PRIVACY POLICY

Information issued in accordance with art. 13 of EU Regulation 679/2016 (GDRP)

This  information is  provided  by  Sas Mattinata Camping di Salcuni Maria & C., head  office  Contrada Funni – 71030 Mattinata (FG), as Controller and responsible for the processing of personal data.
The data collected are processed in accordance with the principles of correctness, lawfulness and transparency and the protection of people’s privacy and rights.
Data processing is carried out by both manual and telematic /IT methods; safety measures are adopted to avoid the risks of unauthorized access, destruction or loss of data, as well as to avoid processing not in accordance with the purposes of the collection.

Categories of processed personal data
Sas Mattinata Camping di Salcuni Maria & C. will process the following data:
– personal data, address of residence or domicile and contact details (telephone, e-mail);
– bank data and/or payment data related to accounting and tax management;
– Accounting, tax and administrative data in general deriving from invoices/receipts both issued and received, and any other document delivered to us.

Purpose of the processing
Data processing is aimed at the correct and complete execution of the contractual/commercial relationship between the parties and the data provided are processed for the following purposes:
A. to fulfill all accounting and tax obligations imposed by the laws in force in relation to the existing commercial relationship;
B. any other mandatory fulfillment imposed by fiscal and civil law and by social security regulations.

Legal basis of the processing
Sas Mattinata Camping di Salcuni Maria & C. treats personal data lawfully, whenever the processing is necessary for the execution of a contractual or commercial relationship and to fulfill an impending fiscal and/or social and/or legal obligation;

Consequences of failure to communicate personal data
With regard to personal data relating to the execution of the contractual / commercial relationship of which you are a party or related to the fulfillment of a regulatory obligation, the failure to communicate personal data prevents the improvement of the contractual / commercial relationship itself.

Categories of third parties to whom the data may be communicated
Personal data may be disclosed to:
1. Consultants and/or accountants providing functional services for the above mentioned purposes;
2. Banking and insurance institutions providing functional services for the above mentioned purposes;
3. Subjects processing data in accordance with specific legal obligations;

Duration of processing and retention period
All data are processed only for the time necessary for the above mentioned purposes and will be kept throughout the duration of the contractual or professional relationship.

Profiling and dissemination of data
Personal data are not subject to disclosure or to any fully automated decision-making process, including profiling.

Access rights, cancellation, limitation and portability
The interested parties are granted the rights referred to in articles from 15 to 20 of the GDPR. By way of example, each interested party may:
A. obtain confirmation that personal data concerning him/her is being processed;
B. should a processing be in progress, obtain access to personal data and information relating to the processing and request a copy of the personal data;
C. obtain the correction of inaccurate personal data and the integration of incomplete personal data;
D. obtain, if one of the conditions foreseen by the art. 17 of the GDPR exists,  the cancellation of personal data concerning him/her;
E. request the limitation of the processing, in the cases provided for by art. 18 of the GDPR;
F. receive personal data concerning him/her in a structured format, commonly used and readable by automatic device and request their transmission to another holder, if technically feasible.

The right to oppose
Each interested party has at any time has the right to oppose the processing of his/her personal data carried out for the pursuit of a legitimate interest of the Data Controller. In the event of opposition, personal data will no longer be processed, provided that there are no legitimate reasons to proceed with the processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.

Right of withdrawal of consent
In the event consent is required for the processing of personal data, each interested party may also revoke the consent already given at any time. The consent can be revoked by writing an email to the address info@mattinatacamping.it.
The processing based on consent and carried out prior to the withdrawal of the consent, will be considered as lawful;

Right to propose a claim to the Guarantor
In accordance with GDPR, each interested party may lodge a complaint with the Data Protection Authority in case he/she believes that his/her rights have been violated, according to the procedures indicated on the website of the Guarantor: www.garanteprivacy.it.
The exercise of the rights of the interested party is free.
Should the person giving the data be under 18, such processing is regarded as lawful only if and to the extent that such consent is given or authorized by at least one of the holders of parental responsibility for whom the identification data are acquired as well as a copy of his/her identification document.