DATA PROTECTION STATEMENT

In implementation of EU regulation 2016/679 and current regulations, we are pleased to provide you with the following information relating to the processing and protection of your personal data.

1 – Data Controller

The data controller is Osteria dell’Orsa sas di Orienti Marco e C, Via Mentana 1/F, 40126 Bologna , VAT number 02095460370, which can also be reached by calling +39 051 231576 or via email at marco.orienti@osteriadellorsa.com.

2 – Object of the Treatment

The Data Controller processes personal data, identification (for example, name, surname, address, telephone, e-mail) – hereinafter, “personal data” or even “data”, communicated by you in occasion of the conclusion of contracts for the services provided by the Data Controller or for the other purposes indicated in Article 3 of this Information.

3 – Purpose

Personal data may be processed, pursuant to article 4 of the GDPR, for the following purposes:

Retention	Period
A – Respond to requests for information according to the contact forms and references (telephone and email)   present in the websites of the Osteria dell’Orsa sas  and / or on the pages of the social network Facebook and other social networks that will be activated for the activities of the B&B	The data are kept for the period necessary to respond to requests and in the event that a legitimate interest is found on the part of the Data Controller (eg complaints about products or services)
B – Management of and social page the Facebook Social Network and other platforms by accessing the personal data that the “fan” has voluntarily made available by intervening on the page itself, commenting or posting content according to the options activated from Osteria dell’Orsa;	The data is kept as long as the fan / follower does not dissociate from the page / profile
C – Collection of personal data to verify the quality of the services offered	The data are kept for a period not exceeding 12 months
D – Collection for anonymous statistical, market, marketing and product preference surveys;	The data is kept for a period not exceeding two years
E – For marketing communications, sending newsletters and other advertising communication activities; or to provide you with subsequent information and / or offers on products, services or initiatives offered or promoted by Osteria dell’Orsa and / or by affiliated and / or controlled companies, as well as by commercial partners and outsourcers, without this resulting in the transfer of data personal to third parties.	The data is kept for a period not exceeding two years unless the interested party exercises the right to cancel or modify the data
F – In the case of purchase of products on the Osteria dell’Orsa e-commerce platform for the purpose of execution of the sales contract, including the shipping and management of post-sales communications	The data are kept for the period indicated by the law on fiscal and tax matters
G – Processing of personal data for the purpose of executing the contract of the stay service	I data are kept for the period indicated by the law on fiscal and tax matters
H – Processing of personal data for compliance with legal obligations in the field of public safety	For the time necessary for the formalities required for public safety, Royal decree 18/06 / 1931, n. 773 art. 109

 

The company policy however provides for the use of information in order to guarantee the satisfaction of users / customers and to meet their expectations, following the principle of necessity and minimization of processing.

The legal basis of the processing is the consent of the interested parties pursuant Article 6, paragraph 1, lett. a of the GDPR, except for the purposes F and G for which the legal basis is Article 6, paragraph 1, lett. b of the GDPR; the legal basis for the purposes indicated in letter H of article 3 is art. 6, par. 1, lett. c) of the GDPR for the need for processing for the purpose of fulfilling a legal obligation to which the data controller is subject.

4 – NATURE OF THE CONFERENCE AND CONSENT

The provision of data is optional but necessary for the implementation of the purposes indicated in Article 3. Any refusal by the interested party makes it impossible for the owner to follow up on the establishment of the relationship and its timely execution.
For the purposes indicated in Article 3 letter F and G, the processing is lawful to allow the execution of the sales contract pursuant to Article 6, paragraph 1, lett. b of the GDPR.
For the purposes indicated in letter H of article 3 is art. 6, par. 1, lett. c) of the GDPR for the need for processing for the purpose of fulfilling a legal obligation to which the data controller is subject.

 

5 – METHOD

The processing of your personal data will be consistent with the principles of correctness, lawfulness and transparency, protecting your privacy and your rights. They will be treated with the aid of computer systems or paper supported by specially authorized and trained personnel. The Data Controller has implemented technical and organizational security measures appropriate to its level of risk and undertakes to keep them updated and functional over time

6 – COMMUNICATION TO CATEGORIES OF RECIPIENTS

The data object of the treatment carried out by the company may be communicated to the following categories of recipients:
– subjects who can access the data by virtue of the provisions of law, regulation or community legislation, within the limits established by these standards;
– subjects (Companies Partners / Suppliers) who carry out technical support activities for which data extracted from the customer’s information tools may be communicated for the resolution of specific problems;
– subjects who, as informants, carry out their duties at their offices (eg: Legal and Commercial Studies) for the purposes of accounting management and contractual relations;
– carriers, couriers, other subjects appointed by us to transport products / materials;
– information service providers for purposes related to the assistance contract with Osteria dell’Orsa:
The data collected will not be disseminated without the written consent of the interested party.

7 – STORAGE TIMES

The storage times are indicated in art. 3 of this Notice.

8 – TRANSFER OF DATA ABROAD

The personal data of the interested party will not be transmitted to third countries or outside the European Union. Should personal data be transferred to third countries or international organizations in the future, all the provisions of Chapter V (EU Regulation 2016/679) will be respected in order to ensure an adequate level of protection.

9 – AUTOMATED PROCESS

Osteria dell’Orsa does not use decision-making processes based on automatic processing, including profiling.

10 – RIGHTS OF THE INTERESTED PARTY

Pursuant to articles 13, paragraph 2, letters b) and d); 14, paragraph 2, letters c) and e), 15, 16, 17, 18, 19,20 and 21 GDPR we inform the interested party that he has the right to:

a) obtain confirmation of the existence or not of personal data concerning him and their communication in an intelligible;
b) obtain information on the origin of personal data, on the purposes and methods of processing, on the logic applied in case of processing carried out with the aid of electronic tools;
c) obtain access, rectification, limitation or integration of data concerning him;
d) obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that need to be kept for the purposes for which the data were collected or subsequently processed;
e) the attestation of the fact that the operations referred to in the preceding points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is impossible or involves the use of means manifestly disproportionate to the protected right;
f) obtain data portability;
g) object, in whole or in part:
                – for legitimate reasons, to the processing of data concerning him, even if pertinent to the purpose of the collection;
                – to the processing of personal data concerning him, provided for the purposes of commercial information or sending advertising or direct sales material or for carrying out market                         research or commercial communication.
The above rights may be exercised with a request to the Data Controller, at the addresses indicated in art. 1.
h) propose, as an interested natural person, a complaint to the Guarantor for the protection of personal data, following the procedures and indications published on the official website of the Authority on www.garanteprivacy.it.

Date: 04/08/2022