Privacy Policy

Scope of application

This Privacy Policy applies exclusively to navigation on the site seasalento.com (hereinafter referred to as Site) accessible at the internet address https://seasalento.com and regularly registered by SEASALENTO SOCIETA COOPERATIVA - Via Volturno n° 22 – 73033 Corsano (LE) - Italy

Data Controller, Responsible and Appointed for Processing

The Data Controller, Responsible and Appointed for the processing of the collected data is MICHELE CASCIARO, C.F. CSCMHL88M08D851D whose details have been previously reported.

Sources of personal data

  The applications dedicated to the operation of this Site may detect, during their normal functioning, some of your data (the transmission of which is implicit in the use of Internet communication protocols), however not directly associated with you. Among the data collected may also be included, by way of example and not limited to, the IP address, domain names and the type of browser of the computers used to connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system and the computing environment you use. These data do not allow, in any case, to ascertain your identity and should therefore be considered anonymous. Specific sources of personal data are indicated in the specific Privacy policies prepared for particular services offered by the Site or software used by it for its proper functioning and are reported below.

Purpose of processing

The data concerning you will be transformed into anonymous data and processed in aggregated form for statistical purposes and to ensure continuity of service and for the improvement of the Site itself. If you do not agree with this practice, you are requested not to browse the Site nor to make use of the services offered by it. The IP may, in some cases, be used solely for the purpose of blocking attempts to damage the Site itself, as well as activities constituting a crime under current laws. Specific purposes of processing are outlined in the specific Privacy Policies prepared for particular services offered by the Site or software used by it for its proper functioning and are reported below. 

Data retention period and processing methods

The data you provide and collected by the Site are processed only for the strictly necessary time. They are processed electronically and aggregated for the purposes outlined above. Specific processing methods are outlined in the specific Privacy Policies prepared for particular services offered by the Site or software used by it for its proper functioning and are reported below. 

Optionality

For the purposes of browsing the site, the communication of personal data is not required except for anonymous data that are strictly necessary for the purposes indicated above. However, there are sections of the site that require the creation of an authorisation profile and prior electronic authentication to be browsed. The creation of the profile involves the communication to the Site of additional personal data beyond the anonymous data required for simple browsing. Such data are used solely for the purpose of providing the services that may be requested and processed according to the specific Privacy Policies prepared for this purpose and reported below. 

Subjects or categories of subjects that can access the data or become aware of it

Direct access to your data is exclusively permitted to the Data Controller indicated. The hosting service provider is:

Odoo IT S.R.L. - Via Montefeltro 4 - 20156 Milan MI - Italy

and may potentially access the data solely for technical reasons of necessity and urgency that require intervention in order not to compromise the functionality and security of the Site.

Other services are or may be offered by other companies. Information in this regard is present in the Privacy policies drafted for each individual service and reported below.

Article 15: Right of access of the data subject

4. In the case of further copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. If the data subject makes the request by electronic means, and unless otherwise indicated by the data subject, the information shall be provided in a commonly used electronic format. 

Article 16: Right to rectification

The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the completion of incomplete personal data, including by means of providing a supplementary statement.   

Article 17: Right to erasure ("right to be forgotten")

1. The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay and the data controller has the obligation to erase personal data without undue delay, if one of the following grounds applies:

personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

the data subject withdraws consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a), and if there is no other legal ground for the processing;

the data subject objects to the processing pursuant to Article 21(1), and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);

personal data have been unlawfully processed;

personal data must be erased to comply with a legal obligation under Union law or the law of a Member State to which the data controller is subject;

personal data have been collected in relation to the offer of information society services referred to in Article 8(1).

2. The data controller, if they have made personal data public and is obliged, under paragraph 1, to erase them, taking into account the available technology and the costs of implementation, shall take reasonable steps, including technical measures, to inform data controllers that are processing the personal data of the data subject's request to erase any link, copy or reproduction of their personal data.

3. Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:

for the exercise of the right to freedom of expression and information;

for the fulfilment of a legal obligation requiring processing under Union law or the law of the Member State to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;

for reasons of public interest in the area of public health in accordance with Article 9, paragraph 2, letters h) and i), and Article 9, paragraph 3;

for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89, paragraph 1, to the extent that the right referred to in paragraph 1 risks making impossible or seriously prejudicing the achievement of the objectives of that processing;

or for the establishment, exercise or defence of a right in legal proceedings.

Article 18: Right to restriction of processing

1. The data subject has the right to obtain from the data controller restriction of processing when one of the following applies:

the data subject contests the accuracy of the personal data, for a period enabling the data controller to verify the accuracy of such personal data;

the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use;

although the data controller no longer needs them for the purposes of processing, the personal data are required by the data subject for the establishment, exercise or defence of a right in legal proceedings;

the data subject has objected to the processing pursuant to Article 21, paragraph 1, pending verification regarding the possible prevalence of the legitimate grounds of the data controller over those of the data subject.

2. If the processing is restricted under paragraph 1, such personal data shall be processed, except for storage, only with the consent of the data subject or for the establishment, exercise or defence of a right in legal proceedings or to protect the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State.

3. The data subject who has obtained the restriction of processing under paragraph 1 shall be informed by the data controller before that restriction is lifted. 

Article 19: Obligation to notify in the event of rectification or erasure of personal data or restriction of processing

 The data controller shall communicate to each of the recipients to whom the personal data have been disclosed any rectifications or erasures or restrictions of processing carried out in accordance with Article 16, Article 17, paragraph 1, and Article 18, unless this proves impossible or involves a disproportionate effort. The data controller shall inform the data subject of such recipients if the data subject requests it.  

Article 20: Right to data portability

 1. The data subject has the right to receive in a structured, commonly used and machine-readable format the personal data concerning them provided to a data controller and has the right to transmit those data to another data controller without hindrance from the data controller to whom they were provided where:

the processing is based on consent pursuant to Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), or on a contract pursuant to Article 6, paragraph 1, letter b); and the processing is carried out by automated means.

2. In exercising their rights regarding data portability under paragraph 1, the data subject has the right to obtain the direct transmission of personal data from one data controller to another, where technically feasible.

3. The exercise of the right referred to in paragraph 1 of this article does not affect Article 17. This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

4. The right referred to in paragraph 1 must not adversely affect the rights and freedoms of others.

Article 21: Right to object

 1. The data subject has the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her pursuant to Article 6, paragraph 1, letters e) or f), including profiling based on those provisions. The data controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.

2. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them carried out for such purposes, including profiling to the extent that it is related to such direct marketing. 

3. If the data subject objects to the processing for direct marketing purposes, the personal data shall no longer be subject to processing for such purposes. 

4. The rights referred to in paragraphs 1 and 2 are explicitly brought to the attention of the data subject and are presented clearly and separately from any other information at the latest at the time of the first communication with the data subject.

5. In the context of the use of information society services and without prejudice to Directive 2002/58/EC, the data subject may exercise their right to object by automated means using specific techniques. 

6. If personal data is processed for scientific or historical research purposes or for statistical purposes in accordance with Article 89, paragraph 1, the data subject, for reasons related to their particular situation, has the right to object to the processing of personal data concerning them, unless the processing is necessary for the performance of a task carried out in the public interest.

Article 22: Automated decision-making relating to individuals, including profiling

 1. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

2. Paragraph 1 does not apply in cases where the decision: a) is necessary for the conclusion or execution of a contract between the data subject and a data controller; b) is authorised by Union or Member State law to which the data controller is subject, which also specifies appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject; c) is based on the explicit consent of the data subject.

3. In the cases referred to in paragraph 2, letters a) and c), the data controller implements appropriate measures to protect the rights, freedoms and legitimate interests of the data subject, at least the right to obtain human intervention from the data controller, to express their opinion and to contest the decision.

4. The decisions referred to in paragraph 2 are not based on special categories of personal data referred to in Article 9, paragraph 1, unless Article 9, paragraph 2, letters a) or g) applies, and appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject are not in place. 

Cookies

Integrations to this privacy policy