In accordance with Article 13 of the EU Data Protection Regulation 2016/679 (“GDPR”)
Dear User, Villa l’Envol welcomes you to its website (the “Website”) and invites you to carefully read the following Information (“the Information”), issued in accordance with Article 13 of Regulation (EU) 2016/679 on the protection of natural persons, with particular attention to the processing and free movement of personal data (“RGPD”).
This document describes all processing carried out by the Responsible Party, as defined below, through our website.
It is also made clear that this Information relates exclusively to our website, to the exclusion of any other website to which you may be redirected by our website.
In addition, if you were to buy products or to profit from services provided by Villa l’Envol other than by the means of our Web site, at the time of their purchase, it will be delivered to you the specific Information, aimed at the art. 13 of the RGPD, on your personal data processed on this occasion.
1. Who is the Data Controller?
The data controller is Artis BP33 06371 Mouans-Sartouc CEDEX (the “Controller”).
The Manager has also appointed a Data Protection Officer (“DPO”), whom you can contact directly to exercise your rights and to access any information on the processing of your personal data and/or on this Information, by contacting the Data Protection Officer (“DPO”)
ARTIS BP33 06371 Mouans-Sartoux CEDEX
2. What personal data is processed?
2.1 Navigation data
In the course of their normal operation, the computer systems and software procedures dedicated to the functioning of the Web site acquire certain personal data, the transmission of which to the Responsible Party is implicit in the Internet communication protocols.
This is information that is not collected to be associated with identified subjects, but which by its very nature could, through elaboration and association with data held by third parties, allow users to be identified.
This category of data includes the addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method of submitting the request to the server, the size of the response file, the numerical code indicating the status of the server response (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
This data is used only to obtain anonymous statistical information on the use of the site and to monitor its operation; it is deleted immediately after processing. This data can also be used to identify responsibility in the event of alleged computer fraud against the website.
2.2 Data provided voluntarily by the user
The Manager processes the following personal data provided by you after entering the website’s input masks:
– personal data e.g. first name, last name, address, telephone number, e-mail address, occupation and other contact details, images, vehicle owned, renewal plans, etc.
– data on the contract concluded,
– bank details (e.g. your bank details).
3. What is the purpose and lawfulness of the processing of your personal data?
The Manager processes the personal data that you provide after having entered the input forms provided on the website for the purposes indicated below.
3.1 Provision of services and sale of products
The person in charge intends to process your personal data to allow you to access our website, for purposes strictly related to the provision of online services, offered in turn by the website, and in particular to respond to your requests to send information material on the products and services offered by the person in charge, to manage requests for “test drives”, to allow access to promotions and offers present on the website, to accommodate your request to participate in our community, as well as to provide you with assistance that you may request from our customer service.
Nature of data provision: Optional.
Consequences of refusal to provide data: Refusal to provide data would make it impossible for the Responsible Party to respond to the requests cited in the previous paragraph.
Lawfulness of processing: article 6, paragraph 1, letter b) of the RGPD. Your prior consent to the processing is therefore not required.
Duration of storage of personal data: For these purposes, your personal data will be processed for the time strictly necessary to satisfy your request; it will then be stored for the period of time provided for by the relevant regulations, after the conclusion of the said request.
3.2 Marketing activity on products and services similar to those already requested by the user
The person in charge intends to process your personal data in order to send you commercial communications of products and services similar to those requested and offered by the person in charge also through the responsible subjects appointed for this purpose in accordance with art. 28 of the GDPR.
Purpose of the processing: Sending of advertising and promotional material and sale of products as well as market research and/or commercial communications.
Nature of data provision: Optional.
Consequences of refusal to provide data: Failure to provide the data will mean that the responsible party will not be able to send you promotional and marketing communications.
Lawfulness of processing: Legitimate interest.
Duration of storage of personal data: For this purpose, your personal data will be processed until you decide to object to their processing and/or obtain the cessation of said processing at any time.
3.3 Marketing activity
The data controller intends to process your personal data in order to send you commercial communications relating to any products and services offered by the data controller itself also through the responsible subjects appointed for this purpose in accordance with art. 28 of the RGPD.
Purpose of the processing: Sending of advertising and promotional material and sale of products as well as market research and/or commercial communications.
Nature of data provision: Optional.
Consequences of refusal to provide data: Failure to provide the data will mean that the responsible party will not be able to send you promotional and marketing communications.
Lawfulness of treatment: Consent
Duration of storage of personal data: For this purpose, your personal data will be processed until you decide to object to their processing and/or obtain the cessation of said processing at any time.
4. Methods of processing your personal data
The processing of your personal data will be carried out in accordance with the provisions of the RGPD, through paper, computerized and telematic media with logic closely related to the purposes indicated, and, in any case, through appropriate methods to ensure the security and confidentiality provided for in Article 32 of the RGPD.
5. Recipients of your personal data and subjects that may come to know them
For the purposes described in paragraph 3, your personal data will be known to the employees, related personnel and collaborators of the Manager, who operate as authorized subjects of the processing of personal data.
Your personal data may also be transmitted to and processed by third parties falling into the following categories
a) subjects managing the website of the Responsible;
b) companies that manage the IT system of the Responsible Party;
c) companies and legal and/or tax consultants;
d) authorities and supervisory bodies and, in general, public or private subjects with public functions;
e) suppliers of the Responsible Party;
f) to other companies of Villa L’envol, for marketing purposes, direct sales, market research, statistics evaluating the degree of customer satisfaction with the services, products and brands distributed by Villa l’envol and/or other companies of Villa l’envol, as well as transmission to external subjects (suppliers for example), if this is necessary to enable you to benefit from our services
You may at any time exercise the right to revoke your consent. The person in charge will not be able to continue to use your personal data for purposes for which you have refused your consent.
In some cases, the subjects belonging to the above-mentioned categories operate as separate Data Processors, in other cases as Data Processors specially appointed by the Controller in accordance with Article 28 of the GDPR.
The complete and updated list of subjects that may receive your personal data is available from the Head Office of the Responsible Party or by contacting the DPO.
Your personal data will not be transmitted to third parties located outside the EU and will not be subject to dissemination.
6. Data of minors
The Manager does not process personal data of individuals under the age of 16 for the purposes mentioned in paragraphs 3.1. and 3.2.
If the user declares to be under 16 years of age, the fields related to the collection of consent will already be entered in a negative way.
7. Geolocation data
The site may collect and process geolocation data for the provision of services requested by the user, but only with the prior consent of the person concerned, which can always be revoked. In this case, your consent will be requested through a pop-up window.
8. Rights of the data subject
With regard to the processing described in this Information, as a “data subject” you may exercise, under the conditions provided for by the RGPD, the rights provided for by articles ranging from 15 to 21 of the RGPD and in particular:
– The right of access- Article 15 of the RGPD the right to obtain confirmation as to whether or not your personal data is being processed and to obtain access to your personal data – as well as a copy – and the communication, in particular, of the following information:
• purpose of the processing
• categories of personal data processed
• current and future recipients of your personal data
• duration of data retention or the criteria used
• rights of the data subject (rectification, erasure of personal data, restriction of processing and right to object to processing ;
• the right to lodge a complaint;
• the right to receive information on the origin of his or her personal data if they have not been provided by the data subject;
• the existence of an automated decision-making process, including profiling;
– The right of rectification – Article 16 of the GDPR: the right to obtain, without undue delay, the rectification of inaccurate personal data and/or the insertion of incomplete personal data ;
– The right to erasure (the right to be forgotten) – Article 17 of the GDPR: the right to obtain, without undue delay, the erasure of personal data when
a) the data are no longer necessary for the purposes for which they were collected or otherwise processed ;
b) you have revoked your consent and there is no longer any legal basis for processing them;
c) you have successfully objected to the processing of your personal data;
d) the data has been processed unlawfully;
e) the data must be deleted to comply with a legal obligation;
f) the personal data was collected for the purpose of offering services of the company of the Responsible person referred to in Article 8, paragraph 1 of the GDPR.
The right to erasure does not apply if the processing is necessary to comply with a legal obligation or the performance of a task carried out in the public interest or in the exercise of official authority or for the establishment, exercise or defense of legal claims.
– the right to restrict processing – Article 18 of the GDPR: the right to obtain the restriction of processing, when
a) the data subject disputes the accuracy of the personal data;
b) the processing is unlawful and the data subject objects to the erasure of the personal data, requesting to limit their use;
c) the data controller no longer needs the personal data for the purposes of processing, but the data are still necessary for the data subject to establish, exercise or defend his or her legal rights;
d) the data subject has objected to the processing, as mentioned above, pending verification on the predominance of the legitimate grounds of the controller over those of the data subject;
– the right to data portability – Article 20 of the GDPR: the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning him/her provided to the Controller and the right to transmit such data to another controller without the controller to whom the personal data have been communicated hindering this, if the processing is based on consent and is carried out using automated processes. The data subject also has the right to have his or her personal data transmitted directly from one controller to another, where technically possible;
– the right to object – Article 21 of the GDPR the right to object, at any time, to the processing of your personal data based on the lawfulness of the legitimate interest, including profiling, unless the Responsible Party demonstrates compelling legitimate grounds for the processing which override the interests and rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims..;
– the right to file a complaint with the French Data Protection Authority, CNIL, 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07
The aforementioned rights may be exercised vis-à-vis the Manager, by contacting the supervisory authority mentioned in the previous paragraph. The Responsible Party will deal with your request and will provide you, without undue delay and, in any case, not later than one month from its receipt, with the information on the action taken regarding your request.
The exercise of your rights as a data subject is free of charge according to Article 12 of the GDPR. However, in the case of requests that are manifestly unfounded or excessive, in particular because of their repetitiveness, the Responsible Entity may request a reasonable payment from you by way of fees, in view of the administrative costs incurred in handling your request; it may also not respond to your request.
Finally, we inform you that the Manager may request other information necessary to confirm the identity of the person concerned.
COOKIE POLICY
We inform the user that Villa L’envol uses cookie technology to make navigation more pleasant for all users who visit the site.
Cookies are small files that the site visited by the user sends to the browser, where they are memorized and then retransmitted to the site after the user’s visit.
Cookies are used for a variety of purposes, including performing computer authentications; tracking sessions; storing information about specific configurations of users accessing the server.
By allowing the site to recall the user’s data for the duration of the visit or for subsequent visits, cookies allow the user to surf the pages in an efficient way, memorizing their preferences, and allowing the user to interact with social networks such as Facebook, Twitter, Linkedin, Google +, Instagram while offering Google Maps services.
Cookies may also be used to store the user’s login data and make the user’s recognition automatic (and therefore the user will not need to enter his username and password each time to access the site).
Data processing is carried out with electronic or, in any case, automated, computer or telematic tools, with logic strictly related to the above-mentioned purposes and, in any case, in such a way as to guarantee the security and confidentiality of the data.
Technical cookies (which do not require your consent)
According to the regulations in force in France for the use of cookies, the express consent of the user is not always required. In particular, technical cookies, i.e. those used solely to transmit a communication over an electronic communication network or to the extent strictly necessary to provide a service explicitly requested by the user. These are, in other words, cookies that are essential for the functioning of the site or necessary to carry out activities requested by the user.
Among the technical cookies, which do not require express consent for their use, the Italian Guarantor for the Protection of Personal Data also includes:
– analytical cookies used directly by the site administrator to collect information, in aggregate form, on the number and manner of visiting the site of users ;
– navigation or session cookies (to authenticate oneself, to make a purchase, etc.),
– Functionality cookies, which allow the user to navigate according to a series of selected criteria (for example, language, products selected for purchase) in order to improve the service provided.
Profiling cookies (which require your consent)
Our site also uses profiling cookies which we can only install with your consent.
Profiling cookies are used to create profiles of users and are used to send advertising messages according to the preferences expressed by the user while browsing the web. These cookies are used to present content more adapted to the users and their interests. They may be used to display targeted advertisements or to limit the number of times advertisements are viewed. Due to the particular invasiveness that these devices can have in the private sphere of the users, the European and French regulations provide that the user must be informed in an appropriate way about the use of these and thus express his valid consent. The profiling cookies require the prior acquisition of the informed consent of the user, which the site acquires in the forms provided for by the regulations through the banner that is displayed on the first visit and through the Information that allows the user to give or refuse his consent.
First and third party cookies
If the cookies received by the user have been directly installed by the manager of the site that the user is visiting, they are first-party cookies. While browsing the site, the user may also receive cookies from other sites or servers (third-party cookies) which may contain certain elements (such as photos, maps, sounds, specific links to pages in other domains) present on the site visited. In this case, they are cookies that are set from a different website than the one the user is visiting.
Blocking cookies
The user can select which cookies to authorize through the specific procedure provided below, as well as authorize, block or delete (completely or partially) the cookies through the specific functions of the navigation program (browser): however, if all or some cookies are deactivated, it is possible that the site cannot be consulted or that certain services or functions of the site are not available or do not function correctly and/or the user could be forced to modify or manually enter certain information or preferences each time he/she visits the site.
If the user wishes to change their cookie settings, the following are instructions on how to do so with the four most popular browsers:
Microsoft Internet Explorer
Click on the “Tools” icon in the upper right corner and select “Internet Options”. In the pop up window select “Privacy”. Here you can adjust your cookie settings.
Google Chrome
Click on the wrench in the upper right corner and select “Settings”. Then select “Under the hood” and change the “Privacy” settings.
Mozilla Firefox
From the tabbed menu in the top left corner select “Options”. In the pop up window select “Privacy”. Here you can adjust your cookie settings.
Safari
From the tabbed menu in the top right corner select “Preferences” Select “Security” and you can adjust your cookie settings.
As in the banner that appears on the first visit to the site, consent to the use of all cookies will be provided by the user by selecting the virtual acceptance keyboard (e.g. an OK, a check mark, etc.) or by continuing to browse the site (e.g. by ignoring the banner/pop-up and performing other operations).
The user will also have free access to the link with the Information, with all the information related to cookies (description, purposes and conservation), in which the visitor of the site will have the possibility to express his consent only for certain categories of cookies.
