Privacy Policy
PRIVACY NOTICE PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 (GDPR)
This privacy notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and applicable national data protection laws. It describes how personal data of users who browse and use this website are processed.
DATA CONTROLLER
The Data Controller is SOCIETÀ IMMOBILIARE TOSCO EMILIANA “S.I.T.E.” S.R.L., with registered office at Via Martelli 5, 50129 Florence (FI), VAT number and Tax Code 01825420977, contactable at the certified email address (PEC): site@pec.uipservizi.it.
CATEGORIES OF DATA PROCESSED
While browsing and using the services offered through the website, the Data Controller processes personal data, including identification and contact data voluntarily provided by the user, as well as information necessary to manage requests and bookings for hospitality services.
Navigation data automatically collected by the IT systems operating the website are also processed, such as IP addresses, device identifiers, request-related information, and other technical parameters. These are used exclusively for security, monitoring, and proper system operation.
PURPOSES AND LEGAL BASIS OF PROCESSING
Personal data are processed for specific, explicit, and legitimate purposes. In particular:
- to allow website browsing and ensure proper functioning of IT systems, based on the Controller’s legitimate interest;
- to respond to information requests and implement pre-contractual measures at the user’s request;
- for the execution of contracts and fulfillment of administrative, tax, and accounting obligations related to hospitality services;
- to comply with legal obligations, including public security regulations applicable to accommodation facilities.
Where required, processing may be based on the data subject’s consent, which can be withdrawn at any time.
PROCESSING METHODS AND SECURITY MEASURES
Data are processed using electronic tools and, where necessary, paper-based means, in accordance with GDPR principles.
The Controller adopts appropriate technical and organizational measures pursuant to Article 32 GDPR, including protection against unauthorized access, backup systems, access control, and monitoring.
Data are processed by authorized personnel and by external processors appointed under Article 28 GDPR.
DATA DISCLOSURE AND RECIPIENTS
Personal data may be shared with third parties necessary for service provision and website operation, such as IT providers, hosting services, and administrative, legal, and tax consultants.
Data may also be disclosed to public authorities where required by law.
DATA TRANSFERS
Personal data are not transferred outside the European Economic Area. Any such transfers, if necessary, will comply with Articles 44 et seq. of the GDPR.
DATA RETENTION
Data are retained only as long as necessary for the purposes for which they were collected, in compliance with storage limitation principles.
DATA SUBJECT RIGHTS
Data subjects may exercise rights under Articles 15 et seq. GDPR, including access, rectification, erasure, restriction, portability, and objection.
They also have the right to lodge a complaint with the Data Protection Authority.
NATURE OF DATA PROVISION
Providing personal data is necessary for managing requests and contractual relationships. Failure to provide data may prevent service delivery.
COOKIES
The website uses technical cookies and, with consent, third-party or profiling cookies. See the dedicated Cookie Policy.
MINORS’ DATA
The website is not intended for individuals under 16. The Controller does not knowingly collect minors’ data without parental consent.
CHANGES TO THIS NOTICE
This notice may be updated at any time. Changes will be published on the website.
CONTACTS
For any request: site@pec.uipservizi.it