Privacy Policy

This Internet Privacy Policy is provided by Olos Travel Srls (hereinafter Olos Travel) owner of the website www.legrazieassisi.com (hereinafter Website) pursuant to art. 13 of EU Regulation 2016/679 (GDPR) to describe the way this Website is managed with respect to the processing of personal data of the Visitors who consult it and to enable the latter to understand the purposes and methods of the processing of personal data by Olos Travel if provided. This information is provided only for this Website and does not apply to other websites owned by third parties that may be consulted by the Visitor by means of links for which Olos Travel assumes no responsibility and offers no guarantee in relation to the rules on confidentiality adopted by them. The Privacy Policy is subject to updates and/or changes made by the Owner, at its discretion, also as a result of changes in applicable laws and/or regulations. We invite Website Visitors to regularly check the Privacy Policy to ensure that they are aware of any changes and modifications made to it. The use of the Website is subject to the Privacy Policy from time to time published on www.legrazieassisi.com and in force at the time of such use. The Privacy Policy is easily accessible from every page of the Website.

Data Controller and Data Processors

The Data Controller of any personal data collected through this Website is Maria Cristina Fiore, legal representative of the Olos Travel Srls company with registered office at Via Assisana 31 in Perugia (PG), Tax Code and VAT number 03591760545, e-mail mariacristina@perusiaviaggi.it. The Data Controller may appoint other internal or external Data Processors, as well as persons authorised to carry out processing operations. The complete and up-to-date list of designated Data Processors is available by contacting the Data Controller at the addresses indicated above.

Collection of personal data

Browsing data
The computer systems and software procedures used to operate this website automatically and indirectly collect, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.
This information is not collected to be associated with identified Visitors, but, due to their nature, they may allow their identification when processed or associated with third-party data.
This category of data includes the IP addresses or domain names of the computers of users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to send the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.
This data is only used to gather anonymous statistics about the use of the website and to check that it is functioning correctly. They are deleted after processing. The data could be used to ascertain responsibility in case of alleged computer crimes against the website.

Data provided voluntarily
It is possible to access and browse the Website without the voluntary provision of any personal data being requested.
Olos Travel will only collect and process personal data provided voluntarily by Visitors filling out the forms on this website. Each visitor to the site may choose to provide limited personal data as requested in order to obtain information on products, services and offers. Once registered, the personal data collected will only be used for the services indicated in the available information notice.

Sensitive data
Olos Travel invites Visitors of the Website not to transmit personal data or information that can be considered as sensitive or judicial data pursuant to art. 4 of the GDPR (i.e. personal data that can provide information on health status, sexual orientation, political and religious beliefs, party membership or political convictions, trade union membership) unless strictly necessary for the provision of the requested service.

A summary of specific information will be provided or displayed on the pages of the Website for particular services that can be requested. In some cases this information may be used for the purpose of Visitor profiling or for direct marketing actions. Where this occurs, appropriate information will be provided and voluntary and specific consent will be acquired for marketing and/or profiling purposes.

Use of Cookies

www.legrazieassisi.com uses technical cookies necessary for the operation of the Site itself or required to perform tasks requested by the Visitor. The Website also uses third-party cookies to generate statistics on the use of the website (Google Analytics), to locate the Hotel (Google Maps) and to view videos (YouTube). In compliance with Provision no. 229[http://www .garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/3118884] issued by the Personal Data Protection Authority on 8 May 2014, www.legrazieassisi.com provides information on cookies, their functions and how to disable them at the following link Cookie Policy

Purpose of the personal data processing

General purposes
Website Visitors can voluntarily provide their data to:
– request information on services, products, offers or availability for stays.
– purchase a stay/holiday.
– book services or products.
Therefore, the data provided will be processed by the Data Controller for the following operations, if any: the correct and complete performance of the contract signed, or the performance of the pre-contractual measures required; to comply with financial and accounting requirements and regulations; to comply with current regulations, including regulations related to health and safety; the exercise of rights and interests arising from the contract and pre-contractual activities in a judicial or extrajudicial setting.
Failure to provide personal data will prevent the completion of the contractual relationship(s).

Purpose of direct marketing
The (non-sensitive) personal data of Visitors may be used, solely and exclusively with their voluntary, optional, specific and express consent which may be withdrawn at any time, including for sending communications and promotional and advertising material of Olos Travel by mail, e-mail, fax, sms, mms and the like. After expressing their consent, they still have the right to object, at any time and free of charge, to the processing of their personal data for this purpose.

Personal data will not be communicated to other companies (Third Parties) without the express consent of the Visitor.
However, personal data may be sent to Authorities and Institutions to comply with legal obligations.

Personal data processing methods

Personal data shall be processed mainly by electronic means in the manner and means appropriate to ensure its security and confidentiality. In particular, all the necessary technical, IT, organisational, logistical and procedural security measures will be taken to protect personal data from loss and misuse ensuring the minimum level of protection required by law.

Data storage and deletion

The information and personal data of the Visitors collected by this website, including data voluntarily provided in writing via the contact forms for receiving informative material or other communications, are kept only to provide the requested service and for the duration necessary for the same purpose. Once the service is completed, all personal data will be destroyed in compliance with Olos Travel’s data storage policies, unless otherwise requested by the authority and unless storage obligations for administrative, legal or security purposes.

Data subject's rights

At any time, pursuant to art. 15 and following of the European GDPR Regulation 2016/679, it will be possible for Visitors to:
1. check their personal data collected through this site and, if necessary, have them corrected, updated or deleted.
2. request the Data Controller – in cases where the legal basis of the processing is a contract or consent and the same is carried out by automated means – to provide their personal data in a structured, machine-readable format, also for sharing this data with another data controller (the so-called right to personal data portability).
3. object to the processing of their personal data at any time in the event of special situations concerning them (Art. 20 GDPR).
4. withdraw consent at any time, limited to the cases where the processing is based on their consent for one or more specific purposes and concerns common personal data (e.g. date and place of birth or place of residence), or particular categories of data (e.g. data revealing racial origin, political opinions, religious beliefs, state of health or sexual life (however, processing based on consent carried out prior to the withdrawal retains its lawfulness).
5. submit a complaint to a supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it).

At any time, the Visitor may exercise the above rights by writing to the Data Controller at the following e-mail address mariacristina@perusiaviaggi.it.


Loading...