Information pursuant to Articles 13 et seq. of EU Regulation No. 679/2016 of 27 April 2016 GDPR, (General Data Protection Regulation) “on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)”.
By carrying out the procedure of consulting the pages of the website and/or registering for our services, users voluntarily communicate their personal data to Guest House Domus Speranza, the Data Controller. The personal data sent will be processed in compliance with the principles of personal data protection established by the EU Regulation no. 679/2016 and other applicable regulations.
Data Controller
The Data Controller is Domus Speranza (hereinafter also the “Data Controller”) and may be contacted by written communication to be sent to: Domus Speranza – Via Cavento, 24, 00054 Fiumicino (RM) or at the e-mail address domussperanza@gmail.com.
Nature of the data processed
Usage and navigation data are processed to the extent that the computer systems and software procedures used to operate this website acquire information whose transmission is implicit in the use of Internet communication protocols.
This information is not collected in order to be associated with identified interested parties, but could nevertheless, through processing and association with data held by third parties, make it possible to identify users (e.g. IP addresses, domain names of the computers used by users who connect to the site, URI notation addresses of the resources requested, the time of the request, the method used to submit the request to the server and other parameters relating to the user’s operating system, browser and IT devices). Among the technologies used to collect and store information, cookies are of particular and independent importance, to whose specific information the user’s/concerned party’s attention is drawn (please indicate the link to the cookie information notice).
The data that you voluntarily provide us with during registration, subscription to our website and/or contacting us, and/or that you have manifestly made public, including your personal identification data, name, surname, address, e-mail address, telephone number, fax number, the content of any messages you may send us, etc., etc., as well as data of an economic nature that is strictly necessary for the performance of existing or future contractual relationships, shall be processed.
No special, sensitive or judicial data, which may be included among those indicated in Art. 4, letter d) and letter e) of the Privacy Code and Art. 9 of EU Reg. 2016/679, the processing of which, moreover, is prohibited by Art. 9, paragraph 1 of the aforementioned EU Reg. 2016/679, save for specific and peremptory exceptions contemplated in the same article, shall be processed.
Purpose and legal basis of processing
The personal data collected when registering or subscribing to our website are processed in order to allow access to products, services and content reserved for registered users.
The legal basis for being able to process the data obtained is represented, pursuant to Art. 6 EU Reg. 2016/679, by the following conditions
– the Data Subject has given consent to the processing of his/her personal data;
– the processing is necessary for the performance of the contract to which the Data Subject is party or for the performance of pre-contractual measures taken at the request of the same;
– processing is necessary for compliance with a legal obligation to which the Data Controller is subject.
– processing is necessary for the purposes of pursuing the legitimate interests of the Data Controller or a third party (see on this point also recital 47 GDPR), provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail, in particular if the data subject is a child. In the latter case, please note that the legitimate interests of the Data Controller are the defence of its own right, the need for fraud prevention, and/or the development of promotional activities on services/products for direct marketing purposes.
In the event that the user/participant has given consent at the time of activation of the service, or expresses it subsequently and until such time as the consent is revoked, his/her personal data may be processed by Domus Speranza in order to
– allow access to products, services and content
– send, in the event that users have given their consent at the time of activation of the service, or express it subsequently, and until the revocation of the same, communications of a commercial nature on its own products and services or those of third party companies, including by automated means, for the purposes of direct sales, as well as for sending market research and for verifying the degree of user satisfaction
– carry out, in the event that users have given their consent at the time of activation of the service, or express it subsequently, and until such time as the consent is revoked, also by means of electronic tools, activities for the analysis of specific behaviour and consumption habits, in order to improve the services provided and direct commercial proposals of interest to the user, also offering to third parties the aggregate data summarising openings and clicks obtained through a tracking system using “cookies
– communicate and transfer to third parties users’ data, in the event that the same have expressed their consent at the time of activation of the service, or express it subsequently, and until the withdrawal of the same, for the sending of commercial communications on products and services of third party companies, including by automated means, for the purposes of direct sales, as well as for sending market research;
– Domus Speranza will also use personal data for administrative and accounting purposes and for the performance of contractual obligations towards its customers.
Treatment modalities
The personal data sent through the registration/enrolment form may be processed by Domus Speranza using automated tools and paper supports.
This is without prejudice to the possibility for Domus Speranza to process the aforesaid data in aggregate form, in compliance with the measures prescribed by the Guarantor Authority and by virtue of the specific exemption from consent provided for by the same, for electronic analysis and processing (e.g.: classification of the entire clientele into homogeneous categories by level of services, consumption, expenditure, etc.) aimed at periodically monitoring the development and economic trend of Domus Speranza’s activities, to orientate the related industrial and commercial processes, to improve services, as well as to design and implement commercial communication campaigns.
These processing operations are therefore legitimate and necessary to ensure a service that better meets the expectations of users/customers.
Specific security measures are observed by the Data Controller to prevent data loss, illicit or incorrect use and unauthorised access.
The processing operations connected to the web services of this website take place both at the aforementioned premises of Domus Speranza and are carried out only by technical personnel authorised to process data, and at the premises of the Software House Company of our reference for the management of the site.
In any case, personal data are recorded and stored on electronic databases located in Italy, in countries belonging to the European Economic Area (EEA) and in third countries that guarantee an adequate level of data protection.
Obligation or option to provide data
The provision of data is optional. However, failure to provide the data deemed mandatory will prevent proper registration on the site and, consequently, the possibility of using the services reserved for registered users, and, in case of purchase, the acceptance by Domus Speranza of the order proposal and the execution of the relevant contract.Ambito di conoscenza dei Vostri dati
The following categories of persons may become aware of your data, in their capacity as external data processors or authorised internal data processors, appointed by the Data Controller
– Internal staff in charge of administrative-accounting activities;
– Internal staff assigned to the execution of contracts;
– Administrators, accountants and external consultants for accounting and administrative activities.
Personal data provided by users may also be processed by companies, bodies or consortia, appointed as data processors pursuant to Art. 28 of the above-mentioned EU Regulation, which, on behalf of Domus Speranza, provide specific processing services or related, instrumental or support activities (such as, for example: software developers and website managers, IT companies, network providers, electronic communication services, computer and telematic services for data storage and management, forwarding agents, transport companies; or consultants, lawyers or collaborators of the company, tax consultants of the company, subjects carrying out tasks of a technical and organisational nature; credit agencies, banks, financial companies, insurance companies; companies or persons providing customer support; companies reselling our products), to the extent strictly necessary to carry out their assignment to our or their organisation, subject to our letter of assignment imposing a duty of confidentiality and security.
Communication and dissemination
Personal data provided by users will not be disseminated by us, by which term is meant giving knowledge of them to unspecified persons in any way, including by making them available or consulting them, but they may be communicated by us, i.e. by giving knowledge of them to one or more determined and qualified persons, in the following terms:
– to associated or affiliated companies;
– to parties whose right to access personal data is recognised by provisions of law, regulations or EU legislation
– to subjects to whom communication is provided for by law or regulations, or by public subjects for the performance of their institutional functions.
Rights of the interested party
You may exercise your rights under Articles 15-22 GDPR at any time by contacting the Data Controller of this website.
We reproduce below the extract of Article 15 Reg Eu 2016/679, concerning your right of access to us to remind you that you can obtain the following information:
“The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data relating to him are being processed and, if so, to obtain access to the personal data and to the following information: (a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations; (d) where possible, the period for which the personal data are to be retained or, if this is not possible, the criteria used to determine that period (e) the existence of the right of the data subject to request from the controller the rectification or erasure of personal data concerning him or her or to object to the processing of personal data concerning him or her; (f) the right to lodge a complaint with a supervisory authority; (g) where the data are not collected from the data subject, all available information as to their source.
Furthermore, the Data Subject has the right:
to obtain from the data controller the rectification of inaccurate personal data concerning him/her without undue delay, pursuant to Article 16 EU Reg. 2016/679;
to obtain deletion of personal data concerning him/her without undue delay where one of the grounds listed in Art. 17 EU Reg. 2016/679 applies;
the restriction of the processing when one of the hypotheses described in Art. 18 EU Reg. 2016/679 applies;
to object at any time to the processing of data relating to him/her in the cases referred to in Article 21 EU Reg. 2016/679;
to receive in a structured, commonly used and machine-readable format the personal data concerning him/her provided to a data controller and to transmit such data to another data controller without hindrance by the data controller to whom he/she provided them, in the cases provided for in Article 20 EU Reg. 2016/679;
to withdraw consent at any time, if the processing is exclusively based on Article 6(1)(a) or Article 9(2)(a), in any case without affecting the lawfulness of the processing based on the consent given prior to the revocation
to lodge a complaint, pursuant to Article 77 EU Reg. 2016/679, with the competent Supervisory Authority Privacy Guarantor, namely in the EU Member State in which he/she normally resides, works, or of the place where the alleged infringement occurred, in addition to the ordinary right to an effective judicial remedy, pursuant to Article 79 EU Reg. 2016/679, if he/she considers that his/her rights under the aforementioned EU Reg. have been violated as a result of processing.
Period of data retention
The storage period for personal data is in line with the legal provisions in force: in compliance with the principles of minimisation, proportionality and necessity, the data will not be stored for longer periods than are necessary to fulfil the above-mentioned purposes and, therefore, the service offered or the specific legal provisions (e.g. in our legal system there is a period of at least 10 years for the storage of business administrative documents).
In any case, the company will without delay securely delete or irreversibly anonymise the data if the retention of personal data is no longer justified.
Further information
This notice may be subject to change.
If substantial changes are made to the use of personal data by the Data Controller, or if the Data Controller intends to further process personal data for a purpose other than that for which it was collected, the Data Controller will be obliged to inform the Data Subjects in advance and again.