1) Introduction

Explore Lake House takes user privacy seriously and is committed to respecting it. This Privacy Policy describes the personal data processing activities carried out through the website www.esploralakehouse.it and the related commitments undertaken in this regard.

2) Type of data processed

Visiting and consulting our website do not involve the collection and processing of the user’s personal data except for navigation data and cookies as specified below. In addition to the so-called “browsing data” (see below), personal data voluntarily provided by the user may be processed when the user interacts with the functions of the Site or requests to use the services offered on the Site.

3) Cookies and navigation data

The Site uses “cookies”. By using the site, you consent to the use of cookies in accordance with this Privacy Policy. Cookies are small files stored on the hard disk of the user’s computer. There are three macro-categories of cookies: technical, analytical and profiling cookies. Technical cookies are necessary for the correct functioning of a website and to allow user navigation; without them the user may not be able to view the pages correctly or use some services. Analytical cookies allow the collection of statistical and aggregate information (for example, the number of visitors to the website); Profiling cookies have the task of tracking the user’s browsing in order to create profiles and behavior models and send advertising messages in line with the preferences expressed by the user while browsing.

Cookies can also be classified as:

– “session” cookies, which are deleted immediately when the browser is closed;

– “persistent” cookies, which remain within the browser for a certain period of time. They are used, for example, to recognize the device that connects to a site, facilitating authentication operations for the user;

– “own” cookies, generated and managed directly by the manager of the website on which the user is browsing;

– “third parts” cookies, generated and managed by parties other than the operator of the website on which the user is browsing.

COOKIES	TIPOLOGIA	FINALITA’	PRIVACY POLICY
PHPSESSID	Third parts	Necessary for the WordPress CMS to identify a user’s single session	SESSION DURATION
__cookienotice	Third parts	Used to store preferences regarding consent to the use of cookies	365 DAYS DURATION
wordPress_test_cookie	Third parts	Permanent cookie generated by the cookie plugin which allows you to know whether or not a visitor has clicked on the “OK” button of the cookie information. It does not contain any user-identifying information.
swpm_session	Third parts	Cookie used to identify the PHP session.	SESSION DURATION
wordpress_	Third parts	WordPress CMS cookies. Cookie generated for logged in users.	SESSION DURATION
wordpress_logged_in	Third parts	Technical cookies used by the WordPress CMS platform to manage interaction with the user.	SESSION DURATION
WP Store Locator	Third parts	User geo localization.	SESSION DURATION
__utma __utmb __utmc	Third parts	Google Analytics.	SESSION DURATION

4) Cookies used on the Site

The Site uses the following types of cookies:

1) own session and persistent cookies, necessary to allow navigation on the Site, for internal security and system administration purposes;

2) third-parts, session and persistent cookies, necessary to allow the user to use multimedia elements present on the Site, such as images and videos;

3) third-parts analytical cookies, appropriately anonymized, used by the Site to send statistical information to the Google Analytics system. The cookies used pursue exclusively statistical purposes and collect information in aggregate form. Through a pair of cookies, one of which is persistent and the other session (which expires when the browser is closed), Google Analytics also saves a log with the start times of the visit to the Site and exit times. You can prevent Google from collecting data via cookies and subsequent data processing by downloading and installing the browser plug-in from the following address: http://tools.google.com/dlpage/gaoptout?hl=it

The Site does not contain links to other sites (so-called third-parts sites).

5) How to disable cookies in browsers

Google Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=it

Mozilla Firefox: https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie

Safari: https://support.apple.com/it-it/guide/safari/sfri11471/mac

Internet Explorer: https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies

Opera: https://help.opera.com/en/latest/web-preferences/

6) Storage of personal data

Personal data is stored and processed through IT systems owned by the Aruba spa company and managed by Explore Lake House or by third-parts technical service providers; for further details please refer to the “Scope of accessibility of personal data” section below. The data is processed exclusively by specifically authorized personnel, including personnel in charge of carrying out extraordinary maintenance operations.

7) Purposes and methods of data processing

Explore Lake House may process the user’s common and sensitive personal data for the following purposes: use by users of services and features on the Site, management of requests and reports from its users, sending newsletters, management of applications received through the Site, etc.

Personal data is processed both in paper and electronic form and entered into the company information system in full compliance with EU Reg. 2016/679, including security and confidentiality profiles and inspired by the principles of correctness and lawfulness of processing. In compliance with EU Reg. 2016/679, the data is kept and stored for the time necessary to execute the contract and comply with tax, civil and dispute management legislation.

8) Security and quality of personal data

Explore Lake House is committed to protecting the security of the user’s personal data and complies with the security provisions established by applicable legislation in order to avoid data loss, illegitimate or illicit use of the data and unauthorized access to the same. Furthermore, the information systems and computer programs used are configured in such a way as to minimize the use of personal and identifying data; such data are processed only to achieve the specific purposes pursued from time to time. You can help Explore Lake House update and keep your personal data correct by communicating any changes to your address, title, contact information, etc.

9) Scope of communication and data access

The user’s personal data may be communicated to:

• all subjects whose right to access such data is recognized by virtue of regulatory provisions;

• to our collaborators, employees, in the context of their respective duties;

• to all those natural and/or legal persons, public and/or private when the communication is necessary or functional for carrying out our business and in the ways and for the purposes illustrated above.

10) Nature of provision of personal data

The provision of some personal data by the user is mandatory to allow us to manage communications, requests received from the user or to contact the user himself to follow up on his request. The provision of personal data by the user for marketing purposes, as specified in the “Purposes and methods of data processing” section is optional and the refusal to provide them will have no consequences. The consent given for marketing purposes is intended to be extended to the sending of communications carried out through both automated and traditional methods and/or means of contact, as exemplified above.

11) Rights of the interested party

11.1 Art. 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679 The interested party has the right to obtain from the data controller confirmation as to whether or not personal data processing is in progress which concern and in this case, to obtain access to personal data and the following information:

a) the purposes of the processing;

b) the categories of personal data in question;

c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients are from third countries or international organisations;

d) the expected retention period of personal data or, if this is not possible, the criteria used to determine this period;

e) the existence of the right of the interested party to ask the data controller to rectify or delete personal data or to limit the processing of personal data concerning him or to oppose their processing;

f) the right to lodge a complaint with a supervisory authority;

g) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party.

11.2 Right referred to in art. 17 of EU Regulation 2016/679 – right to cancellation (“right to be forgotten”) The interested party has the right to obtain from the data controller the deletion of personal data concerning him without unjustified delay and the data controller has the obligation to delete personal data without unjustified delay, if one of the following reasons exists:

a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

b) the interested party withdraws the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing ;

c) the interested party objects to the processing pursuant to Article 21, paragraph 1, and there is no overriding legitimate reason to proceed with the processing, or objects to the processing pursuant to Article 21, paragraph 2;

d) the personal data have been processed unlawfully;

e) the personal data must be erased to comply with a legal obligation under Union or Member State law to which the data controller is subject;

f) the personal data were collected in relation to the offer of information society services referred to in Article 8, paragraph 1 of EU Reg. 2016/679

11.3 Right referred to in art. 18 Right to limit processing

The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:

a) the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;

b) the processing is unlawful and the interested party opposes the deletion of the personal data and instead requests that their use be limited;

c) although the data controller no longer needs them for the purposes of the processing, the personal data are necessary for the interested party to ascertain, exercise or defend a right in court;

d) the interested party has objected to the processing pursuant to Article 21, paragraph 1, EU Regulation 2016/679 pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

11.4 Right referred to in art.20 Right to data portability

The interested party has the right to receive the personal data concerning him/her provided to a data controller in a structured, commonly used and machine-readable format and has the right to transmit such data to another data controller without impediments from part of the data controller.

12. Revocation of consent to processing

The interested parts has the right to revoke consent to the processing of his/her personal data by sending a registered letter with return receipt to the following address: Explore Lake House, Via Sarentina, 180 – 67030 Barrea (AQ), accompanied by a photocopy of his/her identity document, with the following text: “withdrawal of consent to the processing of all my personal data”. At the end of this operation, your personal data will be removed from the archives as soon as possible.

If you wish to have more information on the processing of your personal data, or to exercise the rights referred to in point 7 above, you can send a registered letter with return receipt to the above address. Before we can provide you with, or change any information, we may need to verify your identity and answer some questions. An answer will be provided as soon as possible.