Privacy policy

Information on the processing of personal data
Articles 13 and 14 of GDPR 2016/679

Dear visitor,

The website www.homiday.it and www.cerranoservice.it informs you that, pursuant to Articles 13 and 14 of EU Regulation 2016/679, the personal data provided by you while browsing the website will be processed in accordance with the principles of fairness, lawfulness, transparency, protection of confidentiality and protection of your rights, in full compliance with the current legislation on the protection of personal data.

Here is how we do it:

Our duty and your privacy

This information concerns you if you are visiting our website.

Who we are

In managing your data relating to activities involving requests for information using the template in the contact section, the Data Controller is: CERRANO SRL.

Appointment of the Data Protection Officer — DPO

The Data Controller has appointed a DPO, identified as the company Element srl, which may be contacted at the following address: [email protected].

Our responsibility

If you are already a customer or are simply visiting the website, we inform you that your data will be lawfully processed according to our decisions regarding the methods and purposes of the processing itself, which are better illustrated in the following paragraphs.

Your commitment

We only ask you to read this privacy notice carefully so that you are fully informed about the ways in which we process your personal data.

When and how we collect your personal data

As soon as you interact with the website, we begin collecting data. Such collection may take place either through your specific communication or automatically during your use of the website.

Here is how the collection takes place:

Your identifying data
Name, surname, date of birth, address and e-mail address: DATA YOU PROVIDE TO US

Browsing the website:
DATA WE COLLECT AUTOMATICALLY

Your telephone number:
DATA YOU PROVIDE TO US — only if provided by you voluntarily

Use of the website:
DATA YOU PROVIDE TO US + DATA WE COLLECT AUTOMATICALLY

Requests for information and quotations:
DATA YOU PROVIDE TO US

The type of data we collect
Contact details

Your name and surname, telephone number and e-mail address, only if you personally provide them to us.

Identifying data

Your anonymised IP address, browser type and version, time zone, types of plug-ins, geolocation information concerning the place where you may be located, operating system and related versions, etc.

Data relating to use of the website

Your browsing path within the website — clickstream analysis — your views of products and services, page loading and response times, download errors, browsing duration, behaviour and other actions, etc.

And what about special categories of data?
Article 9 of GDPR 2016/679

We do not collect any type of sensitive data that may concern you, namely personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health, or data concerning a person’s sex life or sexual orientation.

Why do we collect your data?

Data deriving from browsing are processed in anonymous form in order to verify the operation of the website and to manage your bookings.

Your contact details are processed, if you personally provide them to us, exclusively in order to respond to one of your questions and to reply to a request for a quotation submitted by you. The legal basis in these cases is legitimate interest.

The data will be processed for a period equal to the validity of the quotation and, in any case, for no longer than 6 months from receipt of the e-mail or completion of the contact form.

What we mean by legal basis
Legitimate interest

Your request for information or for a quotation makes it necessary to process the data in order to follow up on the request.

In order to provide a better service, we send e-mails to data subjects who have requested a quotation, concerning special offers for services similar to those covered by the request.

In this case, pursuant to Article 130, paragraph 4 of Legislative Decree 196/03, as amended, and Recital 47 of GDPR 2016/679, the legal basis is legitimate interest.

In any case, there is no automated decision-making process and the data subject may object at any time.

Your consent is not required for any of these purposes.

How we process your data

Data processing is carried out mainly by electronic means.

Your choices and your rights
Your choices

You may decide not to provide us with your data.

In this case, you may continue to browse our website, but we will not be able to provide you with any information.

You may disable cookies by changing your browser settings.

You may block cookies by setting your browser so as to prevent them from being stored.

You may also delete cookies directly from your browser settings. If you disable cookies, you may continue to browse our website, but some of our services may not work properly. To learn more, please consult the cookie policy.

Your rights

You may always exercise your rights by sending us an e-mail at the following address:

[email protected]

You have the right to access information concerning you

This entails the right to ask us for further information regarding:

the categories of data we process;
the purposes of the processing;
the categories of any recipients to whom the data may be disclosed;
the data retention period or, failing that, the criteria used to determine that period;
the other rights concerning the use of your data.

We will provide you with the information within one month of your request, unless this adversely affects the rights and freedoms of other persons — for example, the confidentiality of another person or intellectual property rights — or where legal obligations prevent us from doing so.

We will inform you if we are unable to fulfil your request for such reasons.

You have the right to obtain the correction of your data if they are inaccurate or not up to date
You have the right to obtain the erasure of your personal data — right to be forgotten

You may, at any time, ask us to delete the personal data concerning you that we hold, should the retention of your personal data no longer be necessary for the purposes of the processing.

You have the right to transfer your data to another operator — data portability

We will provide you with a copy of your data in an interoperable format if you wish to transfer them to another operator.

At your request, and where technically possible, we will arrange for the data to be transferred directly to the new operator.

We will not carry out any transfer if the portability of your data would also involve the disclosure of personal data relating to other individuals.

You have the right to object to the processing of your personal data carried out by us

You may always contact the Supervisory Authority to lodge any complaints you may have. Before doing so, please contact us! We will be happy to resolve any issues relating to the processing of your personal data.

You have the right to object to the use of your data through automated decisions, including profiling

We may use your data to identify information that may be potentially relevant to you — for example, to send you personalised e-mails based on your preferences as identified by us.

Otherwise, we will use your data only to provide you with our services.

We guarantee your rights even if we process your personal data on behalf of third parties

If we process your data on behalf of third parties, we guarantee that requests relating to the exercise of your rights will be forwarded to them without undue delay.

What level of security do we adopt to process your data?

We guarantee that the processing of your data takes place with the highest level of security: we have adopted appropriate physical, IT and organisational measures to ensure the protection of your data.

However, we must remind you that:

You provide us with your data at your own risk. We do our utmost but, unfortunately, in the current state of technology, no data transmission is 100% secure.
You must always keep your username and password safe; you are the only person who knows them.
If you believe that your data have been breached, we invite you to contact us immediately at: [email protected]

Pursuant to Article 17 of the General European Regulation on the Protection of Personal Data 679/2016, referred to as “GDPR”, you may request the erasure of all your personal data from the Data Controller by completing the form available on the website of the Italian Data Protection Authority, downloadable from this LINK, and sending it by e-mail to the address [email protected].

Where are your data stored?

Your data are processed within the European Union and in the other data facilities managed by the third parties identified below.

From the moment you provide us with your personal data, you also consent to their transfer, storage and processing by us.

Should we need to transfer and/or store your data outside the EU, you will be duly informed in this regard. In such cases as well, we will adopt all appropriate measures to ensure the highest level of protection.

Third parties that may process your data

The personal data provided by you may be disclosed to public, institutional or professional entities authorised by law to request their acquisition, as well as, exclusively for the purposes set out in paragraph 2), to third-party companies or professionals who guarantee compliance with the current legislation on the protection of personal data.

Without the need for express consent — pursuant to Article 6 of GDPR 2016/679 — the Data Controller may disclose your data, for the purposes referred to in Article 2), to Supervisory Bodies, Judicial Authorities, insurance companies for the provision of insurance services, as well as to those entities to whom disclosure is required by law for the fulfilment of the aforementioned purposes.

Such entities will process the data in their capacity as independent Data Controllers.

The detailed list of third parties to whom the Data Controller, always in compliance with the purposes highlighted above, will disclose the personal data provided by you, is held by the Data Controller and will be communicated upon simple request.

You may request the list of third parties directly from the Data Controller by sending a request to the address indicated above.