Data Protection Information according to Articles 13 and 14 of EU Regulation 679/2016 and Legislative Decree No. 196/2003
Consent to the Processing of Personal Data
By submitting the request form, the user grants consent for their personal data to be processed by BluAlghero-Sardinia.com, in accordance with Law 196/2003 and its subsequent modifications, and declares that they have read the information on the processing of personal data.
Personal data is collected only if you choose to provide it, for example, to proceed with a reservation or for other services. Your data is processed only internally. Any personal information that you provide when using this website will be used in accordance with the Data Protection Act.
Data protection statement
We will never provide your personal data to any company outside of BluAlghero-Sardinia.com. However, we may send information about our services, including exclusive offers, promotions, and special events. You can revoke your consent at any time for the future.
Links to other websites
This website includes links to other websites. We are not responsible for the information, material, products, or services contained and accessible on third-party sites. External sites may have different security methods and privacy policies than those described above which we have no control over.
FEATURES ON THE USE OF PERSONAL DATA
Personal data, or personal information, are information relating to any individual from which their identity can be derived.
We collect a series of information related to users who visit the blualghero-sardinia website. This information is used to improve the content of the website, to customize the content and layout of the website according to individual preferences, and to speed up searches. We may also use the information to contact users for marketing purposes. This information may include the user’s IP address, the date and time of access, the pages visited, and the website from which the user accessed the blualghero-sardinia website.
We use personal data for marketing purposes and to send newsletters, special offers, and promotions. We may also use personal data to provide customized content and recommendations. Users may opt-out of receiving marketing communications at any time by contacting us or by using the opt-out link in the marketing communications.
Personal data: any information relating to an identified or identifiable individual.
Identifying data: includes title, name, surname, username or other identifying data. If the user communicates with us via email form or social media, this category of data also includes the username used on the social media used.
Contact data: includes billing address, shipping address, email address and telephone numbers.
Financial data: includes information on the type used to make payment.
Transaction data: includes information on payments by and to the user as well as additional information related to purchased products and services.
Technical data: includes the IP (internet protocol) address, user access data, type and version of the browsing program, time zone and location, browsing program plug-ins and their versions, operating system, platform, and any other technology operating on the devices used by the user to access the site.
Usage data: includes information on the use of our site, as well as our products and services.
Tracking data: includes information about the user that we, or third parties, collect from cookies and tracking technologies and mobile device identifying data.
Market and commercial data: includes preferences for receiving direct marketing communications from us and third parties and all preferences related to communications.
Furthermore, we collect, use, and share Aggregate Data such as statistical and demographic data for any purpose. Aggregate Data may derive from the user’s personal data although it is not considered personal data under the legislation because it does not reveal the user’s identity, directly or indirectly. For example, we may aggregate Usage Data to calculate the percentage of users accessing a specific feature of the site. To offer better and better content and services, the blualghero-sardinia site uses the Google analytics 4 service.
However, if combining or linking Aggregate Data with the user’s personal data allows them to be directly or indirectly identified, the combined data will be treated as personal data under these privacy rules.
We do not collect Sensitive Data about the user (it includes data revealing racial or ethnic origin, religious or philosophical beliefs, sexual life, sexual orientation, political opinions, trade union membership, information about health status as well as genetic and biometric data). In addition, we do not collect judicial data about the user
Personal Data (Usage Data) using the following services and purposes:
Google Tag Manager
Statistics Google Analytics 4
Displaying content from external platforms Font Awesome Personal Data: Usage Data; Tracking Tools
Access to social website accounts
Permissions: Email; device information; Tracking Tool
Affiliation with external sites for commercial purposes (booking history; Usage Data; Tracking Tools):
Permissions: Email; device information; Tracking Tool
Contacting and sending messages via form
Contact7 Form Integration
Personal data. name, email
Personal Data: Usage Data; Tracking Tool
Google Maps Widget
Personal data collected: Cookies and Usage Data.
Youtube Video Widget
Personal data collected: Cookies and Usage Data.
Below are listed the different methods of data collection from the user and user of which we avail ourselves.
Direct interaction. The user decides to communicate the Identifying, Contact, and Financial Data by filling out a form or communicating such data through mail, phone, email or chat or social media.”
Included are the personal data communicated by the user when:
they subscribe to the newsletter; forwarding information requests; creating an account on our site; ordering our services; contacting us on social media; posting a comment or review related to our products or services When the user interacts with us, even through the blualghero-sardinia site, we may collect Technical Data related to their devices as well as their actions and browsing patterns. We may also collect Tracking Data if the user visits our site or clicks on our advertising (including those published on third party sites).
Third parties or public domain sources. We may receive personal data about the user from various categories of third parties, including:
technical and/or tracking data from analysis service providers, advertising networks, and research service providers; contact, financial, and transaction data from payment service providers and fraud prevention services; identifying and contact data from partners with whom we share data; and data from any third party to whom the legislation or the user themselves have authorized the sharing of the user’s personal data with us, for example through social media or review sites.
Use of the User’s Personal Data
We use personal data within the limits provided by law. In general, we use personal data in the following circumstances.
If we need to perform a contract in the process of being concluded or already concluded with the user. For example, the contract consisting of the purchase of a service by the user. If it is necessary to pursue our legitimate interests (or those of third parties) as long as the interests and fundamental rights of the user do not prevail over them. For example, during fraud checks during the payment process. If we are required to comply with obligations imposed by laws or regulations. For example, for the preservation of sales documentation for tax purposes. In general, the legal basis on which we base the processing of the user’s personal data does not include the consent of the same unless expressly provided for by law, for example for the sending of certain direct marketing communications. In cases where the legal basis is based on consent, the user has the right to revoke consent at any time.
For further information, please compare the legal bases on which we base the processing of personal data with the legal basis on which we base the processing of personal data.”
Advertising, marketing and user preferences contact.
We may use the user’s identifying, contact, technical, monitoring, usage, and profiling data to get an idea of what the user might want or need, or what might interest them. This is how we decide which products, services, and offers are relevant to the user and, consequently, provide them with the relevant communications. This is known as direct marketing.
We may use direct marketing strategies via email. For example, the user may receive an email through their email box.
The user can change their mind at any time and decide to cancel their subscription. The easiest way to cancel the subscription is through the link at the bottom of our communications.
We use monitoring data to offer relevant online advertising, also through sites and social media.
Monitoring data, and in particular cookies, help us offer advertising on sites and social media that we believe are more interesting to the user. Cookies used for this purpose are often installed on our site by specialized companies.
Cookies also notify us of any display by the user of a particular advertisement, as well as the time elapsed since their last display. Cookies also help us understand if the user has opened one of our commercial emails, to avoid sending content that is discarded.
For more information on monitoring data, particularly cookies, compare the Cookie section below.
Almost all cookies related to advertising come from online advertising networks of third parties. For more information on how to decide which advertisements to display online, compare the cancellation methods.
Disclosure of Personal Data
The user’s personal data may be shared with the subjects indicated below for the purposes provided for in these privacy policies. We may also share the user’s personal data if it is otherwise provided for by law.
We share data with third parties operating in the field of advertising, retargeting and analysis. For more information about these third parties, please refer to the Cookie section above, including the list of cookies.
We also reserve the right to share personal data with third parties to whom we may decide to sell or transfer part of our business or assets or merge with them. Alternatively, we may be the ones acquiring other companies or merging with them. In the event of a change to our business, the new owners may use the user’s personal data according to the same rules set out in these privacy policies.”
blualghero-sardinia uses external companies PayPal for processing payments made for the purchase of our products and services through the Site. All online payments will be executed in accordance with data security standards and the user’s billing information (used exclusively by payment processing companies to prevent fraud) will be encrypted before being communicated. The user’s credit card data is directly communicated from the browsing program to the payment processing companies: blualgher-sardinia does not have access to the user’s Permanent Account Number (PAN). This means that the payment form is located outside the site or is displayed in a frame on the payment page.
For PayPal, we only store the tokens required to identify the transaction with PayPal itself, issue a refund, and identify transactions carried out through PayPal.
We have put in place appropriate security measures to prevent the accidental loss of your personal data, as well as its use or access by unauthorised parties, as well as its alteration or dissemination.
Third Party Links
We will only retain your personal data for as long as is necessary to fulfill the purposes for which the data was collected, including purposes related to fulfilling any legal, accounting or reporting obligations.
In certain circumstances, you may ask us to delete data about you; please see the section on your statutory rights below for more information.
Rights guaranteed by law
If you reside in a country of the European Union, you are entitled to the following rights guaranteed by the privacy protection legislation with regard to your personal data.
Right of access – the right to submit a ‘data subject access request’ to obtain a copy of the personal data of the data subject stored;
Right of rectification – the right to demand the correction of personal data if it is incomplete or incorrect;
Right to erasure – also known as the ‘right to be forgotten’ when, in certain circumstances, a data subject may request that personal data concerning him or her be erased (provided that there is no rule requiring that personal data be retained and that the request is overridden);
Right to restriction of processing – right to request, in certain circumstances, the suspension of the processing of personal data;
Right to portability – right to request a copy of your personal data in a commonly used format (e.g. a .csv file);
Right to object – the right to object to the processing of your personal data (for example, if you do not consent to the processing of your data for direct marketing purposes); and
Rights related to automated decisions and profiling – the right to demand transparency for any profiling we perform, or for any decision made by an automated process.
These rights are subject to certain rules that determine their exercise. For more information, you can consult the Guide to the Application of the European Data Protection Regulation.
Data Controller Lucia Pisanu – firstname.lastname@example.org
Last updated 6 January 2023