DISCLOSURE OF THIS SITE
This page describes how the site is managed with reference to the processing of the personal data of users who consult it and their confidentiality. This is an information notice that is also provided pursuant to art. 13 of GDPR 679/2016 – Personal Data Protection Regulations for those who interact with Il Bottaccio web services accessible electronically from the address: https://bottaccio.com/it/
corresponding to the home page of the official website of Il Bottaccio, Via Bottaccio, 1 54038 Montignoso (MS). The information is provided only for this site and not for other websites that may be consulted by the user via links.
THE “DATA CONTROLLER”
Following consultation of this site, data relating to identified or identifiable persons may be processed. The “owner” of the processing of any personal data processed following the consultation of our site and any other data used for the provision of our services, is Ignos Srl in the person of Mr. Antonio Mosca, Via San Giuseppe Vecchio 51 Massa (MS) . The Coordinator Contact Person for the Protection of Personal Data is Ms Serena della Pina, who can be contacted at firstname.lastname@example.org
PLACE WHERE DATA IS PROCESSED
The processing connected to the web services of this site [physically “hosted” on the shared server OVH (Strasbourg – SBG3) – FRANCE] takes place at the aforementioned office and is only handled by technical staff of the office in charge of processing, or by any persons in charge of occasional maintenance operations. The personal data provided by users who submit hotel booking requests or sending information material (information, newsletters, registrations, etc.) are used for the sole purpose of carrying out the service or provision requested and are not disclosed to third parties, except for the following possible cases: • commercial partners of Il Bottaccio or the chain of representation to whom the same communicates the data exclusively to process online reservations, Saber GLBL Inc, Relais & Châteaux and Onyx CenterSource;
• persons, companies or professional firms that provide assistance and consultancy to Ignos Srl in accounting, administrative, legal, tax and financial matters;
• subjects whose right to access the data is recognized by law or by orders of the authorities; The credit card details used for reservations will be automatically made unavailable at the end of the stay
CATEGORIES OF PROCESSED DATA
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. they are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this possibility, the data on web contacts do not currently persist for more than seven days.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. The data will be stored only for any specific registrations or requests or for sending newsletters or special offers and will not be disclosed to anyone. We do not collect or use personal information about who visits the website. Visitors remain anonymous. The only exception is the personal identification information necessary to comply with contractual booking obligations towards the user.
When booking on the website, the user is required to provide his name, billing address, e-mail address and information on payment methods and credit card. Il Bottaccio will use this information only to process the reservation and to send specific information relevant to the confirmation of the same, such as the receipt, the reservation code and the conditions. The information provided will not be used for commercial purposes and will not be sold, transmitted, licensed or passed on to third parties in any other way, except:
• of the Relais & Châteaux Entreprise chain of representation, 58-60, Rue de Prony – 75017 Paris – FRANCE (www.relaischateaux.com), which uses the company Saber GLBL Inc (www.sabrehospitality.com) in the USA for this purpose ;
• from the intermediary for the payments of the Worldwide Payment System S.A.U dba commissions Onyx CenterSource, INSUR Bldg. Diego Martínez Barrio 10, 4th floor, 41013 Seville SPAIN (https://www.payments.onyxcentersource.com) for exclusive booking purposes.
In any case, the site administrator ensures the adoption of scrupulous procedures to protect the navigation data and the use of special care to protect the credit card data provided when making online reservations.
Visitors to the site can register for our newsletter service. By registering, the user’s e-mail address will be automatically added to a list of contacts to which e-mail messages containing periodic updates with information, including commercial and promotional information, relating to initiatives, events or promotions may be transmitted. of the data controller.
To subscribe to the Newsletter you can use the registration forms on the site by entering your name and e-mail address. The data entered will be used for the sole purpose of sending our newsletter via e-mail and will not be disclosed to third parties. The newsletters will be sent through the Mailchimp platform owned by “The Rocket Science Group LLC” (Atlanta, USA), and adheres to the Privacy Shield agreement which regulates the transfer of personal data between the European Union and the USA, and the data will be processed through the the same platform that acts as the data processor.
Management of personal data collected from personal curriculum
Ignos Srl accepts the personal Curriculum Vitae of any candidates via email in PDF or Word format. The spontaneous and voluntary sending of the Curriculum will be considered implicitly as informed consent hereby issued by the interested party to the receipt and processing of the personal data contained therein, exclusively following the purpose linked to the selection of potential candidates.
The data processed for the purpose of selecting candidates are of a personal nature useful for finding the particular profile requested. In general, the nature of personal data is of a normal type, except in some possible cases where particular (sensitive) data necessary for the identification of particular requirements provided for by the regulations in force, such as indication to particular protected categories, may be indicated. suitability for certain mandatory works and / or start-ups These particular data will be processed with the explicit consent of the interested party to the processing of such personal data for one or more specific purposes;
The provision of data relating to the selection of candidates is mandatory. Any refusal to provide such data will make it impossible to carry out a regular selection activity and possible recruitment. The data in question will not be disclosed to anyone.
General rules for sending the Curriculum Vitae
Any Curriculum Vitae received spontaneously, in response to an announcement or to our request will be filed directly by special persons in charge of personal data processing according to the personal data security directives adopted in compliance with the minimum security measures referred to in Annex “B “Of the Code. These will be printed only on the occasion of a meeting and interview with the person concerned. After the job interview, if the candidate is not selected, the CV will be deleted and / or destroyed.
In the other cases, after a short period of time and after having carried out the interviews and having passed the trial period, (60 days) the CVs they are deleted from the computer and if already printed they are deleted. I C.V. profiles considered interesting will be subjected to conservation and in any case eliminated within three years of collection.
To send the Curriculum Vitae use only the following addresses:
• Ignos Srl, Via Bottaccio 1 Montignoso 54038 (MS), c.a. Personnel manager; • E-mail: email@example.com.
DATA CONSERVATION PERIOD OR CRITERIA FOR DETERMINING THE PERIOD
In compliance with the provisions of art. 5 paragraph 1 letter. e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows identification of the data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
The retention times of personal data provided through the website depend on the purpose of the processing carried out, in particular:
• purposes related to technical navigation data for the correct functioning of the website: storage only for the relative session, at the end of which the data are deleted;
• purpose of responding to the request for information / supply of requested services (maximum 12 months for contact request; 10 years for any administrative / accounting / financial documentation relating to the supply of a service);
• data collection for personnel selection (maximum 36 months);
• newsletters, marketing or promotional communications generally via e-mail (24 months – until consent is revoked);
• administrative-accounting management purposes: 10 years as per legal terms for the conservation of administrative / accounting / financial documentation.
COOKIES TECHNOLOGIES USED
This site uses technologies that involve the use of proprietary and third-party cookies that have different purposes, including ensuring a better browsing experience, performing computer authentication or session monitoring and storing specific technical information regarding users who access the servers of OVH and Relais & Châteaux // SABER, respectively the hosting provider, the site maintenance service manager and the hotel booking service intermediary.
Description of the cookie mechanisms adopted:
For a description of the cookie technologies in use and for the choice of cookies for navigation, refer to the link on the home page. However, if the user blocks or deletes a cookie, it may be impossible to restore the preferences or customized settings previously specified and our ability to customize the user experience will be limited.
TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES
Personal data are not transferred to third countries outside the EU, in compliance with the provisions of Chapter V of the RGPD 679/2016, except in the cases described above where for the transfer to the USA it takes place on the basis of the adequacy decision of the EU Commission. vs third country or an international organization (Art. 45 RGPD), in particular the decision on the adequacy of the protection provided by the EU-US privacy shield regime: CD “Privacy Shield” of 12 July 2016.
OPTIONALITY OF PROVIDING DATA
Apart from that specified for navigation data, the user is free to provide personal data contained in the request forms to Ignos Srl or indicated in contacts with the hotel to send CVs, to make reservations online, to request the ” sending information material or other communications. Failure to provide them may make it impossible to obtain what is requested.
METHOD OF TREATMENT
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
RIGHTS OF THE INTERESTED PARTIES
The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of such data and to know its content and origin, verify its accuracy or request its integration or updating, or the rectification (Chapter III RGPD 679/2016). Pursuant to the aforementioned law, one has the right to request cancellation (right to be forgotten), transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing. , the right to obtain a copy of the personal data being processed and the portability of the data to another data controller. Requests should be addressed to:
• Ignos Srl, Via San Giuseppe Vecchio 51, 54100 Massa (MS), or at firstname.lastname@example.org The DPO can be contacted at the e-mail address: email@example.com
RIGHT OF COMPLAINT
Interested parties who believe that the processing of personal data referring to them carried out through this site is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as required by art. 77 of the Regulation itself, or to take the appropriate judicial offices (Article 79 of the Regulation).