Privacy

PRIVACY NOTICE FOR WEBSITE USERS

pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and further applicable national and European legislation

1. Data Controller

Global Gest S.r.l., with registered office in Padenghe sul Garda (BS), Via Marconi 57, Tax Code and VAT No. 02237740986, acting through its legal representative pro tempore, as Data Controller (hereinafter “Controller”), hereby informs you that your personal data will be processed for the purposes and in the manner set out below.

Personal data will be processed in accordance with the law and with the principles of necessity, fairness, lawfulness and transparency, protection of your privacy and rights, purpose limitation and storage limitation, data minimisation, accuracy and data quality, integrity and data security.

For any enquiry related to the processing of your personal data, the Controller can be contacted at: info@splendidobay.com

1. Types and Sources of Personal Data Processed

Browsing data. The computer systems and software procedures used to operate this website collect, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (success, error, etc.) and other parameters relating to the user’s operating system and computing environment. These data are used solely to obtain anonymous statistical information on the use of our website and to monitor its correct functioning, and are deleted immediately after processing. The data could be used to ascertain liability in the event of hypothetical computer crimes against our website: save for this eventuality, data on website contacts do not persist for more than seven days and in any case no longer than necessary to process the requests submitted.website

Data provided voluntarily by the user. The use of the services provided by the Controller through this website (including the optional and voluntary submission of enquiries or booking requests to the contacts indicated on the website, the purchase of products or services offered by the Controller through the website, the submission of unsolicited applications for vacant positions advertised by the Controller, and the subscription to the newsletter) results in the subsequent collection of the data provided by the user. Personal data collected in this way will be processed by the Controller for the purposes and in the manner set out below.

Except as strictly required by law, the Controller does not collect personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, nor does it process genetic data, biometric data intended to uniquely identify a natural person, or data concerning health, sex life or sexual orientation. The Controller invites you not to provide such data.

The consent of minors to the processing of their personal data is valid from the age of 16. The Controller will not process personal data of children under the age of 16 unless parents or guardians grant consent to the collection, use and disclosure of children’s information by the Controller.

III. Purposes of Processing

On the basis of your free, explicit and informed consent, or in the other cases of lawful processing strictly provided for by law, including Article 6 of Regulation (EU) 2016/679, the Controller informs you that personal data will be processed for the following purposes:

1. handling enquiries, booking requests or other requests sent to the Controller via the contacts indicated on the website;

legal basis: performance of a contract to which the user is party, or pre-contractual measures taken at the user’s request;

1. establishment and performance of the contractual relationship for the provision of services and supply of products offered by the Controller through this website and all related activities;

legal basis: performance of a contract to which the user is party, or pre-contractual measures taken at the user’s request;

1. where unsolicited applications are submitted for vacant positions, management of the recruitment, selection and evaluation process for personnel to be potentially hired or engaged in any form of collaboration;

legal basis: performance of pre-contractual measures taken at the data subject’s request;

1. research and statistical analyses on aggregated or anonymous data, with no possibility of identifying the user, aimed at measuring website performance, traffic and usability and assessing user interest;

legal basis: legitimate interest of the Controller.

The Controller informs you that failure to provide the personal data required for the purposes set out in points a), b), c) and d) of this Section III will, in many cases, make it objectively impossible to use the services offered by the Controller through the website.

In the event of voluntary subscription to the newsletter service, the Controller may also process your data for the following purpose:

1. direct marketing, through the periodic sending of commercial communications (newsletters) by e-mail regarding the products or services offered by the Controller;

legal basis: consent of the data subject.

As the processing of personal data for the purpose referred to in point e) above is not mandatory for use of the services offered by the Controller through this website, we confirm that the data subject is not required to give their consent for this type of processing.

1. Processing Methods and Data Retention Period

Personal data are processed primarily by electronic means by persons authorised to process data pursuant to Article 29 of Regulation (EU) 2016/679, or by data processors appointed pursuant to Article 28 of Regulation (EU) 2016/679, for the time necessary to achieve the purposes for which they were collected, or for any other related legitimate purpose, and in any case no longer than permitted by the statutory limitation periods for the protection of rights and/or by legal obligations, adopting adequate security measures to prevent the destruction or loss of data, unauthorised use or unauthorised access, pursuant to Article 32 of Regulation (EU) 2016/679.

1. Communication and Disclosure of Data

Personal data collected relating to the user will not be disclosed in any way, except for the Controller’s right, without requiring the data subject’s consent, to communicate them to certain categories of parties whose activity is necessary and related to the achievement of the purposes set out in this notice, such as, by way of example and without limitation, third-party companies providing IT, banking, financial and insurance services, archiving, assistance and consultancy, administrative and judicial authorities entitled to request and obtain information concerning you, public authorities or public bodies.

The Controller informs you that personal data may also be transferred to countries outside the European Union or the European Economic Area (so-called Third Countries) recognised by the European Commission as providing an adequate level of personal data protection, or, failing that, only where the Controller’s suppliers located in the Third Country contractually guarantee a level of personal data protection equivalent to that of the European Union (e.g. by signing the standard contractual clauses provided by the European Commission), and where the exercise of data subjects’ rights is always ensured.

1. Rights of the Data Subject

The data subject may at any time exercise the rights set out in Articles 15 et seq. of Regulation (EU) 2016/679. In particular, you may ask the Controller to confirm whether or not personal data concerning you exist, to access such personal data and to rectify or erase them, or to restrict processing concerning you, or to object to such processing, in addition to the right to data portability and the right to lodge a complaint with a supervisory authority. You may obtain information about the source from which the personal data originate and, if applicable, whether the data come from publicly accessible sources. Furthermore, where processing is based on explicit consent, the data subject has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent given prior to withdrawal.To ensure that your data are not subject to breaches or unlawful use by third parties, before processing any request to exercise one of the rights listed above, we will ask you for certain information to verify your identity.

The data subject may exercise their rights by sending a written request to the following e-mail address: info@splendidobay.com