Details of the data controller
Name of data controller: VistaAzzurra
Postal address: 34073 Grado, Via Genova 3
Email address: grado@vistaazzurra.it
Website: www.vistaazzurra.it
The data controller operates accommodation in Italy as a private individual and handles enquiries and booking requests submitted through the website.
Purposes of data processing
We process the personal data provided through the contact and booking enquiry form on the website for the following purposes:
- receiving accommodation enquiries;
- preparing offers;
- communicating with guests;
- preparing bookings;
- providing the accommodation service;
- complying with legal obligations.
Categories of personal data processed
The following data may be processed when the form is completed:
- name;
- email address;
- arrival date;
- departure date;
- number of guests;
- information about bringing a pet;
- other information entered in the message field.
Please avoid providing health-related, religious, political or other special-category personal data in the free-text field whenever possible.
Legal basis for processing
The legal basis for processing is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR):
taking steps at the request of the data subject prior to entering into a contract.
If a booking is made, the legal basis for further processing is:
- performance of a contract;
- compliance with a legal obligation.
Source of the data
Personal data are provided directly by the data subject through the contact and booking enquiry form available on the website.
Data retention period
For enquiries that do not result in a booking:
- the data are retained for no longer than 12 months.
If a booking is made:
- the data are processed for the period necessary to perform the contract,
- and for the period required by the related accounting, tax and other legal obligations.
Data processors
In operating the website, the data controller may use the following data processors:
Website hosting and form processing provider
Company name: Netlify, Inc.
Address: 101 2nd Street, San Francisco, CA 94105, United States
Website: https://www.netlify.com
Service: website hosting and the receipt, storage and processing of form submissions through Netlify Forms.
Domain and email service provider
Company name: BlazeArts Kft. (FORPSI)
Registered office: 1096 Budapest, Thaly Kálmán utca 39., Hungary
Website: https://www.forpsi.hu
Service: domain registration and management, electronic mail.
Data transfers
Personal data are not sold to third parties.
Data may be transferred only to:
- authorities acting pursuant to law;
- the accountant;
- data processors necessary for the provision of the service.
Airbnb bookings
If a booking is made through the Airbnb platform, Airbnb processes the data it collects as a data controller in its own right or as an organisation carrying out independent processing activities.
Airbnb’s own privacy policy applies to Airbnb’s processing of personal data.
Rights of data subjects
The data subject has the right to:
- request information about the processing of their personal data;
- request access to their personal data;
- request rectification of inaccurate data;
- request erasure of their data;
- request restriction of processing;
- object to processing;
- request the transfer of their personal data (data portability).
The data controller will respond to the data subject’s request without undue delay and in any event within one month.
Data security
The data controller protects personal data through appropriate technical and organisational measures, in particular against:
- unauthorised access;
- alteration;
- transfer;
- disclosure;
- deletion;
- destruction.
Only the data controller may access the data.
Cookies
The website does not use cookies.
Right to lodge a complaint
The data subject may lodge a complaint with:
Garante per la Protezione dei Dati Personali
(Italian Data Protection Authority)
Website: https://www.garanteprivacy.it
Marketing communications and newsletter
If the data subject gives separate consent, the data controller may send marketing information by email.
Marketing communications may include:
- periodic promotions and discounts;
- last-minute offers;
- seasonal rates and package offers;
- introductions to new services;
- news and information about the accommodation;
- programme recommendations and information relating to the region.
Categories of data processed
- name;
- email address.
Purpose of processing
Sending electronic marketing communications and newsletters.
Legal basis for processing
The data subject’s voluntary consent pursuant to Article 6(1)(a) of the GDPR. Consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Data retention period
The data controller processes the data until consent is withdrawn, but for no longer than five years from the last contact.
Unsubscribing
The data subject may unsubscribe from newsletters and marketing communications at any time, without giving reasons:
- by sending an email to the data controller.