Privacy policy Ca’ Berton Village
Contact information
Data Controller
Villaggio Turistico Berton S.r.l.
Registered and administrative office:
Via Alessandro Poerio 25 – 15/17
30013 Cavallino – Treporti (VE)
Data Controller’s email address: privacy@caberton.it
Types of Data collected
Among the types of Personal Data that this Application collects, by itself or through third parties, there are: Cookies, Usage Data, email, first name, last name, date of birth, country and address.
Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Application.
Unless specified otherwise, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service. In cases where this Application specifies some Data as optional, Users are free not to provide such Data, without any consequence on the availability or functioning of the Service.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Data Controller.
Any use of Cookies – or of other tracking tools – by this Application or by the owners of third-party services used by this Application, unless stated otherwise, serves to provide the Service requested by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and warrants that they have the right to communicate or disseminate it, releasing the Data Controller from any liability towards third parties.
Mode and place of processing of the Data collected
Methods of processing
The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, modification, or destruction of the Personal Data.
The Data processing is carried out using computers and/or IT-enabled tools, following organisational procedures and methods strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to other parties involved in the organisation of this Application (administrative, sales, marketing, legal, system administrators) or to external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Data Controller. The updated list of these parties may be requested from the Data Controller at any time.
Legal basis of processing
The Data Controller processes Personal Data relating to the User if one of the following conditions applies:
- the User has given consent for one or more specific purposes; Note: in some jurisdictions the Data Controller may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply whenever the processing of Personal Data is subject to European data protection law;
- processing is necessary for the performance of a contract with the User and/or for any pre-contractual obligations thereof;
- processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
- processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Data Controller;
- processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
In any case, the Data Controller will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
Place
The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the User’s country of residence. To find out more about the place of processing, the User can refer to the section containing details about the processing of Personal Data.
The User has the right to obtain information concerning the legal basis of Data transfers outside the European Union or to any international organisation governed by public international law or set up by two or more countries, such as the UN, and concerning the security measures taken by the Data Controller to safeguard the Data.
If any such transfer takes place, the User can find out more by checking the relevant sections of this document or inquire with the Data Controller using the contact details provided at the beginning of this document.
Retention period
The Data is processed and stored for as long as required by the purposes for which it has been collected.
Therefore:
- Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until such contract has been fully performed.
- Personal Data collected for the purposes of the Data Controller’s legitimate interests shall be retained for as long as needed to fulfil such purposes. Users may find specific information regarding the legitimate interests pursued by the Data Controller within the relevant sections of this document or by contacting the Data Controller.
When processing is based on the User’s consent, the Data Controller may retain Personal Data longer until such consent is withdrawn. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or upon order of an authority.
Once the retention period expires, Personal Data shall be deleted. Therefore, the rights of access, erasure, rectification and the right to data portability cannot be enforced after the expiration of the retention period.
The purposes of processing
The User’s Data is collected to allow the Data Controller to provide its Services, as well as for the following purposes: Analytics, Remarketing and behavioural targeting, Registration and authentication, Contacting the User, Managing payments, Managing contacts and sending messages, Interaction with social networks and external platforms, SPAM protection, Hosting and backend infrastructure and Displaying content from external platforms.
For specific information about the Personal Data used for each purpose, the User may refer to the relevant sections of this document.
The rights of Users
Users may exercise certain rights regarding their Data processed by the Data Controller.
In particular, Users have the right to do the following:
- Withdraw their consent at any time.Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
- Object to processing of their Data.Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
- Access their Data.Users have the right to learn if Data is being processed by the Data Controller, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
- Verify and seek rectification.Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
- Restrict the processing of their Data.Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Data Controller will not process their Data for any purpose other than storing it.
- Have their Personal Data deleted or otherwise removed.Users have the right, under certain circumstances, to obtain the erasure of their Data from the Data Controller.
- Receive their Data and have it transferred to another controller.Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User’s consent, on a contract which the User is part of or on pre-contractual obligations thereof.
- Lodge a complaint.Users have the right to bring a claim before their competent data protection authority or seek a judicial remedy.
Details about the right to object to processing
Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Data Controller or for the purposes of the legitimate interests pursued by the Data Controller, Users may object to such processing by providing a ground related to their particular situation to justify the objection.
Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification.
How to exercise these rights
To exercise the User’s rights, Users may direct a request to the Data Controller’s contact details provided in this document. Requests are free of charge and will be answered by the Data Controller as early as possible and always within one month.
Additional information about processing
Legal action
The User’s Personal Data may be used for legal purposes by the Data Controller in Court or in the stages leading to possible legal action arising from improper use of this Application or the related Services by the User.
The User declares to be aware that the Data Controller may be required to reveal Personal Data upon request of public authorities.
Specific information
At the User’s request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information concerning specific Services, or the collection and processing of Personal Data.
System logs and maintenance
For operation and maintenance purposes, this Application and any third-party services it makes use of may collect system logs, namely files that record interactions and may also contain Personal Data, such as the User’s IP address.
Information not contained in this policy
More details concerning the processing of Personal Data may be requested from the Data Controller at any time using the contact details provided.
Response to “Do Not Track” requests
This Application does not support “Do Not Track” requests.
To determine whether any of the third-party services it uses honour such requests, please read their privacy policies.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Application and, where technically and legally feasible, by sending a notice to Users via any contact information available to the Data Controller. We strongly recommend that this page is checked regularly, referring to the date of the last modification listed at the bottom.
Should the changes affect processing activities performed on the basis of the User’s consent, the Data Controller shall collect new consent from the User, where required.
Personal data collected for the following purposes and using the following services:
Contacting the User
Contact form integrated into the WordPress site:
Personal Data: last name, email, address, first name and country
Mailing list or newsletter
Personal Data: last name, email, first name and language
Managing contacts and sending messages
4dem mail Advision Srl UNIPERSONALE | Corso San Martino 1 – 10122 Torino | Tel:+39.011.19620656 | VAT: 10351260012 | REA: TO-1125920
Personal Data: email
Payment processing (deposits)
BNL/Positivity BNL POSitivity S.r.l. – VAT 05963231005
Personal Data:
First and last name, Street, Place of residence, City, Postcode, Credit Card Number
Facebook Like Button and social widgets, AddtoAny (WordPress plugin for whatsapp, twitter, facebook and google plus)
Personal Data: Cookies and Usage Data
Facebook Remarketing, AdWords Remarketing and Remarketing with Google Analytics for Display Advertising
Personal Data: Cookies and Usage Data
Hosting and backend infrastructure
WordPress.com, Siteground.com
Personal Data: various types of Data as specified by the privacy policy of the service
Analytics
Google Analytics, Facebook Ads conversion tracking and Google Analytics with anonymised IP
Personal Data: Cookies and Usage Data
Displaying content from external platforms
Google Maps Widget and YouTube Video Widget
Personal Data: Cookies and Usage Data
Further information about Personal Data
Online sale of goods and services
The Personal Data collected is used to provide services to the User or to sell products, including payment and any related delivery.
The Personal Data collected to process payments may include credit card information, the bank account used for the bank transfer, or other payment methods provided for.
The kind of Data collected by this Application to process payments depends on the payment system used.
Details on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
Contacting users:
Contact form (WordPress site)
By filling in the contact form with their Data, the User authorises this Application to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.
Personal Data collected: last name, email, address, first name and country.
Managing contacts and sending messages
This type of service makes it possible to manage a database of email contacts, phone contacts or any other kind of contact used to communicate with the User.
These services may also collect data relating to the date and time when the messages are viewed by the User, as well as when the User interacts with them, such as information about the clicks on links included in the messages.
Personal Data collected: last name, email, address, first name and country.
SYSTEM: WEB NUBES
Web Nubes srl Via Zandonai 10 30174 Mestre (VE) www.webnubes.it
Mailing list or newsletter (4dem mail)
By registering on the mailing list or for the newsletter, the User’s email address will be automatically added to a contact list to which email messages containing information, including commercial and promotional content, may be sent. The User’s email address may also be added to this list as a result of signing up to this Application, requesting a quote or after making a purchase.
Personal Data collected: last name, email and first name.
Payment processing
Payment processing services enable this Application to process payments by credit card, bank transfer or other means. The data used for the payment is acquired directly by the operator of the requested payment service and is not processed in any way by this website.
Some of these services may also enable the scheduled sending of messages to the User, such as emails containing invoices or payment notifications.
BNL/Positivity
BNL POSitivity S.r.l. – VAT 05963231005
BNL/Positivity is a payment service provided by BNL POSitivity S.r.l.
Personal Data collected: various types of Data as specified by the privacy policy of the service.
Place of processing: https://www.bnlpositivity.it/
Social networks and external platforms
This type of service enables interaction with social networks or other external platforms directly from the pages of this Application.
The interactions and information acquired by this Application are in any case subject to the User’s privacy settings related to each social network.
If a service enabling interaction with social networks is installed, it may still collect web traffic data for the pages where the service is installed, even when Users do not use it.
Facebook Like button and social widgets (Facebook, Inc.)
The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook, Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.
Tweet button and social widgets (Twitter, Inc.)
The Tweet button and social widgets are services allowing interaction with the Twitter social network provided by Twitter, Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.
WhatsApp button and social widgets (WhatsApp Inc.)
The WhatsApp button and social widgets are services allowing interaction with the WhatsApp network provided by WhatsApp, Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.
Google Plus button and social widgets (Google Inc.)
The Google Plus button and social widgets are services allowing interaction with the Google Plus social network provided by Google Inc.
Personal Data collected: Cookies and Usage Data.
Place of processing: https://policies.google.com/privacy?hl=en&gl=en
Remarketing and behavioural targeting
This type of service allows this Application and its partners to inform, optimise and serve advertising based on past use of this Application by the User.
This activity is performed by tracking Usage Data and by using Cookies, information that is transferred to the partners that manage the remarketing and behavioural targeting activity.
In addition to any opt-out offered by any of the services below, the User may opt-out of a third-party service’s use of cookies by visiting the Network Advertising Initiative opt-out page.
Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a remarketing and behavioural targeting service provided by Facebook, Inc. that connects the activity of this Application with the Facebook advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out.
AdWords Remarketing (Google Inc.)
AdWords Remarketing is a remarketing and behavioural targeting service provided by Google Inc. that connects the activity of this Application with the Adwords advertising network and the Doubleclick Cookie.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out.
Remarketing with Google Analytics for Display Advertising (Google Inc.)
Google Analytics for Display Advertising is a remarketing and behavioural targeting service provided by Google Inc. that connects the tracking activity performed by Google Analytics and its Cookies with the Adwords advertising network and the Doubleclick Cookie.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out.
ANALYTICS
The services contained in this section enable the Data Controller to monitor and analyse web traffic and can be used to keep track of User behaviour.
Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the collected Personal Data to track and examine the use of this Application, prepare reports on its activities and share them with other Google services.
Google may use the Personal Data to contextualise and personalise the ads of its own advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out.
Facebook Ads conversion tracking (Facebook, Inc.)
Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on this Application.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.
Google Analytics with anonymised IP (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the collected Personal Data to track and examine the use of this Application, prepare reports on its activities and share them with other Google services.
Google may use the Personal Data to contextualise and personalise the ads of its own advertising network.
This integration of Google Analytics anonymises your IP address. Anonymisation works by shortening within Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area the IP address of Users. Only in exceptional cases, the IP address will be sent to Google’s servers and shortened within the United States.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy – Opt Out.
HOSTING AND BACKEND INFRASTRUCTURE
The purpose of these services is to host and run key components of this Application, making the delivery of this Application from a single platform possible. These platforms provide the Data Controller with a wide range of tools such as, for example, analytics tools, tools for user registration management, comment and database management, e-commerce, payment processing and so on. The use of such tools entails the collection and processing of Personal Data. Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data is stored.
WordPress.com (Automattic Inc.)
WordPress.com is a platform provided by Automattic Inc. that enables the Data Controller to develop, run and host this Application.
Personal Data collected: various types of Data as specified by the privacy policy of the service.
Place of processing: USA – Privacy Policy.
SiteGround Spain S.L.
Siteground.com is a hosting platform that enables the Data Controller to develop, run and host this website and related applications.
Personal Data collected: various types of Data as specified by the privacy policy of the service.
Place of processing: Italy
DISPLAYING CONTENT FROM EXTERNAL PLATFORMS
This type of service allows you to view content hosted on external platforms directly from the pages of this Application and to interact with it.
If a service of this kind is installed, it may still collect web traffic data for the pages where the service is installed, even when Users do not use it.
Google Maps Widget (Google Inc.)
Google Maps is a map visualisation service provided by Google Inc. that allows this Application to incorporate such content into its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.
YouTube Video Widget (Google Inc.)
YouTube is a video content visualisation service provided by Google Inc. that allows this Application to incorporate such content into its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: USA – Privacy Policy.