Source: http://www.limpia-playas.com/privacy-policy/
Timestamp: 2019-04-20 10:10:11+00:00

Document:
(hereinafter referred to as ‘controller’) in its role of data controller wishes to inform you that, pursuant to art. 13 of Legislative Decree no. 196 of 30 June 2003 (hereinafter referred to as ‘Personal Data Protection Code’) and art. 13 and 14 of General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as ‘GDPR’), your personal data will be processed with the methods and for the purposes indicated below.
to exert the controller’s rights, such as the right to legal defence.
to email you newsletters, commercial communications and/or promotional materials on the products or services provided by the controller.
C) Automatically and for the operation of this website. The navigation data are not collected for the purpose of associating them with interests of the data subjects concerned, but due to their own nature, they may identify the users through processing and matching with data held by third parties or by the data controller. The objective is to obtain anonymous statistical information on the use of the website so as to control the operation of the same.
Data may be used to ascertain responsibilities in case of computer crimes against the site or other users.
Please note that if you are already our customer, we could send you commercial communications related to services and products provided by the controller and similar to the ones you have already used, unless you withdraw your consent (art. 130 paragraph 4 of Personal Data Protection Code).
Your personal data are processed by means of the operations indicated in art. 4 of Personal Data Protection Code and art. 4 no. 2) of GDPR and specifically: collection, recording, organisation, storage, consultation, processing, alteration, selection, comparison, use, interconnection, blockage, disclosure, erasure or destruction of data. Your personal data are processed using electronic, manual and/or automatic means.
Specific security measures are implemented to prevent the loss of data, any unlawful or incorrect use and unauthorised access.
third parties (e.g. for marketing and promotional activities, surveys, personal data storage, providers in charge of the management and maintenance of the website, suppliers, banks, professional practices etc.) to whom the controller has outsourced the activity as external processors.
Without your explicit consent (pursuant to art. 24 letters a), b), d) of Personal Data Protection Code and art. 6 letters b) and c) of GDPR) the controller can disclose your data for the purposes referred to in article 2(a) to Supervisory Authorities, Legal Authorities as well as other subjects to whom disclosing the data is mandatory by law for the said purposes.
The controller will not communicate any information of the data subjects concerned to third parties without their consent, unless it is requested by law. The personal data processed will not be disseminated under no circumstances.
Personal data are managed and stored on servers located within the EU and held by the controller and/or third companies entrusted with and duly designated as data processors. Personal data will not be transferred outside the EU. It is however understood that the controller, if needed, shall have the right to move the servers in Italy and/or in the EU and/or in non-EU countries. In this case, the controller ensures that any transfer of data to non-EU countries will be made in compliance with applicable law provisions, by also entering into agreements, whether needed, to guarantee appropriate data protection and/or by adopting standard contractual clauses laid down by the European Commission.
The provision of data for the purposes referred to in art. 2(a) is mandatory. In case they are not provided, we cannot guarantee the registration to the website and the services as per art. 2(a).
The provision of data for the purposes referred to in art. 2(b) is optional. You can therefore decide not to give any data or to subsequently withdraw your consent to processing of the data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material concerning the services provided by the controller. However, you will continue to be entitled to the services referred to in art. 2(a).
to object in whole or in part: a) on legitimate grounds, to the processing of their personal data, even though the data are relevant to the purpose for which they are collected; b) to the processing of their personal data for the purpose of sending advertising materials or direct selling or for the performance of market or commercial communication surveys using automated calling systems without operator intervention by email and/or through conventional marketing methods by telephone and/or post. Please note that the data subject’s right to object, as set out in point b) above, for direct marketing purposes through automated methods, extends to conventional ones and that in any case the data subject can exercise the right to object even partially. Therefore, the data subject can decide to receive only communications provided through conventional means or only automated communications or none of them.
Where applicable, the user also has the rights referred to in articles 16-21 of GDPR (right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to submit a claim to the Data Protection Authority.
The updated list of data processors and any persons authorised to process personal data, if foreseen, is available at the registered office of the controller.
The controller reserves the right to modify, integrate or update periodically this information notice in compliance with the applicable regulation or any provisions adopted by the Data Protection Authority.
For the sake of completion, we specify that we send marketing emails through the Logicamail Marketing Automation Platform, which uses statistical tracking (i.e. web beacons) to determine whether a message has been opened, how many clicks have been made on the hyperlinks contained in the email, the IP address or browser used to open the email and other similar details. Data collection is necessary for the use of the platform and is an integral part of the functions of the email sending system.
The legal basis that legitimates the processing of these data is the execution of a contract the data subject is part of.

References: art. 13
 art. 13
 art. 4
 art. 4
 art. 24
 art. 6
 art. 2
 art. 2
 art. 2
 art. 2