Privacy Policy

The protection of our website Users' privacy is an absolute priority for us.CA.PRI S.R.L., pursuant to Articles 13 and 14 of EU Regulation 2016/679 (the "GDPR" – General Data Protection Regulation), wishes to inform you, in accordance with Article 13 of EU Regulation 2016/679 (hereinafter "GDPR" or "Regulation") and Legislative Decree 196/2003 (Privacy Code), as amended by Legislative Decree 101/2018 and subsequent amendments, regarding the purposes and methods of processing the personal data (hereinafter "Data") of users who consult the following websites:

https:// laquacollection.it

https:// laquacountryside.it

https:// laquabythesea.it

https:// laquabythelake.it

https:// villacrespi.it

https:// cannavacciuologroup.it

NB: This privacy information is provided solely for the aforementioned websites and not for other websites that may be accessed by the user via links. By connecting to the site and, where applicable, providing their data or expressing consent to its processing (when requested for specific purposes), the User declares to be over 16 years of age.

A) PARTIES INVOLVED IN DATA PROCESSING
The Data Controller is CA.PRI S.R.L., Tax Code 01938520036, with registered office in VIA GIUSEPPE FAVA 18, 28016 – Orta San Giulio (NO), Italy, tel.: +39 0322 911902, e-mail: info@villacrespi.it, certified e-mail (PEC): caprisrlorta@legalmail.it.

Studio Bagaini e Rillo – Viale Marazza 4, 28021 Borgomanero (NO) VAT No. 01699250039, and New Sistem s.r.l. – Viale Marazza 4, 28021 Borgomanero (NO) VAT No. 01622410031, represented by Ms. Maria Silvana Rillo, tax code RLLMSL61C46H632Y, has been appointed by the controller as the Data Protection Officer (DPO) for CA.PRI S.R.L.

Joint Data Controller: Cannavacciuolo Consulting s.r.l. Unipersonale, with registered office in Viale Marazza 4, 28021 Borgomanero (NO), certified e-mail (PEC): cannavacciuoloconsultingsrl@legalmail.it.

The complete and updated list of Data Processors is available at the Controller’s registered office. For information and the exercise of rights, the data subject may also write to: privacy@cannavacciuologroup.it.

B) PERSONAL DATA SUBJECT TO PROCESSING
The Controller (and any Processors) may collect and process the following User data through our website:

Common Personal Data: Data suitable for identification and for the contractualization of requested services/products: name and surname, e-mail address, telephone number, tax data (where invoicing is required), and additional identification data whose transmission to the competent Police Headquarters is mandatory pursuant to Art. 109 R.D. n. 773/1931 (Consolidated Law on Public Safety) and Art. 2 of the Technical Annex to D.M. 07.01.2013, as well as any further personal data voluntarily provided by the User for assistance and information.

Payment Data: Data regarding the payment method used will not be processed by the Controller but only by the authorized provider through specific secure protocols (see the selected provider's privacy policy).

Special Categories of Data: For booking purposes, data concerning health (e.g., food allergies or intolerances) and other data related to specific dietary regimes followed by the User may be collected.

C) PURPOSES, LEGAL BASIS, AND NATURE OF THE PROCESSING
The purposes for which the data is processed are:

Management of booking requests for the Restaurant;

Management of booking requests for the Hotel;

Fulfillment of obligations imposed by current legislation (accounting, tax, etc.);

Fulfillment of legal obligations regarding the identification of guests in accommodation facilities and reporting names to the competent local police authorities (Art. 109 R.D. n. 773/1931);

Sending newsletters containing commercial proposals related to the Controller's activities;

Management of website statistics based on non-anonymized data.

Legal Bases:

Purposes 1 & 2: Execution of a contract or pre-contractual measures (Art. 6.1.b GDPR). For special categories of data (health), the basis is the User’s free and specific consent (Art. 6.1.a GDPR).

Purposes 3 & 4: Compliance with a legal obligation (Art. 6.1.c GDPR).

Purposes 5 & 6: Free and specific consent of the User (Art. 6.1.a GDPR).

Nature of Provision: Providing data for purposes 1, 2, 3, and 4 is a contractual or legal requirement; failure to provide it will make it impossible to provide the service. For purposes 5 and 6, provision is optional.

D) RECIPIENTS
Data may be communicated to third parties (external collaborators, suppliers, etc.) appointed as Processors, or to public authorities (Police, Ministry of Interior) for Purpose 4.

E) TRANSFERS
Data will not be transferred to third countries that do not comply with the conditions set out in Art. 45 et seq. of the GDPR.

F) DATA RETENTION
Data will be processed in accordance with the principles of Art. 5 GDPR and stored for the time strictly necessary:

Bookings (1 & 2): For the duration of the contract and until the expiration of the statute of limitations for potential legal claims.

Legal/Tax (3 & 4): 10 years as required by law (Art. 2220 of the Italian Civil Code).

Marketing/Stats (5 & 6): Until the purpose is achieved or the User withdraws consent.

G) YOUR RIGHTS
Users may exercise their rights (Articles 15-21 GDPR), including the right to access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection, and withdrawal of consent. Requests can be sent to privacy@cannavacciuologroup.it.