Privacy Policy |

Information pursuant to art. 13 e 14 of the Regulation (EU) n. 679/2016 (GDPR – General Data Protection Regulation)

Data Controller

Chi Ghinn Locanda and Ristoro di Porta Adolfo

Via Maggiore 21/23

Bee 28813 (VB) ITALY

Tel.: +39 0323 56326

FAX: +39 0323 56326

email: info@chighinn.com

Types of data collected

The computer systems and software procedures used to operate the website www.chighinn.com acquire, in the course of their normal operation, some data whose transmission is automatic in the use of Internet communication protocols that are not associated with interested and identified users. In particular, these are data relating to the IP addresses or domain names of the computers used by users who connect to the site and other technical information sent automatically by the connection management programs..

These data are used for the sole purpose of obtaining the connection. Except as specified for navigation data, the user is free to provide personal data contained in the appropriate electronic information request forms in the sections of the website set up for particular services on request. It should also be noted that failure to provide them may make it impossible to obtain the requested service.

The www.chighinncom website does not use profiling cookies.

Use technical cookies, aimed at ensuring the proper functioning of the site and to store temporary information on the visitor's client in order to avoid repeating the access procedure for each request for services reserved for users. The site also uses the Google Analytics service (set in IP Anonymization mode to make the IP address anonymous when accessing our website) to obtain aggregate statistical data on the traffic generated by visitors. The user is free to decide not to allow the storage of data relating to their visits by using the deactivation functions that Google makes available.

Method and place of processing of the collected data

Processing methods

We take the security and confidentiality of your personal data very seriously. We use new methods for security and for saving personal data in order to protect them from unauthorized access, misuse or disclosure, unauthorized modification, illegal destruction or accidental loss.

The treatment is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Owner, in some cases, other parties involved in the organization of this Site may have access to the Data (administrative staff, legal, system administrators) or external parties (as third party technical service providers, postal couriers, hosting provider, IT companies, public authorities) also named, if necessary, Data Processors by the Owner. The updated list of Managers can always be requested from the Data Controller.

Legal basis of the processing

The Owner processes Personal Data relating to the User if one of the following conditions exists:

the User has given consent for one or more specific purposes; Note: in some jurisdictions the Data Controller may be authorized to process Personal Data without the User's consent or another of the legal bases specified below, until the User objects (“opt-out”) to such treatment. However, this is not applicable if the processing of Personal Data is governed by European legislation on the protection of Personal Data;
the processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual measures;the processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
the processing is necessary for the performance of a task of public interest or for the exercise of public authority vested in the Owner;
the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.

However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law., required by a contract or necessary to conclude a contract.

Place

The Data are processed at the Data Controller's operational headquarters and in any other place where the parties involved in the processing are located. For more information, contact the owner.

The User's Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the place of processing, the User can refer to the section relating to the details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis for the transfer of data outside the European Union or to an international organization of public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.

If one of the transfers described above takes place, The User can refer to the respective sections of this document or request information from the Owner by contacting him at the details shown at the beginning.

Retention period

The Data are processed and stored for the time required by the purposes for which they were collected.

Therefore:

Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed.
Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until this interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.

When the processing is based on the User's consent, the Data Controller may keep the Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

Purpose of processing the collected data

The User Data is collected to allow the Owner to provide its Services, as well as for the following purposes: Statistics and Contact the User.

To obtain further detailed information on the purposes of the processing and on the Personal Data concretely relevant for each purpose, the User can refer to the relevant sections of this document.

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contact form:

The user, filling in the contact form with your data, consents to their use to respond to requests for information, of quote, or of any other nature indicated by the form header.

Personal data collected in the contact form: surname, email and name.

Personal data collected in the booking form: surname, email and name, date of birth, document type and number, citizenship.

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.

Google Analytics with anonymized IP (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compile reports and share them with other services developed by Google.

This Google Analytics integration makes your IP address anonymous. Anonymization works by shortening the IP address of the Users within the borders of the member states of the European Union or in other countries adhering to the agreement on the European Economic Area. Only in exceptional cases, the IP address will be sent to Google's servers and shortened within the United States.

Viewing content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.

In case a service of this type is installed, it is possible that, even if the Users do not use the service, the same collects traffic data relating to the pages in which it is installed.

Widget Google Maps (Google Inc.)

Google Maps is a map visualization service managed by Google Inc. that allows this Website to integrate such content within its pages.

Personal data collected: Cookies and Usage Data.

Place of processing: United States - Privacy Policy. Subject adhering to the Privacy Shield.

User rights

Users can exercise certain rights with reference to the Data processed by the Data Controller.

In particular, the User has the right to:

withdraw consent at any time. The User can revoke the consent to the processing of their Personal Data previously expressed.
oppose the processing of their data. The User may object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are indicated in the section below.
access their data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the processed data.
verify and request rectification. The User can verify the correctness of their Data and request its updating or correction.
obtain the limitation of the treatment. When certain conditions are met, the User can request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose other than their conservation.
obtain the cancellation or removal of their Personal Data. When certain conditions are met, the User can request the cancellation of his / her data by the Owner.
receive their data or have them transferred to another owner. The User has the right to receive their data in a structured format, commonly used and readable by an automatic device e, where technically feasible, to obtain its unhindered transfer to another holder. This provision is applicable when the Data is processed with automated tools and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures connected to it.
propose a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority or take legal action.

Details on the right to object

When Personal Data are processed in the public interest, in the exercise of public authority vested in the Owner or to pursue a legitimate interest of the Owner, Users have the right to oppose the processing for reasons connected to their particular situation.

Users are reminded that, where their data were processed for direct marketing purposes, they can oppose the treatment without giving any reasons. To find out if the Data Controller processes data for direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise your rights

To exercise the User's rights, Users can direct a request to the contact details of the Owner indicated in this document. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within a month.

Further information on the treatment

Defense in court

The User's Personal Data may be used by the Owner in court or in the preparatory stages for its eventual establishment for the defense against abuse in the use of this Site or related Services by the User.

The User declares to be aware that the Owner may be obliged to disclose the Data by order of the public authorities.

Specific information

At the request of the User, in addition to the information contained in this privacy policy, This Site may provide the User with additional and contextual information regarding specific Services, o the collection and processing of Personal Data.

System log and maintenance

For needs related to operation and maintenance, this Site and any third party services it uses may collect system logs, that is, files that record the interactions and that may also contain Personal Data, such as the User IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Response to "Do Not Track" requests

this site does not support "Do Not Track" requests.

To find out if any third-party services used support them, the User is invited to consult the respective privacy policies.

Changes to this privacy policy

We are continually improving and adding new functionality and features to this website, and we improve existing services. Because of these constant changes, legal changes and the type of technology, our data processing practices change over time. Whenever it is necessary to make a change to our information, the change will be published on this page so that you can always be aware of what information we collect and the use we make of it.

If the changes concern treatments whose legal basis is consent, the Owner will collect the User's consent again, if necessary.

DEFINITIONS AND LEGAL REFERENCES

The data protection declaration of Chi Ghinn Locanda e Ristoro di Porta Adolfo is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR General Data Protection Regulation). Our data protection declaration should be legible and understandable for the general public, as well as for our customers and business partners. To ensure this, first of all we would like to explain the terminology used:

Personal data (o Data)

Any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data

This is information collected automatically through this Site (also from third-party applications integrated into this Application), including: the IP addresses or domain names of the computers used by the User who connects with this Application, addresses in URI notation (Uniform Resource Identifier), the time of the request, the method used in forwarding the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response from the server (successful, error, etc.) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and details of the itinerary followed within the Application, with particular reference to the sequence of the pages consulted, the parameters relating to the operating system and the user's IT environment.

User

The individual who uses this Site who, unless otherwise specified, coincides with the interested party.

Treatment

Any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, like collection, the registration, the organization, the structuring, conservation, adaptation or modification, the extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, the limitation, cancellation or destruction;

Limitation of processing

The marking of personal data stored with the aim of limiting their processing in the future.

Profiling

Any form of automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning professional performance, the economic situation, Health, personal preferences, interests, reliability, behavior, the location or movements of that natural person;

Pseudonymization

The processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and subject to technical and organizational measures designed to ensure that such personal data are not attributed to an identified or identifiable natural person;

Interested

The natural person to whom the Personal Data refers.

Responsible for the treatment (o Responsible)

The natural person, legal, the public administration and any other body that processes personal data on behalf of the Data Controller, as set out in this privacy policy.

Data Controller (o Owner)

The natural or legal person, the public authority, the service or other body that, individually or together with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures relating to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this application.

This Application

The hardware or software tool through which the Personal Data of Users are collected and processed.

Service

The Service provided by this Site as defined in the relative terms (if any) on this site / application.

European Union (o UE)

Unless otherwise specified, any reference to the European Union contained in this document is understood to be extended to all current member states of the European Union and the European Economic Area.

Cookie

Small portion of data stored within the User's device.

Legal references

This privacy statement is drawn up on the basis of multiple legislative systems, including art. 13 e 14 of the Regulation (EU) 2016/679.

Unless otherwise specified, this privacy statement relates exclusively to this Website.

Last updated in May 2021