With this extended information on the processing of personal data, the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing personal data provided by you through the website www.luxuryretreatitaly.com and about the rights recognized to you by the Regulation of the European Union 2016/679 (GDPR – relating to the protection of individuals with regard to the processing of personal data and the free movement of such data).

Data Controller and Data Protection Officer

The Data Controller is:

Tutino Valentina, VAT Number 02794880993

The Data Controller can be contacted via email at: info@luxuryretreatitaly.com 

The Data Controller has not appointed a Data Protection Officer (DPO) as it is not required under the applicable regulations.

Common Personal Data Processed

For the purposes outlined in this Policy, the Data Controller processes common personal data such as personal details (name, surname, telephone number, email, and other contact details).

Source of Personal Data

Your personal data processed by the Data Controller are those provided directly by you by filling out the forms present on the website.

Cookie Management

All information regarding cookies is provided on the Cookies Policy page.

Purposes of Data Processing

The collected data are processed for the following purposes:

Conducting statistical analysis and managing contacts;

Complying with legal obligations;

Responding to your requests contained in the message you sent via the contact form on the contact page.

Data Processing Methods

Personal data may be processed both in paper and electronic form (including portable devices) and processed with methods strictly necessary to fulfill the purposes outlined above and in a manner suitable to ensure its security and confidentiality in accordance with the provisions of Article 32 of the GDPR.

Data Retention

Your personal data will be stored in a controlled access archive and/or database for a period deemed necessary to pursue the purposes described in this policy. After this period, your personal data will be retained only to comply with legal obligations or to allow for the assertion of respective rights and obligations.

Optional Provision of Data

Providing data is optional. However, refusal to provide data will result in the impossibility of being contacted and the inability to fulfill the purposes of data processing.

Data Voluntarily Provided by the User

The optional, explicit, and voluntary sending of emails to the address indicated on this site and/or the completion of data collection forms results in the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data entered.

Communication, Sharing, and Disclosure of Data

Your data, subject to processing, will not be disclosed, sold, or exchanged under any circumstances with third parties. They are not subject to disclosure or any entirely automated decision-making process, including profiling. The scope of data communication is limited exclusively to subjects competent for the fulfillment of contractual operations and compliance with legal obligations. They may therefore be communicated to third parties (such as: Revenue Agency, judicial or administrative authorities, for compliance with legal obligations, consultants and accountants or other legal professionals providing functional services for the aforementioned purposes; subjects processing data in execution of specific legal obligations or as appointed Data Processors; collaborators entrusted with the management and maintenance of computer systems appointed by the Data Controller).

Data Subject Rights

In relation to the processing described in this policy, as a data subject, you may, under the conditions provided by the GDPR, exercise the rights set forth in Articles 15 to 21 of the GDPR, and in particular, the following rights:

• Request the Data Controller access to your personal data and information regarding them;
• Rectify inaccurate data or integrate incomplete ones;
• Request deletion of personal data concerning you (when one of the conditions set out in Article 17, paragraph 1 of the GDPR occurs and subject to the exceptions provided for in paragraph 3 of the same article);
• Restrict the processing of your personal data (in the event of any of the hypotheses set forth in Article 18, paragraph 1 of the GDPR);
• Right to rectification – Article 16 GDPR: Right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
• Request and obtain from the Data Controller – in cases where the legal basis for processing is the contract or consent, and it is carried out by automated means – your personal data in a structured, commonly used and machine-readable format, including for the purpose of communicating such data to another data controller (so-called right to data portability);
• Right to object – Article 21 GDPR: at any time to the processing of your personal data in situations concerning you;
• Withdraw consent at any time, limited to cases where the processing is based on your consent for one or more specific purposes and concerns common personal data (e.g., date and place of birth or residence), or particular categories of data (e.g., data revealing your racial origin, political opinions, religious beliefs, health status, or sexual life).
• Processing based on consent and carried out before its withdrawal remains lawful;
• Lodge a complaint with a supervisory authority (Data Protection Authority www.garanteprivacy.it).

Last updated: February 27, 2024