PRIVACY POLICY (simplified)
The purpose of the privacy policy is to provide maximum transparency regarding the information the site collects and how it uses it.
In compliance with the obligations arising from national legislation (Legislative Decree no. 196 of 30 June 2003, Codice in materia di protezione dei dati personali, and following amendments) and European (Regolamento europeo per la protezione dei dati personali n. 679/2016, GDPR), this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe the rights of users.
In particular, this site does not publish advertisements, nor does it use data for the purpose of sending advertisements, but it does make use of three parties’ services in order to improve the use of the site, third parties who may collect user data and then use them to send personalised advertisements on other sites.
For example, the site uses YouTube videos in some cases.The site also uses social plugins to make it easier to share articles on social networks. These plugins are configured so that they send cookies (and thus possibly collect data) only after the user has clicked on them.
For more information you can read the full policy below.
FULL DISCLOSURE
Legal basis of processing
This site processes data primarily on the basis of user consent. Consent is given by the banner on the home page, or by use or consultation of the site, as a conclusive behaviour.
By using or consulting the site, visitors and users approve this privacy policy and consent to the processing of their personal data in the manner and for the purposes described below, including possible disclosure to third parties if this is necessary for the provision of a service.
Additional consents relating to the specific purpose of the service are collected through the communication or service request forms.
The provision of data and therefore consent to the collection and processing of data is optional, the User may refuse consent, and may revoke consent already provided at any time (via the banner located on the Home Page or the browser settings for cookies, or the Contact Us link).
However, denying consent may result in the inability to provide certain services and the site navigation experience would be compromised.
Purpose of processing
The processing of the data collected by the site, in addition to the purposes connected with, instrumental to and necessary for the provision of the service, is aimed at the following purposes:
- Statistics (analysis) Collection of data and information in an aggregate and anonymous form only for the purpose of verifying the proper functioning of the site. None of this information is related to the individual.
- User of the site, and do not allow their identification in any way. Consent is not required.
- Security Collection of data and information in order to protect the security of the site (spam filters, firewalls, virus detection) and of Users and to prevent or unmask fraud or abuse to the detriment of the website. The data are recorded automatically and may possibly also include personal data (IP address) that could be used, in accordance with the laws in force on the subject, to block attempts to damage the site itself or to cause damage to other users, or in any case harmful or criminal activities. Such data are never used for identification or profiling of the User and are deleted periodically. Consent is not required.
- Additional activities. Disclose data to third parties who perform functions necessary or instrumental to the operation of the service (e.g. comment box), and to enable third parties to perform technical, logistical and other activities on our behalf. Providers only have access to personal data that is necessary to perform their tasks, and they undertake not to use the data for any other purpose, and are obliged to process personal data in accordance with applicable regulations.
Collected data
This website collects user data in two ways:
- Data collected in an automated way. The following information may be collected during the Users’ navigation and is stored in the log files of the site’s server (hosting): – internet protocol (IP) address; – type of browser; – parameters of the device used to connect to the site; – name of the internet service provider (ISP); – date and time of the visit; – visitor’s web page of origin (referral) and exit; – number of clicks, if any. This data is used for statistical and analysis purposes, in aggregate form only. The IP address is used solely for security purposes and is not cross-referenced with any other data.
- Data provided voluntarily. The site may collect other data in the event of voluntary use of services by users, such as comment services, communication services (contact forms), and will be used exclusively for the provision of the requested service: – name; – email address.
Processing location
Data collected from the site are processed at the Data Controller’s site (Sardinia Villa Service – Via Isola Longa, 07021 Loc. Porto Cervo – Arzachena (SS) and at the web hosting datacenter (Aruba S.p.A. Via San Clemente, 53 – 24036 Ponte San Pietro – BG), which is responsible for processing the data, processing the data on behalf of the data controller, is located in the European Economic Area and acts in accordance with European standards.
Data retention period
The data collected by the site during its operation are kept for the time strictly necessary to perform the specified activities. On expiry, the data will be deleted or anonymised, unless there is no further purpose for retaining it. Transfer of collected data to third parties The data collected by the site are generally not provided to third parties, except in specific cases: legitimate request by the judicial authorities and only in cases provided for by law; if it is necessary for the provision of a specific service requested by the User; for the performance of security checks or site optimisation.
Data transfer to non-EU countries
This site may share some of the data collected with services located outside the European Union. In particular with Google, Facebook and Microsoft (LinkedIn) via social plug-ins and the Google Analytics service. The transfer is authorised on the basis of specific decisions of the European Union and the Data Protection Authority. (https://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi), in particular the decision 1250/2016 (Privacy Shield (https://eur-lex.europa.eu/legal-content/IT/TXT/?uri=CELEX%3A32016D1250) – here the information page of the Italian Guarantor (https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/5306161)), for which no further consent is required. The above-mentioned companies guarantee their adherence to the Privacy Shield.
