Villa Pedossa – Your Country Escape

Privacy Policy Statement (according to Chapter III of EU Regulation 2016/679)

Dear Sir / Madam,

We wish to inform you that Chapter III of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data provides for the protection of individuals. According to the law, the treatment, handling or processing of personal data will be performed in accordance with principles of correctness, lawfulness and transparency and the protection of your privacy and your rights. Therefore, Az. Agr. Frattesi Alessandra (henceforth the “Accommodation facility”) as Data Controller, is required to provide you with information regarding the processing of your personal data.

Article 13 Paragraph 1 – Regulation (EU) 2016/679

A1) Data controller
The Data Controller is:
Az. Agr. Frattesi Alessandra
Via Marche, 28 60019
VAT number 02257940425
Mob: +39 3467827007  Email

B1) Categories of data being processed
Personal data (name and surname) and your contact details (personal or business)

C1) Purpose of the treatment, handling or processing of personal data by the Accommodation facility
Sending informative/promotional material and commercial offers related to the Accommodation facility (direct marketing): you will be asked for your precise and explicit consent provided directly on the web page by clicking on a check-box and pressing a confirmation button.

C1.1) The legal basis of the treatment, handling or processing of personal data by the Accommodation facility
The data processing is carried out by the accommodation only after your consent to the said treatment, handling or processing of personal data.

D1) Categories of subjects to whom the data may be communicated
In relation to the purposes indicated under the above paragraph C1), the Accommodation facility will communicate your personal data to the following public-service administrative bodies:

  • Police forces, armed forces and other public administrations, in fulfillment of obligations under laws, regulations or Community legislation; financial administrative bodies.

The Accommodation facility also communicates your personal data to private individuals and /or state-run for-profit entities, in particular to the following subjects:

  • Service providers for sending email or SMS

E1) Transfer of personal data outside the European Economic Area
At present the Data Controller transfer the personal data collected to countries outside the European Economic Area, whose legal provisions on the protection of personal data are aligned with those of the European Union.

Article 13 Paragraph 2 – Regulation (EU) 2016/679

A2) Data retention period
The data will be maintained until the possible withdrawal of your consent or request for cancellation. In any case, after 5 (five) years from the date when your initial consent to the treatment, handling and processing of your personal data was given, you (the person concerned) will be asked to renew your consent. In the case of no renewed consent, the data will be deleted.

B2) Rights of the person concerned
The person concerned can request from the Data Controller:

  • access to personal data
  • correction or
  • cancellation of the same.

The person concerned can also request the limitation of the treatment, handling and processing of personal data, or oppose it. For the type of data the individual concerned has the right to receive his or her personal data which has been provided to a data controller in a structured, commonly used and machine-readable format. Furthermore he or she has the right to transmit this data to another holder of unrestricted processing by the data controller. More detailed information on the rights of the person concerned can be found in the website Privacy Policy.

C2) Right to withdraw consent
The person concerned has the right to revoke his or her consent to direct marketing treatment at any time.

D2) Right to file a complaint to a supervisory authority
The person concerned has the right to lodge a complaint with a supervisory authority which at present is the “Garante della Protezione dei dati personali”. The complaints procedures to be used are indicated on the website

E2) Mandatory or optional nature of providing data and consequence of non-conferment
The provision of data is therefore mandatory because refusal to consent will render impossible any provision of information you may request.

F2) Existence of an automated decision-making process
No profiling activity is performed.

Document updated on 22/03/2020