Privacy Policy Camping Alleghe s.n.c.
Last Update: 02.10.2025
| What is this document? Pursuant to Art. 13 European Reg. n. 679/2016 (“General Data Protection Regulation” or “GDPR”) and in compliance with the principles contained therein, Camping Alleghe di Rudatis M. & c. s.n.c. intends to inform each user (the “User”) about the processing of personal data happening on its websites (www.campingalleghe.it and www.hotellamaison.it). |
Controller and contact detail
Camping Alleghe di Rudatis M. & c. s.n.c. (hereinafter “Controller”,pursuant to Art. 4(7) GDPR),
with registered offices in Via Masarè 58, 32023 Rocca Pietore (BL), Italy
Purpose of processing, Legal Basis, Personal Data and Retention Period
The Controller processes Personal Data for the following purposes, as specified here in below. The table also shows the legal basis which justifies the processing and the period of data retention:
| Purposes | Personal Data | Legal Basis | Data Retention |
| A. Purchase or booking of the Company’s services. | ✓ Anagraphic Information
✓ Special categories of personal data ✓ Payment details
|
Performance of a contract [Art. 6, 1, lett. b) GDPR]
Special categories of personal data [Art. 9, 1, lett.e) GDPR] |
For the period necessary for the performance of the Contract. |
| B. Send communications and reply to queries concerning the Controller activities. | ✓ Anagraphic Information
✓ Contact details |
Performance of a contract [Art. 6, 1, lett. b) GDPR] | For the period necessary to respond and in any case never for a period exceeding 24 months. |
| C. Send newsletters of a general informational, promotional and advertising nature and/or other materials for marketing communication purposes. | ✓ Anagraphic Information
✓ Contact details |
Consent [Art. 6, 1, lett. a)] | Until the withdrawal of consent or until opposition to the processing of personal data for the sending of newsletters and/or other materials for marketing communication purposes, it being understood that after 2 (two) years from the last interaction with our services, personal data will no longer be processed for this purpose. |
| D. Sending commercial information
by email regarding services similar to those purchased (so-called soft spam). |
✓ Anagraphic Information
✓ Contact details |
Legitimate interest consisting in offering the user services of likely interest
[Art. 6, 1, letter f) GDPR] |
For the time strictly necessary to achieve the legitimate interest and until
any opposition. |
| E. Allow the Controller to accomplish all formalities required by law, including those of administrative and tax/fiscal nature. | ✓ Anagraphic Information ✓ Contact details✓ Payment details |
Legal Obligation [Art. 6, 1, lett. c)] Art. 109 TULPS d.lgs. 7 January 2013 |
Until the expiry of the data retention period, as provided by the applicable law. |
| F. Improve the Website by analyzing how Visitors and/or Users navigate and/or use the Website. | ✓ Usage data | Legitimate Interest
[Art. 6, 1, lett. f) GDPR] |
Not applicable (aggregate or anonymous data). |
| G. Detecting or preventing fraudulent activity and exercising the Controller’s rights in Court | ✓ Anagraphic Information
✓ Contact details |
Legitimate Interest
[Art. 6, 1, lett. f) GDPR] |
10 years |
The provision of your Personal Data for purposes A) and B) is necessary and mandatory, so that in case of refusal, we will not be able to provide the requested services.
The processing activities under D), F), and G) do not require your specific consent as they are based on the legitimate interest of the Data Controller as provided for in Article 6, paragraph 1, letter f) of the GDPR. In any case, in accordance with the GDPR, we have carried out a thorough balancing of interests aimed at protecting and guaranteeing the privacy and fundamental rights of the data subjects.
The provision of your Data for the purposes under C) is not mandatory. Your prior consent is therefore required, which the Data Controller will request from time to time in the most appropriate forms for each of the activities described above. In any case, your express consent can always be revoked without any consequences for the contractual relationships with the Data Controller.
Processing modalities
The processing of Personal Data will take place through automated and/or manual tools in order to ensure proper security measures to prevent access, disclosure, loss, incorrect, illegal or unauthorized use of data.
Data Sharing
Your Personal Data may be shared with the following subjects, on a need-to-know basis and in accordance with Applicable Privacy Laws:
- Internet service providers and platforms used by the Controller as organisation tools, channels of communication and/or promotion;
- Third-party vendors, consultants and other third-party service providers who perform services for us or on our behalf and require access to such information to do that job;
- public entities to whom such data must be disclosed in accordance with legal provisions or orders from the Authority.
These subjects act as independent data controllers or data processors. In the latter case, the Data Controller has entered into a specific agreement pursuant to Article 28 of the GDPR (Appointment of Data Processor). The list of Data Processors can be requested by contacting the Data Controller at the addresses indicated in the previous paragraphs.
Your Personal Data will be processed by the Data Controller’s internal staff specifically authorized pursuant to Article 29 of the GDPR.
Data processing locations
As a rule, we do not transfer your data to countries outside the European Union. However, since some important service providers for our infrastructure are based outside the European Union (e.g., cloud service providers), when you use our services, your data may be stored on servers located outside European territory.
In such cases, we guarantee that personal data will be processed in accordance with applicable law, adopting adequate safeguards (such as adequacy decisions, standard contractual clauses approved by the European Commission, or other safeguards provided for by the GDPR) as well as suitable and appropriate security measures to protect the confidentiality of your data.
Further information on transfers and the safeguards adopted can be requested by writing to us at the above addresses.
Data subjects’ right
The User may exercise all the rights provided for by Articles 15-21 of EU Reg. n. 679/2016, at any time and without unjustified limitations, by contacting the Data Controller at hello@campingalleghe.com
Requests shall be filed free of charge and processed by the Controller within 30 days.
Specifically, the User can:
- Obtain from the controller confirmation as to whether or not personal data are being processed (Art.15);
- Obtain from the controller the rectification of inaccurate personal data (Art. 16);
- Obtain from the controller the erasure of personal data (Art. 17);
- Obtain from the controller restriction of processing (Art. 18);
- Have the right to receive the personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller (Art. 20);
- Have the right to object (Art. 21);
Complaints
In any case, Users are always entitled to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali), under Art. 77 of the Regulation, if they believe that the Data Controller’s processing of their Personal Data is in violation of the applicable law
Amendments
The Controller reserves the right to amend and update the Privacy Policy as a result of any further new or revised provisions of any national and EU laws and regulations on personal data protection.