Northitaly Villas S.A.S. (“us”, “we”, or “our”) is officially registered in Italy as a real estate agent (broker) and acts as mediator and also representative (by the conclusion of the contract) of the landlord, who is the actual renter, in accordance with the binding conditions requested by the landlord, for which we operate the www.northitaly.villas website (the “Service”).

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from www.northitaly.villas

Privacy Policy Statement

This notice is provided in accordance with Article 13 of EU Regulation 2016/679 for the protection of personal data. The data processed will be those of web users.

The Data Controller is:

North italy Villas
C.so Giacomo Matteotti, 30
info@northitaly.villas
VAT ID: IT11821900013

Nature of data provision

The provision of data is optional. Refusal to provide the data will result in the impossibility of being contacted for the purposes stated below. Providing data for marketing purposes is optional and will not prevent being contacted for other purposes.

Providing us with your personal data is optional but if you don’t give us your details and your consent to use them, we will not be able to contact you or to send you any promotional offers.

Purpose of processing and legal basis

Personal data is processed for the following purposes:

1. The personal data provided by users may be used for us to contact you following a request made in the contact form;

2. fulfilment of obligations pursuant to the law, regulations or Community legislation and defence before the courts;

Regarding purposes sub a) and b), please note that the processing and communication of your personal data by the Data Controller do not require your consent as it is necessary for the execution of obligations arising from the contract itself and/or for the performance of services requested by you prior to the conclusion of the contract, as well as to comply with legal obligations.

Legitimate interest

The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.

Data processing methods

The collected data will be processed using computer tools.

Appropriate security measures are observed to prevent data loss, illicit or inappropriate use and unauthorized access.

Who processes your data

The processing of personal data is carried out by authorised personnel or by duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the Data Protection Officer (DPO).

Data transfer

The data will only be transferred only within the EU. Some data may be transferred to the USA to those companies that are certified under the Data Privacy Framework.

Data conservation period

The retention time of the user's choices relating to cookies is six months as required by the measures.

The time for retaining cookies changes depending on the type of belonging. For third-party profiling cookies, the specifics can be consulted directly on their relative sites.

Personal data processed for contact or economic purposes will be processed for the times mandatory under the laws of competence.

Data subject rights pursuant to art. 15 eu 2016/679

Data subjects have the right, in the cases provided for, to obtain from the Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them or to object to the processing (Arts. 15 and following of the Regulation). Requests should be addressed to the Data Controller at the contact details provided at the beginning of this information.

Right to complain

Data subjects who believe that the processing of personal data referred to them carried out through this site occurs in violation of what is provided by the Regulation have the right to lodge a complaint with the Guarantor, as provided for by Article 77 of the same Regulation, or to take action in the appropriate judicial venues (Article 79 of the Regulation).

Information Collection And Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:

• First name and last name
• Email address
• Phone number
• Address, Country, State, Province, ZIP/Postal code, City
• Birth place and date
• Identification document
• Cookies and Usage Data

Usage Data

We may also collect information how the Service is accessed and used (“Usage Data”). This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

• Session Cookies. We use Session Cookies to operate our Service.
• Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
• Security Cookies. We use Security Cookies for security purposes.

Use of Data

Northitaly Villas S.A.S. uses the collected data for various purposes:

• 1. To provide and maintain the Service: to stipulate rental and sale contracts with Northitaly Villas through the booking procedure; to permit the correct execution of the various contractual obligations and the sending of notifications related to the pre-contractual and contractual relationship. To fulfil the pre-contractual, contractual and fiscal obligations deriving from the relations in existence with Northitaly Villas. To fulfil the obligations required by law, by a regulation, by EC rules or by an order of an Authority.
• 2. To notify you about changes to our Service.
• 3. To allow you to participate in interactive features of our Service when you choose to do so. To permit registration on the website and to the newsletter, marketing information and commercial communications related to services and products of Northitaly Villas.
• 4. To provide customer care and support.
• 5. To provide analysis or valuable information so that we can improve the Service.
• 6. To monitor the usage of the Service.
• 7. To detect, prevent and address technical issues.

Transfer Of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside Italy and choose to provide information to us, please note that we transfer the data, including Personal Data, to Italy and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Northitaly Villas S.A.S. will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Disclosure Of Data

Legal Requirements

Northitaly Villas S.A.S. may disclose your Personal Data in the good faith belief that such action is necessary to:

• To comply with a legal obligation
• To protect and defend the rights or property of Northitaly Villas S.A.S.
• To prevent or investigate possible wrongdoing in connection with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability

Security Of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Service Providers

We may employ third party companies and individuals to facilitate our Service (“Service Providers”), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use third-party Service Providers to monitor and analyze the use of our Service.

• Google AnalyticsGoogle Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children’s Privacy

Our Service does not address anyone under the age of 18 (“Children”).

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Rights of the person concerned

In your capacity as the person concerned, you have the rights set down in art. 15 GDPR and, more precisely, the rights to: i. obtain confirmation as to whether or not personal data about you exists, even if it has not yet been recorded, and communication of the same in an intelligible form; ii. Receive an indication: a) of the origin of the personal data; b) of the purposes and methods of processing; c) of the logic applied in the case of processing carried out with the assistance of electronic instruments; d) the identifying details of the data controller, of the data processors and of the representative designated pursuant to art. 3, paragraph 1, GDPR; e) of the subjects or the categories of subjects to whom the personal data may be communicated or that may obtain knowledge of the same in their capacity as the designated representative within the territory of the State of the processors or officers; iii. obtain: a) the updating, rectification, or, where interested, the supplementation of the data; b) the erasure, rendering anonymous or blocking of any data processed in violation of the law, including data which it is not necessary to store in relation to the purposes for which the data was collected or subsequently processed; c) certification that the operations described in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data has been communicated or disseminated, except for the cases in which this obligation is impossible or would involve a manifestly disproportionate effort with respect to the right protected; iv. wholly or partially object to: a) the processing of your personal data for legitimate reasons even though they are pertinent to the purpose of the collection; b) the processing of your personal data for the purpose of sending advertising or direct sales material or for carrying out market research or for commercial communications using automated calling systems without the intervention of an operator, through email and/or by means of traditional marketing methods using the telephone and /or paper mail. It shall be stated that the right to objection of the person concerned, set out in the previous point b), for the purposes of direct marketing using automated methods, shall be extended to traditional methods and that, in any case, the person concerned shall still have the possibility to exercise the right of objection, even only partially. Therefore, the person concerned may decide to only receive communications via traditional methods or only automated communications or neither of the two types of communication. Where applicable, you shall also have the rights set down in articles 16-21 GDPR (Right to rectification, ‘right to be forgotten’, right to restriction of processing, right to data portability, right to object), as well as the right to complain to the Supervisory Authority.

Right to withdraw consent

Northitaly Villas hereby states that, pursuant to art. 7, paragraph 3, GDPR, the person concerned may withdraw his/her consent at any time. The consequence of any refusal to consent to the processing of data with reference to the purposes envisaged in “Use of Data”, point 1 shall be that the Data Controller cannot carry out its pre-contractual and contractual functions whereas any refusal to consent to the data processing with reference to the purposes set down in “Use of Data”, point 3 shall produce no negative effects.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us. You may exercise the rights described in articles 16-21 of the GDPR at any time:

• By email: privacy@northitaly.villas
• By visiting this page on our website: https://www.northitaly.villas/en/privacy-policy/