Privacy - Information according to EU Regulation 2016/679 ("GDPR")

Privacy - Information according to EU Regulation 2016/679 ("GDPR")

1 - What types of data do we collect?

When you access this website, you accept that San Giorgio Resort Srl collects some of your personal data. This page is intended to tell you what data we collect, why and how we use it.

We process two types of data:

• data provided by the user
• data that we collect automatically

Data provided by the user

When you access the website www.sangiorgioresort.com and decide to send a request for information, request a contact with San Giorgio Resort Srl by sending an email for which we ask you to provide some data necessary to respond to your request. 

We ask you to provide us with your surname and first name, your email address, your telephone number.

You can also choose to provide us with the following information:

Period of stay (only for accommodation facilities)

• complete address
• city ​​or municipality of reference
• add notes or expose your request

Data of third parties

If you provide personal data of third parties, such as those of your family or friends, you must be sure that these subjects have been adequately informed and have consented to the related processing in the manner described by this statement.

Data of minors under the age of 14

If you are under the age of 14, you can not provide us with any personal data; you can not send an email and, in any case, we do not assume any responsibility for any false statements that you provide. Should we notice the existence of untruthful declarations, we will proceed with the immediate cancellation of any personal data acquired.

If you are a company or a professional, you are asked to provide us with the following information:

company name, VAT number, contact name, email address, telephone number

other data: full address and VAT number.

Data that we collect automatically

We collect the following data through the services you use:

technical data: eg IP address, browser type, data relative to the current (approximate) position of the tool you are using;

data collected using cookies or similar technologies: for more information, please visit the "Cookies" section.

2 -  How do we use your data?

We use your data to guarantee you the possibility of establishing a first contact with San Giorgio Resort Srl. Subsequently, before establishing the relationship or performing the service that you requested, we will require the issuance of a specific consent to the processing of your data, in relation to the type of service requested by you.

These treatments are based on the legitimate interest of the Data Controller (see point 4) and you can object at any time.

3 - Is it compulsory to provide those data?

The provision of personal data is mandatory only for the treatments necessary for the establishment of a first contact: any refusal for the purpose of providing the service makes it impossible to use the service and sending the request for contact.

4 - Who are the subjects of the treatment?

Data Controller

The data controller Maneri Francesca San Giorgio Resort Srl is found at Via Sangiorgio, 17, Toscolano-Maderno, 25088 BS, VAT number no. 03688830987

We remind you that you can at any time send questions or requests regarding your personal data and respect of your privacy by writing to info@sangiorgioresort.com.

Subjects to whom data can be communicated

The data collected as part of the provision of the service may be communicated to:

companies that perform functions that are strictly connected and instrumental to the technical operation of the service, such as suppliers that provide server housing and web hosting services. The latter guarantee and take responsibility for the processing of your data in accordance with the rules laid down by the GDPR;

administrative and judicial bodies and authorities by virtue of legal obligations.

Under no circumstances we transfer or sell personal data to third parties.

5 - How can you get information on the data, modify it, delete it or have a copy?

You can, at any time, send an email to info@sangiorgioresort.com to get information on your data, request a modification or cancellation. The cancellation will be carried out in the expected technical times and in accordance with the retention period specified in the following point 6.

Any natural person who uses our service can:

obtain from the data controller, at any time, information about the existence of their personal data, the origin of the same, the purposes and methods of treatment and, if present, to obtain access to personal data and information referred to in Article 15 of the GDPR;

request the updating, rectification, integration, cancellation, limitation of data processing if one of the conditions provided for in Article 18 of the GDPR occurs, the transformation into anonymous form or blocking of personal data, processed in violation by law, including those that do not need to be kept for the purposes for which the data were collected and/or subsequently processed;

to object, in whole or in part, for legitimate reasons, to the processing of data, even if pertinent to the purpose of the collection and processing of personal data provided for the purposes of commercial information or sending advertising material or commercial communication. Each user also has the right to revoke the consent at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation;

receive personal data, provided effectively and actively or through the use of the service, in a structured format, commonly used and readable by automatic device, and transmit them to another data controller without impediments;

file a complaint to the Italian Data Protection Authority.

We remind you that for any question or request concerning your personal data and respecting your privacy you can write to info@sangiorgioresort.com.

6 - How and for how long will the data be stored?

The retention of personal data will take place in paper/electronic/IT format and for the time strictly necessary to fulfil the purposes referred to in point 1, in compliance with your privacy and current regulations.

The data relating to your email and other data provided during the first contact request are retained up to 15 days after they are sent. In the event that you subsequently establish a continuous professional relationship or if you request a specific service, you will be required to issue a specific written consent.

Finally, we remind you that for the same purposes, data relating to electronic traffic, excluding the contents of communications, will be kept for a period of no more than 2 years from the date of communication, pursuant to art. 24 of the Law no. 147/2017, which implemented the EU Directive 2017/541 on anti-terrorism.

7 - How do we ensure the protection of your data?

The data is collected by the subjects indicated in point 4, according to the indications of the reference legislation, with particular regard to the security measures provided by the GDPR (Art. 32) for its processing by means of computerised and automated instruments and with logic strictly related to the purposes indicated in point 1 and in any case in such a way as to guarantee the security and confidentiality of the data.