Guerra Erika & C. Sas (hereinafter also “the Company”) with headquarters in via Casoni nr. 25 – 32036 Sedico (BL), recognizes the importance of maintaining the confidentiality, integrity and security of your personal data and informs you that the same, provided by you to the Company via the Site, will be treated in compliance with current legislation. European legislation on privacy (Regulation (EU) 2016/679 – hereinafter “GPDR”) and specific local regulations applicable from time to time for processing carried out outside the European Union.

Type and source of data

Browsing data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data (called log files) whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning.

Cookies

To ensure the functioning of the Site and improve the service offered, cookies are used on the Site. Cookies are small text files that the sites visited by the user send to his terminal (usually to the browser), where they are stored before being re-transmitted to the same sites at the next visit by the same user. For more information, to know the cookies used on the Site and possibly disable them and/or deny consent, please refer to the cookie policy.

Personal data provided voluntarily by the interested party

The Company collects and processes the personal data directly and knowingly provided by you via the Site upon your booking request.

Such data includes, for example: name and surname, postal address and email address, telephone number and date of birth of all applicants, code. tax, identity document details, etc.

Furthermore, the optional, explicit and voluntary sending of e-mails via the Site and/or to the addresses indicated on the Site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message sent.
Specific information will be published on the pages of the site set up for the provision of certain services.

Credit card data

To make a payment on the Site by credit card, the User must enter the confidential credit card data (card number, holder, expiration date, security codes). Such data will be acquired by the payment service provider (BANCA INTESA SAN PAOLO / NEXI circuit) who will act as independent data controller, without passing through the Company’s server. The data will be acquired in encrypted format and according to the security requirements established by the PCI certification. The Company will only keep track of the last four digits that make up the credit card number and its expiration date solely and exclusively to prevent any fraud in online payments.

Account login data

Any information necessary to create a user account, such as: username, password, security question and answer.

Purpose of data processing

Personal data may be used for the following purposes:

(a) to respond to and satisfy all your requests and therefore to manage the relationship between you and the Company (the legal basis used is that of the execution of a contract or the execution of pre-contractual measures)

(b) to follow up on your booking request and to carry out all the management activities of the request itself (in this case the legal basis is the same as the previous one), as well as fulfill all the obligations imposed by the laws and regulations in force ( the legal basis is constituted by a legal obligation).

Treatment methods

The personal data will be processed using suitable electronic or automated, IT and telematic tools, or through manual paper processing, with logic strictly related to the purposes for which the personal data were collected and, in any case in such a way as to guarantee the security and confidentiality of the data itself.

Nature of the contribution

The provision of Personal Data is optional.

However, if you wish to make a reservation and/or receive information on the services offered, it is necessary to fill in all the fields indicated as mandatory in the relevant personal data collection forms.

Communication, dissemination and data transfer

The personal data will be processed by internal Company personnel authorized for this purpose in the performance of the assigned work tasks, and possibly to the extent necessary and/or instrumental for the execution of the purposes indicated above by external parties who will act to account of the Company as external data processors (e.g. service providers, technicians who carry out maintenance of IT services, etc.).

Personal data will in no case be disclosed to indeterminate subjects or transferred outside the European Economic Area.

Duration of treatment

Your personal data will be processed and stored for the time necessary to carry out the purposes for which they were collected and in accordance with the retention times established by applicable civil regulations. Subsequently the personal data will be deleted or made permanently anonymous.

Data controller

The data controller is Origini di Guerra Erika & C. Sas with registered office in via Casoni nr. 25 – 32036 Sedico (BL) and will process your data in compliance with the GDPR.

To exercise your rights, as well as to receive any information relating to them and/or this Information, you can contact the Owner by writing to the address indicated above or to the email info@originiholidays.com.

Rights of the interested party

We remind you that at any time you can exercise the rights provided for in articles 15 to 21 of the GDPR and, in particular, request information on the existence and characteristics of the processing of personal data, the rectification and cancellation of the same, or the limitation of processing, oppose processing and/or request the transmission of your personal data to another owner.

You will also have the right to revoke any consent given at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation and to lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza Venezia 11- 00187 Roma

Contacts

Any request relating to your Personal Data relating to this information and for the exercise of your rights you can contact, free of charge, the Data Controller at the addresses indicated.

The Company reserves the right to modify this privacy policy at any time. The version published on the Site is the one currently in force.