Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATED TO THE WEBSITE

This privacy notice supplements the website navigation policy, illustrating how the Data Controller will specifically handle the data entered in this form. Please also review the navigation policy available at www.borgodeicontidellatorre.it.

Identity and contact details of the Data Controller
Borgo dei Conti della Torre S.r.l., hereinafter also “Borgo dei Conti” or “Controller,” with registered office at Via Ponte Madrisio 13, Morsano al Tagliamento (PN), contactable at the email address info@borgodeicontidellatorre.it.

Purposes and legal bases
A. Management of information requests: personal data are processed for all needs related to fulfilling requests for information and/or quotes.
B. Newsletter: contact data are used to send information about services offered by the Controller, events organized by it, and information on activities carried out by Borgo dei Conti.
C. Defensive purposes: the Controller may need to process personal data for the management of disputes and out-of-court or judicial litigation.

PurposeLegal basis (common data)Legal basis (special categories of data)
A.Execution of pre-contractual measures; Legitimate interest of the Controller to respond to received requests./
B.Consent./
C.Legitimate interest of the Controller to ascertain, exercise, or defend a right.Ascertain, exercise, or defend a right.

Retention period

PurposeRetention time
A.Time necessary to fulfill the received requests and subsequent interactions.
B.Until consent is withdrawn.
C.10 years from the final resolution of the dispute.

Nature of provision and consequences of refusal

PurposeNatureConsequences
A.NecessaryInability to receive the requested information.
B.Optional
C.NecessaryInability to manage disputes.

Scope of communication
Data are processed by authorized internal personnel assigned specific duties and are communicated externally based on the following rules:

PurposeCategories of external recipients
A.Consultants, third parties.
B.External consultants, companies providing hosting/management of technological platforms.
C.Law firms; debt recovery or assignment companies; judicial authorities.

Since data are also processed with IT tools, they may also be visible to subjects performing assistance/maintenance on such systems.

Data transfer to a third country or international organization
The data subject’s data may be transferred to third parties located outside the European Economic Area that provide services connected to the processing carried out by the Controller and described in this Notice. Such transfer, if applicable, will be governed, depending on the recipients, by the use of standard contractual clauses adopted by the European Commission with decision 2021/914 of June 4, 2021, and any subsequent amendments or, alternatively, based on a Commission adequacy decision and/or any other instrument permitted by the legislation.

Rights of Data Subjects
Data subjects are granted the following rights:
Access: the right to know whether their personal data are being processed and, if so, to obtain access and request a copy.
Rectification: the right to request updating of personal data, correction of inaccurate data, and integration of incomplete data.
Erasure: the right to obtain deletion of personal data under certain conditions (for more information contact the Controller).
Restriction: the right to request that data be marked to limit future processing under certain conditions (for more information contact the Controller).
Objection: the right to object to the processing of personal data for reasons related to one’s particular situation where the processing is based on legitimate interest or necessary for public interest or official authority; it is also possible to object to the processing of personal data for direct marketing purposes.
Portability: the right to receive personal data provided to the Controller in a structured format and request that they be transmitted to another controller where processing is based on consent or contract and carried out with automated means.
Withdrawal of consent: the right to withdraw consent for the purposes for which it was given, without affecting the lawfulness of processing carried out prior to withdrawal.

The exercisable rights regarding the processing activities performed are:

PurposeExercisable Right
 AccessRectificationErasureRestrictionObjectionPortabilityWithdrawal of consent
A.XXXXX  
B.XXXX XX
C.XXXXX  

To exercise the rights above, you can use the form available at https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to: info@borgodeicontidellatorre.it. You may request more details on the above information at the same address (e.g., legitimate interest balancing test or the list of data processors).
You may file a complaint with a supervisory authority: for Italy, the Data Protection Authority (www.garanteprivacy.it).