PRIVACY e Cookie POLICY

PRIVACY POLICY

1. Who we are and how to contact us

I am Christian Pittaro, owner of PGC Tirrenia Srl – Via delle Rose 1, 56128 Pisa – P. iva 02313600500, and Controller of the processing of your personal data (henceforth also the Controller). This information is prepared in accordance with EU Regulation 679/2016 (GDPR). For any doubts or needs you can reach me at the following email address alessandra@realizzazionesitiwebpisa.it.

2. What types of data I collect

2.1. Where it is possible to write a message to us via the site, the information and personal data you provide is freely given by you. We recommend that you do not provide so-called sensitive personal data for an initial contact, but only do so in the context of a subsequent contact. In any case, this data will also be protected and kept confidential as described in this privacy policy, in accordance with the GDPR.

2.2. With regard to navigation data, please refer to the specific extended Cookies policy and the relevant banner.

3. Why I am asking you for this personal data (purpose) and on what legal basis

3.1. Your personal data is necessary to process your requests and to respond to your booking enquiries.

4. How we use the data collected

4.1. The processing is carried out through: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

4.2. The data sent through the contact form are managed directly by the Owner or the Manager for the processing of the booking request.

5. Compulsory provision of data

5.1 It is essential that you provide your name, telephone number and e-mail address in order to process your booking request. Otherwise it is impossible to fulfil your booking request. Under no circumstances will I use your personal data for purposes other than those indicated in this information sheet. However, you are under no obligation to provide data and failure to do so will only prevent us from processing your request. For security reasons, you will not be able to send me any data without your consent. Therefore, all forms are designed not to allow sending without your consent.

6. Data recipients

6.1 Your personal data may be communicated to my employees who help me with the management of requests and the organisation of the back office. My employees are responsible for the processing of personal data and are bound by my precise instructions and policies, as well as by obligations of confidentiality and secrecy. A list of our employees who are responsible for data processing is available on request.

Data processing is carried out in a partially automated manner, but decision-making processes are always taken with human intervention.

7. Data transfer abroad

7.1. Your data is mostly handled within the EU but in some cases may be transferred to non-EU countries, including to the USA.

In particular, I make use of the following external platforms:

Site hosting: the site is hosted on servers that are based within the EU.

Site platform: the site is hosted on a platform that is based and server outside the EU.

Google Fonts, for content fonts.

With the use of Google Fonts, Google collects (1) the IP address used by the respective user to access the Internet, (2) the URL requested on the Google server, and (3) the HTTP headers, including the user agent describing the website visitor’s Internet browser and operating system versions, as well as the referer (i.e. the web page on which the Google Font is to be displayed). When end users visit a website that incorporates Google Fonts via the Google Fonts Web API, Google’s servers receive the users’ IP addresses as part of the network connection between Google and the user. Google does not record or store IP addresses and deletes them immediately after transmitting the font to the requesting user. More information at https://developers.google.com/fonts/faq/privacy?hl=it.

8. What are your rights and how can you obtain information about the data, modify it, delete it or get a copy of it?

Under the European Regulation, you have the right to request:

access to your personal data (i.e. to know what personal data we hold),

rectification of inaccurate data or integration of incomplete data (if any of your data has changed, such as if you have a new e-mail address),

the deletion of your personal data (if one of the conditions set out in Article 17(1) of the GDPR is met and in accordance with the exceptions set out in paragraph 3 of the same Article)

the restriction of the processing of your personal data (for example, you may ask us to stop subscribing to our Newsletter even though you wish to keep your access credentials to take advantage of the courses you have purchased), if one of the conditions indicated in Article 18, paragraph 1 of the GDPR applies.

oppose the processing of your personal data (for example, if you realise that your data is being processed in a way that does not comply with this policy) and data portability.

Request and obtain your personal data in a structured and machine-readable format, including for the purpose of communicating such data to another data controller (right to portability.

Withdraw consent at any time, limited to cases where processing is based on consent for one or more specific purposes and concerns common personal data (e.g. date and place of birth or place of residence), or special categories of data (e.g. data revealing your racial origin, political opinions, religious beliefs, health or sex life). Processing based on consent and carried out prior to the revocation of consent is, however, still lawful.

The rights listed above, with regard to personal data concerning deceased persons, may be exercised by any person who has an interest of his own, or is acting on behalf of the data subject, as his representative, or for family reasons deserving protection, unless the data subject has expressly forbidden this in a written declaration submitted to or communicated to the controller.

To lodge a complaint with a supervisory authority (Data Protection Authority – www.garanteprivacy.it).

For any problem or need, write to alessandra@realizzazionesitiwebpisa.it.

9. Storage time

We will only keep your personal data for as long as it is necessary for the purposes for which it was collected or for any other related legitimate purpose.

We restrict access to your personal data only to those who need to use it for relevant purposes.

If your personal data is no longer required, or if there is no longer a legal basis for storing it, it will be irreversibly anonymized (and thus can be stored) or securely destroyed.

The retention times in relation to the different purposes listed above are listed below:

Fulfilment of contractual and legal obligations: data processed to fulfil any contractual obligation may be retained for the duration of the contract and in any case no longer than 10 years thereafter, for the purpose of checking any outstanding debts including accounting documents (e.g. invoices).In the event of litigation: in the event that we are defending or acting or even making claims against you or third parties, we may retain personal data that we consider reasonably necessary to process for such purposes, for as long as such claim may be pursued.

Operational management and strictly related purposes for accessing the website: data processed for this purpose may be kept for the entire duration of the contract and in any case for no longer than 10 years.

Marketing purposes: personal data processed for marketing purposes may be retained for 24 months from the date on which we obtained your last consent for this purpose (except where you object to receiving further communications).

Contacts from mailing lists or newsletters: they may be kept for 24 months from the date you subscribe to the service or from the last date on which we obtained evidence of your use of the contents of the service.

10. Security guarantees for your data

No computer system is 100% secure. However, we take all appropriate measures to safeguard your security and prevent the risk of Data Breach.

11. Further information

We accept no responsibility for data provided by the interested party that are inaccurate or do not correspond to reality.

This Privacy Policy may be subject to subsequent modifications and/or integrations. We therefore invite you to consult it periodically according to your needs.

COOKIE POLICY

This site uses its own and third party analytical, functional and statistical cookies for analytical purposes, to improve user experience and to share multimedia content.

We use cookies to provide functionality and to analyse our traffic.

Some data is stored in the EU and some is stored outside the EU:

Google Analytics (Google Ireland Ltd – Gordon House, Barrow Street – Dublin 4 – IE)

Categories of processed data: Measuring visibility of ads, Timestamp, Tracking clicks on ads, IP, Tracking time and date, Tracking user device, Tracking user location, Visitor behavior, User agent, Language, Visited website, Timezone

Domains: www.google-analytics.com (US)

Google General (Google Ireland Ltd – Gordon House, Barrow Street – Dublin 4 – IE)

Categories of processed data: Clickpath, Measuring visibility of ads, Mouse movement, Timestamp, Tracking clicks on ads, Tracking conversion, IP, Tracking time and date, Visitor behavior, User agent, Language, Visited website, Timezone

Domains: *.gstatic.com (US), fonts.googleapis.com (US)

Polylang (WP SYNTEX – 28, rue Jean Sébastien Bach, 38090 Villefontaine, France)

The pll _language cookie is used by Polylang to remember the language selected by the user when they return to the website, and also to obtain language information when it is not otherwise available.

1. Data controller: Christian Pittaro, owner of PGC Tirrenia Srl – Via delle Rose 1, 56128 Pisa – P. iva 02313600500; e-mail alessandra@realizzazionesitiwebpisa.it, tel 327 3913538.

2. Purpose of processing: Cookies are small text files that the websites visited by the user send directly to his/her terminal (usually to the browser), where they are stored and then transmitted to the same websites the next time the same user visits (so-called first-party cookies). While browsing a site, the user may also receive cookies from different sites or web servers (so-called third-party cookies); this happens because the website visited may contain elements such as, for example, images, maps, sounds, specific links to web pages of other domains that reside on servers other than the one on which the requested page is located. In other words, these are cookies that are set by a website other than the one you are currently visiting.

3. Purpose of processing: Cookies are used for different functions. Some are necessary to allow you to navigate on the Site and take advantage of its functionalities (so-called technical cookies). Others are used to obtain statistical information, in aggregate or not, on the number of users accessing the Site and on how the Site is used (so-called analytics cookies). Finally, others are used to draw up a profile of you as a consumer and to display advertisements on the Site that may be of interest to you, as they are consistent with your tastes and consumption habits (so-called profiling cookies). To find out more about these different categories of cookies, please read on. Find out how they work and what they are used for.

4. Legal basis: With the exception of technical cookies, all other cookies will only be installed with your consent. You can always change your preferences by opening this CookiePolicy at the bottom of every page on the website. If you do not choose, only the necessary cookies will be installed.

5. Retention period: Cookies may be limited in duration to a single browsing session on the browser (so-called session cookies), in which case they are automatically deactivated when the user closes the browser; or they may have a pre-determined expiry date, in which case they will remain stored and active on your hard disk until such expiry date, continuing to collect information over the course of different browsing sessions on the browser (so-called persistent cookies).

6. Recipients of the data: the data collected through the cookies on this site are communicated to the third parties to whom the cookies refer, to the management staff appointed by the Data Controller and, on request, to any public authorities where there are legal requirements.

7. Transfers to third countries: some data may be transferred to countries outside the EU, as you can verify by examining the tables below. You can check which are these cookies, in which cases this transfer is not considered appropriate and choose whether to accept them or not.

8. Rights of the data subject: According to the European Regulation, you have the right to request: access to your personal data (i.e. to know what personal data we hold about you), rectification of inaccurate data or integration of incomplete data (if any of your data has changed, such as if you have a new e-mail address), erasure of personal data (if one of the conditions set out in Art. 17, par. 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article, restriction of the processing of your personal data (for example, you may ask us to stop subscribing to our Newsletter even though you wish to keep your access credentials to take advantage of the courses you have purchased), if one of the cases indicated in Article 18, paragraph 1 of the GDPR occurs. oppose processing (for example, if you realise that your data is being processed in a way that does not comply with this policy) and data portability. Request and obtain your personal data in a structured, machine-readable format, including for the purpose of communicating such data to another data controller (right of portability. withdraw consent at any time, limited to cases where processing is based on consent for one or more specific purposes and concerns common personal data (e.g. date and place of birth or place of residence), or special categories of data (e.g. data revealing your racial origin, political opinions, religious beliefs, state of health or sex life). Processing based on consent and carried out prior to the revocation of consent is, however, still lawful. The rights listed above in relation to personal data concerning a deceased person may be exercised by anyone who has an interest in the data subject, or is acting on his or her behalf, or for family reasons deserving of protection, unless the data subject has expressly forbidden this in a written declaration submitted to or communicated to the controller. To lodge a complaint with a supervisory authority (Data Protection Authority – www.garanteprivacy.it).

How to exercise your rights: If you have any problems or queries, please write to alessandra@realizzazionesitiwebpisa.it.

For more information see also our Privacy Policy above.

Your consent applies to the following websites: ristorantelosqualo.it.

Last updated 17 March 2022