Data security & protection

Collection and storage of personal data, type and purpose of their processing

a) When you visit our website, the browser installed on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without the user’s intervention and stored until it is automatically deleted:

IP address of the accessing device,
date and time of access,
name and URL of the requested file,
website from which access was made (referrer URL)
browser used and, if applicable, the operating system of the device, as well as the name of the access provider

The mentioned information is used for the following purposes:

To ensure a smooth connection of the website
For contractual processing
To ensure a comfortable use of the website
Evaluation of system security and stability
Further administrative purposes

The legal basis is Art. 6 para. 1 lit. f GDPR. The legitimate interest arises from the aforementioned purposes. Personal data is in no way processed for profiling purposes. In addition, with access to the website, we create cookies and apply an analysis system. Further information is provided below.

Newsletter subscription

To the extent that you have expressly consented, in accordance with Art. 6 para. 1 lit. a GDPR, we use your email address for the periodic sending of advertising material. To receive the newsletter, it is sufficient to provide the email address. You can unsubscribe at any time using the link at the end of each newsletter. Alternatively, you can unsubscribe by sending an email to office@castellanum-garda.it.

The contact form (“direct request”):

For inquiries regarding the properties for sale, we offer the opportunity to contact us via a form provided on our website. The following information is required to contact you and process your request: name and surname, a valid email address, a telephone number. Further information can be provided voluntarily (field “Request”). The data processing takes place with your explicit consent in accordance with art.6, c. 1, lett. a, RPDP.

The contact form (“Email Exposè”):

Processing methods

The data is processed with computer, telematic, and/or manual systems through procedures suitable to guarantee its security and confidentiality.

The provision of data is optional. Failure to provide data means that this Administration will not be able to respond to requests submitted by interested parties.

The data may be communicated to all subjects (Offices, Public Administration Bodies and Bodies, Companies, or Institutions) who, according to the law, are required to know or can know them, as well as to subjects who are holders of the right of access or the right of generalized civic access. In the case of particular data and/or data relating to criminal convictions and offenses, communication takes place to the subjects and in the forms indicated in the regulation for the processing of sensitive and judicial data, as per the decision of the Guarantor for the protection of personal data.

The data may be known by the owner, by the persons responsible for processing, by the responsible for the protection of personal data, by the subjects appointed for the processing of personal data as well as by the system administrator of this Administration.

The data may be disclosed within the limits.

Temporal duration of personal data processing and storage.

The processing operations referred to in this notice will have the duration strictly necessary for the fulfilments imposed on the Data Controller by national and/or supranational laws, as well as by the laws of the countries to which the data may be transferred.

Transmission to third parties

Your data is not transferred to third parties except for the expressly indicated purposes. Data transmission to third parties can take place for the following purposes:

• In case of explicit consent pursuant to art. 6, para. 1, lett. a, GDPR,

• Transmission pursuant to art. 6, para. 1, lett. f, GDPR is necessary for the establishment, exercise, or defense of a legal claim and there is no reason to believe that your legitimate interests override the transmission,

• In cases where transmission is required by law pursuant to art. 6, para. 1, lett. c, GDPR, as well as

• If the transmission is necessary for the performance of a contract to which you are a party pursuant to art. 6, para. 1, lett. b, GDPR.

• in caso di consenso esplicito ai sensi dell‘art. 6, c. 1, lett. a, RPDP,
• la trasmissione ai sensi dell‘art. 6, c. 1, lett. f, RPDP è necessario per l’accertamento, l’esercizio o la difesa di un diritto in sede giudiziaria e non sussiste un motivo per cui un altro Suo legittimo interesse prevalga alla trasmissione,
• nei casi in cui la trasmissione avviene in adempimento a un obbligo legale ai sensi dell‘art. 6, c. 1, lett. c, RPDP nonché
• se la trasmissione avviene in esecuzione di un contratto di cui Lei fa parte ai sensi dell‘art. 6, c. 1, lett. b, RPDP.

Rights of data subjects

– Pursuant to Article 15 GDPRS you have the right to obtain confirmation as to whether or not personal data concerning you are being processed. In particular, you have the right to know the purposes of the processing, the categories of personal data processed, the categories of recipients to whom your data are or may be disclosed, the storage period, the right to rectification, erasure, restriction of processing and revocation, the right to lodge a complaint against the processing, the origin of the data, if collected from third parties, as well as on the existence or otherwise of automated decision-making processes, including profiling, and to provide detailed information, if applicable;

– Pursuant to Article 16 GDPR you have the right to immediate rectification or completion of the processed data;

– Pursuant to Article 17 GDPR You have the right to request the deletion of personal data, insofar as the processing does not take place on the basis of the right to freedom of expression and information, for the fulfilment of legal obligations, for the purposes of public interests in the health sector or for the establishment, exercise or defence of a legal claim;

– Pursuant to Art. 18 GDPR you have the right to restriction of processing, if you dispute the accuracy of the data, if the processing is unlawful, but refuse to request deletion of the data, the processing of the data serves you to fulfil obligations arising from a contract or if you have lodged a complaint against the processing pursuant to Art. 21 GDPR;

– pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transmission to another responsible person; – pursuant to Art. 7 para. 3 GDPR to revoke your consent once you have provided it to us at any time. Consequently, we will no longer be able to continue to process data on the basis of this consent in the future; and

– to file a complaint with a supervisory authority pursuant to Article 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or work or our head office.- For further information, please visit the homepage https://www.garanteprivacy.it/

Data security

We use the SSL (Secure Socket Layer) method in combination with the highest level of encryption supported by the browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. If a single page of our website is transmitted in encrypted form, this is indicated by the closed display of the key or padlock symbol in the browser’s lower status bar. We also use appropriate technical and organisational security measures to protect your data from accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

The data subject’s rights

Art. 7 c. 3 GDPR: right to revoke your consent at any time, with effect on future processing; revocation does not have to meet any particular formal requirements and is sent by e-mail to info@castellanum-garda.it; Art. 15 GDPR: right of access to personal data; Art. 16 GDPR: right to have false or incomplete personal data rectified; Art. 17 GDPR: right to erasure of personal data, without prejudice to the right to freedom of expression and information, legal obligations, public interest and the right of defence in court; Art. Art. 18 GDPR: right to restrict processing if the accuracy of the data is contested, the processing is unlawful, but its deletion is not requested or the purpose of the processing has been exhausted; Art. 20 GDPR: right to the portability of personal data in a structured, common and readable format; Art. 77 GDPR: right to lodge a complaint with the Data Protection Authority.