Privacy Policy

This Privacy Policy describes how the website www.mareblucorniglia.it (hereinafter the "Site") is managed with reference to the processing of personal data of users who consult it and interact with its services.

This information is provided pursuant to art. 13 of Regulation (EU) 2016/679 (GDPR) to those who interact with the web services of Mareblu di Angeli Leonardo.

1. Data Controller

The Data Controller is:

Mareblu di Angeli Leonardo
Company managing guesthouses and holiday homes
VAT Number: 01589250115
Fiscal Address: Via Nino Bixio N 76 Int 3, La Spezia (SP)
Website: www.mareblucorniglia.it

For any questions or requests regarding this Privacy Policy, you can contact the Data Controller at the contact details provided above.

2. Data Collected and Purposes of Processing

The Site collects personal data through the contact form on the page. The data collected are as follows:

• Name (mandatory field): Used to identify the user and personalize communication.
• Email (mandatory field): User's email address, necessary to respond to requests.
• Phone (optional field): User's phone number, for telephone contact if necessary.
• Stay Dates (optional field): Dates of interest for the stay, useful for providing relevant information.
• Apartment or House (optional field): Accommodation preference, to direct the request.
• Message (mandatory field): Content of the user's request.

The purposes of processing data collected through the contact form are:

• Manage and respond to requests for information, availability, or booking sent by users.
• Provide assistance and support to users.
• Fulfill pre-contractual and contractual obligations arising from the user's request.

3. Legal Basis for Processing

The processing of personal data collected through the contact form is based on the consent of the data subject, expressed at the time of sending the request. The user has the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

4. Processing Methods

Personal data are processed with automated and non-automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.

5. Communication and Dissemination of Data

The personal data collected will not be disclosed to third parties, unless disclosure is required by legal obligations or is strictly necessary for the fulfillment of the purposes indicated above. The data may be processed by authorized internal personnel and by any service providers (e.g., hosting provider) who act as Data Processors, duly appointed and instructed by the Controller.

6. Data Retention Period

Data collected through the contact form will be retained for the time strictly necessary to manage the user's request and, subsequently, for a period not exceeding 12 months for administrative purposes and for the management of any disputes, unless otherwise required by law.

7. Rights of the Data Subject

As a data subject, the user has the right to exercise the following rights at any time, pursuant to articles 15 to 22 of the GDPR:

• Right of access: to obtain confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and specific information.
• Right to rectification: to obtain the rectification of inaccurate personal data concerning him or her without undue delay.
• Right to erasure ("right to be forgotten"): to obtain the erasure of personal data concerning him or her without undue delay.
• Right to restriction of processing: to obtain restriction of processing where one of the conditions provided for in Article 18 of the GDPR applies.
• Right to data portability: to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance.
• Right to object: to object at any time to processing of personal data concerning him or her.
• Right to lodge a complaint: to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

To exercise these rights, the user can contact the Data Controller at the contact details indicated in point 1 of this policy.

8. Cookies

The Site uses cookies to improve the user's browsing experience. For detailed information on the use of cookies, please consult our Cookie Policy.

9. Changes to the Privacy Policy

This Privacy Policy may be subject to changes and updates. Users are invited to periodically consult this page to review any changes. The date of the last revision will be indicated at the bottom of this policy.