Privacy Policy - Beides Restaurant 2024

INFORMATION PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679

Collina Luxury Relais with registered office in Clusone Via Colline Verde 2 e-mail info@collinarelais.com, in its capacity as data controller of your personal data (hereinafter referred to as ‘Data Controller’), issues this information notice to the Data Subject in compliance with European and Italian regulations on the protection of personal data in order to provide adequate information on the data processing carried out due to participation in trade fair events.

Data controller:

Data collected while browsing the site:

Browsing data: in the course of their normal operation, the computer systems and software procedures used to operate this website acquire certain personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, enable users to be identified.
Data provided voluntarily by the user: in the ‘contact us’ section, or through the use of electronic mail, you are given the opportunity to communicate personal data.
Booking your stay: within the site there is a section for checking availability and subsequently booking your stay at the Holder's accommodation.
Work with us: there is a ‘Work with us’ section within the site to apply for jobs, including the possibility to upload your own CV.

Purpose and legal basis of processing

Personal data are processed for the following purposes:

Allow registration, registration and participation in the exhibition event;
responding to requests made to the company, e.g. to obtain information on products or services (including sending the brochure, catalogue and/or other company information material), to obtain a quotation, etc;
comply with legal obligations of an administrative, accounting, civil, safety, tax, regulatory, EU and/or non-EU nature;
manage any litigation;
with your consent, send you commercial information (marketing) containing information on its products or services, as well as promotions or invitations to events in which the Controller will participate;
subject to his or her further consent, communicate the telephone numbers and e-mail address of the Data Subject to third parties for the purpose of carrying out the marketing activities referred to in Section 5);
subject to your consent, on the basis of the regulations on privacy pursuant to Art. 6 para. 1 GDPR, on the protection of copyright (Art. 96-98, Law no. 633/1941) and on the abuse of the image of others (Art. 10 Civil Code), to include on its websites, social channels or brochures photos or videos of you for the promotion of its activities.

The legal basis for the purposes of processing 1. 2. 3. 4. is the fulfilment of contractual and/or legal obligations. For the purposes 5. 6. 7. is consent.

The website uses cookies.

are strings of text created by a server and stored on the computer's hard disk or on any device used by the user to access the Internet, and then retransmitted when the user accesses the Internet again.
They make it possible to collect information on the navigation made by the user to facilitate the use of the Site.
They may be stored permanently on the computer and have a variable duration (so-called persistent cookies), but may also vanish when the browser is closed or have a limited duration (so-called session cookies).
They may be installed by the website you are visiting (so-called first-party cookies) or they may be installed by other websites (so-called third-party cookies).

In general, a site uses, or may use, cookies such as:

Navigation and functionality
cookies (necessary or technical)
Analytical cookiesSocial cookies
Profiling cookies (own and third-party)

Communication and dissemination of personal data for the pursuit of the primary purposes of the processing:

The data will not be subject to dissemination, but may be communicated to any other third party when communication is compulsory by law.

The data may be communicated to internal and external appointees and/or managers identified by the Data Controller and to whom specific instructions have been given, as well as to subjects (identified and authorised by the Data Controller) to whom the transfer of data is necessary or functional for the performance of the activities of the undersigned company.

Obligatory and optional nature of providing data and consequences in the event of failure to do so:

The provision of data, with the exception of consent for receiving the newsletter, is compulsory as far as indicated in the purposes: any refusal to provide such data will result in the impossibility of a response to your requests or the impossibility of establishing a contractual relationship.

The consent provided for subscription to the newsletter may be revoked at any time without affecting the lawfulness of the processing carried out prior to such revocation.

Period of data retention

Data voluntarily provided by the user that results in the establishment of a contractual relationship is stored for 10 years; in the case of litigation, for the duration of the litigation itself, until the time limit for appeals has been exhausted.
Data provided voluntarily by the user that does not lead to the establishment of a contractual relationship is stored for the time necessary to respond to the requests of the person concerned and for the following 12 months.
Without prejudice to the assumption of liability in the event of hypothetical computer crimes to the detriment of the site, browsing data are retained for a maximum of 60 days and subsequently deleted.
Newsletters will be sent until consent is revoked by the person concerned. For marketing activities, your data will be processed for 24 months from the last communication you receive from the company.
Any photos/videos acquired will be kept for as long as necessary for the pursuit of the above purposes.
The Personal Data of the Data Subject are processed for the time strictly necessary to pursue the purposes indicated above. Once this retention period has expired, the Data will be destroyed or rendered anonymous.

Nature of data provision and consequences in the event of refusal

The provision of data is necessary: any refusal to provide such data will make it impossible for the interested party to register for and participate in trade fair events. Should you decide not to grant consent for marketing activities, you may still take part in the aforementioned events. In the absence (or in the event of revocation at a later date) of consent to the processing of the collected photos/videos, the Data Controller will limit itself to taking panoramic shots and, if the face is accidentally distinguishable, it will be obscured.

Categories of recipients

Exclusively for the purposes specified above, all data collected and processed may be communicated to internal figures authorised to process them on the basis of their respective duties, as well as to the following categories of external parties:

consultants and IT service companies and, in particular, software houses supplying the platforms used to collect data from participants at events;
collaborating companies in the realisation of the trade fair events in attendance, including the supplier partners present at the Collina Wedding day 2024 fair;
trade associations that support the owner in the realisation of the event;
mail marketing platforms and cloud-based business software;
lawyers and legal advisers;
Public and private entities, including as a result of inspections and audits.

Data transfer to a third country and/or international organisation

As a rule, personal data will not be transferred either to non-European third countries or to international organisations. The Data Controller may, however, need to make such transfers in the context of its relations with business partners also established outside the European Economic Area, as well as due to the use of IT services (cloud, backup, etc.): in all these cases, transfers will be made in compliance with the specific requirements set out in the data protection regulations.

Rights of data subjects

The data subject enjoys the following rights

- right of access [Art. 15 of the EU Regulation] (the possibility to be informed about the processing carried out on one's Personal Data and, if necessary, to receive a copy of it);

- the right to rectification of one's own Personal Data [Art. 16 of the EU Regulation] (the data subject has the right to rectification of inaccurate personal data concerning him/her)

- right to the deletion of one's own Personal Data without undue delay (‘right to be forgotten’) [Art. 17 of the EU Regulation] (the data subject has, as well as will have, the right to the deletion of his or her own data);

- the right to limitation of the processing of one's Personal Data in the cases provided for in Article 18 of the EU Regulation, including in the case of unlawful processing or contestation of the accuracy of Personal Data by the data subject [Article 18 of the EU Regulation];

- right to data portability [Art. 20 of the EU Regulation], the data subject may request his or her Personal Data in a structured format in order to transmit it to another data controller, in the cases provided for in that Article;

- Right to object to the processing of one's Personal Data [Art. 21 of the EU Regulation] (the data subject has, as he or she will have, the right to object to the processing of his or her Personal Data);

- right not to be subject to automated decision-making processes, [Art. 22 of the EU Regulation] (the data subject has the right not to be subject to a decision based solely on automated processing).

- right to lodge a complaint with the supervisory authority, i.e. the Garante della Privacy www.garanteprivacy.it

Automated decision-making, profiling:

No processing involving automated decision-making, including profiling, is carried out, except as described in the cookie policy through profiling cookies.

Contacts

To exercise your rights, you may write to the Data Controller at the following address: info@collinarelais.com .

Amendments to this notice:

This privacy policy will be updated periodically, in order to incorporate relevant legislative and international changes. We invite you to re-read it periodically.

Child and under-14 protection policy:

the site does not collect personal data from children under the age of 14. We encourage parents to go online with their children in order to educate them about the minimum safety measures they should take on the Internet. These include not giving out one's personal data without the supervision of a parent present or an adult entrusted by the parents themselves or by the court with the care of a child under the age of 14. Should we discover that you are under 14 years of age, we will immediately delete your data. In any case, the first rule you must observe is never to give your first name, surname, the school you attend, and above all your mobile or home phone number.

Cookie Declaration:

This website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about the way you use our site with our web analytics, advertising and social media partners, who may combine it with other information you have provided to them or that they have gathered from your use of their services.

Cookies are small text files that can be used by websites to make the user experience more efficient.

The law states that we may store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your consent.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can change or revoke your consent at any time from the Cookie Declaration on our website.

Necessary cookies:

Necessary cookies help make the website usable by enabling basic functionality such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

GOOGLE:

Used to check whether the user's browser supports cookies (expiry date: 0 day)
Registers a unique ID used to generate statistical data on how the visitor uses the website (expires: 2 years)
Used by Google Analytics to collect data on the number of times a user has visited the website, as well as data for the first visit and the most recent visit (expiry: 2 years)
It records statistical data on user behaviour on the website. These are used for internal analysis by the site operator (expiry: session)
Used by Google AdSense to test advertising effectiveness on all websites using their services (expiry: 3 months)
Check for a technical debugger cookie (deadline: 29 days)
Used by Google DoubleClick to record and report on the user's actions on the site after viewing or clicking on one of the advertiser's advertisements in order to measure the effectiveness of an advertisement and present targeted advertising to the user (expiry: 399 days)

YOUTUBE:

Registers a unique ID for statistics related to which YouTube videos were viewed by the user (expiry: session)
Used to track user interaction with embedded content (expiry: session)
Registers a unique ID used by Google for statistics related to how the visitor uses YouTube videos on different websites (expiry: 8 months)
Used to track user interaction with embedded content (expiry: 0 day)
Try to estimate the speed of the user's connection on pages with embedded YouTube videos (deadline 179 days)
Registers a unique ID for statistics related to which YouTube videos were viewed by the user (expiry: session)
Used to track user interaction with embedded content (expires: persistent)

META PLATFORMS, INC:

Used by Facebook to provide a range of advertising products as real-time offers from third-party advertisers (expiry: 3 months)
Tracks how the user reached the website, recording their previous URL, i.e. the website they came from (expiry: persistent)
Used by Instagram to provide a range of advertising products such as real-time offers from third-party advertisers (deadline: 3 months)