Privacy

INTERNET SITE

This policy will be reviewed and adjusted, if necessary, in case of regulatory updates.

B&B Ancora del Chianti di Rontani Laura informs you pursuant to Article 13 GDPR that:

1. IDENTITY AND CONTACT INFORMATION OF THE DATA CONTROLLER
The Data Controller B&B Ancora del Chianti di Rontani Laura, located at Via Collegalle n. 12 – 50022 Greve in Chianti, Florence, Italy – VAT No. 02306530482. The following contact information of the Data Controller is listed: a) Telephone number: 055/854044; b) Fax: 055/854044; c) E-mail address: info@ancoradelchianti.it; d) Website: https://www.ancoradelchianti.it

2. TYPE OF DATA PROCESSED

• • Facebook;
  • Instagram;
  • Youtube;
  • Tripadvisor;
  • Twitter;
  • Flickr.

Navigation data Computer systems and software procedures used to operate this site acquire, in normal operation, some personal data that are then transmitted implicitly in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this eventuality, data on web contacts do not persist for more than seven days.

Data provided voluntarily by the userPersonal data provided by you in connection with contact requests, conclusion of contracts for the services of the owner, registration and/or participation in events, or otherwise voluntarily provided by you, will be collected upon appropriate information and, in cases provided by law, upon free and express consent and are inherent to: a) Identification data (for example: name, surname, address, telephone, fax, e-mail); b)Fiscal data (if required by law, for example: tax code, VAT number, etc.); c) Possibly special data referred to in Art. 9 GDPR.

CookiesFor information regarding the cookie policy, please view the appropriate section on this website.

Social Network Plugins The https://www.ancoradelchianti.it/it/ website also incorporates social network plugins and/or buttons to enable easy sharing of content on your favorite social networks. Such plugins are programmed to not set any cookies when accessing the page, in order to safeguard users’ privacy. Eventually cookies are set, if so provided by the social networks, only when the user makes actual and voluntary use of the plugin. If the user browses while being logged into the social network, then he or she has already consented to the use of cookies conveyed through this site at the time of registration with the social network. For more information, please navigate to the relevant privacy policies:

3. PURPOSES OF THE PROCESSING

Purposes of the processing of personal data are as follows: a) To fulfill legal, accounting and tax obligations, including fulfilling public security obligations under Article 109 of Royal Decree No. 773 of June 18, 1931, as amended, relating to the communication to the Police Headquarters of the generalities of the clients accommodated; b) Fulfillment and organizational management of the contractual relationship; c) Responding to requests for assistance or information that the Holder will receive via e-mail, telephone, through the application or through the appropriate form; d) Pursuant to Art. 7 EU Regulation 2016/679, your data will be processed for the following marketing purposes: communication via e-mail, mail and/or sms and/or telephone contact, newsletters, commercial communications and/or advertising material on products or services offered by the Controller or satisfaction surveys on the quality of services; e) Allow browsing and consultation of the website; f) Make online booking.

4. LEGAL BASIS AND NATURE OF THE PROVISION
Legal basis of the processing of personal data for the purposes described in letters a), b) of the preceding point (purpose of processing) is: 1) the necessity of processing to enable the performance of a contract or pre-contractual measures requested by you; 2) the necessity of processing to fulfill a legal obligation to which the data controller is subject. Nature of conferment: necessary for the conclusion of the contract.Legal basis for the processing of personal data for the purpose described in (c) of the previous point (purpose of processing) is: 1) the necessity of processing to enable the data subject to have an answer to his/her requests. Nature of conferment: necessary for the data subject to receive a response to his/her requests.Legal basis for the processing of personal data for the purposes described in letter d) of the preceding point (purpose of processing) is: 1) consent. Nature of conferment: optional and failure to confer does not affect the enjoyment of the other services offered by the owner and described in the above purposes.Legal basis of the processing of personal data for the purposes described in letter e) of the preceding point (purpose of processing): legitimate interest of the owner. Nature of conferment: necessary to be able to navigate the website.Legal basis of the processing of personal data for the purpose described in letter f) of the previous point (purpose of processing) is: need to execute a contract to which the data subject is a party or the execution of pre-contractual measures taken at the request of the data subject. Nature of conferment: necessary to be able to make the reservation.

5. EVENTUAL RECIPIENTS OF THE DATA
Without the need for express consent, the data controller may communicate your data for the purposes set forth in this notice to: Judicial authorities and to those subjects to whom the communication is obligatory by law for the fulfillment of the expressed purposes. These subjects will process the data in their capacity as autonomous data controllers. Your data may be made accessible for the purposes referred to in this statement to employees and collaborators of the Data Controller, in their capacity as authorized processors and/or internal data processors and/or system administrators; to third party companies or other entities that perform outsourcing activities on behalf of the Data Controller, in their capacity as external data processors. In addition, in relation to the purposes set out in this notice, with the exception of those related to marketing activities, the data may be disclosed to professional firms in the event that the disclosure is required by law or in the interest of the subjects.Only in the event that you have given specific consent for marketing purposes, your data may be shared with Mailchimp. With the use of Mailchimp your e-mail address may be stored on servers located in the USA. To read Mailchimp’s privacy policy, you can go to the company’s website. Upon your request at info@ancoradelchianti.it or at the address mentioned in point 1 by registered mail, the Controller may provide you with the necessary information in connection with MailChimp’s compliance with the requirements of EU Regulation 2016/679. Should you wish to object to the processing of your data for these marketing purposes, you may do so at any time by sending a request to the Controller at info@ancoradelchianti.it or through the mechanism proposed in the same text as the commercial emails.With reference to the booking engine service, you may refer to the policies of Trippete S.r.l. subsequent to accessing the booking engine via booking mask or via the “book now” button. Upon your request to info@ancoradelchianti.it or to the address in point 1 by registered mail, the owner may provide you with the necessary information in relation to Trippete S.r.l.’s compliance with the requirements of EU Regulation 2016/679. The complete list of Data Processors and Authorized Processors is available, constantly updated, at the registered office of the Data Controller and can be viewed by sending a written request to the Data Controller at info@ancoradelchianti.itPer cookies, see the relevant point above (point 2 lett. c) of this policy).

6. DATA TRANSFER
Personal data are transferred to the USA for the newsletter service in accordance with the EU-US Privacy Shield Framework (adequacy decision of 12 July 2016 by the European Commission). For other purposes, other personal data, with the exception of data collected through cookies, are not transferred abroad and are stored on servers located within the European Union of the data controller and/or third parties duly identified as External Data Processors.

7. PERIOD OF DATA STORAGE
Your personal data will be processed by the Data Controller only for as long as is necessary for the pursuit of the purposes set forth in this policy, without prejudice to any additional storage period that may be imposed by law. Beyond that period, personal data will be deleted. For marketing purposes, personal data will be retained for 24 months from the time consent was given; this is without prejudice to the possibility of objecting to such processing by sending a request to the Controller at info@ancoradelchianti.it or through the mechanism proposed in the same text as the commercial emails.

8. RIGHTS OF THE DATA SUBJECT
In relation to the data itself, the data subject, or a person delegated in writing, may exercise the following rights: a) the right of access, expressly provided for by Art. 15 of EU Regulation 2016/679, i.e. the possibility of access to all information of a personal nature concerning him/her; b) the right of rectification, expressly provided for by Art. 16 of the EU Regulation 2016/679, i.e., the possibility to obtain the updating of inaccurate personal data concerning him/her without justified delay; c) the right to be forgotten, expressly provided for by Art. 17 of the EU Regulation 2016/679, consisting of the right to the deletion of personal data concerning the direct data subject; d) the right to restriction of processing when one of the cases provided for by Art. 18 of EU Regulation 2016/679; e) the right to receive certification that the operations carried out pursuant to Articles 16, 17 and 18 EU Regulation 2016/679 have been brought to the attention of those to whom the data have been communicated, unless this proves impossible or involves a disproportionate effort (Art. 19 GDPR); f) the right to data portability, expressly provided for in Art. 20 of EU Regulation 2016/679, i.e. the right to obtain in an interoperable format one’s own data and/or the right to have one’s own personal data transmitted to another data controller without hindrance by this Company; g) the right to object to the processing of personal data, expressly provided for in Art.21 of the EU Regulation 2016/679; h) the right to withdraw consent at any time, expressly provided for in Article 7 of the EU Regulation 2016/679; i) the right to lodge a complaint with a supervisory authority; l) the right to lodge a judicial appeal in case of unlawful data processing, including against the acts taken by the Guarantor pursuant to Article 78of the EU Regulation 2016/679.In order to exercise your rights, you may contact the Controller at the contact points indicated by this notice.The Holder remains available for any need for clarification.