Privacy Policy – Camping Palau Sardegna

Privacy Policy for the website www.campingpalausardegna.com

The privacy of our visitors is of utmost importance to us. Therefore, the quantity and nature of the data collected during navigation have been minimized, and all necessary precautions have been taken to ensure its security. This policy applies exclusively to the website www.campingpalausardegna.com and not to any other websites accessed by the user through links present on the aforementioned website.

In accordance with the provisions of Legislative Decree 196/2003, the Personal Data Protection Code, and the General Data Protection Regulation – EU Regulation 2016/679, Camping Palau Sardegna, represented for this purpose by the acting President as the Data Controller, would like to inform you of the following:

Personal Data Processed and Purposes of Processing Automatically Collected Data The IT systems responsible for operating this website acquire, during normal navigation, certain personal data whose transmission is linked to the use of Internet communication protocols (IP addresses, domain names of the computers used by users who connect to the website, the request time, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response provided by the server, etc.), and other parameters related to the user’s operating system and computing environment.

This data is used solely to obtain anonymous statistical information about the website’s use and to verify its proper functioning. The data collected may be used to determine liability in the event of hypothetical cybercrimes against the website.

Data Provided Voluntarily by Users The personal data voluntarily provided by users through the completion of contact forms or other communication methods possibly available on our website are used to respond to the requests made and, with your consent, for all purposes that require it. For example, the inclusion of an email address in the contact form results in its collection, which is necessary to respond to the submitted requests, as well as the collection of any additional personal data included in the message. Your personal data may be communicated for the specified purposes to our collaborators, who are specifically authorized within the scope of their duties. For the same purposes, if necessary, the collected data may be transferred outside the national territory where the conditions required by the regulations are met.

Processing Methods and Retention Periods The data processing will be carried out using paper and electronic means by the data controller and authorized individuals, adhering to all precautionary measures to ensure its security and confidentiality. Your personal data provided through forms and contact modules will be retained for the time necessary to fulfill your requests, as outlined in the data retention policy for the various purposes.

Personal data related to browsing will be retained to ensure the management and security checks of the website for the necessary period, which is, except for special cases, 6 months.

Optional Nature of Providing Personal Data Apart from the specified necessary navigation data automatically recorded, the user is free to provide personal data (e.g., name, surname, address, email, etc.) requested in the forms on the website. Failure to provide them may make it impossible to obtain the requested services.

Communication of Collected Data To pursue the purposes described above, your personal data will be known by employees, assimilated personnel, and collaborators of the Data Controller, who will act as authorized individuals for the processing of personal data.

Additionally, your personal data will be communicated and processed by third parties belonging to the following categories:

a) Entities engaged by the Data Controller for website management;
b) Companies managing the Data Controller’s IT system;
c) Firms and consultants providing legal and/or tax consultancy services;
d) Authorities and supervisory and control bodies, and generally public or private entities with public functions.

The parties belonging to the above categories may, in some cases, operate entirely independently as distinct Data Controllers, or in other cases, as Data Processors specifically appointed by the Data Controller, in compliance with Article 28 GDPR.

The complete and updated list of entities to which your personal data may be communicated can be requested at the legal office of the Data Controller: info@campingpalausardegna.com.

Rights of Data Subjects Regarding the processing described in this policy, as a data subject, you may, under the conditions provided by the GDPR, exercise the rights set forth in Articles 15 to 21 of the GDPR, and in particular, the following rights:

Right of Access– Article 15 GDPR: The right to obtain confirmation of whether or not personal data concerning you is being processed and, if so, obtain access to your personal data – including a copy – and receive communication of, among other things, the following information:
- a) Processing purposes;
- b) Categories of personal data processed;
- c) Recipients to whom the data has been or will be communicated;
- d) Retention periods or the criteria used;
- e) Data subject’s rights (rectification, deletion of personal data, restriction of processing, and right to object to processing);
- f) Right to file a complaint;
- g) Right to receive information on the origin of your personal data if it was not collected from you;
- h) The existence of automated decision-making processes, including profiling.
Right to Rectification– Article 16 GDPR: The right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data.

Right to Erasure (Right to Be Forgotten) – Article 17 GDPR: The right to obtain, without undue delay, the deletion of personal data concerning you when:

a) The data is no longer necessary for the purposes for which it was collected or otherwise processed;
b) You have withdrawn your consent, and there is no other legal basis for the processing;
c) You have successfully objected to the processing of personal data;
d) The data was processed unlawfully;
e) The data must be deleted to fulfill a legal obligation;
f) The personal data was collected in relation to the offer of information society services referred to in Article 8, Paragraph 1, GDPR.

The right to erasure does not apply to the extent that processing is necessary for compliance with a legal obligation, for the performance of a task carried out in the public interest, or for the establishment, exercise, or defense of legal claims.

Right to Restriction of Processing – Article 18 GDPR: The right to obtain the restriction of processing when:

a) The data subject contests the accuracy of the personal data;
b) The processing is unlawful, and the data subject opposes the deletion of personal data and instead requests a restriction on its use;
c) Although the Data Controller no longer needs the data for processing purposes, the personal data is necessary for the data subject to establish, exercise, or defend legal claims;
d) The data subject has objected to processing, as mentioned above, pending verification of whether the legitimate grounds of the Data Controller override those of the data subject.

Right to Data Portability – Article 20 GDPR: The right to receive, in a structured, commonly used, and machine-readable format, the personal data concerning you that you have provided to the Data Controller and the right to transmit it to another Data Controller without hindrance, provided that the processing is based on consent and carried out by automated means. Additionally, the right to have your personal data transmitted directly from one Data Controller to another, where technically feasible;

Right to Object – Article 21 GDPR: The right to object, at any time, to the processing of personal data concerning you based on the legitimacy condition of legitimate interest, including profiling, unless there are compelling legitimate grounds for the Data Controller to continue processing that override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.

Lodging a Complaint: You may lodge a complaint with the Data Protection Authority (Garante per la protezione dei dati personali), located at Piazza di Montecitorio no. 121, 00186, Rome (RM).

The rights mentioned above may be exercised against the Data Controller by contacting the references provided in the “Data Controller and Processors” section. The Data Controller will handle your request and provide information related to the action taken on your request without undue delay and, in any case, no later than one month from the receipt of the request.

Cost-Free Exercise of Rights: The exercise of your rights as a data subject is free of charge under Article 12 GDPR. However, in cases of manifestly unfounded or excessive requests, including repetitive ones, the Data Controller may charge a reasonable fee reflecting the administrative costs incurred to process your request or refuse to comply with your request.

You are informed that the Data Controller may request additional information necessary to confirm the identity of the data subject.

Data Controller and Processors: The Data Controller and Processor is Camping Palau Sardegna, represented by its temporary legal representative.

For further information regarding the processing of your personal data conducted through this website, you may contact the [Data Controller or Data Protection Officer (if available)] at the email address info@campingpalausardegna.com.

Cookie Policy: This website uses “cookies,” small text file fragments that are stored on the user’s computer to make our website easier to use, effective, and secure. The cookies used are “session cookies,” which are not persistently stored on the user’s computer and disappear when the browser is closed.