PRIVACY POLICY (internet site)

Privacy policy pursuant to Legislative Decree n. 196/2003 (“Privacy Code”) articles 13, 23 and 26 and of Regulation (EU) 2016/679 (“GDPR”) articles 13 and 14.

Dear Customer, the correct management and protection of your data is our priority. In pursuit of this goal we will collect, use, transfer and store your data.

You have the right to be informed in a transparent and timely manner on how we treat and protect this data; We therefore invite you to carefully read the following information.

This document (“Information”) is intended to provide information on the processing of information – relating to users who use the services accessible starting from the web address www.rivierapalaceresidence.com – by TURISPORT s.r.l. and / or by other subjects identified for the purposes indicated below.

The information, in particular, is made pursuant to Legislative Decree no. June 30 2003 196 and EU Regulation no. 679/2016 (respectively “Privacy Code”, “GDPR” and jointly “Applicable Regulations”) and exclusively concerns the aforementioned Site: therefore it does not concern any other sites accessible by the user through the links on the same.

1. IDENTITY AND CONTACT DATA OF THE DATA CONTROLLER

The Data Controller – i.e. the legal person who determines the purposes and means of processing personal data – is TURISPORT s.r.l with registered office in Loano, Via Azzurri d’Italia 9.

2. CONTACT DATA OF THE DATA PROTECTION OFFICER (C.D. “RPD-DPO”)

The D.P.O. has not been designated as it is not mandatory.

3. CATEGORIES OF PERSONAL DATA PROCESSED

Below is the information that TURISPORT s.r.l. may process through the Site, within the limits of the purposes and methods described in this Policy, and which can be considered as personal data (“Personal Data”) pursuant to the Applicable Regulations. In particular:

(i) Navigation data

During their normal operation, the IT systems and software procedures used to operate this Site acquire some Personal Data whose transmission is implicit in the use of Internet communication protocols. It’s about

information that is not collected to be associated with identified subjects, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment. These data are used for the sole purpose of checking the correct functioning of the Site.

(ii) Data voluntarily provided by the user

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this Site entails the subsequent acquisition of the e-mail address and any other Personal Data included in the electronic communication, as well as the sender / user data, necessary to respond to the requests or to provide the service. Specific brief information may also be provided for particular services.

4. PURPOSE AND LEGAL BASIS OF THE PROCESSING

The Personal Data provided by users who request dispatch of informative material are used for the sole purpose of providing the service or provision requested, and may be known by TURISPORT srl employees and collaborators, duly instructed on the precautions and guarantees to be adopted in the processing of the information in question, as well as by third parties who provide accessory or instrumental services to the activity of TURISPORT srl with which specific agreements have been signed in fulfillment of the provisions of the Applicable Regulations.

Additional purposes will be indicated to users based on the specific services they will use starting from the dedicated pages available on this Site.

5. METHOD OF TREATMENT

The processing of Personal Data will take place through manual, IT or telematic tools, suitable to guarantee its security and confidentiality and will be carried out by personnel duly trained to comply with the Applicable Regulations.

Due to the consent expressed by the user, it is possible that the same is contacted by e-mail, sms, or through any equivalent electronic tool or by paper mail or call via operator to all the addresses provided. If you prefer to be contacted only to one or some of these addresses, you can make an express request through the form available in the Download section at the bottom of the page.

5.1 THE USE OF COOKIES

The Company uses IT techniques for the direct acquisition of the user’s personal identification data. For the types of cookies used, please read the so-called “Cookies policy”, available on page https://www.rivierapalaceresidence.com/CookiePolicy.aspx

page2image4176665280

6. SCOPE OF COMMUNICATION OF PERSONAL DATA

Due to the treatments that the user can authorize Personal Data, they can be communicated to the subjects that provide specific services indicated in the specific information. The information may also be communicated whenever the communication may be necessary to fulfill requests from the judicial or public security authorities. The Personal Data collected will in no case be disclosed.

7. DATA RETENTION PERIOD (DETERMINATION CRITERIA)

Except for personal data voluntarily provided by the user and for which specific information will be made, navigation information will be kept for a maximum of six months after collection; except in the case in which they must be used to ascertain responsibility in the event of computer crimes against the Site: in this case, the information will be kept available to the Authority for the time necessary to guarantee TURISPORT s.r. the exercise of their defense rights.

8. RIGHTS THAT ARE RECOGNIZED

The Applicable Law recognizes users a series of rights including, by way of example, the right:

– to access their Personal Data
– to request its correction
– updating and cancellation, if incomplete, incorrect or collected in violation of the law
– to ask that the treatment be limited to a part of the information concerning them
– to transmit to them or to third parties indicated by them the information concerning them (so-called “data portability”)
– to oppose their treatment for legitimate reasons
– to withdraw your consent at any time by sending a written request without formalities to TURISPORT s.r.l.

TURISPORT s.r.l. reminds that, where the response to requests has not been considered satisfactory, the user can address and lodge a complaint with the Guarantor Authority for the Protection of Personal Data (www.garanteprivacy.it) in the ways provided for by the Applicable Regulations.