This document describes the website management methods with regard to the processing of the personal data of the users that consult it and contains the personal data security policy adopted by Palazzo di Varignana.
This policy is also provided, pursuant to art. 13 of the European Regulation regarding the protection of personal data 2016/679 (GDPR) - to those who interact with the e-commerce service of the gastronomic products of Palazzo di Varignana, accessible electronically starting from the address:
The policy also refers to Recommendation no. 2/2001, which the European authorities for the protection of personal data, united in the Group established by art. 29 of directive no. 95/46/EC, adopted on 17 May 2001 to identify some minimum requirements for the collection of personal data on-line, and in particular, the methods, times and nature of the information that the data controllers must provide to the users when they connect to web pages, regardless of the purposes of the connection.
THE DATA CONTROLLER
Following the visit to this website, data concerning identified or identifiable people may be processed.
Pursuant to the GDPR, the Data Controller is Palazzo di Varignana S.r.l., with registered office in 40141 Bologna (BO) Via Della Zecca, 2 - VAT reg. no. and tax code 0265821204, Tel +39 0510827029 Fax +39 0510822435 E-mail: firstname.lastname@example.org (hereafter also the “Company”), by means of its legal representative.
Pursuant to art. 28 of the GDPR, the Data processor for the hosting of the website in hosting is BRG Communication S.r.l. with registered office in VIA L. DA VINCI, 9 CESENATICO (FC) Telephone & Fax: +39 0547 87244
LOCATION OF DATA PROCESSING
The processing connected to the web services of this website and described through it takes place at the operating office at Palazzo di Varignana Resort & SPA, in Varignana (BO) Via Ca’ Masino n. 611/a and at the Company office in Bologna (BO) Via Della Zecca, 2, by personnel officially entrusted with and trained on personal data protection. No data deriving from the web service is communicated by the company to third parties unless strictly pertaining to the purposes of the processing or imposed by laws or regulations. The processing connected to the web services of this website that takes place at the data controller is dealt with by internal personnel, officially trained and appointed as subject in charge of the processing.
PURPOSE OF THE PROCESSING
This section reports the various processing purposes FOR THOSE BROWSING THE WEBSITE:
The personal data provided voluntarily and on an optional basis by the users who forward a request to purchase the gastronomic products of Palazzo di Varignana is used only to carry out the service requested and is not communicated to third parties unless its communication is imposed by legal obligations or is strictly relevant and required to fulfil the requests.
In particular the personal data provided voluntarily by those concerned by the processing will be collected with electronic methods and processed, also with the aid of electronic means, directly and/or by means of delegated third parties (company for the e-mail service, company for the hosting of the website) for the following purposes:
- check the availability of the products;
- allow the sale to be carried out;
- give answers on our services;
- exercise the right of not signing up to the newsletter to receive periodic communications of a commercial or promotional nature;
- statistical purposes in an anonymous form (to assess the number of accesses, etc.).
The data will be processed with the electronic and paper methods to ensure the execution of the sale at the agreed conditions.
The data will be recorded in our electronic databases only accessible to personnel duly entrusted and trained on personal data security and confidentiality.
Sales will take place via credit card or PayPal.
1) Browsing data
The IT systems and the software procedures adopted for the functioning of this website acquire, during their normal operation, some personal data whose transmission is implicit to use the Internet communication protocols.
This information is not collected to be associated to identified data subjects. However, given its nature, it could, through processing and associations with data held by third parties, allow the users to be identified.
Included in this category of data are IP addresses or domain names of the computers used by the users that connect to the website, the URIs (Uniform Resource Identifier) of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained as a reply, the numeric code indicating the state of the reply given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment of the user.
This data is only used to obtain anonymous statistical information on using the website and to check its correct functioning, and is erased immediately after processing. The data could be used to ascertain any liability in the event of hypothetical cyber crimes committed against the website: notwithstanding this eventuality.
2) Data provided voluntarily by the user
The optional, explicit and voluntary sending of an e-mail to the addresses stated on this website means the subsequent acquisition of the sender’s address, which is needed in order to reply to the requests, as well as any other personal data entered in the message.
No personal data of the users is purposefully acquired by the website.
Cookies are not used for the transmission of information of a personal nature. Persistent cookies of any kind, or systems to track the users are not used.
The use of session cookies (which are not saved in a persistent manner on the user’s computer and disappear upon closing the browser) is strictly restricted to the transmission of session identification data (consisting of casual numbers generated by the server) needed to allow safe and efficient browsing of the website.
The session cookies used in this website prevent the use of other IT techniques that could potentially jeopardize the user's navigation privacy and do not allow the acquisition of identifiable personal data about the user.
|_fbp||.palazzodivarignanafood.com||Advertisement||This cookie is set by Facebook to deliver advertisement when they are on Facebook or a digital platform powered by Facebook advertising after visiting this website.||3 months|
|fr||.facebook.com||Advertisement||The cookie is set by Facebook to show relevant advertisments to the users and measure and improve the advertisements. The cookie also tracks the behavior of the user across the web on sites that have Facebook pixel or Facebook social plugin.||3 months|
|test_cookie||.doubleclick.net||Advertisement||This cookie is set by doubleclick.net. The purpose of the cookie is to determine if the user's browser supports cookies.||15 minutes|
|_ga||.palazzodivarignanafood.com||Analytics||This cookie is installed by Google Analytics. The cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors.||2 years|
|_gid||.palazzodivarignanafood.com||Analytics||This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visted in an anonymous form.||1 day|
|X-Magento-Vary||www.palazzodivarignanafood.com||Functional||This cookie is set by the Magento. This cookie is used for configuration setting that improves performance when using Varnish static content sharing.||1 hour|
|mage-messages||www.palazzodivarignanafood.com||Functional||This cookie is set by the provider Magento. This cookie is used to track error messages and other notifications that are shown to the user, such as the cookie consent message, and various error messages. The message is deleted from the cookie after it is shown to the shopper.||session|
|tsrce||.paypal.com||Functional||This cookie is set by the provider PayPal. This cookie is used to enable the PayPal payment service in the website.||3 days|
|PHPSESSID||.www.palazzodivarignanafood.com||Necessary||This cookie is native to PHP applications. The cookie is used to store and identify a users' unique session ID for the purpose of managing user session on the website. The cookie is a session cookies and is deleted when all the browser windows are closed.||1 hour|
|ts||.paypal.com||Necessary||This cookie is provided by the PayPal. It is used to support payment service in a website.||3 years|
|ts_c||.paypal.com||Necessary||This cookie is provided by PayPal when a website is in association with PayPal payment function. This cookie is used to make safe payment through PayPal.||3 years|
|ARRAffinity||wsipcountry.azurewebsites.net||Necessary||This cookie is set by websites that run on Windows Azure cloud platform. The cookie is used to affinitize a client to an instance of an Azure Web App.|
|GeoCountryCode||www.palazzodivarignanafood.com||Other||No description||1 day|
|_dc_gtm_UA-38587230-9||.palazzodivarignanafood.com||Other||No description||1 minute|
|countTheTimeSession-Iscrizione newsletter food ITA||www.palazzodivarignanafood.com||Other||No description||7 days|
|section_data_ids||www.palazzodivarignanafood.com||Other||This cookie is set by the provider Magento.This cookie is used store customer-specific information related to shopper-initiated actions such as display wish list, checkout information, etc.||session|
|mage-cache-sessid||www.palazzodivarignanafood.com||Other||This cookie is set by the Magento. This cookie is used to cleanup the local cache storage. When the cookie is removed by the backend application, the admin cleans up local storage, and sets the cookie value to true.||session|
|l7_az||.paypal.com||Other||No description||30 minutes|
|recently_viewed_product||www.palazzodivarignanafood.com||Other||This cookie is set by the Magento. This cookie is used to stores product IDs of recently viewed products for easy navigation.||session|
|recently_viewed_product_previous||www.palazzodivarignanafood.com||Other||This cookie is set by the Magento. This cookie is used to stores product IDs of recently previously viewed products for easy navigation.||session|
|recently_compared_product||www.palazzodivarignanafood.com||Other||This cookie is set by the Magento. This cookie is used to stores product IDs of recently compared products.||session|
|recently_compared_product_previous||www.palazzodivarignanafood.com||Other||This cookie is set by the Magento. This cookie is used to store product IDs of previously compared products for easy navigation.||session|
|product_data_storage||www.palazzodivarignanafood.com||Other||This cookie is set by the Magento. This cookie is used to stores configuration for product data related to Recently Viewed / Compared Products.||session|
|mage-translation-storage||www.palazzodivarignanafood.com||Performance||This cookie is set by the provider Magento. This cookie is used to store translated content when requested by the user. It is used when translation stratergy is configured as dictionary.||session|
|mage-translation-file-version||www.palazzodivarignanafood.com||Performance||This cookie is set by the provider Magento. This cookie is used to track the version of translations in local storage. It is used when translation is configured as dictionary.||session|
|mage-cache-storage||www.palazzodivarignanafood.com||Performance||This cookie is set by Magento. This cookie is used for caching content on the browser to make pages load faster.||session|
|mage-cache-storage-section-invalidation||www.palazzodivarignanafood.com||Performance||This cookie is set by Magento. This cookie is used for caching content on the browser to make pages load faster.||session|
|store||www.palazzodivarignanafood.com||Performance||This cookie is used to track the specific store view or the locale selected by the shopper.||1 year|
|form_key||.www.palazzodivarignanafood.com||Performance||This cookie is used to track the form submissions and for facilitating content caching on browser to make pages load faster.||1 hour|
OPTIONAL DATA CONTRIBUTION
Apart from the specifications regarding navigation data, the user is free to supply the personal data to make an on-line purchase.
Failure to submit the data may make it impossible to fulfil the request.
Personal data is processed using paper and/or automated tools for the length of time strictly necessary to achieve the purpose for which it was obtained.
Specific security measures are complied with in order to prevent loss of data, incorrect or illegal uses and unauthorised access.
Sending promotional and commercial material may be dealt with directly by Palazzo di Varignana S.r.l.
Palazzo di Varignana S.r.l. via Palazzo di Varignana Resort & SPA may register the data subject in the newsletter if:
- the data subject provides his/her consent on the website where indicated;
- - The data subject is entitled to exercise the right to unsubscribe from the newsletter at any time in accordance with the rights granted to him/her by the GDPR.
RIGHTS OF THE DATA SUBJECT
The subjects the personal data refers to have the right at any time to obtain confirmation of the existence or otherwise of their personal data and to be informed of its content and origin, verify its accuracy or request its integration, updating or correction and, in any case, exercise all the rights granted by the GDPR.
The requests are sent to the Data Controller.
DATA RETENTION TIMES
Without prejudice to the terms of retention already indicated above, we inform you that the data provided to and processed by Palazzo di Varignana S.r.L. will be retained for 5 years after the end of the processing, without prejudice to different terms of retention laid down by law and the possibility of revoking the consent or exercising all the rights granted to the data subject by the GDPR and indicated below in this policy.
RIGHTS OF THE DATA SUBJECT
The data subjects may exercise, where the conditions are met, all the rights that the GDPR grants to them, such as the right to: confirmation as to whether or not the data related to him/her is being processed; obtain the correction of inaccurate data or the integration of incomplete data; obtain the erasure of the personal data which relate to him/her; restrict the processing; receive, in a structured, commonly used and machine-readable format, the personal data that concerns him/her; object to the processing; revoke the consent at any time if the processing is based on consent; lodge a complaint with the Italian Data Protection Authority. You may exercise your rights by writing to or personally contacting Palazzo di Varignana Resort & SPA, in Varignana (BO) Via Ca’ Masino n. 611.a and/or the company offices in Bologna (BO), Via Della Zecca.
Every effort will be made by Palazzo di Varignana S.r.l. to make the functions of this website as interoperable as possible with the automatic privacy control mechanism available in some products used by the users.