Privacy Policy

Privacy Policy – Disclosure

In accordance with the obligations arising from national (Legislative Decree No. 196 of 30 June 2003, Code for the Protection of Personal Data) and Community legislation, (European Regulation for the Protection of Personal Data No. 679/2016, GDPR) and subsequent amendments, on this page we describe the methods of management of the site www.campeggiolafinoria.it e (hereinafter also “Site”) with regard to the processing of personal data of users who consult it.

This information is provided to those who interact with Web services accessible by electronic means from the address www.campeggiolafinoria.it (hereinafter “Site”), also pursuant to Articles 13 and 14 of Reg. EU 2016/679 (European Data Protection Regulation) for the protection of personal data.

This policy covers all personal data collected and processed by La Finoria Camping (hereinafter “La Finoria Camping”) through the Site with the exception of Cookies. With reference to cookies, please refer to the specific extended information at the link (Cookie Policy) in accordance with Reg. EU 2016/679.

By visiting the Site, you implicitly accept the practices described in this Privacy Policy.

 

Navigation data

The computer systems and software procedures used to operate the Site acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified data subjects, but which, by its very nature, could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.

This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its proper functioning, and is deleted immediately after processing.

The data could be used to ascertain liability in case of hypothetical computer crimes against the Site.

 

Data provided voluntarily

The Data Controller processes the personal, identifying data (e.g., first name, last name, company name, address, telephone numbers, e-mail, bank and payment references) that you provide when concluding contracts for the Data Controller’s services, subscribing to the newsletter and/or to the service -through MessengerPeople Gmbh’s platform- WhatsApp, Notify, Instagram and Telegram instant messaging for customer support, information request and marketing present on the Site.

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this Site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other data included in the message.

 

Purpose of data processing, communication and access to data

Data of a personal nature provided by you, will be processed, subject to the conditions of lawfulness ex art. 6 Reg. EU 2016/679:

1. without your express consent (Art. 24 lett. a), b), (c) Privacy Code as amended (provisions for the adaptation of national legislation to the provisions of EU Regulation 2016/679) and Art. 6 lett. (b), (e) GDPR), for the following Service Purposes:
2. (a) carry out the technical administration of the Site;
3. b) perform the requested service or performance, conclude contracts for the services of the Data Controller;
4. c) fulfill pre-contractual, contractual and tax obligations arising from existing relations with you;
5. (d) to fulfill obligations under the law, a regulation, EU legislation or an order of the Authority (such as in the area of anti-money laundering);
6. (e) Exercise the rights of the Data Controller, such as the right to defense in court;

For the aforementioned purposes, your data may be communicated to judicial authorities and to those subjects to whom communication is obligatory by law for the fulfillment of the said purposes. These parties will process the data in their capacity as autonomous data controllers. Your data will not be disseminated;

2. without your prior express consent, as provided for in Art. 130, IV paragraph, Privacy Code as amended (provisions for the adaptation of national legislation to the provisions of EU Regulation 2016/679), for the following Marketing Purposes:
3. f) process the e-mail coordinates (i.e. the e-mail address) provided by you in the context of the purchase of a product and/or a service offered and sold on the Site directly from the campsite la finoria, in order to allow the direct sale of similar products or services (and therefore the sending by e-mail to the user of promotional communications having as object such products and/or services), provided that you do not exercise your right to object in the manner indicated below (c.d. soft-spam).

You may object to receiving soft-spam communications:

• by contacting Camp La Finoria at: info@campeggiolafinoria.it;
• via the appropriate link found in any promotional communication sent by Camp La Finoria

For the above purposes, your data will not be disclosed to third parties, except for any legal obligations or requests by the Judicial Authority, nor will it be disseminated.

3. only with your specific and separate consent (Art. 23 and 130 Privacy Code as amended (provisions for the adaptation of national legislation to the provisions of EU Regulation 2016/679) and Article 7 GDPR), for the following Marketing Purposes:
4. (g) to send you -by automated means of contact (e.g. e-mail, and/or sms and/or instant messaging and -through MessengerPeople Gmbh’s platform – WhatsApp, Notify, Instagram and Telegram and traditional (e.g., traditional mail and/or telephone contact with operator)- newsletters, commercial communications and/or advertising material about products or services offered by the Data Controller other than those for the provision of which the data were collected and the survey of satisfaction with the quality of services;
5. h) send you (via e-mail, mail and/or text message and/or instant messaging and/or telephone contact) newsletters, commercial and/or promotional communications from third parties (e.g., business partners);
6. i) to communicate to third parties (e.g. GYMTRAINER S.r.l., P.I. – C.F. 04643350236, with headquarters in San Martino Buon Albergo, Via XX Settembre 32/a, 37036 -Verona (VR) for bookings and/or purchases of the sports services of Campeggio Puntala S.r.l.) your personal data for promotional purposes exclusively of products or services offered by Campeggio Puntala S.r.l;
7. l) to carry out the activity of analysis of consumer choices and habits in order to improve the offer of services in subsequent stays, in order to send you personalized commercial communications/ carry out targeted promotional actions, business intelligence;
8. (m) carry out prize operations and customer loyalty programs.

For the above purposes, your data will not be disclosed to third parties other than those mentioned in (i), except for any legal obligations or requests by the Judicial Authority, nor will it be disseminated.

4. only with your specific and separate consent (Art. 23 and 130 Privacy Code as amended (provisions for the adaptation of national legislation to the provisions of EU Regulation 2016/679) and Article 7 GDPR), for the following Marketing Purposes:
5. n) the communication of your personal data for their promotional purposes to the companies PuntAla Camp & Resort, Campeggio PuntAla S.r.l., P.IVA 01233070539, based in 58043 Punta Ala, Castiglione della Pescaia, Grosseto, Italy tel. +390564922254 fax. +390564920379, e-mail: info@campingpuntala.it., GRAVITY di Giorgia Volta (C.F. 01783740499) based in Via degli Affitti, 9 – 57021 Venturina (LI), PUNTA ALA TRAIL CENTER A.S.D. (P.I. – C.I. 01647880531) based in loc. Punta Ala – c/o Campeggio Puntala – 58043 Castiglione della Pescaia (GR) and PUNTALA AMBIENTE S.R.L. (P.I. – C.F. 01415020534) based in Via Zanardelli, 1 – Grosseto (GR), BLACK ROOSTER A.S.D. (C.F. 95120230248, P.I. 06876670487) based in Via Corte Grifoni 4 – 50012 Bagno a Ripoli (FI), GYMTRAINER S.R.L. (I. – C.F. 04643350236) based in San Martino Buon Albergo, Via XX Settembre 32/a, 37036 -Verona (VR), PUNTA ALA SUP EXPERIENCE A.S.D.(P.I. – C.F. 01708190531) based in Punta Ala – c/o PuntAla Camp & Resort Loc. Punta Ala – 58043 Castiglione della Pescaia (GR) and possibly to providers of further services hosted in the territory in which our facility is also located of which we will provide the details.

For the above purposes, your data will not be disclosed to third parties other than those listed above in (n), except for any legal obligations or requests by the Judicial Authority, nor will it be disseminated.

Your data may be made accessible for the purposes of  1.,  2., 3. and 4:

– to employees and collaborators of the Data Controller or partner companies and/or entities in Italy and abroad, in their capacity as data processors and/or internal data controllers and/or system administrators;

– to third party companies or other entities (by way of example, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data processors, and specifically to persons/companies that perform services related and instrumental to the execution of the purposes indicated above.

 

Data transfer to countries outside the EU

Your personal data will be processed by the Data Controller within the territory of the European Union. Should it become necessary for technical and/or operational issues to use entities located outside the European Union, or should it become necessary to transfer some of the collected data to technical systems and services operated in the cloud and located outside the European Union area, the processing will be regulated in accordance with the provisions of Chapter V of the Regulations and authorized under specific decisions of the European Union. All necessary precautions will then be taken to ensure the fullest protection of personal data relying on such a transfer: (a) On appropriateness decisions of third country recipients expressed by the European Commission; (b) on adequate guarantees expressed by the third party recipient under Art. 46 of the Regulations; (c) on the adoption of binding enterprise rules, so-called. Corporate binding rules.

 

Legal basis of data processing

The provision of data for the purposes mentioned in the preceding paragraph. 1. is mandatory. In their absence, we will not be able to guarantee you the Services at the point 1.. The legal basis for their processing of such data is the performance of a contract to which you are a party or the need to fulfill legal obligations.

The legal basis for the processing of data for the purposes mentioned in the preceding paragraph. 2. is Art. 130, Paragraph IV, of the Privacy Code as amended (provisions for the adaptation of national legislation to the provisions of EU Regulation 2016/679), which expressly allows the processing in question.

The provision of data for the purposes set forth in the preceding paragraphs. 3. and 4. is instead optional. He/she may then decide not to provide any data or later deny the possibility of processing data already provided: in this case, he/she will not be able to receive newsletters, commercial communications and advertising material related to the Services offered by the Data Controller. You will, however, continue to be entitled to the Services referred to in par. 1.. The legal basis for processing such data is consent (optional and revocable at any time).

The Site processes some of the data based on the legitimate interests of the data controller.

 

Method of treatment

This data will be processed:

– On paper and electronic media of any kind;

– by authorized individuals who are constantly identified, properly instructed and made aware of the constraints imposed by applicable laws;

– For as long as is strictly necessary to achieve the purposes for which they were collected;

– with a commitment to keep data promptly up-to-date, removing obsolete, unnecessary, or irrelevant data;

– with a commitment to take the organizational and security measures required by law to ensure the confidentiality of the data subject and to prevent undue access by third parties or unauthorized persons.

 

Duration of treatment

Personal data collected will be stored, in accordance with Art. 5 paragraph 1 lett. (e) of Reg. EU 2016/679, in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed and in any case for no longer than 10 years after the termination of the relationship for the Service Purposes.

Personal data processed for Marketing Purposes will be retained until consent is revoked.

 

Owner, appointees and controller

The Data Controller is Campeggio La Finoria A.S.D., P.I. – C.F. , based in loc. Gavorrano, Via Monticello, 66, 58023 Gavorrano GR,  e-mail: info@campeggiolafinoria.it.

The persons in charge of data processing are the employees and/or collaborators of Camping La Finoria The data may be processed by employees and/or collaborators of the company functions deputed to the pursuit of the above-mentioned purposes, who have been expressly authorized to process the data and who have received appropriate operational instructions.

ZUCCHETTI HOSPITALITY SRL, C.F. and P.IVA: 02894171202, with registered office at Via Solferino, 1, 26900 Lodi is the Data Processor, processing personal data on behalf of the Data Controller.

The updated list of data processors and processors is kept at the registered office of the Data Controller.

 

The rights given to the data subject

Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the User may, in the manner and within the limits provided by the current legislation, exercise the following rights:

– Request confirmation of the existence of personal data concerning him/her (right of access);

– Know its origin;

– Receive intelligible communication;

– Have information about the logic, methods and purposes of processing;

– request the updating, rectification, integration, cancellation, transformation into anonymous form, and blocking of data processed in violation of the law, including data no longer necessary to achieve the purposes for which they were collected;

– in cases of consent-based processing, receive at the sole cost of any support, its data provided to the holder, in structured, machine-readable form and in a format commonly used by an electronic device, subject to paragraphs 3 and 4 of Art. 20 of Reg. EU 2016/679;

– Whether he believes that the processing of data concerning him, violates the provisions of Reg. EU 2016/679, pursuant to Art. 15 letter (f) of the above-mentioned Reg. EU 2016/679, the right to file a complaint with the Data Protection Authority and, with reference to Art. 6 paragraph 1, letter (a) and Art. 9(2)(a). (a), the right to revoke the consent given at any time;

– where data are processed on the basis of legitimate interests, the rights of data subjects to the processing are still guaranteed (except for the right to portability which is not provided for in the regulations), in particular the right to object in whole or in part to the processing which can be exercised by sending a request to the data controller;

– the data subject’s right to object to the processing of his or her personal data for marketing purposes, carried out through automated means of contact, extends to traditional methods and, in any case, the possibility for the data subject to exercise this right also in part, by objecting, for example, only to the sending of promotional communications carried out through automated means, remains unaffected;

– as well as, more generally, to exercise all the rights granted to him by the current legal provisions.

 

The User may assert his/her rights as expressed in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the EU Regulation 2016/679, by addressing the Controller by means of a request to be forwarded to Campeggio Puntala S.r.l. with registered office in with registered office in 58043 Punta Ala, Castiglione della Pescaia, Grosseto, Italy tel. +390564922254 fax. +390564920379, e-mail: info@campingpuntala.it, also by e-mail, telephone or fax, with the right to obtain feedback on the processing of the application upon its outcome.