PRIVACY POLICY
This Privacy Policy is made pursuant to Article 13 of the European Regulation No. 679/2016 and applies exclusively to all Data collected through the Website varennawedding.com. This Privacy Policy is subject to updates that will be posted timely on the Website. This Privacy Policy and the Cookie Policy, establish the basis on which the Data Subject's Personal Data will be processed.
Owner of the Treatment
The Owner of the Treatment collected from this Website is Comune di Varenna
CF 83003560139 P. Iva 00664940137 - P.zza Venini, 2 23829 Varenna (LC) - Tel.: +39 0341 830119 - PEC: varenna@comune.varenna.legalmailpa.it - E-Mail privacy@varennawedding.com
Data Protection Officer (DPO).
In compliance with the provisions of the Regulation, the Data Controller has appointed pursuant to Articles 37-39 of the GDPR Data Protection Officer (DPO), with the task of supervising compliance with the Regulation and acting as a point of contact with those affected by the processing as well as with the Data Protection Authority. II DPO is Halley Lombardia, Viale Cesare Cattaneo, 10/b, 22063 Cantù (CO), Tel. +39.031.707811, Fax +39.031.707830, gdpr@halleypec.it
Statement of accessibility
Municipality of Varenna is committed to making its website accessible, in accordance with Legislative Decree No. 106 of August 10, 2018, which transposed EU Directive 2016/2102 of the European Parliament and of the Council. The accessibility statement and all details can be found at the following address https://form.agid.gov.it/view/a19e46d0-eda7-11ee-977e-e16ea5f0fba4
Personal Data Processed
Personal Data means any information concerning an identified or identifiable natural person (Data Subject). An identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier, one or more characteristic elements of his or her physical identity.
Category of Personal Data Processed
Of the Personal Data processed by this Website, either independently or through third parties, there are Common Data such as:
- Complete biographical data (such as first name, last name, date and city of birth, age, gender, etc.)
- Contact details of the person, spouse and witnesses (e-mail, address, phone number)
- Internet browsing data collected by cookies installed on your computer or mobile device (for more information consult the Cookie Policy)
- In case a request is sent through the "Contact" section of the Site, the provision of certain Personal Data is necessary for the Owner to fulfill the requests, so the relevant fields of the registration form are marked as mandatory.
- Data on the domicile/residence of the person concerned, spouse and witnesses;
- Login and account information, including user name, password, and unique user ID;
Methods of Processing Personal Data
The Personal Data provided or acquired will be subject to Processing based on the principles of fairness, lawfulness, transparency and protection of confidentiality in accordance with current regulations. The Data Controller processes Users' Personal Data by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data. The Processing is carried out by means of computer and/or telematic tools, with organizational methods and logics strictly related to the indicated purposes.
Purpose of Personal Data Processing and Legal Basis
Personal Data may be collected autonomously by the Data Controller or through third parties. In this case, the computer systems and software procedures in charge of the operation of this Website acquire certain Personal Data of the Users, of a technical-informatics nature (e.g. IP address, type of browser used, operating system, domain name and addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal operation of the Internet. Such Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing.
The Data that the Data Subject chooses to voluntarily provide will be processed in compliance with the conditions of lawfulness ex art 6 GDPR and will be processed to enable the Website to provide its services, as well as for the Purposes indicated below and will be kept for the time necessary for the fulfillment of the aforementioned Purposes. Specifically, the Purposes of the processing are:
1) Responding to inquiries and providing Information
Data will be processed for the purpose of being contacted or following up on specific requests made to the Data Controller by the Data Subject for communications of a nature relating to the Civil Wedding Date and Location Selection Services, offered by the Data Controller, via e-mail messages or other communication tools such as telephone.
Legal Basis: This processing is optional and based on the consent of the Data Subject, however, the provision of the Data is necessary for the pursuit of the stated purpose.
Period of data retention: until consent is revoked by the Data Subject.
2) Website registration
The registration procedure, through the creation of an account is intended to allow the use of the website as a "Registered User" and to access the choice and booking services as well as the entry of all the documents necessary to finalize the purchase of the Service. The Registration Data will be processed by the Owner's website to initiate the procedure of the purchase of the Service and will be transmitted complete with the documents attached to the latter in its data management and storage systems. It should be noted that the submitted documents will not be stored in the website under any circumstances.
Legal basis: The legal basis of the processing is the execution of pre-contractual measures to which the data subject is a party this processing and the consent of the data subject who can always change his or her mind however the provision of the Data is necessary for the pursuit of the stated purpose.
Period of data retention: until consent is revoked by the Data Subject.
3) Pre-contractual information and fulfillment.
The Data will be processed in order to be contacted or to follow up on specific requests made to the Data Controller by the Data Subject for communications of an informative nature and/or for information about the purchase of the Services of the same Data Controller, by means of e-mail messages or filling in the Contact Form and other communication tools such as telephone.
Legal Basis: This processing is optional and based on the consent of the Data Subject, however, the provision of the Data is necessary for the pursuit of the stated purpose.
Period of data retention: until consent is revoked by the Data Subject.
4) Processing required as part of a contract.
Data will be processed in order to fulfill obligations arising from the purchase of the Service, to contact the Data Subject in connection with the Service and for the management of the Service, to handle service requests, cancellation requests, and document supplementation.
Legal basis: this processing is necessary for the performance of the contract to which the Data Subject is a party, for the execution of pre-contractual measures or to fulfill a legal obligation to which the Data Controller is subject.
Data retention period: period specified by law and in any case for up to 10 years for the purpose of fulfilling related administrative and tax obligations.
5) Fulfillment of any obligations under applicable laws
The Data will be processed to fulfill any type of obligation contemplated and provided for by current laws, regulations, related rules, business customs, and tax/fiscal matters, including also for the purposes provided for in the anti-money laundering legislation Legislative Decree 231/2007 and subsequent amendments.
Legal basis: this processing is necessary to fulfill a legal obligation to which the Data Controller is subject.
Data retention period: period specified by law and in any case for up to 10 years for the purpose of fulfilling related administrative and tax obligations.
6) Statistics
The Data will be processed to perform statistical analysis on aggregated and anonymous data to analyze the behavior of the Data Subject in order to improve the products and services provided by the Data Controller as well as to meet the Data Subject's expectations.
Legal basis: this processing is based on the consent freely given by the Data Subject.
Data retention period: until consent is revoked by the Data Subject.
Data Communication
In addition to the Owner, in some cases, they may have access to the Data:
- a) categories of specially trained appointees involved in the organization of the Website (Registry administrative staff, sales, marketing, legal, system administrators);
- b) external parties (such as third party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller ex art. 28 GDPR. The updated list of Data Processors, if appointed, can always be requested from the Data Controller;
- c) public or private entities that can access the Data in compliance with legal obligations;
- d) subjects who perform ancillary and instrumental tasks with respect to the Holder's activity such as the owners of the locations for holding the ceremony;
Treatment Times
As expressly provided for in Art. 5, co. 1, letter e) of the GDPR, the Data are kept for the time necessary for the Processing of the same in relation to the performance of the service requested by the Data Subject, or required by the Purposes described above in this document. At the end of the retention period, the Personal Data will be deleted and therefore, the rights of access, deletion, rectification and portability of the Data can no longer be exercised
Cookie
This website uses cookies. Cookies are small text files that can be used by websites to make the experience more efficient for the Data Subject and to personalize content and ads, provide social network features, and analyze traffic. Cookie Policy
Place of Processing and Transfer of Data Abroad
The Data are processed at the operational headquarters of the Data Controller. For further information you may contact the Data Controller. The Data may be processed by individuals and/or legal entities operating on behalf of the Data Controller and under specific contractual obligations and located in EU or non-EU member countries. In the event that Data is transferred outside the EEA, the Data Controller will take all appropriate contractual measures to ensure adequate protection of the Data.
Exercise of data subject rights
The Data Subject has the right to exercise the faculties provided for in Articles 7, 15-22 of European Reg. 679/2016. In particular, he/she has the right to revoke his/her consent at any time and, upon simple request to the Data Controller, he/she may request access to the Personal Data, receive the Personal Data provided to the Data Controller and where possible transmit them to another Data Controller without hindrance (so-called portability), obtain the updating, limitation of the processing, rectification of the Data and the deletion of those processed in breach of the regulations in force. He/she has the right, for legitimate reasons, to object to the Processing of Personal Data concerning him/her and to the Processing for purposes of sending advertising material, direct sales and for carrying out market research. He/she also has the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for the protection of personal data or to take appropriate legal action. The interested party may exercise his or her rights by contacting the Data Controller by e-mail at:
Data Controller: Municipality of Varenna
CF 83003560139 P. Iva 00664940137 - P.zza Venini, 2 23829 Varenna (LC) - Tel.: +39 0341 830119 - PEC: varenna@comune.varenna.legalmailpa.it
DPO: Halley Lombardia, Viale Cesare Cattaneo, 10/b, 22063 Cantù (CO), Tel. +39.031.707811, Fax +39.031.707830, gdpr@halleypec.it
Tools Used to Process Personal Data
CONTACT FORM
The Interested Party, by filling out the Contact Form with their Data, consents to their use to respond to requests for information, or any other purpose indicated by the header of the form. Personal Data collected through Contact Form: Email, First Name and Last Name, telephone
This website uses:
Contact Form 7 (Rock Lobster LLC)
is a Form creation and management service that allows this website to integrate such content within its pages. Personal Data collected: Email and Name. Various types of Data as specified by the Privacy Policy of the service. Place of Processing: Japan - Privacy Policy
EMAIL ADDRESS MANAGEMENT
These services enable the management of a database of email contacts, telephone contacts, or contacts of any other type used to communicate with the Data Subject. These services may also allow for the collection of Data related to the date and time of viewing of messages by the Data Subject, as well as the Data Subject's interaction with them, such as information about clicks on links embedded in messages.
WEBSITE REGISTRATION
By registering or authenticating, the Data Subject allows the website to identify him/her and give him/her access to dedicated services.
The Interested Party registers directly on the site by filling out the Form and providing his or her requested Data such as first name last name and email and password.
STATISTICS
Statistical services allow the Data Controller exclusively to monitor and analyze traffic data and are used to track the behavior of the Data Subject. This Website uses the following services:
Google Analytics 4
Google Analytics is an analysis service provided by Google LLC. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads in its ad network. Google may also transfer this information to third parties where required by law or where such third parties process this information on Google's behalf. In Google Analytics 4, IP addresses are used at the time of collection and then removed before the data is stored in any data center or server. To learn more, you can consult Google's official documentation. At the following link https://tools.google.com/dlpage/gaoptout?hl=it, Google provides a browser add-on for the deactivation of Google Analytics. Personal Data collected: Cookies and Usage Data. Location of the processing: USA - Ireland Privacy Policy
Clarity (Microsoft Ireland Operations Limited)
Clarity is a service that allows the Data Controller to monitor its customers' conversions. Personal Data collected: Cookies; Usage Data. Place of processing: Ireland - Privacy Policy
TAGS MANAGEMENT
The use of Tags allows code snippets (called Tags) to be installed within the HTML pages of a website. It can also be used in Android and iOS Apps. Tag Management allows with a single code snippet to manage multiple Tools simultaneously on the website. The use of such services involves the passage of the Data Subject's Data through them and in case their retention is necessary.
Google Tag manager (Google LLC o Google Ireland Limited)
Google Tag manager is a service that allows you to manage and monitor all third-party Tags on the Website to get information about the interest shown by Users towards the Website itself and consequently the quality of the content. Personal Data Collected: Cookies and Usage Data. Place of processing: USA- Ireland - Privacy Policy
Changes to this Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking as reference the date of last modification indicated at the bottom. If you do not accept the changes made to this Privacy Policy, you must cease using this Website and may request the Data Controller to remove your Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to the Personal Data collected up to that point. The Data Controller is not responsible for updating all links viewable in this Privacy Policy, so whenever a link is not working and/or updated, Users acknowledge and agree that they should always refer to the document and/or section of the websites referred to by that link.
Privacy Policy updated as of January 2024