Privacy Policy

This personal data processing notice (“Privacy Policy”) is provided pursuant to Regulation (EU) 679/2016, Italian Legislative Decree 196/2003, as amended, and the other applicable provisions and measures concerning the protection of personal data, in order to inform you about the processing of personal data provided by completing the booking form available on the website https://bagnoamedea.com/ (Website), through the Spiagge.it widget.

This notice applies exclusively to bookings made through the Website and does not apply to any other websites that may be accessed through links.

DATA CONTROLLER

The data controller is Il Maestrale S.n.c., VAT/Tax Code 02628450468, with registered office at Via G. Barellai 5, 55049 Viareggio (LU), Italy, e-mail: ilmaestralesnc@gmail.com.

CATEGORIES OF DATA PROCESSED

The personal data collected through the online booking form are as follows:

  • personal identification data, such as name and surname;
  • contact details, such as e-mail address and telephone number.

PURPOSES OF PROCESSING

The personal data provided through the online booking form are collected and processed for the following purposes:

  1. to provide the requested service, namely to allow you to make a booking at our establishment and to send you service communications relating to the confirmation, modification, reminder and cancellation of the booking (“Provision of the Service”);
  2. to request reviews and collect feedback on the booked services (“Customer satisfaction”);
  3. to comply with obligations provided for by laws, regulations and EU legislation ("Compliance with legal obligations”);
  4. to prevent or identify any abuse or fraudulent activity against our establishment and therefore allow us to defend ourselves, including in legal proceedings ("Defence");
  5. to send you marketing communications by e-mail concerning products and services similar to those you have purchased (“Soft Spam”).

LEGAL BASIS AND NATURE OF THE PROCESSING

The legal basis for the purpose of Provision of the Service is the performance of pre-contractual or contractual measures requested by you. Providing personal data for this purpose is not mandatory, but failure to do so will make it impossible to provide the requested service.

The processing carried out for the purpose of Compliance with legal obligations is necessary in order to comply with any applicable legal obligations.

The legal basis for the purpose of Customer Satisfaction is the legitimate interest of our establishment in requesting and collecting opinions and feedback on the services booked.

Similarly, the legal basis for the purpose of Soft Spam is the legitimate interest of our establishment in sending you marketing communications by e-mail relating to products and services similar to those you have already purchased. You may stop receiving these communications, without any consequences for you, by using the link at the bottom of each of these e-mails.

The processing carried out for the purpose of Defence is also based on the legitimate interest of our establishment in identifying and preventing any fraudulent activities or abuse in the use of the booking form or the Website, and therefore in protecting itself, including in legal proceedings.

DISCLOSURE OF PERSONAL DATA

In order to provide its services, our establishment will share the personal data provided for the online booking with Spiagge S.r.l. (VAT/Tax Code 0453664040; with registered office at Via Marecchiese 48, 47923 Rimini, Italy), owner of the SaaS platform that allows users to make bookings through the Website.

Your personal data may also be shared with: i) third parties used by our establishment to provide services on its behalf; ii) persons authorised by our establishment to process personal data necessary to carry out activities strictly connected to the provision of the service, such as our employees; iii) public, judicial or police authorities.

METHODS OF DATA PROCESSING AND TRANSFER OF PERSONAL DATA

The processing of personal data is carried out, in compliance with applicable legislation, also with the support of IT tools.

The data controller has adopted technical solutions and security measures that ensure the security of personal data and prevent their alteration, loss, incorrect processing or unauthorised access.

DURATION OF PROCESSING AND RETENTION

The data provided will be processed and stored for the period strictly necessary to pursue the purposes stated above. This is without prejudice to retention for a longer period in relation to requests from public authorities or in connection with the exercise of the right of defence in the event of disputes.

Personal data processed for Soft Spam will be retained until you object to such processing through the link at the bottom of each Soft Spam e-mail.

RIGHTS OF THE DATA SUBJECT

Pursuant to Articles 15 et seq. of the GDPR, you may exercise the following rights:

  • obtain confirmation from the data controller as to whether or not personal data concerning you are being processed, and obtain information about the origin, purposes, categories of data processed, recipients to whom the personal data have been or will be disclosed, including abroad, and the retention period;
  • obtain, without undue delay, the rectification of inaccurate data or the completion of incomplete data;
  • obtain, without undue delay, the erasure of data pursuant to Article 17 of the GDPR;
  • obtain the restriction of processing where the accuracy of the data is contested or the processing is unlawful, pursuant to Article 18 of the GDPR;
  • obtain data portability by receiving the data in a structured format;
  • object to the processing pursuant to Article 21 of the GDPR.

You may exercise the above rights by writing to the following e-mail address ilmaestralesnc@gmail.com.

In any case, you always have the right to lodge a complaint with the Italian Data Protection Authority, pursuant to Article 77 of the GDPR, if you believe that the processing of your personal data is contrary to the legislation in force.