Tenuta Cusmano Privacy Policy
(Compliant with GDPR Regulation EU 2016/679)
Tenuta Cusmano is committed to safeguarding the privacy of its website visitors, service users, and employees.
This policy aims at providing all the information prescribed by the GDPR when personal data is collected and processed.
Contact details of the controller/processor
The data controller and processor is Giuseppe Cusmano, owner of Azienda Agricola Giuseppe Cusmano. I can be contacted at my street address: Via Anagnina 20, 00046 Grottaferrata, RM, Italy, or via email at info@tenutacusmano.it.
Purposes and legal basis of processing
Tenuta Cusmano collects, stores, and uses personal data related to Website visitors, clients, and employees for the purposes of replying to inquiries, booking stays, providing accommodation services, collecting payment, and fulfilling legal obligations. All data is stored on Tenuta Cusmano’s on-premises personal computers or backup removable media, protected by strong access credentials and encryption, or, solely as far as e-mail messages and attachments are concerned, on Tenuta Cusmano’s Web hosting provider’s servers, likewise protected.
The legal basis for processing such data is to deliver the requested services and to perform any ancillary task required for the delivery of services and for compliance with national and European legislation governing businesses.
Categories of personal data
Personal data collected may include a person’s name, postal address, e-mail address, telephone number, passport or other identity paper details, and credit card details.
All this data is protected by state-of-the-art encryption technology while on Tenuta Cusmano’s computers, and is deleted when no longer needed.
Storage period
Personal data of Website visitors requesting information for a stay will be deleted after a maximum of six months, or earlier upon request. Personal data of hotel guests will be deleted after successful collection of due payments and end of stay. Personal data of employees will be retained for ten years, in order to comply with the current legislation.
Recipients of the personal data
Personal data collected by Tenuta Cusmano may be communicated to:
- Tenuta Cusmano’s accountant, for financial/tax purposes
- Tenuta Cusmano’s provider of Web hosting and e-mail services
- co-workers within Tenuta Cusmano’s organisation (only data they need to know in order to perform their work duties)
- public security authorities, in order to comply with legal requirements and/or upon the authorities’ request.
All these parties are bound by the same privacy rules as Tenuta Cusmano’s, or are GDPR-compliant.
Data subject rights
Data subjects have a right to:
- access their data;
- ask for rectification or erasure of their data;
- restrict or forbid processing of their data;
- require that their data is provided to them in a portable format;
- lodge a complaint with a Data Protection Authority (DPA); and
- withdraw consent at any time.
These rights may be exercised by contacting Tenuta Cusmano’s data controller/processor using the controller/processor’s contact details specified above.
This Privacy Policy was drawn up on May 25th 2018 and will be reviewed as and when necessary. Should any discrepancies be detected between the Italian and the English version, the former shall prevail.