Premise.
Pursuant to European Regulation no. 679/2016 (hereinafter "Regulation") and the national legislation on the protection of personal data (hereinafter collectively "privacy legislation"), Fapin Srl invites you to carefully read this privacy policy which contains important information on the protection of Your personal data.
The processing of your personal data will be based on the principles of correctness, lawfulness, transparency, purpose limitation and conservation, minimization and accuracy, integrity and confidentiality, in accordance with the provisions of the Privacy legislation.
1. Data controller
The data controller is Fapin Srl (VAT no. 04063020236), with headquarters in Valeggio sul Mincio, via Degli Scaligeri 4, contact email privacy@villameriggio.it/NEW in the person of its pro-tempore legal representative.
2. Data controllers
Your personal data may be processed by companies appointed, as data controllers, to carry out activities related to the processing of personal data on behalf of Fapin Srl. The Data Controller has drawn up a list of data controllers, constantly updated, which he makes available to you by contacting him at the addresses
reported in point 12 of this Policy.
3. Personal data processed
• Common identifying data (such as name, surname, date of birth, age, gender, etc.)
• Contact details (email, postal address, telephone number)
• Geo-location data (including “IP” addresses)
• Internet browsing data (including data deriving from the use of social icons and social login buttons - for example Facebook, Instagram, Twitter, LinkedIn, etc. -) collected through cookies installed on your computer or mobile device ( for further information consult the Cookie Policy)
• Bank data useful for managing the commercial relationship
If a request is sent through the "Contacts" section of the Villa Meriggio website, the provision of some personal data is necessary so that Fapin Srl can satisfy the requests, for which the relevant fields of the registration form are marked as mandatory.
4. Purpose and legal basis of the processing
According to the needs related to access to the various sections of the Villa Meriggio Site (and without prejudice to any individual initiatives that involve the provision of specific Personal Data, for which specific information will be published from time to time), the management of requests forwarded through the The contact form which involves the collection of personal data has the purpose of managing and responding to requests in relation to Villa Meriggio initiatives. The legal basis of such processing is the legitimate interest of the owner.
5. Additional Purposes:
Marketing: subject to your express consent, we may process your personal data in order to send you commercial communications as well as to subscribe to the newsletter. The legal basis for this processing is the consent of the interested party, which can be revoked at any time. It could also be done through the use of proprietary and third-party cookies. We therefore invite you to read our cookie policy. This processing may be carried out provided that you provide further specific and optional consent.
6. Nature of the provision
The provision of your personal data, depending on the purpose pursued, could be optional or mandatory. When the nature of the provision is mandatory it means that failure to communicate the requested personal data could jeopardize the possibility of using certain services (e.g. to request information it is necessary to provide the e-mail address, failure to provide such information does not will allow you to complete the request). When the nature of the provision is optional, you will have the possibility to use the basic services but not the additional ones (for example, failure to give consent to receive promotional communications will not jeopardize the completion of a request, but will make it impossible to stay updated about our initiatives).
The mandatory or optional nature of the provision will be signaled from time to time through the use of symbols (e.g. "*") placed next to the information whose provision is mandatory to pursue the respective purpose.
7. Treatment methods
Your personal data will be processed in compliance with the provisions of current privacy legislation, both with the aid of electronic and automated means and with manual methods, with logic strictly related to the purposes of the processing, through the databases and electronic platforms managed by Fapin or by third parties (appointed Data Controllers), the integrated IT systems of Fapin and the aforementioned third parties, and/or websites owned or used by Fapin.
Your data will be processed in ways designed to guarantee maximum security and confidentiality and only by people trained and authorized to process them. The Data Controller adopts technical and organizational measures capable of guaranteeing a level of security adequate to the risk of processing.
Personal data is mainly processed at the Data Controller's offices and in the places where the data controllers are located.
8. Sharing and transfer of personal data
Your Personal Data may be made accessible, for the above purposes, to Fapin employees and collaborators.
The personal data you provide may be transferred to third-party companies located in the European Union (EU) and outside of it as well as the European Economic Area (EEA), appointed to carry out personal data processing activities on behalf of the Data Controller, who will act as Data Controllers.
Transfers of personal data to third-party companies located outside the EU/EEA are carried out in accordance with Chapter V of the GDPR. In particular, they are based on the standard contractual clauses (SCC) approved by the European Commission. To obtain a copy of these SCCs, please contact the Data Controller at the addresses indicated in point 12 of this Policy.
Finally, your data may be transmitted to the judicial authority where necessary and in the cases provided for by law.
9. Data retention period
In order to ensure compliance with the principles of necessity and proportionality of processing, different periods of retention of personal data have been identified in relation to the individual purposes pursued:
• The billing data will be kept for a period of time to guarantee the correct execution of the contract and in any case for a further 10 years for the purpose of fulfilling the related administrative and tax obligations.
• The data collected for the purposes of management and response to requests entered via the Villa Meriggio website will be kept for the period necessary to process the requests and subsequently deleted if no further contact occurs.
• This is without prejudice to the fulfillment of administrative and fiscal obligations in relation to which the data retention period is that required by law.
• The data provided to subscribe to the newsletter will be retained until you revoke your subscription.
Where a further relationship is established, personal data will be processed for the duration of the collaboration relationship and the fulfillment of the legal obligations connected to it.
10. Data of minors
Fapin does not normally intend to collect personal data from minors or deliberately establish communication with them. For this reason, we encourage parents to actively monitor the online activities of their children under the age of eighteen. Nonetheless, in the event that we contact a minor under the age of eighteen, the consent of the parents or those exercising parental authority will be necessary.
11. Rights of the interested party
You may at any time exercise the rights provided for by the articles towards the Data Controller. 15 and following of the Regulation, including:
to. the right to obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
b. the right to revoke at any time the consent given by you in relation to the purposes of the processing;
c. the right to obtain access, rectification, cancellation, limitation of processing and portability of personal data;
d. the right to object to processing at any time you wish;
And. the right to appeal to the competent Supervisory Authority, if you believe that the processing of your data is contrary to the legislation in force.
12. Method of exercising rights
In the event that you wish to exercise the aforementioned rights, or wish to receive further clarifications regarding the processing of your personal data, you can write to the e-mail address privacy@villameriggio.it/NEW or to the address of the registered office of the Data Controller, located in Valeggio sul Mincio, via Degli Scaligeri 4.
English 
Italian