Privacy Policy

GENERAL INFORMATION

Holiday Village Le Tre Isole, an Italian sole proprietorship registered under VAT number 00600610547, with registered office at Strada della Santocchia, 1 – 06063 San Feliciano sul Trasimeno (PG), Italy (hereinafter the “Company”), has developed this Internet Privacy Policy to ensure that its activities comply with the principles of a trusted organisation that protects, respects and safeguards the privacy rights of visitors to its online environment.

The Company is the Data Controller (hereinafter the “Controller”) of any personal data collected through its website, www.letreisole.com (hereinafter the “Website”), in accordance with Legislative Decree No. 196 of 30 June 2003 (Italian Personal Data Protection Code), as well as applicable European legislation, including Regulation (EU) 2016/679 (GDPR), and subsequent amendments. The Controller will process any data collected through this Website for the purposes, using the methods and under the conditions described below.

This Website processes data on the basis of consent. By using or browsing the Website, visitors and users expressly accept this Privacy Policy and consent to the processing of their personal data in accordance with the methods and purposes described below, including any disclosure to third parties where necessary to provide a requested service.

Providing data and therefore consenting to its collection and processing is optional. Users may refuse consent or withdraw previously given consent at any time by contacting the Controller. However, refusal of consent may make it impossible to provide certain services and may affect the browsing experience.

As of 25 May 2018, the effective date of the GDPR, certain data may also be processed on the basis of the legitimate interests of the Data Controller.

DATA COLLECTED AND PURPOSES

Like most websites, this Website uses log files that automatically collect information during users’ visits. The information collected may include:

  • Internet Protocol (IP) address;
  • browser type and device parameters used to connect to the Website;
  • Internet Service Provider (ISP);
  • date and time of the visit;
  • referring and exit pages;
  • number of clicks, where applicable.

This information is processed automatically and collected solely in aggregate form to verify the correct functioning of the Website and for security purposes. Since 25 May 2018, such information has been processed on the basis of the Controller’s legitimate interests.

For security purposes, including anti-spam filters, firewalls and virus detection, automatically recorded data may also include personal data such as the IP address. This may be used, in accordance with applicable law, to block attempts to damage the Website, harm other users or carry out unlawful or harmful activities. Such data is never used to identify or profile users, but solely to protect the Website and its users.

Visitors may voluntarily provide their personal data to access certain services offered by the Website, such as comments, contact forms or newsletters.

The data received will be used exclusively to provide the requested service and only for the period necessary to provide that service.

Information that users choose to make public through services and tools provided by the Website is supplied knowingly and voluntarily. Users are responsible for ensuring that they have the necessary permissions to publish personal data relating to third parties or content protected by national or international legislation.

Data collected during the operation of the Website is used exclusively for the purposes described above and retained only for as long as strictly necessary to perform the relevant activities. In general, data collected by the Website will not be disclosed to third parties, except where disclosure is required by a competent judicial authority or otherwise required by law.

Data used for security purposes, such as blocking attempts to damage the Website, is retained for 7 days.

COMMENTS

If the Website allows comments or users request specific services, certain identifying information may be automatically collected and recorded, including the user’s email address.

When visitors leave comments on the Website, the data displayed in the comment form, as well as the visitor’s IP address and browser user-agent string, are collected to assist with spam detection.

An anonymised string created from the visitor’s email address (also known as a hash) may be provided to the Gravatar service to determine whether it is being used. The Gravatar privacy policy is available at Gravatar Privacy Policy. Once a comment has been approved, the profile image is publicly visible in the context of the comment.

By submitting a comment or other information, the user expressly accepts this Privacy Policy and, in particular, consents to the content submitted being made available to third parties where applicable.

MEDIA

If visitors upload images to the Website, they should avoid uploading images containing embedded location data (EXIF GPS). Visitors to the Website may be able to download and extract location data from images published on the Website.

CONTACT FORMS

By completing a contact form to request information, visitors agree to provide their data to the Data Controller. The requested information may include:

  • first and last name;
  • email address;
  • telephone number;
  • municipality of residence.

Such data will be processed in accordance with this Privacy Policy and used solely for the purposes specified.

DISCLOSURE TO THIRD PARTIES

Personal data may be disclosed to public authorities and institutions where necessary to fulfil legal obligations, or to judicial authorities in response to explicit requests.

The Controller does not deliberately collect sensitive or judicial data through the Website.

Users are therefore advised not to provide such information through the Website. Where such information is genuinely necessary, users are invited to contact the Company using appropriate written procedures and provide the required consent in accordance with applicable law.

Please note that the Website may contain links to other websites that are not governed by this Privacy Policy.

DATA STORAGE

Data collected by the Website is processed at the data centre of the web hosting provider Seeweb. The hosting provider, acting as Data Processor and storing data on behalf of the Controller, is located within the European Economic Area and operates in compliance with European regulations.

Personal information collected through the Website, including information voluntarily provided through forms to request informational material or other communications, will be retained solely for the purpose of providing the requested service and for the period necessary for that purpose.

Once the service has been completed, personal data will be deleted in accordance with the Controller’s data retention policies, unless otherwise required by a competent authority, required by law or otherwise specified in this Privacy Policy.

EXERCISE OF DATA SUBJECT RIGHTS

Under Regulation (EU) 2016/679 (GDPR) and applicable national legislation, users may, subject to the conditions and limitations established by law, exercise the following rights:

  • request confirmation as to whether personal data concerning them exists (right of access);
  • obtain information about its origin;
  • receive the data in an intelligible form;
  • obtain information about the logic, methods and purposes of processing;
  • request the updating, rectification or completion of data;
  • request the deletion, anonymisation or blocking of data processed unlawfully, including data that is no longer necessary for the purposes for which it was collected;
  • where processing is based on consent, receive the personal data provided to the Controller in a structured, commonly used and machine-readable format, subject to applicable legal conditions;
  • lodge a complaint with the supervisory authority (Italian Data Protection Authority – Garante per la protezione dei dati personali);
  • exercise any other rights recognised by applicable law.

Requests should be addressed to the Data Controller at: .

Where data is processed on the basis of legitimate interests, data subjects retain their applicable rights, including the right to object to processing. The right to data portability does not apply where it is not provided for by law.

DATA SECURITY

This Website processes users’ data lawfully and fairly and adopts appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of data.

Processing is carried out using IT and/or telecommunications systems, with organisational procedures and logic strictly related to the purposes described above.

In addition to the Controller, data may in certain circumstances be accessed by personnel involved in the organisation and management of the Website, including administrative, commercial, marketing, legal and system administration staff, as well as external service providers such as technical service providers, postal services, hosting providers, IT companies and communication agencies.

Like most websites, this Website uses cookies, small text files that store information about visitors’ preferences, improve Website functionality and simplify navigation by automating certain procedures, such as login and language selection, as well as analysing Website usage.

Session cookies are essential for distinguishing between connected users and ensuring that requested functionality is provided to the correct user. They may also be used for security purposes to prevent cyberattacks. Session cookies do not contain personal data and remain active only for the current browsing session, until the browser is closed. Consent is not required for these cookies.

Functionality cookies used by the Website are strictly necessary for Website operation and are linked to an explicit request for functionality by the user. Consent is not required for these cookies where applicable.

A.1 COOKIES

The Website uses both first-party and third-party cookies.

First-party cookies are used to enable Website navigation and access to any protected areas. Their duration is generally linked to the user session and they are deleted when the browser is closed. Essential first-party cookies cannot be disabled where doing so would prevent the Website from functioning correctly.

Third-party cookies may have different purposes, including statistical analysis, social interactions, video display and storing interests for targeted advertising services. These cookies are not directly controlled by the Controller. To disable them, users should follow the procedures provided by the relevant third-party providers.

In general, cookies can also be disabled through the browser settings at any time, following the instructions described in section A.4.

A.2 FIRST-PARTY COOKIES

If you leave a comment on the Website, you may choose to save your name, email address and website in cookies. This is for your convenience so that you do not have to enter your details again when leaving another comment. These cookies remain for one year.

If you have an account and log in to the Website, a temporary cookie is set to determine whether your browser accepts cookies. This cookie does not contain personal data and is deleted when the browser is closed.

When you log in, several cookies are set to store login information and screen display preferences. Login cookies remain for two days and screen preference cookies remain for one year. If you select “Remember Me”, your login remains active for two weeks. When you log out, the login cookies are removed.

If you edit or publish an article, an additional cookie is stored in your browser. This cookie does not contain personal data and simply indicates the ID of the article that was just edited. It expires after one day.

A.3 THIRD-PARTY COOKIES

The following third-party cookies may be activated on this Website.

Google Analytics (anonymised)

This is an analytics tool provided by Google that uses cookies to collect anonymous browsing data, including IP addresses truncated to the last octet, in aggregate form. The purpose is to analyse Website usage, prepare reports on Website activity and provide other information, including the number of visitors and pages viewed.

Google may transfer this information to third parties where required by law or where such third parties process the information on Google’s behalf. Google will not associate the IP address with other data held by Google.

Data transmitted to Google may be stored on Google servers in the United States. According to the settings and arrangements applicable to the service, advertising and data-sharing options may be disabled.

Users can selectively disable the collection of data by Google Analytics by installing the relevant browser add-on provided by Google.

Google Ads conversion tracking

Google Ads conversion tracking is a statistics service provided by Google that connects data from the Google Ads advertising network with actions performed on the Website.

Data collected may include cookies and usage data. Processing may take place in the United States.

Google Fonts

The Website uses fonts provided by Google Fonts. Data collected may include cookies and usage data. Processing may take place in the United States.

Embedded content

The Website may contain videos from YouTube and Vimeo, content from Facebook, Twitter, LinkedIn and other social platforms, as well as embedded content from other services.

Such content and/or plugins are configured, where possible, not to set cookies when the page is initially accessed, in order to safeguard users’ privacy. Cookies may be set when the user actively and voluntarily interacts with the relevant plugin, where provided for by the social network.

If a user is logged into a social network while browsing the Website, the use of cookies may already be covered by the user’s agreement with that social network. The collection and use of information through such plugins are governed by the respective privacy policies of the relevant providers.

A.4 HOW TO DISABLE COOKIES IN YOUR BROWSER

Cookies are linked to the browser being used and can be disabled directly through the browser, thereby refusing or withdrawing consent to their use where consent is required.

Please note that disabling cookies may prevent some Website functions from working correctly.

Instructions for disabling cookies can be found in the relevant help sections of:

  • Mozilla Firefox
  • Microsoft Internet Explorer
  • Microsoft Edge
  • Google Chrome
  • Opera
  • Apple Safari

TRANSFER OF DATA OUTSIDE THE EU

The Website may share certain collected data with services located outside the European Union, including Google, Facebook and Microsoft (LinkedIn), through social plugins and Google Analytics.

Any international transfer must be carried out in accordance with the safeguards provided by applicable European data protection legislation.

DATA PROCESSORS

The web hosting provider Seeweb is appointed as Data Processor and stores data on behalf of the Controller. The hosting provider is located within the European Economic Area and operates in accordance with European regulations.

Google may be appointed as Data Processor where it processes data on behalf of the Controller through Google Analytics.

UPDATES

This Privacy Policy was last updated on 19 May 2021.