Privacy

This website collects some personal data from its users.

Information pursuant to art. 13 and 14 of the GDPR

(EU Regulation 679/2016 on the processing of personal data)

 

The "Data Controller" is Pan & Yoda di Bindoni Francesca & C. snc, in the person of its pro tempore legal representative, hereinafter also more briefly identified with the term "Company", cod. tax 02919110300, based in loc. Pecol di Selva 1/A, Tramonti di sotto, PN, 33090, tel +39 3928439066, e-mail info@paneyoda.com which will use your data.

The "Data Processor" is any natural person, legal entity, Public Administration and any Entity which, where necessary and within the limits pertinent to the purposes of the Processing, uses the Personal Data on behalf of the Data Controller.

 

• Type of data collected. All Data necessary for: the correct performance of the tourist - accommodation and restaurant business, spa, promotional, advertising, service evaluation and human resource activities.

 

• Use of Data. The Data will be processed in compliance with the principles set out in art. 5 of the GDPR, among which we mention: lawfulness, correctness, transparency, limitation, confidentiality, etc.

 

• Purpose of the Treatment. The Processing is finalized solely for the purposes indicated in chapter 1 above.

 

• Legal basis of the treatment. Data acquisition takes place in relation to the contract between the Data Controller and the Data Subject or possibly through consent.

 

• Refusal to provide Data. Any refusal by the interested party to provide the Data necessary for the performance of the activity may make it impossible to provide the services, complete the activities and/or manage the relationships indicated in chapter 1 above.

 

• Data source. The personal data that Pan & Yoda snc is in possession of are collected in compliance with the provisions of Article 13 of the GDPR directly from the interested party or pursuant to art. 14 of the GDPR.

 

• Methods of data processing. Treatment in compliance with art. 5, paragraph 1, lett. "f" of the GDPR is carried out by means of the operations or set of operations which can be summarized as follows: collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. The operations can be carried out with or without the aid of electronic or digital or in any case automated tools.

 

• Data communication. Personal Data, for the purposes of the existing contract, may be communicated for the purposes referred to in point 1 to internal and external Collaborators, Persons in Charge and Persons in charge of the Treatment, subjects operating in the sector among which the "da Febo" Hotel is highlighted of loc. Pecol di Selva, subjects aimed at evaluating the quality of the services provided and managing loyalty programmes.

 

• Data dissemination. Your data will not be disseminated in any way, except for the cases indicated in the preceding paragraph.

 

• Data transfer abroad. Personal data may be transferred to countries of the European Union and to third countries with respect to the European Union within the scope of the purposes of the treatment referred to in point 3. Any transfer of data to a country not belonging to the European Union will take place in compliance with the provisions of the articles 45 and following. of the EU Reg. n. 679/2016. In the absence of a decision on the adequacy of the level of protection, the transfer can take place only in the cases provided for by art. 49 of the aforementioned Regulation.

 

• Data Retention. The Data is kept for the period necessary to carry out the activity and in any case for a period not exceeding ten years.

 

• Rights of the interested party. The law grants the interested party the exercise of specific rights, including:

 

- obtain from the Data Controller access to your data and information in an intelligible way;

- have knowledge of the origin of the Data, of the purposes and methods of the Processing;

- rectify and delete (right to be forgotten) the Data;

- limit the Treatment or have the possibility to oppose the same

- request data portability;

- withdraw the consent to the Processing without prejudice to the lawfulness of the Processing based on the previous consent;

- propose a complaint pursuant to art. 77 GDPR to the Guarantor for the Protection of Personal Data.

 

• Changes to this privacy policy. The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing users on this page and, if possible, on this website as well as, if technically and legally feasible, by sending a notification to users through one of the contact details held by the Data Controller. Therefore, please consult this page regularly, referring to the date of the last modification indicated at the bottom. If the changes concern treatments whose legal basis is consent, the Data Controller will collect the user's consent again, if necessary.

 

• System and maintenance logs. For needs related to operation and maintenance, this website and any third party services used by it may collect system logs, i.e. files that record interactions and which may also contain personal data, such as the user's IP address.

 

• Information not contained in this policy. Further information in relation to the processing of personal data may be requested at any time from the Data Controller using the contact details.

 

• Cookie Policy. This website uses Cookies. To find out more and to view the detailed information, the user can consult the Cookie Policy.

 

• Third parties. Google Analytics with anonymized IP (Google Inc., United States). Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this site, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the ads of its advertising network. This integration of Google Analytics makes your IP address anonymous. The anonymization works by shortening the IP address of the Users within the borders of the member states of the European Union or in other countries adhering to the agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to a Google server and shortened within the USA. Place of processing: United States – tool for deactivating Google Analytics (opt out). Subject adhering to the Privacy Shield.

​​

• Non-continuous geolocation (this website). This website may collect, use and share data relating to the user's geographic location in order to provide location-based services. Most browsers and devices provide tools to deny geographic tracking by default. If the user has expressly authorized this possibility, this website can receive information on its actual geographical position. The geographical localization of the user takes place in a non-continuous manner, upon specific request by the user or when the user does not indicate the place where he is in the appropriate field and allows the application to automatically detect the position. Personal data collected: geographical location.

 

Registration and authentication

By registering or authenticating, the user allows the application to identify him and give him access to dedicated services. Depending on what is indicated below, the registration and authentication services could be provided with the help of third parties. If this happens, this application will be able to access some data stored by the third party service used for registration or identification.

Facebook Authentication (Facebook, Inc.). Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and connected to the Facebook social network. Personal data collected: various types of data as specified in the privacy policy of the service. Place of processing: United States - Privacy Policy. Subject adhering to the Privacy Shield.

Google OAuth (Google Inc.). Google OAuth is a registration and authentication service provided by Google Inc. and connected to the Google network. Personal data collected: various types of data as specified in the privacy policy of the service. Place of processing: United States - Privacy Policy . Subject adhering to the Privacy Shield.

Statistics. The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of user behavior.

Google Analytics (Google Inc.). Google Analytics is a web analytics service provided by Google Inc. ("Google"). Google uses the personal data collected for the purpose of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google. Google may use personal data to contextualize and personalize the ads of its advertising network. Personal data collected: Cookies and usage data. Place of processing: United States - Privacy Policy - Opt Out. Subject adhering to the Privacy Shield.

Definitions and legal references

Personal data. Personal data is any information which, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage data. This is information collected automatically through this website (also by third-party applications integrated into this website), including: IP addresses or domain names of the computers used by the user who connects to this website, addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc. .) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, to the parameters relating to the operating system and the user's IT environment.

User. The individual who uses this website who, unless otherwise specified, coincides with the interested party.

Interested. The natural person to whom the personal data refer.

Responsible for the treatment. The natural person, legal person, public administration and any other body that processes personal data on behalf of the Data Controller, according to what is set out in this privacy policy.

Data Controller. The natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of processing personal data and the tools adopted, including the security measures relating to the functioning and use of this website. The Data Controller, unless otherwise specified, is the Owner of this website.

This website. The hardware or software tool through which the personal data of Users are collected and processed.

Service. The service provided by this website as described in the relative terms (if available) and on this site/application.

European Union. Unless otherwise specified, any reference to the European Union contained in this document is intended to extend to all current member states of the European Union and the European Economic Area.

Cookies. Small portion of data stored within the user's device.

Legal references. This privacy statement has been prepared on the basis of multiple legislative systems, including articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy statement applies exclusively to this website.