Privacy Notice on Data Processing

(Article 13 of EU Regulation 2016/679)

Dear Concerned Party,
Emma Villas S.p.A., as the Data Controller, processes your personal data in compliance with the general principles and specific provisions of EU Regulation 2016/679, ensuring the protection of your information.

In accordance with the provisions of Article 13 of the aforementioned regulation, we inform you of the following aspects of the processing, as well as the rights guaranteed by law.

Types of Data Collected and Processed

The Data Controller collects and processes the following personal data:

Identifying data of the data subject (name and surname);

  • Contact details (email address, telephone number).
  • Purposes of Processing and Legal Bases
  • The Data Controller collects and processes the personal information of the data subject for the following purposes:
  • Allowing the data subject to register on the platform and use the related services;
  • Providing the data subject with personal authentication credentials to access the reserved area;
  • Managing any issues related to access to the reserved area (e.g., password reset);
  • Providing assistance and support to the data subject.

The legal basis for processing lies in the execution of a contractual obligation between the Data Controller and the data subject. Additionally, the Data Controller processes the identifying and contact information of the data subject for commercial information purposes related to the services offered, based on the consent of the data subject at the time of registration and as part of the contract.

Methods of Data Processing and Data Retention Periods

The personal data of the data subject is processed both in paper and electronic form (cloud databases, application software, etc.). The Data Controller retains your personal information only for the time necessary to achieve the purposes for which it was collected, or as required by specific regulations and civil prescription periods.

Communication of Personal Data (Internal and External to the Company)

Employees of the Data Controller who require access to personal data to manage inquiries, particularly administrative, IT, and commercial personnel, may access personal data. Our employees have been informed and trained on the importance of complying with principles and rules regarding the processing of personal data.

The Data Controller shares the personal information of data subjects with certain suppliers who assist in managing the platform. These suppliers will be appointed as data processors as required by the GDPR. If a supplier accesses the data, they do so while complying with current data protection regulations and the instructions provided by the Data Controller. The Data Controller does not disclose personal information to other third parties without the consent of the data subject, except when required by law or by an Authority.

Transfer of Personal Data

Transfer of Personal Data The data of the data subject is not transferred outside the European Economic Area (EEA).

Rights of the Data Subject and Exercise of Rights against the Data Controller The European Regulation on the protection of personal data (2016/679) guarantees you, as the data subject, specific rights. For each processing, you can exercise the following rights:

  • Right of access: you have the right to obtain a copy of the personal data we hold and that are subject to processing;
  • Right to rectification: you have the right to rectify your personal data held by the Controller if they are not up to date or correct;
  • Right to object to decisions based on solely automated processes: you may request not to be the recipient of decisions based on solely automated processes, including profiling activities;
  • Right to address the Data Protection Authority: you have the right to address the Data Protection Authority if you have doubts about the processing of personal data carried out by the Controller. You may also exercise the following rights under certain circumstances:
  • Right to erasure: you may request the Controller to erase your personal data if the purposes of the processing have ceased to exist and there are no legitimate interests or legal provisions requiring its continuation;
  • Right to object to processing: you may request the Controller to cease processing specific personal data;
  • Right to restrict processing: you have the right to request the Controller to limit the processing operations on your personal data;
  • Right to data portability: you have the right to obtain a copy of your data in a structured and machine-readable format that is transferable to another Controller.

You can exercise your rights by contacting the Data Controller, Emma Villas S.p.A. (the Data Protection Officer - DPO - can be contacted at the following address [email protected]). The Controller will respond to your requests in accordance with the law.