{"id":5548,"date":"2026-06-26T11:57:35","date_gmt":"2026-06-26T09:57:35","guid":{"rendered":"https:\/\/www.castellodipostignano.it\/privacy-policy-for-the-processing-of-personal-data\/"},"modified":"2026-07-16T09:52:01","modified_gmt":"2026-07-16T07:52:01","slug":"privacy-policy-for-the-processing-of-personal-data","status":"publish","type":"page","link":"https:\/\/www.castellodipostignano.it\/en\/privacy-policy-for-the-processing-of-personal-data\/","title":{"rendered":"Privacy Policy for the processing of personal data"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy Policy for the processing of personal data<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

CASTELLO DI POSTIGNANO SERVIZI SRL, in the person of its legal representative pro tempore, with registered office in Naples, Via S. Luisa De Marillac, 15, VAT no. 07056341212 (hereinafter, \u201cController\u201d), as data controller, informs you pursuant to art. 13 of Legislative Decree no. 196 of 30.6.2003 (hereinafter, \u201cPrivacy Code\u201d) and art. 13 of EU Regulation no. 2016\/679 (hereinafter, \u201cGDPR\u201d) that your data will be processed in the following ways and for the following purposes:<\/p>

1 – Object of Processing and Purposes<\/strong>This data processing process concerns all personal, biographical and\/or identification data communicated by you upon conclusion of the contract for the services offered by the Controller.Furthermore, additional data may be collected and processed automatically, such as technical data (e.g. IP address, browser type, data relating to your current location) and\/or cookies (please refer to the relevant \u201cCookie\u201d section).Your data is used to:a) guarantee you access to the services contractually agreed upon and provide you with assistance regarding them (e.g. hospitality and accommodation services, as well as, in general, Customer Care services);b) communicate our commercial initiatives to you (e.g. promotional and\/or advertising activities on new services and events);c) carry out analysis and reporting activities related to the use of the agreed services;<\/p>

Any refusal to provide consent for the processing of data for the sole \u201cpurpose of providing the service\u201d \u2013 as set out in point a) \u2013 will make it impossible to use the service itself.Under no circumstances will your data be used for purposes other than those indicated above.<\/p>

2 – Processing methods<\/strong>The processing of your personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 no. 2) of the GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data. Your personal data is subject to both paper and electronic and\/or automated processing.

Data is collected by the subjects indicated in point 4, according to the indications of the relevant legislation, with particular regard to the security measures provided for by the GDPR (art. 32) for their processing through computer, manual, and automated tools and with logic strictly related to the purposes indicated in point 1 and in any case in such a way as to guarantee the security and confidentiality of the data itself.<\/p>

The processing of data is carried out by the Controller and\/or the Data Processor and\/or the Sub-Processors.<\/p>

3 – Retention period<\/strong>For the purposes referred to in point a), the Controller will process personal data for the time strictly necessary to fulfill the above purposes, in compliance with current regulations, and in any case no later than the legal term established by art. 2946 of the Civil Code (10 years).

For direct marketing and any profiling purposes \u2013 as referred to in points b) and c) \u2013 personal data will be kept for a maximum period equal to that provided for by the applicable legislation, i.e., respectively equal to 24 and 12 months.

Invoices, accounting documents, and data relating to commercial transactions will be kept, in accordance with the law, for a maximum period of 10 years.<\/p>

4 – Subjects to whom the data may be communicated<\/strong>Your data may be made accessible for the purposes referred to in art. 1:

a) employees and collaborators of the Controller in their capacity as persons in charge and\/or internal processors and\/or sub-processors;

b) companies that perform functions strictly connected and instrumental to the operation \u2013 including technical \u2013 of the services offered by the Controller, such as, for example, customer care service providers, companies that provide archiving, administrative, payment, and billing services, and associated companies;

c) administrative and judicial bodies and authorities by virtue of the fulfillment of legal obligations.<\/p>

Personal data will be stored on servers located within the European Union, without prejudice to the Controller’s right to transfer their location. Personal data may be transferred to European Union countries and to third countries outside the European Union exclusively within the scope of the purposes referred to in point 1.

In this case, we ensure that this transfer takes place in compliance with current legislation and that an adequate level of protection of personal data is guaranteed based on an adequacy decision, on standard clauses defined by the European Commission, or on Binding Corporate Rules.<\/p>

5 – Rights of the Data Subject<\/strong><\/p>

In your capacity as a Data Subject, you have the right to exercise the rights referred to in art. 7 of the Privacy Code and arts. 15 et seq. of the GDPR and specifically you can: <\/p>

a) obtain from the Controller, at any time, information about the existence of your personal data, their origin, the purposes and methods of processing and, if present, obtain access to personal data and the information referred to in Article 15 of the GDPR;<\/p>

b) request the updating, rectification, integration, erasure, or limitation of data processing in the event that one of the conditions provided for in Article 18 of the GDPR applies, the transformation into anonymous form, or the blocking of personal data processed in violation of the law, including those for which storage is not necessary in relation to the purposes for which the data was collected and\/or subsequently processed;<\/p>

c) object, in whole or in part, for legitimate reasons, to the processing of data, even if pertinent to the purpose of collection and to the processing of personal data provided for the purposes of commercial information or the sending of advertising material or direct sales or for carrying out market research or commercial communication. Every user also has the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal; <\/p>

d) receive your personal data, provided knowingly and actively or through the use of the service, in a structured, commonly used, and machine-readable format, and to transmit them to another data controller without hindrance;<\/p>

e) lodge a complaint with the Data Protection Authority in Italy.6 – Procedures for exercising rights<\/strong>You may at any time exercise your rights by sending a registered letter with acknowledgment of receipt to CASTELLO DI POSTIGNANO SERVIZI SRL, with registered office in Naples, Via S. Luisa De Marillac, 15, or a PEC to the address castellodipostignanoservizi@pec.it.<\/a>7 – Data Controller and Data Processor<\/strong>The Data Controller is CASTELLO DI POSTIGNANO SERVIZI SRL, with registered office in Naples, S. Luisa De Marillac, 15, in the person of its legal representative pro tempore.The data controller uses internal and external processors to achieve the purposes specified in point 1.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

CASTELLO DI POSTIGNANO SERVIZI SRL, in the person of its legal representative pro tempore, with registered office in Naples, Via S. Luisa De Marillac, 15, VAT no. 07056341212 (hereinafter, \u201cController\u201d), as data controller, informs you pursuant to art. 13 of Legislative Decree no. 196 of 30.6.2003 (hereinafter, \u201cPrivacy Code\u201d) and art. 13 of EU Regulation […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-5548","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.castellodipostignano.it\/en\/wp-json\/wp\/v2\/pages\/5548","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.castellodipostignano.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.castellodipostignano.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.castellodipostignano.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.castellodipostignano.it\/en\/wp-json\/wp\/v2\/comments?post=5548"}],"version-history":[{"count":4,"href":"https:\/\/www.castellodipostignano.it\/en\/wp-json\/wp\/v2\/pages\/5548\/revisions"}],"predecessor-version":[{"id":5833,"href":"https:\/\/www.castellodipostignano.it\/en\/wp-json\/wp\/v2\/pages\/5548\/revisions\/5833"}],"wp:attachment":[{"href":"https:\/\/www.castellodipostignano.it\/en\/wp-json\/wp\/v2\/media?parent=5548"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}