Privacy Policy
Privacy Policy
Website: www.dimoramuratore.it
This privacy notice describes how personal data of users visiting the website www.dimoramuratore.it (hereinafter referred to as the “Website”) are processed.
Personal data are processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Italian data protection laws.
1. Data Controller
The Data Controller responsible for the processing of personal data is:
Muratore Bros S.r.l.
Via Scarambone, 36
73100 Lecce (LE) – Italy
Email: info@dimoramuratore.it
(hereinafter also referred to as the “Controller”).
The Controller has not appointed a Data Protection Officer (DPO), as the conditions set out under Article 37 GDPR do not apply.
2. Types of Data Collected
The Website may process the following categories of personal data.
Personal data voluntarily provided by users
Examples include:
-
name and surname
-
email address
-
telephone number
-
address
-
any information relating to guests indicated in booking or information requests.
Such data are voluntarily provided by users through:
-
contact forms on the Website
-
requests for information or availability
-
communications sent via email.
Browsing Data
The IT systems and software procedures used to operate the Website automatically acquire certain personal data during their normal operation, the transmission of which is inherent in the use of Internet communication protocols.
These data may include:
-
IP addresses or domain names of users’ devices
-
URI/URL addresses of requested resources
-
the time of the request
-
the method used to submit the request to the server
-
the size of the file obtained in response
-
the numerical code indicating the status of the server response
-
parameters relating to the user’s operating system and IT environment.
These data are used solely for the purposes of:
-
obtaining anonymous statistical information about website usage
-
ensuring the proper functioning of the Website.
3. Purpose and Legal Basis of Processing
Personal data are processed for the following purposes.
Management of requests and bookings
Personal data are processed to:
-
respond to requests for information
-
manage requests for availability or bookings
-
provide the services requested by users.
The legal basis for processing is the performance of pre-contractual or contractual measures pursuant to Article 6(1)(b) GDPR.
Providing personal data for these purposes is necessary. Without such data it will not be possible to provide the requested services.
Data will be retained for the time necessary to manage the contractual relationship and subsequently for 10 years, in accordance with Italian civil and tax regulations.
Marketing activities (subject to consent)
Subject to the user’s explicit consent, personal data may be used for:
-
sending newsletters
-
sending promotional or informational communications regarding services offered by the Controller
-
conducting customer satisfaction surveys or market research.
The legal basis for processing is the data subject’s consent pursuant to Article 6(1)(a) GDPR.
Consent may be withdrawn at any time.
Personal data processed for marketing purposes will be retained until consent is withdrawn and in any case no longer than 24 months from the last interaction with the Controller.
Website operation and security
Browsing data may also be processed to ensure:
-
the proper functioning of the Website
-
the security of IT systems.
The legal basis for this processing is the legitimate interest of the Controller pursuant to Article 6(1)(f) GDPR.
4. Processing Methods
Personal data are processed using electronic and digital tools in compliance with the principles of lawfulness, fairness and transparency set out in the GDPR.
Appropriate technical and organizational measures are implemented to ensure the security of personal data and to prevent unauthorized access, disclosure, alteration or destruction.
5. Recipients of Personal Data
Personal data may be processed by:
-
authorized personnel of the Controller
-
IT and technological service providers (website hosting, maintenance, email services) appointed as Data Processors pursuant to Article 28 GDPR
-
public authorities where required by law.
Personal data will not be publicly disclosed.
6. Transfer of Data Outside the European Economic Area
If certain service providers used by the Controller involve transfers of personal data outside the European Economic Area (EEA), such transfers will be carried out in accordance with the safeguards provided by the GDPR, including adequacy decisions of the European Commission or the use of Standard Contractual Clauses.
7. Data Retention Period
Personal data will be retained only for as long as necessary to achieve the purposes for which they were collected and in compliance with applicable legal obligations.
In particular:
-
data relating to bookings and services: 10 years
-
data processed for marketing purposes: until consent is withdrawn and in any case no longer than 24 months
-
browsing data: for the time strictly necessary to ensure the functioning of the Website.
8. Data Subject Rights
Under Articles 15–22 of the General Data Protection Regulation, data subjects have the right to:
-
access their personal data
-
request rectification of inaccurate data
-
request deletion of personal data
-
request restriction of processing
-
object to processing
-
receive their personal data in a structured format (data portability)
-
withdraw consent at any time.
Data subjects also have the right to lodge a complaint with the **Garante per la Protezione dei Dati Personali.
9. How to Exercise Your Rights
To exercise your rights or request information regarding the processing of your personal data, you may contact the Controller at:
10. Cookies
The Website uses technical cookies and, where applicable, analytical cookies.
For more information, please refer to the Cookie Policy available on the Website.
