PRIVACY POLICY
​​
Your privacy is very important to us, so we would like to explain to you how we collect and use information about you. Our company always pays particular attention to the processing and protection of the personal data of its customers, users, suppliers, collaborators and all those with whom it comes into contact.
Data processing takes place in accordance with the principles and provisions of EU Regulation 2016/679.
​
WHY THIS INFORMATION?
This page describes how our site is managed in relation to the processing of personal data of users who consult it.
This is an information note that is given to those who interact with the Palazzo Loup web services, accessible electronically from the address: https://www.palazzo-loup.it/ The information is provided only for the site diPalazzo Loup and not for other websites that may be consulted by the user via links.
​
DATA CONTROLLER
The Data Controller is Palazzo Loup, with headquarters in Via S.Margherita, 21 Loiano (BO)
The e-mail address for managing privacy requests: info@palazzo-loup.it
The Data Controller, also through designated structures, will take charge of your request and provide you, without unjustified delay and in any case, at the latest, within one month of receipt of the same, the information relating to the action taken regarding your request .
We inform you that if the Data Controller has doubts about the identity of the natural person submitting the request, he may request further information necessary to confirm the identity of the interested party
​
DATA CONTROLLER
alazzo Loup, with headquarters in Via S.Margherita, 21 Loiano (BO)
The e-mail address for managing privacy requests: info@palazzo-loup.it
​
​
WHAT INFORMATION DO WE COLLECT?
NAVIGATION DATA
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
​
COOKIES
Our Cookie Policy can be found here.
​
PROVIDED VOLUNTARILY BY YOU
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site or the filling in of specific forms involves the subsequent acquisition of the sender's address and the personal data necessary to respond to requests and/or provide the requested services, as well as any other personal data included in the letter (and in the attachments thereto) or in the appropriate forms. The data will be processed electronically and electronically, to respond to requests and/or provide the requested service.
​
1) Data collected via Newsletter
The data received through the activation of the newsletter service will be used to provide the service and send information, including of a commercial nature.
The newsletter service is provided via the Wix.com, Inc platform which is based in Israel and is contractually committed to processing user data in accordance with the Standard Contractual Clauses, guaranteeing a level of protection of personal data adequate to the standards required by the European supervisory authorities.
The aforementioned company will process the data as Data Controller, in compliance with the aforementioned standards (see information at the link: https://it.wix.com/about/privacy ).
The legal basis of the processing carried out on the data provided by the user is consent.
Processing for information and marketing purposes are considered valid until the interested party revokes consent (or unsubscribes), or after 12 months from the last communication for which there is evidence of direct interaction (click, open, reply) .
After these deadlines the data will be deleted.
2) Data collected via contact forms
The data received in the contact form will be used for the sole purpose of being able to contact the person who left the contact details to process any requests.
The legal basis of the processing collected in the contact form is consent.
The data collected through the form will be transformed into an email which can possibly be stored within the email client used by the site owner.
This data will not be recorded on other media or devices, nor will other data deriving from navigation on the site be recorded.
The processing of such data will have a duration no longer than that necessary for the purposes for which the data were collected, or to allow the exchange of communications between the applicant and the Data Controller.
​
​
WHY DO WE COLLECT THIS INFORMATION?
We collect this Information for the following purposes:
Respond to your requests
Send you our Newsletter
Provide and manage the Services
Provide our Users with ongoing customer service and technical support
Further develop, personalize and improve our Services, based on the common or personal preferences, experiences and difficulties of Visitors and Users
Comply with legal obligations
​
LEGAL BASIS OF THE PROCESSING
The navigation data are processed for our legitimate interest in guaranteeing the security of the site, checking its correct functioning and obtaining statistics in relation to their use (art. 6, co. 1, letter f of the GDPR). The legal basis of the processing carried out on the data provided by the user is consent.
​
WHO DO WE SHARE INFORMATION WITH?
The recipients of the data collected following consultation of the Site are the following subjects designated by the Data Controller, pursuant to Article 28 of the Regulation, as data controllers.
virtual hosting, for web hosting, mail server and data storage activities.
Wix, in relation to any data entered for the use of the Newsletter service
Palazzo Loup may share your Information with third parties (or otherwise grant them access) only in the following ways and in the following cases:
THIRD PARTY SERVICES
Palazzo Loup collaborates with a series of selected service providers, whose services and solutions integrate with ours, facilitate and improve them. These are server hosting and co-location services, communications, cybersecurity services, billing and payment processing services, marketing services, fraud detection and prevention services, web analytics, newsletter distribution and monitoring services, session recording and remote access services, content providers and our legal and financial advisors. Such Third Party Services may receive or otherwise have access to our Users' Personal Information, in whole or in part, depending on their particular roles and purposes to facilitate and improve our Services and may use it only for such purposes.
​
COMPLIANCE WITH LEGAL OBLIGATIONS
Palazzo Loup may disclose or otherwise grant others access to your Personal Information pursuant to a legal obligation, such as a subpoena, judicial proceeding, search warrant, court order, or pursuant to law in force, if it believes in good faith that this conduct is required by law, with or without prior notice to the User.
​
SOCIAL MEDIA FEATURES
Our site may include certain Social Media Features and widgets, such as the Facebook "Like" button, "Share" button or other interactive mini-programs. These Social Media Features may collect information such as your IP address. User or the page you are visiting on our Site and may set a cookie to enable proper functioning. Social Media Features are hosted by third parties. Your interactions with these third parties are governed by their policies and not ours .
​
STORAGE PERIOD
The navigation data are stored by the company Register S.p.a. (Data Controller) for the period strictly necessary and in any case in compliance with current regulatory provisions on the matter.
​
OBLIGATION TO PROVIDE DATA AND CONSEQUENCES
Consent to the processing of personal data provided by the user is optional, but in case of refusal to provide the aforementioned data it will not be possible to respond to your requests or provide the newsletter service.
​
RIGHTS OF THE INTERESTED PARTY
At any time, the interested party may exercise, in relation to the data processing described, the rights provided for by the applicable legislation on the protection of personal data, including the right to:
​right of access – article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you is being processed and, in this case, obtain access to your personal data;
right of rectification – article 16 GDPR: right to obtain, without unjustified delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
right to cancellation (right to be forgotten) – article 17 GDPR: right to obtain, without unjustified delay, the cancellation of personal data concerning you. The right to erasure does not apply to the extent that processing is necessary for the fulfillment of a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise or defense of a right. in court.
right to limit processing – article 18 GDPR: right to obtain limitation of processing, when: a) the interested party contests the accuracy of the personal data; b) the processing is unlawful and the interested party opposes the deletion of the personal data and instead requests that its use be limited; c) the personal data are necessary for the interested party to ascertain, exercise or defend a right in court; d) the interested party has opposed the processing pending verification regarding the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
right to data portability – article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another data controller without impediments, if the processing is based on consent and is carried out by automated means. Furthermore, the right to have your personal data transmitted directly to another owner if this is technically feasible;
right of opposition – article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimacy of legitimate interest, including profiling, unless there are legitimate reasons for the Data Controller to continue the processing which prevail over the interests, rights and freedoms of the interested party or for the establishment, exercise or defense of a right in court.
right not to be subjected to an automated decision-making process – article 22 GDPR: the interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or which significantly affects similarly significantly on your person, unless this is necessary for the conclusion or execution of a contract or you have given your consent. In any case, an automated decision-making process cannot concern your personal data and you can at any time obtain human intervention from the data controller, express your opinion and contest the decision;
right to lodge a complaint with the Guarantor Authority for the protection of personal data: http://www.garanteprivacy.it;
Revoke the consent given on any occasion and with the same ease with which it was provided without prejudice to the lawfulness of the processing based on the consent given before the revocation.
The above rights may be exercised against the Owner by contacting the references indicated above.
​