Privacy and Legal Notes

Privacy information pursuant to art. 13 EU Reg. 27 April 2016 n. 679

Dear Madam/Dear Sir,

We wish to inform you that the European Regulation n. 2016/679 (“GDPR”) provides that the subject who processes personal data is required to inform the interested party (i.e. the subject to whom the data refers) on certain elements qualifying the processing, which must take place correctly, lawfully and transparency, protecting the confidentiality and rights of the interested party. In compliance with the art. 13 of the aforementioned Regulation we therefore provide you with the following information:

GENERAL PRINCIPLES OF TREATMENT

The processing will be carried out by collection, recording, organisation, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction and will be carried out by the owner, managers and persons authorized to process .

The data will be processed in a lawful, correct and transparent manner; will be collected for specified, explicit and legitimate purposes and processed in a way that is not incompatible with those purposes; will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, accurate and updated; will be treated with the utmost confidentiality, mainly with electronic and IT tools and stored both on IT media and on paper media, and on any other type of suitable media, in compliance with the principles dictated by the European Regulation on the protection of personal data, prescriptions issued by the Supervisory Authority and in any case in such a way as to guarantee adequate security, including protection, with adequate technical and organizational measures, from unauthorized or illicit processing or even accidental loss.

DATA CONTROLLER

The data controller is the Terme di Comano consortium company - ACTC, loc. Terme di Comano 6, 38070 Stenico (TN), VAT number and CF 00180160228.

For the purposes of exercising the rights provided for by the Regulation and for any request relating to your personal data, you may contact the Data Controller by sending a communication to the email address privacy@termecomano.it.

CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The Data Protection Officer (DPO) of the Terme di Comano Consortium can be contacted at the email address: dpo@termecomano.it .

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA

The personal data that the undersigned Structure will come into possession of are not subject to disclosure. The same may be communicated within the Company and the data controllers and data processors appointed by the Company may become aware of them to fulfill the purposes for which the data are collected.

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

Azienda Consorziale Terme di Comano does not currently intend to transfer your personal data to countries outside the European Union.

PURPOSE AND LEGAL BASIS OF THE PROCESSING

Your data is collected through the Terme di Comano website for the following purposes:

a) Fulfill legal obligations, civil and tax regulations;

b) Fulfill any contractual obligations towards the interested party;

c) For the direct sale of cosmetic products;

d) provide information and assistance to the customer upon request of the same;

e) for marketing activities (sending advertising material, carrying out market research and subscribing to the newsletter via e-mailing list, profiling and related activities), subject to the consent of the interested party.

The legal bases for the processing are: lett. a) fulfillment of legal obligations; lit. b) c) d) fulfillment of contractual obligations or customer requests; lit. e) consent and request of the interested party.

In some parts of the site, specific privacy information and consent requests may be included in addition to this information for any collection and processing of further and specific data.

PERIOD OF CONSERVATION OF PERSONAL DATA

The data collected will be kept for a period of use depending on the specific purpose:

  • d) Personal data relating to requests for information from unregistered users will be kept for the time necessary to provide the interested party with a response.
  • a) – b) -c) The personal data of users who have registered and activated an account for the use of services and for direct sales will be kept for the period of use of the account and will be automatically deleted after 24 months since the last access, unless further consent is given; the contractual and invoicing data relating to sales will be kept for the legally necessary period (10 years) from the sale;
  • e) data collected for marketing purposes for a period of 24 months, renewable unless the recipient's consent is withdrawn, which can be done by unsubscribing from the mailing list from each email received; the user's profiling data will be deleted after 5 years;
  • A longer period of retention of personal data may possibly be determined by requests made by the Public Administration or by another judicial, governmental or regulatory body or by the participation of the undersigned company in judicial procedures that involve the processing of personal data provided by you.

MANDATORY OR OPTIONAL NATURE OF THE PROVISION OF DATA

The provision of data is optional. Any refusal to provide us with your personal data, in whole or in part, will make it impossible for the Company to provide the interested party with the requested services.

RIGHTS RECOGNIZED TO THE INTERESTED PARTY

The interested party has the right to obtain access to personal data from the data controller. In particular, the interested party has the right to obtain indication: a) of the origin of the personal data; b) the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) updating or rectification; e) the cancellation or limitation of the processing of data concerning him (transformation into anonymous form, blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed).

The interested party has the right to withdraw consent to the processing of personal data. In any case, the revocation of consent to processing does not affect the lawfulness of the processing based on the consent given before the revocation.

The interested party also has the right to data portability.

You can exercise your rights at any time by sending:

  • a registered letter with acknowledgment of receipt to the Terme di Comano Consortium, Loc. Terme di Comano 6, 38070 Stenico (TN) to the Privacy Contact;
  • an e-mail to privacy@termedicomano.it.

RIGHT TO SUBMIT A COMPLAINT

The interested party has the right to lodge a complaint with the Supervisory Authority, represented in Italy by the Guarantor for the Protection of Personal Data, with headquarters in Rome, Piazza Monte Citorio, 121

EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS

This processing does not involve automated decision-making processes.

COOKIES AND OTHER TECHNICAL INFORMATION

Cookies are small text files that the sites visited send to the navigation device used by the user (usually a browser). They are stored in the corresponding browser folder while the user is intent on visiting a website, requesting consent from the user where applicable law or regulations so require, and then being re-transmitted to the same sites on subsequent visits.

They are used for the purpose of improving navigation, saving user preferences already entered (username, password and similar), tracking the user's tastes and preferences, allowing the management of targeted marketing initiatives or the provision of services connected to the activities of the Owner such as newsletters, service communications on the site, etc.

If limitations are placed on their use, these will have effects on the usability of the contents of the site during consultation. It is always possible for the user to preventively block or remove the browser cache, but such actions could cause incomplete use of the services offered by the web application.

For information on the cookies implemented, please refer to the cookie policy of this site.

NAVIGATION DATA

While browsing the Terme di Comano site – the name of your Internet Service Provider, the site from which you visit us, the pages of our site that you visit and the date and duration of the visit are stored. The computer systems and software procedures used to operate the websites acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified individuals. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or other users, only at the request of the supervisory bodies in charge.

Browsing data is recorded for a period of 12 months