Privacy policy
PRIVACY NOTICE FOR THE PROCESSING OF PERSONAL DATA BY CASA VALDO S.r.l.
Welcome to the Casa Valdo S.r.l. website.
On this page, we provide the notice pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) on the processing of personal data.
1. DATA CONTROLLER
The data controller is Casa Valdo S.r.l. (hereinafter also referred to as the “Controller”), with its registered office in Valdobbiadene (TV) at Via Foro Boario 20. For matters related to data protection, you can contact us at privacy@casavaldo.it.
2. SCOPE OF THE NOTICE
This notice describes the procedures adopted by the Controller regarding privacy for the processing of personal data collected through:
- This website and any subdomains managed by Casa Valdo S.r.l. Note that this notice does not cover other websites accessed through links present on this site.
- Cookies and other tracking systems on this site, whose purpose and operation are described in the notice accessible via the link at the bottom of the site (“Cookies policy”).
3. RECIPIENTS OF THE CONTROLLER’S SERVICES
The website and the services offered by Casa Valdo S.r.l. are intended for adults. Therefore, the Controller does not intentionally process the personal data of individuals under the age of 18.
4. CATEGORIES OF PERSONAL DATA PROCESSED
The Controller may collect and process the following types of personal data:
- First and last name
- Gender
- Date and place of birth
- Nationality
- Passport or other identification documents details
- Postal address
- Phone number
- Email address
- IP addresses and other data related to website navigation
- Financial data (such as credit/debit card numbers or other payment-related data)
- Preferred language
- Vehicle license plates
- Health-related data (for public health protection or to meet specific user needs)
- Information on preferences or specific personal needs
- Data regarding family members or other travel companions
5. PURPOSES, LEGAL BASES, AND RETENTION PERIODS
Personal data will be processed by Casa Valdo S.r.l. for the purposes and under the conditions outlined below:
| PURPOSE | LEGAL BASES | DATA RETENTION PERIODS |
|---|---|---|
| A | Reception: to formulate quotes, conclude, and execute the sales contract for products and services offered by the Controller, communicate any circumstances related to the order, and manage payments. The Controller may also use customer data to perform activities related to check-in and check-out; provide recreational and animation activities within the facility; provide reception, luggage storage, parking, or other requested services; manage any customer requests related to specific needs, including health; handle complaints and service evaluations by customers. To speed up registration activities, if customers have not checked in online before arrival, they may receive text messages (SMS) reminding them of this possibility. These communications will not contain commercial content. The Controller may use SMS or phone communications to provide information to customers about package pickups made on their behalf at the accommodation facility. | Execution of contractual obligations and pre-contractual measures. |
| B | Video surveillance: for the protection of individuals’ safety and the protection of assets within the accommodation facilities. | Legitimate interest of the Controller to protect the security of people and property within its properties. |
| C | Fulfillment of legal obligations: to comply with legal obligations (particularly in civil, tax, public security, banking, and personal data protection matters). This includes transmitting customers’ personal details to the police. | Compliance with legal obligations. |
| D | Litigation and prevention of unlawful acts: to enforce the Controller’s rights and to detect and prevent fraud, crimes, and unlawful acts. | Legitimate interest of the Controller to protect its rights. |
6. NECESSITY OF DATA PROCESSING
Communicating personal data to Casa Valdo S.r.l. for purpose A is necessary for the execution of contractual obligations or pre-contractual measures and to provide the specified services. Without this, the Controller would not be able to fulfill the corresponding customer requests. The processing of personal data necessary for purpose B is based on the Controller’s legitimate interests and does not require customer consent. If the customer refuses to consent to such processing, Casa Valdo S.r.l. may be forced to refuse to provide its services. The processing of personal data for purposes specified in C and D is necessary for Casa Valdo S.r.l. to comply with current legal obligations, and therefore the customer cannot oppose it, under penalty of being unable to use the Controller’s services.
7. DATA PROCESSING METHODS
Casa Valdo S.r.l. has adopted specific security measures to prevent the loss of personal data, unlawful or incorrect use, and unauthorized access.
8. CATEGORIES OF RECIPIENTS OF PERSONAL DATA
For the purposes indicated in section 5, Casa Valdo S.r.l. may communicate, for its needs or to fulfill legal obligations, customer data to the following categories of subjects:
- Public authorities and supervisory and control bodies
- IT service providers (such as internet service and cloud computing providers)
- Entities performing logistics activities
- Customer assistance providers
- Professionals or companies providing legal, fiscal, accounting, economic-financial, technical-organizational, data processing, or communication services to the Controller
- Entities providing banking, financial, insurance, and debt collection services
- Entities providing anti-fraud payment control activities
Where necessary, the data recipients will be designated as data processors in accordance with the provisions of Article 28 GDPR.
9. DATA TRANSFER TO THIRD COUNTRIES
No transfers outside the EU are planned.
10. DATA SUBJECTS’ RIGHTS
In relation to the personal data provided, data subjects have the right to request at any time:
- Confirmation of whether or not personal data concerning them are being processed and, if so, to obtain access to the data and a copy thereof (Art. 15 GDPR)
- Rectification of any inaccurate personal data or the integration of incomplete data (Art. 16 GDPR)
- Deletion of data in cases specifically provided by the law (Art. 17 GDPR)
- Restriction of their processing (Art. 18 GDPR)
- Objection to their processing (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)
To exercise these rights, data subjects can send their requests by email to the Controller at privacy@casavaldo.it. Alternatively, they can use the postal contacts indicated in section 1 of this notice.