PRIVACY POLICY – Information pursuant to articles 13 and 14 of Regulation (EU) 2016/679 “General Data Protection Regulation” (hereinafter “GDPR”)
Pursuant to articles 13 and 14 of EU Regulation 2016/679 (GDPR), Green Hills of Umbria with its headquarters in Piazza Garibaldi 17 – 06049 Spoleto (PG) Italy (hereinafter “Green Hills of Umbria”), as Data Controller, informs you that the personal data collected will be processed by Green Hills of Umbria through manual or computerized processing, for the purposes listed below, ensuring security and confidentiality of the data.
1. Sources of personal data and the purpose of processing it
Personal data will be collected from the data subject (you), or from third parties, and will be processed in compliance with the law. Personal data will be processed for the following purposes.
a) Contractual and legal purpose: this processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, and/or processing is necessary for compliance with a legal obligation to which the controller is subject.
b) Marketing purpose: in the case you give your consent, your personal data will be processed by Green Hills of Umbria to send commercial communication, advertising material and newsletters.
2. Categories of personal data and legal basis for their processing
The personal data we collect from you and which Green Hills of Umbria processes is data such as name, surname, date and place of birth, citizenship, residence/domicile address, email address, telephone numbers, passport or I.D. card information, social security number / tax I.D. / VAT number, which have been entered into the registration form or freely sent in the case of communications via telephone or through e-mail.
For contractual or legal purposes referred to in paragraph 1) point a), the processing of this personal your consent is not required, pursuant to Article 6, letter b. and c., of the GDPR.
Should you refuse to consent or if you provide incorrect or incomplete information, this may prevent Green Hills of Umbria from delivering its services to you.
The provision of data for marketing purpose referred to in paragraph 1) point b) is optional, and the processing of personal data for these purposes requires your specific and informed consent. You may, at any time, revoke this consent, without prejudice to to the lawfulness of the treatment of your data based on the consent you gave, prior to revoking it.
3. Recipients or categories of recipients of the personal data
Your data may be processed by persons in charge of the processing (persons who, under the direct authority of the controller or processor, are authorized to process personal data) or by Data Processors designated by Green Hills of Umbria. Your personal data may be processed by subjects which provide Green Hills of Umbria with assistance and services used for the purposes mentioned in point 1 above (such as, but not limited to: suppliers, partners, consultants or other persons and/or entities, contractually connected to Green Hills of Umbria) and, on behalf of Green Hills of Umbria, shall ensure: (i) the operation and/or maintenance of websites and the electronic and/or telecommunication tools used by Green Hills of Umbria; (ii) management of the Service; (iii) processing of studies, statistical analysis and market research; (iv) sending information or promotions, such as, for example, invitations to seminars and conferences, newsletters, advertising material and/or offers of goods and services in the manner indicated in the previous paragraph 1 letter. d); (v) support activities with regard to legal, tax, insurance, accountancy, and day-to-day organization.
Your personal data may also be communicated to third parties which act as Data Controllers, such as e.g. supervisory and regulatory authorities and, more generally, public or private entities, legally authorized to request this data.
A transfer of personal data to a third country (extra UE) or an international organization may take place where the Commission has decided that the third country, a territory or one or more specified sectors within that third country, or the international organization in question ensures an adequate level of protection. In the absence of a decision pursuant to Article 45(3) GDPR, the Controller or Processor may transfer personal data to a third country or an international organization only if the Controller or Processor has provided appropriate safeguards, and on condition that enforceable data subject rights and effective legal remedies for data subjects are available. Derogations for specific situations will be admitted pursuant to Art.49 GDPR.
4. Period for which the personal data will be stored and/or criteria used to determine that period
Personal data processed for contractual and legal purposes referred to in paragraph 1 point a) will be stored for the time necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, and/or for the time necessary for compliance with a legal obligation to which the controller is subject.
Data for marketing purposes referred to in paragraph 1) point b) shall be stored until the withdrawal of consent.
5. Data subject rights
As the data subject you have: a) the right to access to the personal data and to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject and to object to such processing, as well as the right to data portability; b) the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; c) the right to lodge a complaint with a supervisory authority, in this case, the Italian Data Protection Authority.
Your personal data will be not subject to any automated decision-making processes, or to profiling.