This Privacy Policy is provided pursuant to Regulation (EU) 2016/679 (“GDPR”) and describes the methods for processing the personal data of users who consult the website cascinamoncrava.com (hereinafter, the “Site”).

1. Data Controller

The controller of the personal data processing is:

B&B Cascina Moncrava (VAT no. 13251150010)

Via Moncrava, 7 – 10015 Ivrea (TO)

Email: info@cascinamoncrava.com
Telephone: +39 348 6493703

(hereinafter, the “Controller”).

2. Types of data processed

I may process the following categories of personal data:

a) Navigation data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses, browser type, operating system, time of access).

Such data is used in aggregate and anonymous form for the sole purpose of obtaining statistical information on the use of the Site and to check its correct functioning.

b) Data provided voluntarily by the user

The voluntary sending of messages via email, contact forms, or other communication channels entails the acquisition of the data provided by the user, such as:

• first and last name;
• email address;
• telephone number;
• content of the message;
• any information regarding stay requests or availability.

3. Purpose of processing

Personal data is processed for the following purposes:

• responding to requests for information or contact;
• managing stay requests and pre-contractual communications;
• fulfilling legal or regulatory obligations;
• obtaining anonymous statistics on the use of the Site.

4. Legal basis for processing

The processing of personal data is based on the following legal grounds:

• execution of pre-contractual measures requested by the data subject (Art. 6, para. 1, letter b GDPR);
• fulfillment of legal obligations (Art. 6, para. 1, letter c GDPR);
• legitimate interest of the Controller in the correct functioning of the Site and the management of communications (Art. 6, para. 1, letter f GDPR).

5. Processing methods

The processing of personal data is carried out using computer and electronic tools, with logic strictly related to the purposes indicated and in compliance with the security measures provided by current legislation.

The data is not subject to automated decision-making processes or profiling.

6. Data retention

Personal data is kept for the time strictly necessary to achieve the purposes for which it was collected and, in any case, in compliance with the terms established by applicable legislation.

Data related to contact requests is kept for the time necessary to manage the request and any subsequent communications.

7. Communication and dissemination of data

Personal data will not be disseminated.

It may be communicated to external parties acting as data processors or autonomous controllers, such as:

• IT and hosting service providers;
• technical or professional consultants;
• competent authorities, where required by law.

8. Cookies and analysis tools

The Site uses technical cookies and third-party analytical cookies (Google Analytics) configured in anonymized mode.

For more information on the use of cookies, please consult the Cookie Policy available on the Site.

9. Rights of the data subject

As the data subject, you may exercise the rights provided for in Articles 15–22 of the GDPR at any time, including:

• obtaining access to your personal data;
• requesting its rectification or erasure;
• restricting or opposing the processing;
• receiving the data in a structured format (portability);
• lodging a complaint with the Data Protection Authority.

Requests can be sent to me at the contact details indicated in point 1.

10. Updates to this policy

This Privacy Policy may be subject to changes or updates.
I therefore invite you to consult it periodically.