Privacy Policy

Privacy Policy pursuant to Legislative Decree 196/2003 and Article 13 of the European Regulation 679/2016 (GDPR)

Whim Collection – Al Capanno SRLS (VAT No. 17822631002), represented by its pro tempore legal representative, with registered office at Via Paolo Emilio, 34 – 00192 Rome (RM), as the Data Controller, informs you that, in compliance with Legislative Decree 196/2003 and the European Regulation 679/2016 (hereinafter GDPR), your personal data will be processed in accordance with the aforementioned regulations, adhering to the principles of fairness, lawfulness, proportionality of interests, and transparency, as well as safeguarding your privacy and your rights for the purposes, in the manner, and for the terms detailed below.

 

 

Purpose, Methods, and Legal Basis of Data Processing

This Privacy Policy applies exclusively to the online activities of this website and is valid for the website’s visitors/users. It does not apply to information collected through channels other than this website. The purpose of this privacy policy is to provide maximum transparency regarding the information the site collects and how it is used.

Your personal data will be processed exclusively for purposes strictly connected, instrumental, and necessary to fulfill the obligations related to relationships with our Company; in particular:

  • The processing of personal data is carried out through the operations indicated in Legislative Decree 196/2003 and Article 4(2) of the GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction.

  • The processing of personal data will be carried out through IT tools by the Data Controller, the Data Processor(s), and the authorized personnel (persons in charge) with the adoption of all necessary security measures. The data will not be subjected to profiling or automated decision-making processes.

  • The data will be stored by the Data Controller and by the designated Data Processors. In any case, your personal data will be stored and processed within the boundaries of the European Economic Area and will only be transferred outside this boundary with your explicit consent.

If provided by you, the data you supply, including but not limited to:

  • Personal data

  • Requests for information about accommodations

  • Requests for personalized quotes

  • Booking of stays

  • Registration to our portal

  • Subscription to the newsletter

  • Requests for information about the services offered

  • Personal information necessary for the provision of services

Will be voluntarily supplied by the user when requesting the service, and by entering a comment or other information, the user expressly accepts this privacy policy.

This site may process some personal data based on the legitimate interests of the Data Controller, as provided for by Legislative Decree 196/2003 and Article 6 of the European Regulation 679/2016.

The data received will be used exclusively to provide the requested services and only for the time necessary to provide the service.

The information that users of the site choose to make public through the tools and services provided by the site is provided knowingly and voluntarily, absolving this site of any liability concerning any violation of the laws. It is the user’s responsibility to verify they have permission to input personal data of third parties or content protected by national and international regulations.

Data collected by the site during its operation is used exclusively for the purposes indicated above and retained only as long as necessary to carry out the specified activities. In any case, the data collected by the site will never be provided to third parties, unless there is a legitimate request by the judicial authorities and only in the cases provided by law.

 

 

Nature of Data Collection and Consequences of Failure to Provide Data

Like all websites, this site uses log files where information collected in an automated manner during user visits is stored. The information collected may include:

  • Internet Protocol (IP) address;

  • Type of browser and device parameters used to connect to the site;

  • Name of the Internet Service Provider (ISP);

  • Date and time of visit;

  • Web page of origin of the visitor (referral) and exit;

This information is processed in an automated form and collected exclusively in an aggregated form to verify the correct functioning of the site, for security reasons, and for the legitimate interests of the Data Controller as per applicable regulations.

For security purposes (spam filters, firewalls, virus detection), the automatically recorded data may include personal data such as the IP address, which could be used, in compliance with current laws, to block attempts to damage the site itself, cause harm to other users, or carry out harmful or criminal activities. Such data is never used to identify or profile the user but only to protect the site and its users and for the legitimate interests of the Data Controller.

By using or consulting this site, visitors and users explicitly approve this privacy policy and consent to the processing of their personal data in relation to the methods and purposes described, including the possible disclosure to third parties if necessary for providing a service.

 

 

Timelines and Terms

The Data Controller, the Data Processors, and the authorized personnel (persons in charge) will process the personal data for the time necessary to fulfill the purposes mentioned above and, in any case, for no more than 10 years from the end of the relationship where required or made necessary by applicable regulations.

Regarding the provision of data for receiving commercial information, newsletters, and periodic updates, the data will be processed until your request for unsubscription.

 

 

Communication and Disclosure of Data

Your personal data, for the execution of the contract or services requested and for the purposes mentioned above, may be communicated:

  • To all individuals and entities (e.g., legal, administrative, fiscal consulting firms, auditing companies, couriers, IT consultants, suppliers, etc.) where communication is necessary for the purposes illustrated above;

  • To banking institutions for the management of payments;

  • To factoring companies or credit recovery firms;

  • To our collaborators and employees specifically assigned and within their tasks;

  • To SMTP providers for sending newsletters.

For further information, please contact: Phone: +39 3515877564
Email: info@whimcollection.it

 

 

Rights of the Data Subject

By calling +39 3515877564 or writing to info@whimcollection.it, you may exercise your rights regarding the data processing at any time, pursuant to the European Regulation 679/2016, including:

  • The right to confirm the existence of personal data concerning you;

  • The updating, rectification, or integration of the data;

  • The deletion of the data or the restriction of processing;

  • The right to data portability to other entities;

  • The right to lodge a complaint with the supervisory authority;

  • The revocation of consent where processing is based on explicit consent.

The exercise of the aforementioned rights can be carried out by making a request to the Data Controller or Data Processor using the contact details provided above.