Processing of personal data
The following describes the website's management procedures https://www.ripettapalace.it/
relating to the treatment of users' personal data. The policy is pursuant to art.13 of Legislation 2016/679 of the European Parliament
and the Board of 27 April 2016 regarding the protection of natural persons in relation to the processing of their personal data as well as the free circulation of such data repealing Directive 95/46/CE General Legislation on data protection), to those interacting with web services, accessible via the web starting from the internet address corresponding to the website' home page https://www.ripettapalace.it/
The policy is given only for the website of Ripetta Palace
and not for any other website browsed by the user via other links.
Following the consultation of this website, data referring to identified or identifiable persons can be processed.Data controller: Ripetta Palace
- Via di Ripetta 2, 00186 Roma
- email: firstname.lastname@example.org
legally registered in Viale Vaticano, 84 00165 Roma (Rm).
Place of data processing
The processing relating to the web services of this website take place in ITALY at server Farms KPN Quest and CD Lan in via Caldera, 21 Milan, said parties are suppliers of Semplify Srl with registered office in Strada degli Angariari, 46 47891 Falciano RSM. Semplify Srl is the supplier of services for technological infrastructures (sub responsible- art. 28 GDPR) Extra EN country about to accept the European Legislation on the processing of personal data via the adoption of a national Legislation having the same guarantees of GDPR.
Type of data processed
Software applications used to make the website of Ripetta Palace work acquire certain personal data submitted via safe protocols. Said information are not collected to be associated to identified individuals but may through the elaboration and association with other data possessed by third parties, allow the identify users. This category of data includes IP addressed, browser's identification data (user agent), URI (Uniform Resource Identifier) addresses to resources requested, the request time, the method used in submitting the request to the server , the numerical code indicating the status of the feedback given by the server (i.e. successful, unsuccessful and other parameters relating to the operating system and the user's IT environment. These data are used with the sole purpose of collecting anonymous statistical information on the use of the website to check its correct functioning.
Data voluntarily supplied by the user
To access some of the services available on the website of Ripetta Palace - the optional and voluntary insertion of certain identification data may be requested (email, name, contacts, and information neeced to provide the required service).
Purposes of the treatment
Personal data supplied by users using the services provided by Ripetta Palace (i.e.: through web navigation, the compilation of forms for various reasons) are used for the sole purpose of carrying out the service or performance required.
Further communication following a stay
Following the purchase of a stay, Ripetta Palace shall forward the user further communication even of commercial nature regarding its services. The above mentioned juridical basis of the treatment is the legitimate interest of the data controller (cons. 47 GDPR).
In case of specific consent subscribing to the newsletter) Ripetta Palace shall send via email information on new products, promotions and other special offers. The user will be entitled to deactivate the service at every time through the dedicated procedure and/or methods indicated below for the exercise of his/her rights. The above mentioned juridical base of the treatment is the user's consent. Specific explanatory information, if needed, will be reported or shown in the website pages used for other services on request.
Data conservation period
The data conservation period is that necessary for the purposes arising out of the services requested and for a further period of 36 months
Should the requested information be part of an online transaction, such data shall be stored for the purposes of economic or fiscal accounting for a period of 10 years. Regarding technical data managed by the website such as cookies, the conservation period is defined according to the technical characteristics of cookies and specified in the table "List of cookie". The storage period of personal data will be automatically extended for a further period of 36 months whenever a new consent to the processing of personal data is given and/or every time users access the services provided by entering their own log-in credentials (e.g. Login personal account).
Optionality of data provision
Apart from what has been specified regarding navigation data, the user is free to supply to Ripetta Palace
the personal data requested to benefit from the services provided through the website. Failure to provide data relating to the fields marked by the asterisk (mandatory) will result in the impossibility to use the service offered.
Treatment procedures anb safety
The treatment of personal data occurrs via information systems designed to guarantee the safety and privacy of data themselves and nonetheless in compliance with appropriate safety measures pursuant to art. 32 GDPR, via safe communication protocols with SSL encryption algorithms.
Rights of the interested parties
The interested parties individuals to whom personal data are referred) can at all times exercise the righs provided by the Legislation through a dedicated personal area. It is possible to accesss said area by requesting the link via the dedicated procedure in the footnote of this information note. A further procedure for the exercise of the Legislation rights, in case the user subscribed to the newsletter, can be used via the dedicated link appearing in the footnote of the email received. Specifically, users will be entitled to enforce rights pursuant to art. 23, and in particular: 1.The deletion of all data. 2.The amendment/ modification 3.The limitation. 4.The bearability. 5.The right of opposing the automated decision-making process (profiling). If needed, report any other request in the note field.
The requests can also be sent using the following contacts:Data controller: Ripetta Palace
- Via di Ripetta 2, 00186 Roma
- email: email@example.com