Within the meaning of EU Regulation 2016/679, this page describes the processing procedures of personal data communicated by the data subject through the "Contacts" form on website https://www.caratteretoscano.com/en/contacts.
This information does not relate to other sites, pages or online services accessible via hypertext links that may be published on our web site.
The data controller is Aurora Spa with registered office in Via Diacceto 34, Siena.
DATA PROTECTION MANAGER
Aurora Spa does not require the Data Protection Manager within the meaning of Article 37 of EU Regulation 679/2016.
PURPOSE, LEGAL BASIS AND COMPULSORY OR OPTIONAL NATURE OF THE PROCESSING
The personal data provided by the data subject when filling out the "Contacts" form will be processed by the Data Controller for the purpose of handling requests (including but not limited to responding to requests for information on the services offered, etc.).
The personal data subject to processing will only include data provided by the data subject when sending messages through the Form.
The provision of personal data (name, surname and email) is required to allow the Data Controller to manage communications and/or requests received through the form or to contact the data subject in question. Failure to provide such information will mean that the Data Controller will not be able to respond to the requests received. Conversely, the collection of other data is optional: failure to provide such data has no consequences for the user.
TYPES OF DATA PROCESSED AND PURPOSE OF PROCESSING
The data communicated by the user
The personal data provided directly by the data subject by filling out the "Contacts” form, involves the acquisition of said data.
PERSONAL DATA PROCESSING PROCEDURES
The data collected is processed with IT tools and only residually on paper.
The Data Controller uses servers located within Europe and IT systems located at the Data Controller’s headquarters to process the data related to the services of the website. The transfer of data abroad is not envisaged.
Appropriate technical and organisational measures have been adopted to guarantee an appropriate level of security and to prevent the loss of data, illicit or incorrect use and unauthorised access.
The data provided directly by the data subject shall be kept for the entire duration of the contractual relationship and in accordance with the statutory obligations.
Your data may be communicated or may become known to the employees or collaborators of our company, expressly designated by us as “authorised to process data" and/or appointed "external processing manager" (e.g. the provider of web platform development and maintenance services).
RIGHTS OF DATA SUBJECTS
Data subjects have the right to obtain from Aurora Spa, in the cases provided for, access to personal data and the correction or cancellation of such data or restrict any processing that concerns them or oppose the processing and the portability of data (Articles 15 et seq. of the Regulation).
Requests should be sent to: firstname.lastname@example.org.
RIGHT OF COMPLAINT
Data subjects who believe that the processing of the personal data related to them carried out via this website takes place in breach of the requirements of the Regulation have the right to submit a complaint to the Data Protection Authority, as laid down in Article 77 of the same Regulation, or to complain to the appropriate courts (Article 79 of the Regulation).