Information pursuant to art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”)

Dear user,

Below are illustrated the methods of processing of personal data collected automatically or provided by you through navigation or use of the Petramare.com website (hereinafter, the "Website").

Data Controller

The Data Controller is Amerigo Martucciello, in the person of the legal representative, domiciled at the headquarters in Via Portacatena, 15, 84121 Salerno.

Type of data processed

To allow you to use the Website and its services, including the possibility of creating an account, making reservations and requesting quotes (hereinafter, the "Services"), the Data Controller needs to know and process some of your personal data.

Data communicated voluntarily by the user

To allow the use of the Website and its Services, including the possibility of creating your account, you will have to provide your personal details (name and surname), your contact details (email address and telephone number) and the country of residence.

In order for you to make reservations, the Data Controller needs to process your personal data (name, surname, tax code), your email address, your telephone number and your residence address, as well as any further necessary personal data to invoicing.

To allow us to recover your booking, the confirmation number and email address used will be required.

The optional, explicit and voluntary sending of e-mail messages involves the acquisition of your personal data, your e-mail address, as well as any other data included in the message or forms sent by you. Should you contact our call center, your name and surname, any booking number, as well as any other information necessary to satisfy your requests will be requested.

Browsing data

The computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

These data, necessary for the use of the Website, are processed for the sole purpose of obtaining statistical information on the use of the Services (most visited pages, number of visitors per hour or day, geographical areas of origin, etc.) and to control the correct functioning of the Services offered.

The navigation data do not persist for more than seven days and are deleted immediately after their aggregation, without prejudice to the possible need for the investigation of crimes by the judicial authority.

Cookie Policy

The Website uses the following types of cookies and other tracking identifiers.

Technical cookies

Technical and session cookies are used, i.e. small text files containing a certain amount of information exchanged between your terminal or browser and the Website, which allow the correct functioning and use of the same.

First and third party analytics cookies

This Website uses first and third-party analytical cookies. Analytical cookies are used to collect information on the use of the Website, in aggregate form, in particular on the number of users and how they visit the site itself, also providing anonymous statistical analysis in order to improve the use of the Site Web and make content more interesting and relevant to users' desires.

Profiling cookies

This Website uses first and third-party profiling cookies. These cookies are not essential, but they help to personalize and improve your experience on the Website. For example, they help us to know and remember your preferences and show relevant and personalized advertising. They also allow us to limit the number of times each advert is shown, measure the effectiveness of the advertising campaign, remember the visit and share the data collected with third parties, for example advertisers.

The elimination of these cookies, therefore, although it does not affect the general usability of the Website, could however lead to a limitation of some functions.

Options regarding the use of cookies by the Website through your browser settings

However, the delivery of all cookies can be deactivated by changing your browser settings. It should be highlighted, however, that changing these settings could make the site unusable if the cookies essential for the provision of our Services were blocked. In any case, each browser has different settings for deactivating cookies. Below you will find links to instructions for the most common browsers: Apple Safari, Google Chrome, Microsoft Internet Explorer, Mozilla Firefox, Opera.

 

3. Purpose, Legal Basis of the Processing and Nature of the Provision

Purpose - A

 - Use of the contents and services of the Website (i,ii) and guarantee of network and information security (iii). This purpose includes the possibility of allowing you to react to your account, which is necessary to make reservations via the Site Web, as well as to manage them. This may also involve the processing of some of your particular data to respond to specific requests, such as, for example, those for special assistance.

This purpose also includes the possibility of forwarding requests and communications via the Website.

Furthermore, this purpose includes the processing of personal data relating to traffic, to the extent strictly necessary and proportionate to guarantee the security of networks and information.

Legal basis

(i) Performance of a contract to which you are a party

(ii) Compliance with legal obligations

(iii) Legitimate interest

In case of particular data, the legal basis of the processing is your express consent.

Nature

The provision of your data is mandatory. Failure to authorize their processing would make it impossible to use the contents and services of the Website.

Furthermore, failure to authorize their processing would make it impossible to guarantee the security of networks and information.

In the case of particular data, the provision is optional. However, failure to authorize their processing could make it impossible to follow up on your specific requests.

 

Purpose - B

 - Receipt of direct marketing communications, including newsletters and information of a commercial nature(s). This purpose includes the possibility of subscribing to our newsletter and receiving communications and information of a commercial and direct marketing nature on our Services and offers, on discounts and on any other promotional and loyalty initiative adopted, both through traditional and fully automated contact systems, such as, by way of example, through the use of your email address. The provision of your data is optional. Failure to authorize their processing, while not preventing the use of the Website in any way, may not allow you to fully benefit from the advantages we offer to our community through advertising, commercial and direct marketing information.

Legal basis

(i) Express consent

Nature

The provision of your data is optional. Failure to authorize their processing, while not preventing the use of the Website in any way, may not allow you to fully benefit from the advantages we offer to our community through advertising, commercial and direct marketing information.

Purpose - C

- Receipt of offers, discounts and other benefits based on a profiling process(es). This purpose includes the possibility of receiving offers, discounts and any other benefit and promotional initiative modeled on your specific needs and purchasing propensities, also by participating in loyalty programs, which provide for the purposes of their operation the registration, identification and profiling of data relating to your purchase volumes, your consumption habits and choices.

Legal basis

(i) Express consent

Nature

The provision of your data is optional. Failure to authorize their processing, while not preventing the use of the Website in any way, may not allow us to send you personalized communications based on your browsing habits and choices.

 

4. Retention period

Personal navigation data and data acquired through the use of the Website will not be kept for more than seven days.

Regarding your personal data processed for the use of the contents and services of the Website, they will be kept for 10 years from the booking.

With regard to the processing of your personal data for direct marketing purposes, the Company has decided to provide for the automatic deletion of your personal data, or their transformation into anonymous form in a permanent and non-reversible manner, within 24 months of registration of the data collected.

With regard to the processing of your personal data for profiling purposes, in compliance with regulatory requests and provided that they have been explicitly authorized by you, the Company has decided to provide for the automatic deletion of your personal data, or their transformation into anonymous form in a permanent and non-reversible manner, within 12 months of registration of those used for profiling purposes.

With regard to the other personal data acquired, not being able to precisely predetermine their retention period, the Data Controller undertakes from now on to base their processing on the principles of adequacy, relevance and data minimization, as required by the GDPR, verifying annually the need for their conservation. This is without prejudice to the case in which it is necessary to keep such data to fulfill regulatory obligations, or to ascertain, exercise or defend a right in court.

5. Categories of Recipients of Personal Data

The personal data processed will not be disclosed to third parties, but may still be communicated in relation to the processing purposes previously exposed to the following subjects:

those who can access the data pursuant to legal provisions established by European Union law or that of the Member State to which the Data Controller is subject;

subjects that carry out purposes auxiliary to the activities and services referred to in paragraph 3, i.e. companies that offer transport services, accommodation facilities, companies that offer payment services, companies that offer advertising, marketing and communication services, companies that offer infrastructures IT services and IT assistance and consultancy services as well as the design and creation of software and Internet sites, companies that offer services useful for personalizing and optimizing our services, companies that offer data analysis and development services (including those relating to user interactions with our services), service centers, companies or consultants appointed to provide further services to the Data Controller, within the limits of the purposes for which they were collected.

Furthermore, our employees may also become aware of your personal data, provided that they are previously designated as a person acting under the authority of the Data Controller pursuant to art. 29 of the GDPR or as System Administrator.

6. Transfer of Personal Data to Third Countries

The Data Controller may transfer your personal data to third countries outside the European Union and, in particular, the United States for the management of payments. This transfer is always subject to adequate guarantees through the use of European Union Standard Contractual Clauses. For more information on data transfer rules to countries outside the European Union, including the mechanisms we rely on, you can consult the European Commission website here. To request a copy of those signed, you can send an email to info@petramare.house.

7. Any Automated Decision-Making Processes

If you explicitly authorize the processing of your personal data for profiling purposes, the Data Controller will use automated decision-making processes aimed at profiling your browsing habits, your preferences and your interactions with the Website. The objective is to allow you to use the Website in a manner consistent with your interests and preferences, as well as offer you the opportunity to benefit from offers, discounts and any other benefit and promotional initiative tailored to your specific needs. For the purposes of their operation, these processing activities involve the registration, analysis and profiling of the destination, the requested structure, the number of nights, the purchase volume, the check-in and check-out date, the number people, of the customer type.

The logic applied to the profiling process is based on clustering activities through aggregative methodologies, which, through the analysis of the personal data collected, allow us to identify types of users who share similar preferences. Therefore, as a consequence of profiling activities, you will be able to benefit from viewing content targeted exclusively to your interests, as well as receiving communications that may respond to your interests or habits.

As required by art. 22, paragraph 3, of the GDPR, the Data Controller implements all the most appropriate measures to protect your rights and freedoms even in the event of profiling, in addition to any further and legitimate rights as better explained in the following paragraph 8 (“Rights of the interested party”) of this Privacy Policy.

8. Rights of the interested party

In relation to the processing of your personal data, you, as an interested party, have the right to revoke the consent given at any time and to obtain access to your personal data from the Company. Furthermore, you can request the Company to rectify or cancel them. Furthermore, you have the right to obtain the limitation of the processing of personal data concerning you, as well as the right to the portability of such data.

In addition to the above, you have the right to object at any time, for reasons related to your particular situation, to the processing of your personal data carried out pursuant to art. 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions, as required by art. 21 of the GDPR. Furthermore, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you carried out for such purposes, including profiling to the extent that it is connected to such direct marketing. .

Finally, you have the right to lodge a complaint with a supervisory authority or take legal action if you believe that the processing concerning you violates the GDPR.

To exercise each of your rights, you can contact the Data Controller by sending an email to info@petramare.house.