation on the processing of personal data, provides the necessary advice and cooperates with the Personal Data Protection Authority.
The Personal Data Protection Officer and their contact details are as follows: E-mail: dpo@unionlido.com
The personal data of Users will be lawfully processed by the Data Controller pursuant to the provisions of Art. 6 of the Regulation for the following processing purposes:
The provision of personal data for the aforementioned processing purposes is optional but necessary, as failure to provide such data will make it impossible for the User to browse the Sites, register on the Sites and use the services offered by the Data Controller on the Sites.
With the User’s free and optional consent, certain personal data of the User (i.e. name, surname, e-mail address, address) may be processed by the Data Controller also for marketing and newsletter purposes (sending advertising material, direct sales, commercial communication, sending newsletters containing information in relation to important industry news related to the activities of the Sites), i.e. to enable the Data Controller to contact the User by mail, e-mail, to propose to the User the purchase of products and/or services offered by the same Data Controller, to submit offers, promotions and business opportunities. In the absence of consent, the User’s ability to register on the Sites will not be affected. In the event of consent, the User may at any time revoke their consent by making a request to the Data Controller in the manner set out in paragraph 6 below.
The User may also easily object to receiving further promotional communications and newsletters via e-mail by clicking on the appropriate opt-out link, which is present in every promotional e-mail and newsletter.
The Data Controller hereby states that, following the exercise of the right to object to receiving promotional communications and newsletters by e-mail, it may be the case that, for technical and operational reasons (e.g. compiling of the contact list completed shortly before the Data Controller received the User’s opt-out request), the User may continue to receive some additional promotional and newsletter messages. Should the User continue to receive promotional and newsletter messages after 24 hours of exercising their right to opt out, please report this issue to the Data Controller using the contact details provided in paragraph 6 below.
Please note that the Data Controller’s Newsletter is operated on the Active Campaign platform, which belongs to ActiveCampaign LLC, with its registered office at 1 North Dearborn Street, 5th floor, Chicago, IL 60602 (USA), which ensures compliance with personal data protection regulations, is registered with the Data Privacy Framework – please refer to their privacy policy (https://www.activecampaign.com/legal/privacy-policy).
The Data Controller will process User personal data using the manual and computerised tools, on the basis of procedures strictly correlated with the above purposes and in any event in such a manner as to ensure the security and confidentiality of the data.
The personal data of Users of the Sites will be kept for the time strictly necessary to carry out the primary purposes described in paragraph 1 above, or in any case as necessary for the protection in civil proceedings of the interests of both Users and Data Controller, except as stated in the specific recruitment policy.
In the cases referred to in paragraph 2 above, Users’ personal data will be retained until their consent is revoked or they request to opt out and, in any event, within the limits set out in the Applicable Legislation.
With reference to the purposes referred to in points (1.1, 1.2, 1.3, 1.5), the legal basis of the processing is indeed the provision of the services provided through the Sites and requested by you (pursuant to Article 6, paragraph 1, letter b of the Privacy Regulation 2016/679); with reference to the optional purposes referred to in paragraph (2), the legal basis of the processing is Your possible freely expressed consent (pursuant to Article 6, paragraph 1, letter a of the Privacy Regulation 2016/679); with reference to the purposes set out in point (1.4) of the previous paragraph, the legal basis of the processing is to fulfil a legal obligation to which the data controller is subject (pursuant to Article 6, paragraph 1, letter c of the Privacy Regulation 2016/679).
Employees and/or collaborators of the Data Controller in charge of managing the Sites may become aware of the personal data of Users. These subjects, who are formally appointed by the Data Controller as “data processors”, will process the User’s data solely for the purposes indicated in this policy and in compliance with the provisions of the Applicable Legislation.
Third parties who may process personal data on behalf of the Data Controller as “External Data Processors” may also become aware of the Users’ personal data; these include for example providers of IT and logistics services required for the operation of the Sites, outsourced or cloud computing service providers, professionals and consultants.
Users have the right to obtain a list of any data processors appointed by the Data Controller by sending a request to the Data Controller in the manner indicated in paragraph 6 below.
Users may exercise their rights pursuant to the provisions of Art. 15 et seq. of the GDPR, in the manner envisaged by the provisions of Art. 12, by contacting the Data Controller as follows:
Should our company fail to respond within the time frames set out in the regulations or should you deem the response to the exercising of your rights to be unsuitable, you may lodge a complaint with the Personal Data Protection Authority. Below are their details: Garante per la protezione dei dati personali (Personal Data Protection Authority)( www.gpdp.it– protocollo@gpdp.it).