Privacy Policy

(Pursuant to Articles 13-14 of EU Regulation 2016/679 and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018)

Dear Data Subject,
Below, we provide you with some information that we believe is essential for your understanding, not only to comply with the obligations of EU Regulation 2016/679 but also because transparency and fairness towards our clients are fundamental to our activities.

Data Controller

The Data Controller of your personal data is Sea Valley Srl, responsible for ensuring the lawful and proper use of your personal data. You may contact the Data Controller for any information or request at the following details:

• Data Controller: Sea Valley Srl by Bollacasa Leonardo
• Address: Fraz. Porto Levante, 3/B – Porto Viro – 45014 Rovigo
• Phone: +39 348 3060194
• Email: villabollacasa@gmail.com
• Website: www.villabollacasa.com

The Data Controller ensures the security, confidentiality, and protection of the data in its possession at all stages of data processing. The collected data is handled in compliance with the current privacy regulations (GDPR 679/2016).

Data Sharing

Personal data may be disclosed to authorized data processors, collaborators, and other entities when necessary for the provision of services, technical support for IT/telecommunication systems, and server storage. Data may also be disclosed to comply with legal obligations or to assert the Data Controller’s rights in judicial or administrative proceedings. No transfer of personal data to non-EU countries or international organizations is foreseen.

Purpose of Processing

The IT systems and software procedures governing this website’s operation acquire certain browsing data. These are not collected to identify users but are used exclusively to gather anonymous statistical information about the website’s use and verify its correct functioning. Such data includes:

• IP addresses or domain names of the users’ devices;
• Time of the request;
• Method used to submit the request to the server;
• Numeric code indicating the server’s response status (success, error, etc.);
• Other parameters related to the user’s operating system and browser.

Voluntarily provided data (via calls, emails, forms, or browsing the site) are processed solely to provide access to products, services, and content or to fulfill the requested service. With informed consent, the Data Controller may also use such data for:

• Service updates and promotional communications (e.g., newsletters);
• Product and service sales or placement activities;
• Market research and studies.

Additionally, collected data may be used to determine liability in the event of cybercrimes against the website.

Personal Information Collected

When interacting with the website, certain personal information may be collected, such as:

• Name;
• Surname;
• Phone number;
• Email address;
• Any additional information voluntarily provided.

The user is free to provide personal data; however, failure to provide such data may result in the inability to fulfill the requested service.

Information Collected from Third Parties

Standard access information and behavioral patterns may be collected during navigation. These details are used for analytics purposes, employing procedures that minimize the identifying power of cookies. No attempt is made to identify website visitors unless the user voluntarily provides personal data.

Data Retention

In accordance with principles of proportionality and necessity, data will not be retained for periods longer than necessary to achieve the stated purposes or comply with legal requirements. Cookies will be stored as detailed in the cookie policy: session cookies expire when the browser is closed, and persistent cookies have typical expiration dates not exceeding 60 days. Users may request data processing interruptions or deletion at any time.

Rights and Consent Withdrawal

The GDPR 679/2016 grants the Data Subject specific rights, including:

• Article 15: Right to access collected and processed data;
• Article 16: Right to rectification;
• Article 17: Right to data erasure and right to be forgotten;
• Article 18: Right to restriction of processing;
• Article 20: Right to data portability;
• Article 21: Right to object to processing;
• Article 22: Right not to be subjected to automated decision-making;
• Article 7: Right to withdraw consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal;
• Article 77: Right to file a complaint with the Supervisory Authority.

Requests to exercise these rights can be sent via email to the Data Controller.

Policy Changes

The Data Controller reserves the right to modify this privacy policy at any time, notifying users on this page. Visitors are encouraged to consult this page frequently, referring to the modification date below. If changes are not accepted, users must cease using the site and may request the removal of their personal data.

Minors Under 14

Our website is general audience-oriented and does not offer services specifically directed at children. If personal data of a minor under 14 is provided without parental or guardian authorization, such information will be deleted immediately.

Legal Defense

The User’s personal data may be used for defense in legal proceedings, in preparation for potential litigation, or to comply with judicial, regulatory, or other lawful obligations.

Last updated: December 19, 2024