Privacy policy

Information on the processing of personal data

Reg. (EU) 2016/679 – GDPR

Dear Customer,
pursuant to and for the purposes of Articles 13 and 14 of Reg. (EU) 2016/679 – GDPR, we hereby inform you that your personal data will be processed in the following manner:

DATA CONTROLLER

The data controller is Sedona S.r.l. (VAT No.: 01913290381), to whom any request for information regarding the processing may be sent, either to the registered office at Via Modena 119, Ferrara 44122, or via email to info@villacontessamassari.it.

PURPOSES AND LEGAL BASIS FOR THE PROCESSING OF COLLECTED DATA

Your data is collected to allow the Controller to provide its services, as well as for the following purposes:

• responding to your requests for information;
• contacting you regarding requests for information about products, services, and offers;
• suggesting features, products, and services that may be of interest to you;
• preventing and detecting fraud and abuse;
• adopting security measures;
• extracting browsing statistics;
• analyzing performance to improve services.

Providing data is mandatory to benefit from the aforementioned services, and any refusal makes it impossible for the undersigned to provide the requested service or product. In this case, the data will be stored for the time necessary to carry out these tasks, unless further legal obligations are imposed on the data controller.

The personal data provided by you may also be processed for:

• promotional activities of the undersigned;
• sending newsletters via email and/or fax and/or surface mail.

For these specific processing activities, you will be asked to provide specific consent, which may be revoked at any time by accessing your reserved area on this site.

TYPES OF DATA COLLECTED

The Data Controller is able to collect, through communication from the data subject or through services provided by third parties, the following categories of personal data:

Data provided directly by the data subject:

• personal details;
• contact details;
• email.

Data collected automatically:

• Internet Protocol (IP) address;
• cookies
• browsing statistics

PROCESSING METHODS

The Controller processes the Personal Data of Data Subjects by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, loss, modification, or destruction of Personal Data.
Processing is carried out using IT and/or telematics tools, with organizational methods and logic strictly related to the purposes indicated.
Personal data in the possession of the Controller will under no circumstances be subject to dissemination.
However, in some cases, categories of persons in charge involved in the organization of the Controller such as technical or administrative staff, sales, marketing, system administrators, or external parties such as third-party technical service providers, hosting providers, IT companies, communication agencies, payment platforms, and consultants appointed, if necessary, as Data Processors by the Controller, may have access to the Data.
The updated list of Processors may be requested from the Data Controller at any time.

RETENTION PERIOD

The aforementioned data will be stored for as long as necessary for the performance of the contract and for the time required for the proper exercise of legal guarantees. Billing data will be stored for the period established by law for tax and accounting purposes.

DATA TRANSFER

Personal data is not subject to transfer to third countries or other international organizations.

RIGHTS OF THE DATA SUBJECT

Pursuant to European Regulation 2016/679 – GDPR, and the national legislation in force, the data subject may, in the manner and within the limits provided by current legislation, exercise the following rights:

• request confirmation of the existence of personal data concerning them (right of access of the data subject – Art. 15 GDPR);
• know its origin;
• receive intelligible communication;
• obtain information about the logic, methods, and purposes of the processing;
• request the updating, rectification, integration, erasure, transformation into anonymous form, or blocking of data processed in violation of the law, including those no longer necessary for the
• pursuit of the purposes for which they were collected (right to rectification and erasure – Arts. 16 and 17 GDPR);
• right to restriction and/or objection to the processing of data concerning them (Art. 18 GDPR);
• right of withdrawal;
• right to data portability (Art. 20 GDPR);
• in cases of processing based on consent, to receive their data provided to the controller, in a structured and machine-readable form and in a format commonly used by an electronic device;
• the right to lodge a complaint with the Supervisory Authority (Art. 15 GDPR)

We invite you to periodically check our site for any changes or updates to this notice.