Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to EU Regulation no. 679 of 27 April 2016, this page describes the methods of processing the personal data of users who consult the website www.serapogaeta.com. This information does not concern other sites, pages or online services accessible via hypertext links published on the site referring to external resources or referable to other websites. The purpose of this document is to provide information on the methods, timing and nature of the information that the Data Controller must provide to users when connecting to the web pages of the domain www.serapogaeta.com, regardless of the purpose of the connection, according the Italian and European legislation. If the user is under the age of sixteen, pursuant to art. 8, c. 1 EU Regulation 2016/679, will have to legitimize your consent through the authorization of the parents or guardian.

DATA PROCESSING.

Data controller
Following consultation of the site indicated above, data relating to identified or identifiable natural persons may be processed. The Data Controller collected from this website is Associazione Balneari Spiaggia di Serapo, Via Bologna n.26, 04024 Gaeta (LT), C.F. 90069980598, who can be contacted at the following addresses: Email: info@serapogaeta.com.

Personal Data Processing Methods

The Personal Data provided or acquired will be processed in accordance with the principles of correctness, lawfulness, transparency and protection of confidentiality pursuant to current regulations. The Data Controller processes Users’ Personal Data by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.

Purpose of Personal Data Processing and Legal Basis
Personal data can be collected independently by the owner or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data of the Users, of a technical-IT nature (eg the IP address, the type of browser used, the operating system, the name and the addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal functioning of the internet. Such data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and / or to check its correct functioning.

The Data that the User chooses to provide spontaneously are collected to allow the Website to provide its services, as well as for the following purposes:

a) to fulfill any type of obligation contemplated and envisaged by current laws, regulations, related regulations and commercial uses, in particular, in tax / fiscal matters. This treatment is mandatory to fulfill a legal obligation to which the Data Controller is subject;

b) to follow up on the specific requests addressed to the Owner by the User for communications of an informative nature relating to the Services of the same Owner, via e-mail messages or by filling in the contact form and other communication tools such as the number phone. This processing is optional and based on the User’s consent, however failure to communicate one or more Data will make it impossible to respond to the request for information and to use the services offered by the Owner;

c) for sending information and promotional offers also through the newsletter service. This treatment is based on the consent freely expressed by the User;

d) to perform statistical analysis on aggregate and anonymous data to analyze User behavior to improve the products and services provided by the Owner as well as meet the User’s expectations;

e) for profiling activities for marketing purposes. This treatment is based on the consent freely expressed by the User.

Category of Personal Data processed

Among the Personal Data processed by this Website, either independently or through third parties, there are: Cookies, Usage data, Email, Telephone, Name and Surname, City of Origin.

Personal data can be collected independently by the owner or through third parties. Personal Data may be provided voluntarily by the User when using the Website, by filling in the contact form, subscribing to the newsletter and similar and similar operations, when communicating with the Data Controller by email and / or by telephone. Additional Personal Data collected may be indicated in other sections of this Privacy Policy or by means of information texts displayed together with the collection of the Data. The optional, explicit and voluntary sending of e-mails via the Contact Form or by means of the addresses indicated on this Website, entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other Personal Data included in the e-mail. . The consent to the provision of Data by the User is necessary to be entered in the Data Controller’s database and for the purposes of establishing and correctly carrying out what is offered by the same to its Users, as well as to third parties for the fulfillment of the single activity requested. . Failure to provide, therefore, prevents registration in the Data Controller’s databases, the completion of any contracts, as well as the execution of the same and any other possible activity.

Communication of Data
In addition to the Data Controller, in some cases, they may have access to the Data:
a) categories of specially trained persons involved in the organization of the Website (administrative, commercial, marketing, legal, system administrators) ;
b) external subjects (such as third party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Managers, if appointed, can always be requested from the Data Controller ;

c) public or private subjects who can access the Data in compliance with legal obligations ;

d) subjects who perform accessory and instrumental tasks with respect to the activity of the Owner .

Treatment Times

As expressly provided for by art. 5, co. 1, lett. e) of the GDPR, the Data are kept for the time necessary to process them in relation to the performance of the service requested by the User, or required by the Purposes described in this document and in particular:

– The Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until this interest is satisfied;

– The Data collected on the basis of the User’s consent may be kept until such consent is revoked;

– The Data collected for fiscal / administrative obligations or contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and in accordance with the provisions of the law, for a period not exceeding that dictated by civil law and in any case for a period not exceeding at 10 (ten) years;

– The data collected for marketing and profiling purposes will be kept for a period not exceeding 24 (twenty-four) months from the acquisition of consent;

The Data may be kept by the Data Controller for a longer period in compliance with legal obligations or by order of an authority. The User can always request the interruption of the processing or the deletion of the data.

Cookie

This website uses cookies. Cookies are small text files that can be used by websites to make the user experience more efficient and to personalize content and ads, provide social network functions and analyze traffic.

Cookie Policy

Place of processing and transfer of data abroad

The Data are processed at the Data Controller’s operational headquarters. For more information, you can contact the Data Controller. The Data may be processed by natural persons and / or legal entities operating on behalf of the Data Controller and by virtue of specific contractual obligations and based in EU or non-EU member countries. In the event that the Data is transferred outside the EEA, the Data Controller will take all appropriate contractual measures to ensure adequate data protection.

Tools used for the processing of personal data

Address management and mail sending

These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow the collection of data relating to the date and time of the display of messages by the User, as well as the User’s interaction with them, such as information on clicks on links inserted in messages.

Contact form

By filling in the contact form with their data, the User consents to their use to respond to requests for information, or for any other purpose indicated by the form header. Personal Data collected through the Contact Form: Name, Surname, Email, Telephone, City of origin.

Newsletter

By registering for the newsletter, the User’s email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be sent. The User can choose at any time to unsubscribe from the newsletter by sending a specific request via email to the Data Controller, following the methods indicated in the email received for registration or by clicking on the link that he will find in the emails of the commercial campaign and / or promotional. The User Data will be deleted immediately from the “email marketing” software.
Personal data collected: email.
This Website uses the newsletter service provided by Mailchimp , an American marketing automation and email marketing platform.

Personal data collected: email.
Place of processing: USA – Privacy Policy

Security measures adopted

This website has an SSL certificate and uses the HTTPS protocol to make sure the moment in which Personal Data is entered. With the use of this protocol, transactions and data that are transmitted on websites take place with maximum security and the content of the communication is not read or manipulated in any way by third parties.

Statistics

The statistical services only allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior. This website uses the following services:

Google Analytics

Google Analytics is an analytics service provided by Google Ireland Limited. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network. Google may also transfer this information to third parties where this is required by law or where such third parties process the aforementioned information on behalf of Google. The IP address anonymization function is active on this site. The IP address transmitted by the browser for purposes related to Google Analytics will not be incorporated into other data already held by Google.
At the following link the add-on of the browser for the deactivation of Google Analytics.

Personal Data collected: Cookies and Usage Data.

Place of processing: Ireland – Privacy Policy

Interaction with Social Networks

These services allow interaction with social networks or other external platforms directly from the pages of this Website. The interactions and information acquired from this Website are in any case subject to the User’s privacy settings relating to each social network. In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.

Facebook

The Facebook buttons are services for interacting with the Facebook social network, provided by Facebook Ireland Ltd.

Personal Data collected: Cookies and Usage Data.

Place of processing: Ireland – Privacy Policy

Instagram

The Instagram buttons are services of interaction with the Instagram social network, provided by Facebook.

Personal Data collected: Cookies and Usage Data.

Place of processing: Ireland – Privacy Policy )

LinkedIn

LinkedIn buttons are interaction services with the LinkedIn social network, provided by LinkedIn Corporation.

Personal Data collected: Cookies and Usage Data.

Place of processing: Ireland – Privacy Policy

Telegram

Telegram buttons are services of interaction with the communication service provided by Telegram.

Personal Data collected: Cookies and Usage Data.

Place of processing: UK– Privacy Policy

Content on external platforms

These services allow you to view content hosted on external platforms directly from the pages of this Website and interact with them. In the event that a service of this type is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.

This Website uses Youtube.

Youtube is a video content viewing service managed by Google that allows this website to integrate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of processing: Ireland – Privacy Policy

Exercise of the rights of the interested party

The interested party has the right to exercise the faculties provided for in Articles 7, 15-22 of the European Reg. 679/2016. In particular, he has the right to withdraw his consent at any time and, upon simple request to the Data Controller, he may request access to Personal Data, receive the Personal Data provided to the Data Controller and, where possible, transmit them to another Data Controller without impediments (so-called portability), obtain the updating, the limitation of the processing, the rectification of the Data and the cancellation of those processed in breach of the current legislation. He has the right, for legitimate reasons, to oppose the processing of personal data concerning him and the processing for the purpose of sending advertising material, direct sales and for carrying out market research. You also have the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for the protection of personal data.
The interested party may exercise his rights by contacting the Data Controller by email at the address: info@serapogaea.com

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. In the event of non-acceptance of the changes made to this Privacy Policy, the User is required to cease using this Website and may request the Data Controller to remove their Personal Data. The Owner is not responsible for updating all the links that can be viewed in this Privacy Policy, therefore whenever a link is not functional and / or updated, Users acknowledge and accept that they must always refer to the document and / or section of the sites internet accessed from this link.