Chaberton Lodge & Spa
This page describes the website’s management methods as concerns the handling of the personal data of users visiting it.This notice is provided pursuant to Art. 13 of Legislative Decree of EU Regulation 2016/679, Privacy Code and succ. mod., this website respects and protects the visitors and users privacy , by ensuring not to infringe their rights.
The data controller
Pursuant to the laws in force for Chaberton Lodge & Spa, located in Via del Rio 15 – 10050 Sauze Oulx (TO) the data controller is SDF Society s.r.l. with registered office in Viale Bianca Maria n. 3 – 20122 Milano (MI), VAT number: 10313200965.
Purpose of processing and legal grounds, your personal data are processed:
A)without your express consent art. 6 lett.
B), for the following purposes:
- conclude contracts for the offered services ;
- to fulfil pre-contractual, contractual and tax obligations arising from relations with you in existence;
- exercise the rights of the Data Controller, such as the defence right in court.
Your personal data will be processed:
However, denying consent may make impossible to provide certain services and the browsing experience of the site could be affected.
- internet protocol (IP) address;
- browser type and device parameters is used to connect to the website;
- name of the internet service provider (ISP),
- date and time of visit,
- visitor web page origin and exit
- the country of provenance,
- the number of clicks
The data collection and information takes place for the following purposes:
exclusively aggregated and anonymous in order to verify the proper functioning of the site.
None of this information is related to physical person-User of the site, and do not allow in any way the identification(from 25 May 2018 such information will be processed according to the legitimate interests of controller);
For security purposes (spam filters, firewalls, virus detection), recorded data may possibly include also personal data such as the Ip address,which could be used, in accordance with the laws in force in matter, in order to block attempts to damage site itself or to bear damage to other users, or in any case harmful activities or constituting crime. Data are never used for identification or profiling of the user, nor cross-referenced with other data, not provided to a third party but used only for the protection of the site and its users.
Data, however, may be supplied to third parties if this is necessary for the provision of a service required by the User, security checks or to optimize the website. Data may be collected on the website and more precisely on the dedicated pages to reservations requests, data will be processed as in the following document for the purpose of providing services and/or responding to the received requests. In the event that the negotiations are concluded positively and/or negatively collected data will be destroyed and never disseminated to others.
On the website is used the online Booking Engine for reservations, for more information about the service, please write an email to: firstname.lastname@example.org
Chaberton Lodge & Spa adopts an opt-in opt-out policy for their database of contacts and sending newsletters. For more information or to change the contact details, please write an email to: email@example.com
Place of treatment
The data collected from the site are processed at the headquarters of the Data Controller and at the Web Hosting datacenter.
Web hosting Blastness with registered office in Milano, Piazza Castello n. 26, 20121 Email:firstname.lastname@example.org.
It is responsible for processing of data and it acts in accordance with European standards.
This site treats user data in the respect of the laws, adopting appropriate security measures to prevent unauthorised access, disclosure, unauthorised modification or destruction of data. The software of Site management is constantly updated and regularly scanned in order to verify the presence of dangerous viruses and codes.
In addition to the controller, some persons in charge may have access to the data involved in the organization of the website.
The user has the rights referred to in art. 15 GDPR within the limits of what Provided by art. -undecies of Legislative Decree no. 196/2003, introduced by art. 2 of Legislative Decree no. August 10 2018, n. 101 and precisely the rights to:
obtain confirmation of the existence or otherwise of personal data concerning Him, even if not yet registered.
obtain the indication of
a) the source of the personal data;
b) the purpose of their processing;
c) the logic applied in case of processing them with electronic means;
d) the identity details of the controller, processors, and designated representative in the meaning of Article 3, paragraph 1;;
e) the subjects or categories of subjects to whom the personal data may be communicated.
a) updating, rectification or, where appropriate,the integration of data ;
b) the deletion, anonymisation, or blocking of data processed unlawfully, including data that does not need to be retained for the purposes for which it has been collected or subsequently processed;
c) certification that the operations under letters a) and b) have been notified, including as concerns their content, to the persons to whom the data have been communicated or disseminated, except where such performance proves to be impossible or entails an employment of resources obviously out of all proportion to the right protected. In conclusion, the User has the right to object partially or completely: for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of their collection. Where applicable, also has the rights referred to in art. 16-21 GDPR, as well as the right to complain to the Guarantor Authority. Requests should be addressed to the Data Controller.
The data controller for Chaberton Lodge & Spa located in Via del Rio n. 15 – 10050 Sauze Oulx (TO) is SDF Society s.r.l. with registered office in Viale Bianca Maria n. 3 – 20122 Milano (MI), VAT number : 10313200965.
Data provided voluntarily by users
Sending an optional, explicit, and voluntary e-mail to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message. Users consent to processing of personal information
The interested party gives his consent to process the personal data for the purposes described in this information statement.
Pursuant to art. of the GDPR, the Data Subject has the right to deny his consent at any time by sending an email to : email@example.com
The withdrawal of consent does not affect the lawfulness of processing based on consent before the revocation.In case of withdrawal of consent, the Data Subject will be erased. Information security
All information collected on the website is stored and maintained in facilities secure that limit access only to authorized personnel. The site is regularly checked to avoid security breaches and ensure that the information collected is safe from those who intend to visualize them without authorization.
Last updated in December 2020 according to GDPR.