Privacy

Pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter the "Regulation") on the protection of personal data, this page describes how the personal data of users consulting the website and/or interacting with the web services of the Company Sopramare Resort accessible by electronic means at the address:


https://www.sopramareresort.it/

DATA CONTROLLER
Following consultation of this site, data relating to identified or identifiable persons may be processed.
The data controller is: Sopramare Resort, Via Madonna di Roselle, 52 - Piano di Sorrento (Na), VAT N° 03711730543, Tel. +39 081.532.18.32 , email: reservation@sopramareresort.it

LEGAL BASIS FOR DATA PROCESSING
The processing of your personal data, provided by you through navigation on the company website and/or through the compilation of contact forms, will be carried out with regard to what is strictly necessary to provide information on company services, as well as for the fulfillment of any obligations provided for by laws, regulations or Community legislation.

TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

Navigation data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data the transmission of which is implicit in the use of Internet communication protocols.
This information is not collected in order to be associated to specific data subjects. However, due to its nature, this information can allow users to be identified by means of their processing and integration with data held by third parties.

This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters relating to the operating system and computer environment.

Data communicated by the user
The optional, explicit and voluntary sending of messages to the contact addresses of the company, in addition to the data provided by filling in the contact forms on the site and, specifically, surname, name, email, etc., involve the acquisition of the sender’s contact data, necessary to respond, as well as all the personal data included in the communications.

Cookies and other tracking systems
Session cookies (non-permanent cookies) will be used instead for strictly limited purposes which ensure that the Website can be navigated safely and efficiently. The storage of session cookies in computers or browsers can be controlled by the user, whereas on the servers, at the end of the HTTP sessions, information relating to cookies remains recorded in the service logs, with storage times not exceeding seven days like the other browsing data.

PROCESSING METHODS
The personal data are processed by automated means for the time strictly necessary to fulfill the objectives for which they were collected and in any case no longer than 12 months.

DATA RECIPIENTS
The recipient of the data collected following consultation of the sites listed above is the following person designated by the Guarantor, pursuant to Article 28 of the Regulation, as the data controller: the IT Consultancy Company.

RIGHTS OF THE DATA SUBJECT
The GDPR provides for a series of rights for the data subject and specifically the right of access to personal data, the right to obtain the rectification or cancellation of the same or the limitation of the processing that concerns him/her, the right to object to the processing, the right to data portability, the right to revoke consent, where provided for: the revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation; the right to lodge a complaint with the Data Protection Authority.

HOW TO EXERCISE YOUR RIGHTS
At any time you can exercise all the rights granted to you against the Data Controller, with a written request to be sent by traditional mail to the address of the Data Controller’s registered office or to the email address indicated in the paragraph “Data Controller”.

This document may be modified at any time. Any change will take effect from the date of publication on the Site.