INFORMATION FOR USERS OF THE SARDINIA DREAM VILLAS APP
SARDINIA DREAM VILLAS SRL wishes to inform the persons affected that the personal data relating to the person involved will be processed by the undersigned company in full compliance with the applicable regulations on data processing and the confidentiality obligations that have always governed us. Processing of personal data" means any operation or set of operations which is performed on personal data, even without the aid of electronic means, concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction of data, even if they are not stored in a database.
Pursuant to Article 13 of the General Data Protection Regulation (Regulation (EU) No. 679/2016), we hereby provide the following information regarding the personal data managed through the Sardinia Dream Villas application, which we process for the purposes indicated below.
Responsible for data processing
The "Data Controller" for all legal purposes is SARDINIA DREAM VILLAS SRL, which can be contacted at the e-mail
address info@sardiniadreamvillas.com.
Purpose of the processing
In the application (which allows the user to request services such as car rental, excursions, etc.), the first and last name of the user who requests the services and has made a booking via www.sardiniadreamvillas.com may be displayed, thereby transmitting their personal data.
In addition, the User may voluntarily provide files containing personal and/or special information and data (such as identity documents, boarding passes, etc.) via the upload function in the application itself.
It should also be noted that when using the Application, the system may collect technical navigation data via the IP address, the identification codes of the devices used by the User to use the Application, data on the characteristics of the browser and access times, as well as other anonymized navigation data. Specifically, the data processed by cookies is the following:
- Interaction and use of the app via Firebase Analytics (keystrokes and page navigation);
- Storing each user's FCM token (unique device token used by Firebase) to send notifications to the device they are logged in with;
- Use of the user's location from Google Maps to display maps of villas (the user's location is not used by the application in any functional way, it is only required by Google Maps).
Within the scope of the purposes for which the personal data is processed, SARDINIA DREAM VILLAS SRL will process this data in accordance with the principles of correctness, lawfulness, transparency and protection of the confidentiality of the rights of the person in question.
Type of transmission
Personal data is always collected from the person in question.
The provision of this data, which is necessary for the purposes described, is essential for the full provision of the services offered via the application.
Processing methods
Data processing is carried out in accordance with the principles of correctness, lawfulness and transparency through the use of appropriate tools and procedures to ensure security and confidentiality and may be carried out either on paper or with the aid of electronic tools.
The processing is carried out using appropriate security measures to minimize the risk of unauthorized access to the data by third parties, their destruction and/or deterioration and to ensure confidentiality in accordance with Article 32 of the General Data Protection Regulation.
Storage of personal data
Personal data will only be retained for as long as is necessary for the purposes for which it was collected, taking into account the principle of data minimization in accordance with Article 5(1)(c) of the General Data Protection Regulation and the legal obligations of the responsible party. Further information on the duration of storage and processing is available from the responsible party.
Data communication
The personal data will not be distributed in any way, but may be passed on by us as follows:
- to duly appointed persons entrusted with their processing within the company
- to bodies and associations associated with the company;
- to persons who must have access to such data for purposes related to the relationship between our company and the data subject, insofar as this is strictly necessary for the performance of the tasks assigned to them, such as: Credit institutions, administrative consulting firms (accountants).
Rights of the person in question
The data subject may exercise their rights under Articles 15-22 of the GDPR at any time:
- To obtain confirmation as to whether or not personal data is being processed, and, where that is the case, access to the personal data and to all the information provided for in Article 15 of the GDPR
- You have the right to obtain without undue delay the rectification of inaccurate personal data concerning yourself. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- To obtain the erasure of personal data concerning yourself without undue delay
- To obtain the restriction of processing if one of the cases provided for in Article 18 of the GDPR occurs.
- To receive the personal data concerning the data subject, which have been provided to the undersigned company, in a structured, commonly used and machine-readable format;
- You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. In this case, the company will refrain from further processing of the personal data unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims;
- Not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you. This right does not apply in cases regulated in Article 22(2) of the GDPR;
- Contact the supervisory authority to lodge a complaint if you believe that your data has been processed unlawfully.