Privacy Policy (EN)
This Privacy Policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) and describes how personal data of users who browse and use the website www.nuraghecrabioni.it (the “Website”) are processed.
1. Data Controller
The Data Controller is Tresmontes Soc. Agr. Srl, with registered office at Via Umberto I, 30 – 07037 Sorso (SS), Italy, Tax Code and VAT No. 02055670901.
For any information regarding the processing of personal data, users may contact the Data Controller at info@nuraghecrabioni.com.
2. Types of data processed
The Website processes the following categories of data:
- Browsing data: IP addresses, domain names of the devices used, URIs of requested resources, time of request, and other parameters related to the user’s operating system and IT environment.
- Data voluntarily provided by the user: name, surname, email address, phone number, booking details, purchase data, and any other information submitted through contact forms, booking forms, or online purchase processes.
- Cookies and similar technologies: including technical cookies, analytics cookies (Google Analytics), and profiling cookies (Meta Pixel). For more information, please refer to the Website’s Cookie Policy.
3. Purposes of processing
Personal data are processed for the following purposes:
- to allow proper browsing and use of the Website;
- to respond to information requests, quotations, or contacts;
- to comply with legal or regulatory obligations;
- to ensure Website security and prevent misuse;
- to manage bookings, online purchases, and payment transactions.
4. Legal basis for processing
Data processing is based on:
- the user’s consent;
- the performance of pre-contractual or contractual measures;
- compliance with legal obligations;
- the legitimate interest of the Data Controller.
5. Processing methods
Data are processed using electronic and telematic tools, with appropriate security measures to ensure confidentiality, integrity, and availability.
6. Data retention
Personal data will be retained for the time strictly necessary to achieve the purposes for which they were collected, unless longer retention periods are required by law.
7. Data disclosure
Data will not be disclosed. They may be communicated to external parties acting as data processors (e.g. IT service providers, hosting providers, consultants) solely for the purposes described above.
8. Data subject’s rights
Users may exercise at any time the rights provided under Articles 15–22 of the GDPR, including:
- access to personal data;
- rectification or erasure;
- restriction of or objection to processing;
- data portability;
- lodging a complaint with the competent Data Protection Authority.
9. Changes to this Privacy Policy
The Data Controller reserves the right to amend this Privacy Policy at any time. Any changes will be published on this page.
