Privacy Statement (EU)
This privacy statement was last updated on December 15, 2024 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.
THIS WEBSITE IS FREE OF COOKIES except for technical ones (to learn more, see our page (Cookie Policy), NO TYPE OF COOKIE WILL BE INSTALLED ON YOUR DEVICE,
This page describes how the site is managed in relation to the processing of personal data of users who consult it.
This information is provided in compliance with art. 13 of Regulation 2016/679 (GDPR), pursuant to art. 13 of Legislative Decree no. 196/2003 (Personal Data Protection Code).
DATA CONTROLLER
Massimo Cantara, Via Cairoli, 5 – 21100 Varese (VA) - e-mail:
info@mediterraneanretreatscenter.org
DATA PROCESSOR
Mediterranean Retreats Center with its administrators is the sole data controller pursuant to Article 29 of the Personal Data Protection Code, as it is responsible for the maintenance of the technological part of the site.
PLACE OF DATA PROCESSING
The Data is processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller.
TYPES OF DATA COLLECTED
Data provided voluntarily by the user
Among the Personal Data collected by this site, provided voluntarily by the user, independently or through third parties, there are: e-mail address.
The User is free (and is highly recommended) to use a pseudonym and temporary e-mail for his anonymity. We kindly ask you NOT to send sensitive personal data, NOT to use emails like “name.surname@gmail.com”
Sending emails to the addresses indicated on this site entails the subsequent acquisition of the sender’s email address as well as any other personal data included in the message necessary to perform the requested services.
Unless otherwise specified, all Data requested by this site are mandatory. If the User refuses to communicate them, it may be impossible to provide the Requested Service. In cases where the User indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation. Users who have doubts about which Data are mandatory, are encouraged to contact the Owner.
Browsing data
The data collected automatically are navigation data. Such data, although not collected in order to be associated with the user's identity, could indirectly, through processing and associations with data collected by the Data Controller, allow his/her identification. In particular:
the list of data collected: IP addresses or domain names of computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than seven days.
METHODS OF PROCESSING
The Data Controller adopts the appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.
LEGAL BASIS OF PROCESSING
The Data Controller processes Personal Data relating to the User if one of the following conditions exists:
– the User has given consent for one or more specific purposes; Note: In some jurisdictions, the Owner may be allowed to process Personal Data without the User's consent or any other of the legal bases specified below, until the User objects to such processing (“opt-out”). However, this does not apply if the processing of Personal Data is regulated by European legislation on the protection of Personal Data;
– processing is necessary for the performance of a contract with the User and/or for the execution of pre-contractual measures;
– processing is necessary for compliance with a legal obligation to which the Owner is subject;
– processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Owner;
– processing is necessary for the pursuit of the legitimate interests pursued by the Owner or by third parties.
In any case, it is always possible to ask the Owner to clarify the specific legal basis for each processing and in particular to specify whether the processing is based on the law, provided for by a contract, or necessary to enter into a contract.
In any case, the dissemination and transfer of data outside the EU area is excluded.
PURPOSE OF THE PROCESSING OF COLLECTED DATA
The data collected through this site are NOT collected for marketing purposes.
The User's Data is collected to allow the Owner to provide its Services, as well as for the following purposes: Contact the User, respond to questions, offer support, send quotes and other communications of this type.
By sending their Data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by them.
Personal Data collected: e-mail.
STORAGE PERIOD – DURATION OF TREATMENT
The Data are processed and stored for the time required by the purposes for which they were collected.
Therefore:
Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be retained until the execution of such contract is completed.
Personal Data collected for purposes related to the legitimate interest of the Owner will be retained until such interest is fulfilled. The User may obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner. Where the processing is based on the User's consent, the Owner may retain Personal Data for a longer period until such consent is revoked. Furthermore, the Owner may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, Personal Data will be deleted. Therefore, upon expiration of such period, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
CONDITIONS FOR CONSENT (GDPR N.679/2016)
– If you accept our privacy policy for the use of data, the forms will send us a notification to demonstrate that consent has been given.
– We explicitly assume that the data you provide are of adults, as per the mandatory field requested by us and notified to us. We do not accept data from minors.
– The data we collect is strictly necessary to start a possible commercial collaboration and/or to be able to communicate with us.
USER RIGHTS
Pursuant to art. 7 of the Privacy Code and art. 13 GDPR, each user has the right to obtain confirmation of the existence or otherwise of his/her personal data, even if not yet registered, and their communication in an intelligible form.
In particular, the interested party has the right to obtain from the Data Controller the indication:
of the origin of the personal data; the purpose and methods of processing;
the logic applied in the event of processing carried out with the aid of electronic/IT tools; the identification details of the owner, managers and designated representative; the subjects and categories of subjects to whom the data may be communicated or who may become aware of them as designated representative in the territory of the State, managers or agents.
Furthermore, the interested party has the right to obtain from the Owner:
the updating, rectification or integration of their data;
the cancellation, transformation into anonymous form or blocking of data processed in violation of the law; access to their data and that is confirmation as to whether or not personal data concerning them is being processed; the limitation of processing, the portability of the data, that is the right to receive personal data concerning them in a structured format;
the right to complain to the Supervisory Authority.
Finally, the interested party has the right to object, in whole or in part, for legitimate reasons to the processing of personal data concerning them, even if pertinent to the purpose of the collection. The requests referred to in the previous points must be sent by email to the address of the Owner indicated in this document.
HOW TO EXERCISE YOUR RIGHTS
To exercise the User's rights, Users can direct a request to the contact details of the Owner indicated in this document. The requests are filed free of charge and processed by the Owner as soon as possible, in any case within one month.
FURTHER INFORMATION ON THE TREATMENT
Defense in court
The User's Personal Data may be used by the Owner in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this Application or related Services by the User.
The User declares to be aware that the Owner may be required to reveal the Data by order of public authorities.
UPDATES AND MODIFICATIONS
The Data Controller reserves the right to periodically modify, integrate or update this Policy in compliance with the applicable legislation or the provisions adopted by the Guarantor for the Protection of Personal Data.
The aforementioned modifications or additions will be brought to the attention of the interested parties via a link to the Privacy Policy page on the website and, if technically and legally feasible, by sending a notification directly to the interested parties by email.
We invite users to read the Privacy Policy regularly, to check the updated Policy and decide whether or not to continue using the services offered.
If the modifications affect processing whose legal basis is consent, the Data Controller will collect the User's consent again, if necessary.
This page constitutes the "Privacy Policy" of this site which will be subject to updates.