NORDTOSCANA di Rauser Thomas Alfons informs you, pursuant to Article 13 of EU Regulation 2016/679 (GDPR), that your personal data will be processed in accordance with the methods and purposes set out in this Privacy Policy.

1)DATA CONTROLLER
Thomas Rauser (tax code: RSRTMS56M08Z112U), residing at Frazione Oppilo 1 – 54027 Pontremoli (MS), Italy.

Data Controller’s phone number: +39 335 547 9651.

Data Controller’s email: info@nordtoscana.com.

2) TYPES OF DATA COLLECTED
Among the Personal Data collected by this Website, either independently or through third parties, are: Cookies, Usage Data, First name, Last name, Email, Phone number, Country.

Full details on each type of data collected are provided in the dedicated sections of this Privacy Policy. Personal Data may be voluntarily provided by the User, or collected automatically while using the Website.

Some of the Data requested by this Website are mandatory. If the User refuses to provide them, it may be impossible to deliver the requested service. Where some requested Data are optional, Users are free not to provide such Data, without any consequences for the provision of the requested Service.

Any use of Cookies—or other tracking tools—by this Website or by the providers of third-party services used by this Website, unless otherwise stated, is intended to provide the service requested by the User, as well as for the additional purposes described in this document and in the Cookie Policy.

The User assumes responsibility for any third parties’ Personal Data published or shared through this Website and warrants that they have the right to communicate or disclose it, thereby holding the Data Controller harmless from any liability towards third parties.

3) PROCESSING METHODS
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Processing is carried out using both paper-based and electronic and/or automated methods, with the support of IT or telematic tools, using organizational procedures and logics strictly related to the purposes indicated in this Privacy Policy.

In addition to the Data Controller, in some cases the data may be accessible to certain categories of authorized persons involved in the operation of the website (administrative staff, sales staff, legal staff, system administrators) or to external parties (such as hosting providers) appointed, where necessary, as Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

Data collected through third-party services such as Google Analytics are anonymized by using tools that reduce the identifying power of cookies (masking significant portions of the IP address) and cannot be used to profile a User or, even less, to trace their identity.

Data collected during payment transactions will not be stored on our server but will be handled by third-party services. No credit card details or payment information will be stored on this website.

4) CONSENT TO THE PROCESSING OF PERSONAL DATA
For the sake of maximum transparency and to ensure that the data subject can give informed consent, we specify that acceptance of our privacy policy is required only for users who intend to consent to the processing of their personal data for the purposes described in this notice. If the user does not intend to give consent to the processing for the purposes described herein, they must not (and will not be able to) complete the room booking or the payment for the booking, without prejudice to their ability to browse and view the contents of the Website.
The purchase process consists of filling in an online form in which the following information is required: FIRST NAME, LAST NAME, EMAIL ADDRESS, PHONE NUMBER and COUNTRY OF ORIGIN. To complete the payment—depending on the selected method—the following may also be required: CREDIT CARD NUMBER, CARDHOLDER NAME, EXPIRY DATE and SECURITY CODE.

5) PLACE OF PROCESSING
Data are processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.

To verify where Usage Data such as IP addresses are processed, please refer to the section of this Privacy Policy entitled ‘Details on the processing of Personal Data’.

6) RETENTION PERIODS
Data will be processed and stored for as long as required by the purposes for which they were collected.

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until such contract has been fully performed.
Personal Data collected for purposes attributable to the Data Controller’s legitimate interest will be retained until such interest is satisfied.
Where processing is based on the User’s consent, the Data Controller may retain the Personal Data until such consent is withdrawn. In addition, the Data Controller may be required to retain Personal Data for a longer period in order to comply with a legal obligation or by order of an authority.

7) PURPOSES OF PROCESSING THE COLLECTED DATA

The User’s data are collected to allow the Data Controller to provide its services, as well as for the following purposes: infrastructure monitoring, analytics, contacting the User, payment processing, and sending email messages.

8) DETAILS ON THE PROCESSING OF PERSONAL DATA
Personal Data are collected for the following purposes and using the following services:

– CONTACT FORMS
By filling in the contact forms with their own Data, the User consents to their use in order to respond to requests for information, quotations, or any other matter indicated by the form header. Personal Data collected: name and email address.
– SPAM PROTECTION
Google reCAPTCHA (Google Inc.) – Spam protection service provided by Google Inc. Personal Data collected: Cookies and Usage Data. Place of processing: USA.
– BOOKING FORM
By filling in the booking form, the User provides the data necessary for the provision of the services offered by the Website (purchase of services). Personal Data collected: First name, Last name, Email address, Phone number, Address, City, Province/State, Postal code, Country.
– PAYMENT FORM
This service allows the User to purchase the requested service (accommodation booking).
– PayPal
This service is provided by PayPal and uses Users’ Personal Data in order to complete payment transactions. Personal Data collected: Email address, Credit card number, Cardholder name, Card expiry date, CCV code. Place of processing: USA and all countries in which PayPal operates, both within and outside the EU.

DISPLAY OF CONTENT FROM EXTERNAL PLATFORMS
– Google Fonts (Google Inc.) Google Fonts is a typeface visualization service provided by Google Inc. that allows this Website to incorporate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of processing: USA.
– Google Maps Widget (Google Inc.) Google Maps is a map visualization service provided by Google Inc. that allows this Website to incorporate such content within its pages. Personal Data collected: Cookies and Usage Data. Place of processing: USA.

9) USER RIGHTS
Users may exercise certain rights with reference to the Data processed by the Data Controller.

In particular, the User has the right to:

• withdraw consent at any time. The User may withdraw previously given consent to the processing of their Personal Data.
• object to the processing of their Data. The User may object to the processing of their Data when it is carried out on a legal basis other than consent.
• access their Data. The User has the right to obtain information about the Data processed by the Data Controller, about certain aspects of the processing, and to receive a copy of the Data being processed.
• verify and request rectification. The User may verify the accuracy of their Data and request that it be updated or corrected.
• obtain restriction of processing. When certain conditions apply, the User may request restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any purpose other than storage.
• obtain erasure or removal of their Personal Data. When certain conditions apply, the User may request the erasure of their Data by the Data Controller.
• receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted without hindrance to another controller.
• lodge a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.

10) HOW TO EXERCISE YOUR RIGHTS

You may exercise your rights at any time by sending:

• a registered letter with return receipt to: NORDTOSCANA di Rauser Thomas Alfons, Frazione Oppilo 1 – 54027 Pontremoli (MS), 54027, Italy.
• an email to info@nordtoscana.com

11) COOKIE POLICY
This Website uses Cookies. To learn more and to read a detailed notice, you can consult the Cookie Policy.

12) AGE LIMITS
In accordance with the sales terms of NORDTOSCANA di Rauser Thomas Alfons, we do not provide services to persons under the age of 18. If you are under 13, you are not authorized to use the Website and you must ask a parent or guardian to use the Website on your behalf.

13) CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this Privacy Policy at any time. If we decide to change our Privacy Policy, we will post the updates to this Privacy Policy here and in any other place we deem appropriate, so that the User is aware of what information we collect, how we use it, and the circumstances, if any, in which we disclose it.

If we proceed with changes to this Privacy Policy, the User will receive notice by email or through our Website at least 10 days before the change takes effect.