This document describes how the website of Villa Angelina Amalfi manages the processing of personal data of users who visit it or use the services made available through the website.

This document is composed of the following sections:

• ✔ 1. LEGAL REFERENCES
• ✔ 2. DATA CONTROLLER
• ✔ 3. PLACE OF DATA PROCESSING
• ✔ 4. DATA COLLECTION
• ✔ 5. COOKIES
• ✔ 6. COOKIE MANAGEMENT
• ✔ 7. OPTIONAL PROVISION OF DATA
• ✔ 8. DATA PROCESSING METHODS
• ✔ 9. DATA SUBJECT RIGHTS
• ✔ 10. DATA SHARING, COMMUNICATION AND DISCLOSURE
• ✔ 11. CHANGES TO THIS PRIVACY NOTICE
• ✔ 12. INFORMATION FOR GUESTS

1. LEGAL REFERENCES

The processing of personal data carried out through this website complies with the applicable regulations on the protection of personal data, including:

• ✔ Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) concerning the protection of natural persons with regard to the processing of personal data;
• ✔ Italian Legislative Decree 196/2003 “Personal Data Protection Code”, as amended by Legislative Decree 101/2018;
• ✔ Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector;
• ✔ Decisions and guidelines issued by the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

2. DATA CONTROLLER

When visiting this website, data relating to identified or identifiable persons may be processed.

The Data Controller is:

Villa Angelina Amalfi
Via San Lorenzo del Piano, 1
84011 Amalfi (SA) – Italy
VAT No.: 06197810655
Email: [email protected]
Website: www.villaangelinaamalfi.com

3. PLACE OF DATA PROCESSING

The personal data collected through the website are processed at the Data Controller’s premises and on servers located within the European Union, or otherwise in compliance with the provisions set out in Regulation (EU) 2016/679.

4. DATA COLLECTION

a) Technical navigation data

The computer systems and software procedures used to operate this website acquire, during normal operation, certain data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes, for example:

• ✔ IP addresses or domain names of the devices used by users;
• ✔ URI addresses of the requested resources;
• ✔ time of the request;
• ✔ method used to submit the request to the server;
• ✔ size of the file obtained in response;
• ✔ other parameters relating to the user's operating system and IT environment.

This information is used solely to obtain anonymous statistical information on the use of the website and to ensure its correct functioning.

b) Contact forms

Users may voluntarily provide personal data through the forms available on the website (for example contact forms or information request forms).

The data provided will be used exclusively for:

• ✔ responding to user requests;
• ✔ providing information about the services offered by the property;
• ✔ fulfilling any legal obligations.

The processing is carried out pursuant to Article 6 of the GDPR as it is necessary to respond to the user's request.

Failure to provide the required data may make it impossible to provide the requested service.

c) Booking request system

The website may allow users to submit booking or availability requests through integrated forms created using features of the content management system (CMS) used by the website.

The data entered by the user are sent to the property solely for the purpose of:

• ✔ managing booking requests;
• ✔ providing quotes or information about stays;
• ✔ confirming the stay where applicable.

No external booking system with independent data processing is used; the functionality is integrated directly into the website.

5. COOKIES

a) What cookies are

Cookies are small text files that websites visited by the user send to their device, where they are stored and then retransmitted to the same sites during subsequent visits.

Cookies allow, for example:

• ✔ ensuring the proper functioning of the website;
• ✔ improving the browsing experience;
• ✔ collecting aggregated statistical information on website usage.

Cookies may be:

• ✔ technical cookies
• ✔ analytics cookies
• ✔ third-party cookies

Users may manage or disable cookies at any time through their browser settings.

b) Technical cookies

This website uses technical cookies necessary for the proper functioning of its pages and services.

These include, for example:

PHPSESSID
technical session cookie used by the PHP language to maintain the session between browser and server.

c) Analytics cookies

The website may use statistical analysis tools to collect aggregated information about the use of the site (number of visitors, pages viewed, time spent on the site, etc.).

These tools are used in compliance with current regulations and, where required, only after obtaining user consent through the website’s cookie management system.

d) Cookie duration

Cookies may have different durations:

• ✔ session cookies, which are deleted when the browser is closed;
• ✔ persistent cookies, which remain stored on the user’s device for a specified period of time.

6. COOKIE MANAGEMENT

Users may decide whether to accept cookies by modifying their browser settings.

Disabling technical cookies may affect the proper functioning of certain parts of the website.

Information on managing cookies in major browsers:

• ✔ Chrome https://support.google.com/chrome/answer/95647
• ✔ Firefox https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• ✔ Safari https://support.apple.com/en-us/HT201265
• ✔ Edge https://support.microsoft.com/en-us/help/4027947

7. OPTIONAL PROVISION OF DATA

The provision of personal data through the forms available on the website is optional.

However, failure to provide the required data may make it impossible to:

• ✔ respond to user requests;
• ✔ provide information about services;
• ✔ manage booking requests.

8. DATA PROCESSING METHODS

Personal data are processed using IT and telematic tools, adopting appropriate technical and organizational measures to ensure the security, integrity and confidentiality of the information.

The processing is carried out for the time strictly necessary to achieve the purposes for which the data were collected.

9. DATA SUBJECT RIGHTS

Data subjects may exercise the rights provided for in Articles 15–22 of Regulation (EU) 2016/679, including:

• ✔ right of access to personal data;
• ✔ right to rectification;
• ✔ right to erasure;
• ✔ right to restriction of processing;
• ✔ right to data portability;
• ✔ right to object to processing.

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority.

Requests may be sent to the Data Controller via email.

10. DATA SHARING, COMMUNICATION AND DISCLOSURE

Personal data may be processed by:

• ✔ authorized personnel of the property;
• ✔ technical service providers necessary for the operation of the website;
• ✔ entities providing administrative or IT services.

The data will not be disclosed to third parties except where required by law or upon request by competent authorities.

11. CHANGES TO THIS PRIVACY NOTICE

The Data Controller reserves the right to update or modify this privacy notice at any time in relation to regulatory changes or updates to the services offered by the website.

The updated version will be published on this page.

12. INFORMATION FOR GUESTS

Pursuant to Regulation (EU) 2016/679, we inform guests that the personal data provided will be processed for the following purposes:

• ✔ management of bookings and hospitality services;
• ✔ compliance with public security obligations (Art. 109 TULPS);
• ✔ administrative, accounting and tax obligations;
• ✔ sending promotional communications where the data subject has given consent.

The data will be processed exclusively for the purposes indicated above and retained for the period required by applicable regulations.

Data subjects may exercise the rights provided for in Articles 15–22 of the GDPR at any time by contacting the Data Controller.