INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF THE CODE RELATING TO PERSONAL DATA (LEGISLATIVE DECREE NO. 196/2003 HEREINAFTER THE “CODE”), AS AMENDED BY LEGISLATIVE DECREE NO. 101/2018 AND ARTICLE 13 OF THE EUROPEAN REGULATION (GDPR 679/2016 ALSO THE “REGULATION”) AND SUBSEQUENT NATIONAL ADAPTATION REGULATIONS.
INTRODUCTION
As the data controller DESIGN CLUB REAL ESTATE SRL VAT 03662051204, with registered office at Via Castiglione n. 6, Bologna (Bo) 40124, email: info@designclubcollection.com, we inform you that, as a result of consulting and visiting this website, the company obtains personal data (any information concerning an identified or identifiable natural person) related to navigation.
The data controller may modify, integrate, or periodically update this Information, also considering any changes in applicable regulations or measures by the Guarantor for the Protection of Personal Data. Therefore, the interested party is invited to periodically check this information to be aware of any changes.
Therefore, in full compliance with the principles of fairness, lawfulness, and transparency, the data controller provides the following information.
With this document (“Information”), the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing your personal data and the rights granted to you by Regulation (EU) 2016/679 concerning the protection of individuals with regard to the processing of personal data and the free movement of such data (“GDPR”). This Information may be supplemented by the Data Controller where any additional requested services require further processing.
Therefore, in full compliance with the principles of fairness, lawfulness, and transparency, the data controller provides the following information.
- DATA CONTROLLER
The Data Controller is DESIGN CLUB REAL ESTATE SRL VAT Number 03662051204, headquartered at Via Castiglione n. 6, Bologna (Bo) 40124, email: info@designclubcollection.com.
- TYPES OF PROCESSED DATA
The controller processes identifiable personal data related to browsing and consulting our portal (name, surname, email address, address, telephone number, IP address, operating system, type and version of the browser, server used).
These data are voluntarily provided by the User during navigation for the purposes listed below and essentially to obtain information or clarification, to receive a quote, to allow the data controller to verify user interactions on the site.
DESIGN CLUB REAL ESTATE SRL may use the data provided by you to send news, notifications (messaging), and allow participation in specific additional services such as receiving newsletters, for commercial communications, and for sending advertising material.
The sending of newsletters, messages to the address provided by you is subject to consent.
In any case, you can refuse to receive communications from DESIGN CLUB REAL ESTATE SRL at any time.
Any commercial communication sent by DESIGN CLUB REAL ESTATE SRL will provide you with the information and means necessary to refuse it.
The controller does not possess any of your sensitive data (or belonging to particular categories of data under Article 9 of the Regulation) nor any biometric, genetic, or judicial data.
The data will be processed in compliance with the principles of purpose limitation, data minimization, accuracy, storage limitation, relevance, non-excess, and protection of confidentiality.
In summary, the processing activities carried out are aimed at acquiring the following personal data:
| Category | Type |
| Common Data | Personal identification data, email address, telephone number, IP address. |
- PURPOSE OF PROCESSING AND LEGAL BASIS
USERS.
- Website Consultation.
The processing of personal data is necessary to respond to specific requests from the data subject regarding information, assistance, or commercial proposals on a product. The transmitted data may also be processed to comply with obligations provided for by laws, regulations, and/or community regulations, by supervisory/control bodies, or other authorized authorities.
The legal basis is the execution of a contract and/or compliance with legal obligations.
Nature of the provision: Mandatory – Failure to provide the data will make it impossible for the controller to follow up on your pre-contractual/contractual requests.
Processing Method: The processing is carried out using automated computer tools.
Storage period: Personal data will be processed and stored for the time strictly necessary to provide you with the requested information and/or provide a quote.
- Navigation Data
The computer systems and software procedures used to operate this website acquire some personal data during their normal operation, the transmission of which is implicit in the use of Internet communication protocols.
These are pieces of information not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the operating system and the user’s computer environment.
The data is processed to allow user navigation on this website. Data necessary for the use of web services are also processed to obtain statistical information about the use of services as well as to check the proper functioning of the services offered. The data will be used to ascertain responsibility in case of hypothetical computer crimes against the site.
Legal Basis: The processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail, taking into account the reasonable expectations of the data subject and the activities strictly necessary for the operation of the site and navigation itself (Article 6, paragraph 1 letter f and Recital 47 of the GDPR). The provided data will be processed for the following purposes:
- Website maintenance
- Illicit use of the site
- Anonymous statistical analysis of site usage.
The legal basis of the processing is legitimate interest.
Nature of the provision: The provision is necessary for the navigation of the website.
Processing Method: The processing is carried out using automated computer tools.
Period of personal data storage: Data is retained for 7 days.
- Marketing Purposes
With the prior consent of the data subject, DESIGN CLUB REAL ESTATE SRL will process the user’s personal data to send informative and promotional communications related to its products and/or services, events, as well as for direct sales purposes, for conducting market research and customer satisfaction via email.
The legal basis for this processing is the express consent of the user.
The user can revoke the consent given at any time and/or object, at any time, to the processing of their data for marketing purposes via email, at the following address: info@designclubcollection.com.
Provision of data for marketing purposes is optional, and the data will be processed until consent is revoked and/or the right to object is exercised, and in any case, no later than 5 years from data collection, reserving the right, before the expiration of this term, to request the user’s consent renewal and/or data update.
- Cookies
Information collection about users will also be carried out through cookies. DESIGN CLUB REAL ESTATE SRL will use cookies to allow the user to access the site and to enhance and personalize their browsing experience. To learn about the cookie policy, click here.
- DATA TRANSFER OUTSIDE THE EU
Personal data is stored at the company’s headquarters in Bologna (Bo), Via Quattro Novembre n. 10, and therefore, within the European Union, as well as at the web hosting data center.
- RECIPIENTS
The data may be made accessible for the purposes outlined in point 3 to the following categories of subjects:
- a) Employees and collaborators previously authorized for processing;
- b) Third-party companies (Orco SRL) or other subjects (indicatively, companies providing IT services or dealing with billing requirements) that carry out outsourced activities on behalf of the data controller, in their capacity as external data processors;
- c) Website hosting companies.
An updated list of external data processors can be requested from the data controller’s contact details.
The data may also be disclosed to:
- Supervisory bodies;
- Judicial authorities;
- Public authorities;
All subjects to whom communication is mandatory by law for the fulfillment of the purposes described in point 2. These subjects will process the data as independent data controllers.
Your data will not be disclosed.
- SOCIAL PAGE
META
When a user uses the Page managed by the Data Controller, META (“Social Media”) collects information such as the types of content viewed or interacted with, actions taken, and information about the devices used (IP addresses, operating systems, browser types, language settings, cookie data).
Page Insights are aggregated statistics created from specific events recorded by Meta’s servers when users interact with the Pages and the content therein.
As explained in Meta’s Privacy Policy, the Social Media collects and uses information to provide statistical data collection services defined as Page Insights to page administrators to understand how people interact with the content therein.
Details regarding the processing methods executed by Meta are available at the following link:
https://www.facebook.com/privacy/explanation; https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect
Details about the personal data processed for Insights are available at the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data
Details about cookies used by Meta are available at the following link: https://www.facebook.com/policies/cookies/.
The joint controller agreement between the Data Controller and Facebook – Meta covers the creation of such events and their aggregation into Insights on the Page provided to each administrator.
The legal basis for processing is the Data Controller’s legitimate interest, Article 6, paragraph 1, letter f), GDPR. Therefore, your prior consent to processing is not required.
Nature of provision: Mandatory – Failure to provide the requested data will prevent the Data Controller from providing services via the Page published on social media related to Meta.
Period of personal data retention: The collected data will be processed for the time strictly necessary for the purposes described above, as specified in the aforementioned Meta policies.
Processing Method: The processing is carried out electronically by the Co-Controller, Meta.
BOOKING
When a user uses the Page managed by the Data Controller, Booking collects information such as the types of content viewed or interacted with, actions taken, and information about the devices used (IP addresses, operating systems, browser types, language settings, cookie data).
Page Insights are aggregated statistics created from specific events recorded by Booking’s servers when users interact with the Pages and the content therein.
As explained in Booking’s Privacy Policy, the website collects and uses information to provide statistical data collection services defined as Page Insights to page administrators to understand how people interact with the content therein.
Details regarding the processing methods executed by Booking are available at the following link: https://www.booking.com/content/privacy.it.html
Details about personal data processed for Insights are available at the following link: https://partner.booking.com/en-gb/industry-insights
Details about cookies used by Booking are available at the following link: https://www.booking.com/content/privacy.html
The joint controller agreement between the Data Controller and Booking covers the creation of such events and their aggregation into Insights on the Page provided to each administrator.
The legal basis for processing is the Data Controller’s legitimate interest, Article 6, paragraph 1, letter f), GDPR. Therefore, your prior consent to processing is not required.
Nature of provision: Mandatory – Failure to provide the requested data will prevent the Data Controller from providing services via the Page published on social media related to Booking.
Period of personal data retention: The collected data will be processed for the time strictly necessary for the purposes described above, as specified in the aforementioned Booking policies.
Processing Method: The processing is carried out electronically by the Co-Controller, Booking.
EXPEDIA GROUP
When a user uses the Page managed by the Data Controller, Expedia Group collects information such as the types of content viewed or interacted with, actions taken, and information about the devices used (IP addresses, operating systems, browser types, language settings, cookie data).
Page Insights are aggregated statistics created from specific events recorded by Expedia Group’s servers when users interact with the Pages and the content therein.
As explained in Expedia Group’s Privacy Policy, the website collects and uses information to provide statistical data collection services defined as Page Insights to page administrators to understand how people interact with the content therein.
Details regarding the processing methods executed by Expedia Group are available at the following link: https://www.expedia.it/lp/b/lg-privacypolicy
Details about personal data processed for Insights are available at the following link: https://advertising.expedia.com/insights/
Details about cookies used by Expedia Group are available at the following link: https://www.expedia.it/lp/b/support/cookies
The joint controller agreement between the Data Controller and Expedia Group covers the creation of such events and their aggregation into Insights on the Page provided to each administrator.
The legal basis for processing is the Data Controller’s legitimate interest, Article 6, paragraph 1, letter f), GDPR. Therefore, your prior consent to processing is not required.
Nature of provision: Mandatory – Failure to provide the requested data will prevent the Data Controller from providing services via the Page published on social media related to Expedia Group.
Period of personal data retention: The collected data will be processed for the time strictly necessary for the purposes described above, as specified in the aforementioned Expedia Group policies.
Processing Method: The processing is carried out electronically by the Co-Controller, Expedia Group.
When a user uses the Page managed by the Data Controller, LinkedIn collects information such as the types of content viewed or interacted with, actions taken, and information about the devices used (IP addresses, operating systems, browser types, language settings, cookie data).
Page Insights are aggregated statistics created from specific events recorded by Meta’s servers when users interact with the Pages and the content therein.
As explained in LinkedIn’s Privacy Policy, the Data Controller collects and uses information to provide statistical data collection services defined as Page Insights to page administrators to understand how people interact with the content therein.
Details regarding the processing methods executed by LinkedIn are available at the following link: https://www.expedia.it/lp/b/support/cookies
Details about personal data processed for Insights are available at the following link: https://it.linkedin.com/legal/user-agreement?
Details about cookies used by LinkedIn are available at the following link: https://it.linkedin.com/legal/cookie-policy
The joint controller agreement between the Data Controller and LinkedIn covers the creation of such events and their aggregation into Insights on the Page provided to each administrator.
The legal basis for processing is the Data Controller’s legitimate interest, Article 6, paragraph 1, letter f), GDPR. Therefore, your prior consent to processing is not required.
Nature of provision: Mandatory – Failure to provide the requested data will prevent the Data Controller from providing services via the Page published on social media related to LinkedIn.
Period of personal data retention: The collected data will be processed for the time strictly necessary for the purposes described above, as specified in the aforementioned LinkedIn policies.
Processing Method: The processing is carried out electronically by the Co-Controller, LinkedIn.
- PROCESSING METHODS
The processing of personal data is carried out through the operations indicated by the Privacy Code and Article 4 no. 2) of EU Regulation 2016/679, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, limitation, communication, deletion, and destruction of data.
The data undergo electronic processing.
- RIGHTS OF THE DATA SUBJECT
Under the Privacy Code and Articles 15 and following of the Regulation, as the Data Subject, you have the right to:
- Obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
- Obtain information about the origin of personal data, the purposes and methods of processing, the logic applied in case of processing carried out with the aid of electronic instruments, the identification details of the owner and the managers, the subjects or categories of subjects to whom the personal data may be communicated as designated processors;
- Obtain the updating, rectification, or, when interested, integration of data;
- Obtain the erasure of data in the cases provided for by Art. 17 Reg. EU 2016/679, transformation into anonymous form, or blocking of data processed in violation of the law, including data that does not require storage for the purposes for which the data was collected or subsequently processed;
- Obtain the limitation of processing in cases provided for by Art. 18 Reg. EU 2016/679;
- Receive, in a structured, commonly used, and machine-readable format, the personal data concerning you, and the right to transmit them to another controller;
- Object, in whole or in part, for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection;
- Lodge a complaint with the Supervisory Authority for the Protection of Personal Data.
- EXERCISE OF RIGHTS
The exercise of rights is not subject to any formal constraint and is free of charge.
To do so, you can directly contact the Data Controller by sending a registered letter with return receipt to the following address: DESIGN CLUB REAL ESTATE SRL VAT 03662051204, with registered office in Via Castiglione n. 6, Bologna (Bo) 40124, email: info@designclubcollection.com.
- SECURITY MEASURES
The Data Controller implements appropriate technical and organizational security measures to prevent data loss, unlawful or incorrect use, and unauthorized access. It also ensures the possibility of restoring – in case of damaging events – the functionality of protections on the systems and processed data.
