In compliance with the obligations deriving from the national (Law Decree No. 196, dated June 30, 2003, Code on the Protection of Personal Data) and European (European Regulation for the Protection of Personal Data No. 679/2016, GDPR) regulations and subsequent amendments, this website respects and protects the privacy of visitors and users, making every possible and proportionate effort not to breach their rights.
Legal Basis of the Processing
This website processes data based on consent
The provision of data and, therefore, consent for the collection and processing of the data is optional; Users may deny consent, and may revoke at any time a consent already provided (see Withdrawal of Consent for Data Processing). However, denying consent may make it impossible to provide some of the services and may compromise the navigation experience throughout the website.
The website offers informative content and, at times, interactive content. When browsing the website, visitors' information may be collected as follows:
This category of data includes: IP addresses, the type of browser used, the operating system, domain name and website addresses from which login and log out actions have taken place, the information on the pages visited by users within the website, time of access, time of stay on the same page, the internal path followed and other parameters related to the operating system and the IT environment of the user.
These technical/IT data are collected and used exclusively in an aggregated and non identifying form and may be used to verify responsibility in the case of cyber crimes against the website.
Data Provided by the User
They are all those personal data provided freely by the website's visitor, for example, to subscribe and/or login to a reserved area, request information on a specific product or service through a form, or write to an email address.
In some of said cases, the information provided may be used for user profiling. Whenever this occurs, adequate notification will be provided and free and specific consent acquired for marketing and/or profiling purposes.
Data Storage Period
Personal data will be stored for the period of time strictly necessary to pursue the specific purposes of the processing for which the user has provided his/her consent.
Withdrawal of Consent for Data Processing
To withdraw/revoke a previously provided consent, follow the procedure detailed in this page: consent withdrawal link
are fundamental in order to distinguish between connected users and they are helpful to avoid that a requested functionality ends up being provided to the wrong user, as well as for security reasons to avoid cyber attacks against the website. Session cookies do not contain personal data and last only for the duration of the session in progress, that is until the user closes the browser. They do not require consent.
This website acts also an intermediary for third party cookies, used to provide additional services and functionalities to visitors to improve the use of the website, such as social network icon buttons or videos. This website does not have any control over third party cookies, fully managed by third parties. Consequently, the information on the use of said cookies, on their purpose, as well as on the methods on how to disable them is provided directly by the third parties in the pages listed below.
- Google Analytics
(IP cut off at the last eight digits) and exclusively aggregated in order to analyse the use of the website by users, fill out reports on website activities and provide additional information, including the number of visitors and pages visited.
Users can disable selectively the action of Google Analytics by installing on their browser the opt-out tool provided by Google. To disable Google Analytics, click the link below:
: This website may embed videos from YouTube, which may set and use its own cookies and/or similar technologies. For more information, please clink on this link:
Duration of a cookie
Some cookies (session cookies) remain active only until the user closes the browser or when he/she logs out. Other cookies survive the closing of the browser and are available also on subsequent visits.
These cookies are called persistent cookies and their duration is established by the server at the time of their creation. In some cases, an expiry is set while in other cases the duration is unlimited.
This website does not make use of persistent cookies, except the cookie on which the user's choice to accept cookies is recorded (duration: 365 days).
This website processes the data of its users lawfully and properly, adopting the necessary security measures to prevent unauthorised access, dissemination, or unauthorised alteration or destruction of the data. Website browsing and any transfer of data occursin encrypted mode
(https). In addition to the Data Controller, in some cases access to the data may be granted to persons in charge involved in the management of the website (administrative, sales, legal, and system administration personnel).
Pursuant to the European Regulation 679/2016 (GDPR) and the national regulation, the User may, according to the methods and within the limits established by the laws in force, exercise the following rights:
- request confirmation of the existence of the personal data concerning him/her (right of access);
- know the origin of the data;
- receive communication about the data in intelligible form;
- receive information regarding the logics, methods and purposes of the data processing;
- request the updating, correction, integration, erasure, transformation into anonymous form, blocking of the data processed in violation of the law, thereby including those no longer necessary to pursue the purposes for which they were collected;
- in the cases of processing based on consent, receive solely at the cost of the required support, if applicable, the data provided to the Data Controller, in a format that is structured and readable by a data scanner and in a format typically used by an electronic device;
- The right to file a complaint before the Data Protection Authority (Privacy Guarantor);
- as well as, in more general terms, exercise all the right granted by the regulations in force.
All requests must be submitted to the Data Controller.
The Data Controller pursuant to the laws in force is Secret Garden City Apartments - Self Catering B&B with registered office in Via Francesco Budassi n. 63 - Urbino (PU) Italy, email email@example.com.