PRIVACY POLICY
pursuant to art. 13 of EU Regulation 2016/679 of 27/04/2016
DATA CONTROLLER
COCAL SRL
Fondamenta delle Zattere, 1413 – 30123 Venezia
P.IVA/ P.IVA/C.F. 04251970275 palazzoveneziano@venicecollection.com | pec: cocalsrl@sicurezzapostale.it
PROCESSING PURPOSES, LEGAL BASIS AND DATA RETENTION
The personal data you provide will be used exclusively for the following purposes:
1– Navigation data on web site.
Legal basis: Please see cookies policy
Data retention: Please see cookies policy.
2 – Stipulation and execution of the contract and all the activities related to it, such as, for example, reservations management, tax documents issue, credit protection, administrative, management, organizational and functional services for the execution of the contract.
Legal basis: compliance with a legal obligation – Performance of a contract.
Data retention: Duration of service and after termination 10 years.
3 – Send you advertising messages and updates on special rates and promotions.
Legal basis: Consent.
Data retention: 2 years.
OBLIGATORY OR OPTIONAL NATURE OF DATA SUPPLY.
The data required for the purposes referred to in the preceding paragraph 2) must be provided for the fulfillment of the legal obligations and / or for the conclusion and execution of the contractual relationship and the provision of the requested services. Therefore your eventual refusal, even partial, to provide such data would make it impossible for the Data Controller to establish and manage the relationship itself and to provide the requested service.
The provision of personal data necessary for the purposes referred to in paragraph 3) is optional, therefore your refusal to provide such data would make it impossible to carry out the activities described.
DATA PROCESSING METHODS.
The processing of personal data is carried out by means of the operations indicated in art. 4 n. 2) GDPR, for the aforementioned purposes, both on paper and computerized media, by means of electronic or automated instruments, in compliance with the regulations in force in particular in terms of confidentiality and security and in compliance with the principles of correctness, lawfulness and transparency and protection of customer rights.
RECPIENT OR CATEGORIES OF RECIPIENTS.
The data may be shared with third parties belonging to the following categories:
entities that provide services for the management of the information system used by the Controller e and the telecommunications networks; -firms or companies which provide assistance and advice; -third parties who provide services for the management of the activities indicated above; -authorities competent to fulfill obligations of laws and / or provisions of public bodies, on request.
Personal data will not be disseminated in any way.
DATA TRANSFER.
Your data, subject to processing, may be shared with companies contractually linked to the Data Controller, possibly also in third countries, in accordance with and within the limits of the articles 44 et seq. of Regulation (EU) 2016/679 for the purpose of managing donations received.
DATA SUBJECTS’ RIGHTS.
You may free exercise your rights according to articles 15, 16, 17, 18, 19, 20, 21, 22 UE Regulation 2016/679, by contacting the Data Controller by sending an email to palazzoveneziano@venicecollection.com .
You shall have the right, at any time, to obtain from the Data Controller the access to your personal data, request their rectification, erasure as well as the restriction of their processing. Furthermore you have the right to object anytime to your personal data processing (automated meaning included, in ex. profiling). Without prejudice to any other administrative or judicial remedy, in case you consider your data processing in contrast with Reg. UE 2016/679, pursuant to article 15 lett. f) you have the right to lodge a complaint with a supervisory authority and, pursuant to article 6 paragraph no. 1, lett. a) (consent) and article 9, paragraph no. 2, lett. a) (single purpose consent on particular data processing), you have the right to revoke your expressed consent at any time. In exercising your right to data portability, the Data Controller may provide your personal data in a structured, commonly used and machine-readable format, without prejudice to paragraphs 3 and 4 of Article 20 of EU Reg. 2016/679.