Lignano Sabbiadoro · Adriatic Sea
Privacy Policy
Information document pursuant to article 13 of EU Reg. 2016/679 (GDPR) - Information on the processing of personal data collected from the interested party
In compliance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data) we provide the necessary information regarding the processing of personal data provided.
Definitions: the art. 4 of EU Reg. 2016/679 defines "personal data" any information concerning an identified or identifiable natural person ("concerned"); an identifiable natural person can be identified, either directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online ID or one or more characteristic elements of his physical identity, physiological, genetic, psychological, economic, cultural or social.
Specific information
The following information specific to the particular services or treatments of the Data provided is present on the pages of the Website:
- Privacy information for filling in the Contact Form for information purposes.
- Privacy information for filling in the Accommodation Reservation Form.
- Privacy information for filling in the Online Payment Form.
- Privacy information for the compilation of Web Check-In.
1. HOLDER OF THE TREATMENT,
pursuant to art. 4 of EU Reg. 2016/679, is Agrituristica Lignano Srl with offices in Via Sabbiadoro n. 1, Zip code 33054 City Lignano Sabbiadoro (UD), amministrazione@andretta.info with exclusive reference to the role of owner of the business called "Camping Sabbiadoro".
2. PURPOSE AND LEGAL BASIS OF TREATMENT
The personal data provided will be processed in compliance with the following conditions of lawfulness pursuant to art. 6 of EU Reg. 2016/679 for the following purposes:
- navigation on this website: legitimate interest (Article 6 paragraph 1 letter f)) as the legal basis of the processing;
- compilation form data collection for request for contact with sending the requested information: execution of pre-contractual measures (Article 6 paragraph 1 letter b)) as the legal basis of the processing;
- compilation of data collection form for accommodation reservation: execution of the contract (Article 6 paragraph 1 letter b)), legal obligations (Article 6 paragraph 1 letter c)) as legal bases of processing;
- compilation of data collection form for online payments: execution of the contract (art. 6 paragraph 1 letter b)), as legal bases for the processing;
- compilation of data collection form for online check-in: legal obligations (Article 6 paragraph 1 letter c)), as legal bases for the processing.
3. ADDRESSEES OR CATEGORIES OF DATA ADDRESSEES
The personal data provided will be communicated to recipients, who will process the data as managers (Article 28 of EU Reg. 2016/679) and / or as natural persons acting under the authority of the Data Controller and the Data Processor (Article 29 of EU Reg. 2016/679), for the purposes listed above in point 2.
By way of example and not exhaustively, the data will be communicated to:
- subjects that provide services for the management of the information system used by the Data Controller and related telecommunications networks, including e-mail, newsletters and website management, including for example Mercurio Sistemi S.r.l .;
- professionals and consultants in the field of assistance and consultancy relationships;
- competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request.
The subjects belonging to the aforesaid categories perform the function of Data Processing Manager, or operate in complete autonomy as separate Data Controllers.
The list of data processors is constantly updated and available at the registered office of the Data Controller in Via Sabbiadoro n. 1, Zip code 33054 City Lignano Sabbiadoro (UD).
4. DATA TRANSFER TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES
The personal data provided may be transferred to countries belonging to the European Union and to countries outside the EU in case of need in order to comply with the aforementioned purposes. The data will be transferred in compliance with the conditions set out in Chapter V - Transfers of personal data to third countries or international organizations - EU Reg. 2016/679; specifically, the data will be transferred to third countries or international organizations for which the Commission has intervened with an adequacy assessment (Article 45 of the EU Reg. 2016/679). The interested party can obtain information about the effective transfer of data to a third country and the appropriate guarantees adopted so that the level of protection of data transfer is not prejudiced, by writing an email to amministrazione@andretta.info or at the registered office of the Owner of the treatment in Via Sabbiadoro n. 1, Zip code 33054 City Lignano Sabbiadoro (UD).
5. DATA STORAGE OR CRITERIA FOR DETERMINING THE PERIOD
The processing will be carried out in an automated and manual manner, with methods and instruments aimed at ensuring maximum security and confidentiality, by the owner and / or subjects specifically appointed to do so.
In compliance with the provisions of art. 5 paragraph 1 letter e) of Reg. UE 2016/679 the personal data collected will be stored in a form that allows identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. The retention of personal data provided depends on the purpose of the processing (the timing has been determined on the basis of criteria on which the interested party can receive information by writing an email to amministrazione@andretta.info):
- navigation on this website: see the provisions of the cookie policy;
- contact request: maximum 24 months;
- accommodation reservation and any possibility of online payment: for the minimum period required by law in relation to the accounting / tax regime adopted by the Owner;
- Online check-in: for the minimum period required by law.
6. NATURE OF DATA CONFERENCE AND CONSEQUENCES OF THE REFUSAL TO SUPPLY THE DATA
Apart from that specified for navigation data, the communication of personal data is not an obligation, as you are free to provide your personal data in the areas dedicated on the site, but it is necessary to fulfill the purposes of treatment; the consequence of not providing personal data implies the impossibility of using the various services offered by the data controller.
7. RIGHTS OF THE INTERESTED
The interested party may assert his / her rights as expressed in the EU Regulation 2016/679, by contacting the Data Controller, sending an e-mail to amministrazione@andretta.info or writing to the office of the owner indicated above.
The interested party has the right, at any time, to ask the Data Controller to access your personal data (Article 15), the correction (Article 16) or the deletion (Article 17) of the same, the limitation of the processing (Article 18), the portability of data (Article 20) or finally to object to data processing based on legitimate interest (Article 21).
Pursuant to art. 7, paragraph 3, the interested party has the right to revoke the consent given at any time.
In the case of request for data portability, the Data Controller will provide the data in a structured format, commonly used and readable by automatic device, subject to paragraphs 3 and 4 of the art. 20 of the EU Reg. 2016/679.
Without prejudice to any other administrative and judicial appeal, if it considers that the processing of data violates the provisions of EU Reg. 2016/679, the data subject has the right to lodge a complaint with the supervisory authority (Guarantor for the protection of personal data) pursuant to art. 15 letter f) of EU Reg. 2016/679.
8. AUTOMATED DECISION MAKING PROCESSES
There is no automated decision-making process.
9. WEBSITE SERVICES — ADDENDUM OF 26 OCTOBER 2026
The following information supplements the sections above for the services available on the website, pursuant to articles 13 and 14 of Regulation (EU) 2016/679.
9.1 Newsletter
When you subscribe to the newsletter, your e-mail address is used to send you offers and news from Camping Sabbiadoro. Legal basis: consent (art. 6(1)(a) and art. 130 of the Italian Privacy Code), given through the dedicated unticked box and which you may withdraw at any time via the link in every e-mail or by writing to info@campingsabbiadoro.it. Data are kept until consent is withdrawn and are processed by the controller's e-mail service provider as a processor.
9.2 Contact form
The data you enter (name, e-mail, message) are used solely to answer your request (art. 6(1)(b): pre-contractual measures) and kept for no more than 24 months. If the form is unavailable, the site opens your e-mail program with the message ready to send.
9.3 "Campy" virtual assistant
The button at the bottom right opens a virtual assistant based on artificial intelligence. The chat script is loaded only when you open it; before the conversation starts you are asked to read this notice. The messages you write, the conversation id, the page you write from and, if you choose to provide it, your e-mail are processed to answer your questions (art. 6(1)(b) and (f): pre-contractual measures and legitimate interest in providing assistance) and kept in your browser and by the provider for the time needed to provide the service and resume the conversation. The service is provided by Indesign Studio (Portogruaro, VE, Italy) as a processor, which relies on hosting by Vercel Inc. (USA), Google cloud services (Firebase/Firestore) and language-model providers to generate the answers; transfers to the United States take place under the Data Privacy Framework or standard contractual clauses (art. 46). Answers are generated automatically and are for information only: they are neither a booking nor a decision producing legal effects on you (art. 22). Do not enter special categories of data (art. 9) or third parties' data in the chat. You may ask for the deletion of your conversations by writing to info@campingsabbiadoro.it.
9.4 Statistics and third-party content
Google Analytics 4 (aggregate statistics with anonymised IP) and the Google Maps map (Contacts page) are enabled only with your consent, which you can manage from the "Cookie preferences" link in the footer. Provider: Google Ireland Ltd.; possible transfer to Google LLC (USA) under the Data Privacy Framework. Details, names and durations of the cookies in the Cookie Policy.
9.5 Technical providers (processors)
- Vercel Inc. (USA): website hosting — receives the IP address and the technical data of the request (security logs); transfer under the Data Privacy Framework;
- BunnyWay d.o.o. (Slovenia): content delivery network and video player — receives the IP address to deliver images and video and records technical playback metrics;
- SGS Hospitality: booking engine, online payment and online check-in, which open on their own website with their own notice when you start a booking;
- Indesign Studio (Portogruaro, VE, Italy): development and maintenance of the website and of the virtual assistant.
9.6 Browsing data
The IT systems of the site and of the hosting providers collect, in normal operation, technical data whose transmission is implicit in the use of the internet (IP address, time, page requested, browser). They are used only to run the site and for security (art. 6(1)(f)) and kept for the technically necessary time, in any case no longer than 12 months, unless needed to investigate offences.
