Privacy policy

Pursuant to EU Regulation no. 679/2016 (the General Data Protection Regulation, “GDPR”), we would like to inform you that the processing of your Personal Data will be executed in  correct, transparent, lawfully manners, to protect your discretion and your rights.

The data controller

The Data Controller of your personal data is SABATINI – VOLPINI & C. s.n.c. , VAT number & Fiscal code number 00367450525, with registered office in San Gimignano, in Loc. Pancole 10/B, legally represented by Remo Squarcia.

Purpose of the processing

Data will be processed with the purpose of  sending emails regarding offers, promotions, events and news about the Hotel, following user’s explicit request.

Data processing

Data will be processed using computerized/telematic tools that are suitable for ensuring security and confidentiality; the Owner adopted all necessary measures in order to avoid unauthorized accesses, disclosure, modifications, destruction of your data.

Optionality to provide data

The user is free to choose to provide its email and name in order to receive our newsletter; denying to provide such data make impossible to receive our newsletter.

To sign up to our newsletter, it’s necessary to insert your data in required fields on our website and press on “SEND” button; afterwards you’ll receive an email in order to reconfirm your enrollment, with an hyperlink; your enrollment will be active only after having clicked on the confirmation hyperlink, and your email address will be included in our mailing list.

Data retention period

The data provided will be stored till user’s opposition; the user can unsubscribe in every moment through the specific link included in all newsletters.

Data recipients

Data will be processed exclusively for the above mentioned purposes, by collaborators appointed by the Owner and specifically nominated as authorized persons  or  third parties (Area38 Web Agency, executing the newsletter service). The parties involved are designated in written manner as authorized subjects and operate according to the Owner’s operative instructions. Data may be disclosed to the Company operating website assistance / maintenance (Area38 Web Agency).   Data will not be circulated within nor outside Europen Union countries.

Rights of the interested parties

Based on current legislation and the provisions established in the GDPR, you have the right to access, rectify, delete data; moreover you have the right to obtain data portability and to revoke your consent at any time, as required by art. 15 to 22 of GDPR.

Hereinabove rights can be exercised by contacting our offices at info@villasanpaolo.com.

Complaints to the supervisory authority can be addressed to the Guarantor for the protection of personal data, according to Art. 77 of GDPR.

Latest update: 30.11.2018
Sabatini – Volpini & C. snc