In compliance with Reg. (EU) 2016/679 as well as Legislative Decree 196/2003 and in order to ensure that the processing of the collected data is only allowed with the explicit consent of the data subject, Aria Design B&B di Pajega S.r.l. di Elisabetta Battistello (hereinafter the "Company" or the "Data Controller"), with registered office in Via Sant'Anna 3 - 19015 Levanto (SP) Italy and P. VAT 1491460117 as Data Controller, informs you, pursuant to Article 13 of European Regulation 679/2016 on the protection of personal data ("GDPR"), about the processing of your personal data that will be carried out by the writer.

1.    Object of Treatment: The Data Controller processes your personal data voluntarily communicated by you (verbally, via business card, email, delivery of documents, through the Data Controller's website, etc.), including but not limited to: Among the Personal Data collected by this Application, independently or through third parties, are: Cookie, Usage Data, email, name, city, telephone number, surname, reason
social, About me, Data disclosed during use of the service, geographic location and unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example). Full details on each type of data collected are provided in the dedicated sections of this privacy policy or by means of specific information texts displayed prior to the collection of such data. Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during the use of this
Application. Unless otherwise specified, all Data requested by this Application are mandatory. If the User refuses to communicate them, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain Data as optional, Users are free to refrain from communicating such Data, without any consequences on the availability of the Service or its operation. Users in doubt as to which Data are mandatory are encouraged to contact the Data Controller. The possible use of Cookies - or of other tracking tools - by this Application or by the owners of third party services used by this Application, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the
further purposes described in this document and in the Cookie Policy, if available. The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and guarantees that he/she has the right to communicate or disseminate it, releasing the Owner from any liability towards third parties.

2.    Purpose of processing:
Purpose list:
User Data are collected to enable the Owner to provide its Services, as well as for the following purposes: Statistics, Contacting the User, Interaction with social networks and external platforms, Registration and authentication, Displaying content from external platforms, Accessing accounts on third party services, Commenting on content, Managing contacts and sending messages, Managing User databases, Managing payments, Managing tags, Managing support and contact requests, Heat mapping and session recording, Hosting and backend infrastructure, Interaction with live chat platforms, Interaction with data collection platforms and other third parties, Location-based interactions, Infrastructure monitoring, Protection from SPAM, Advertising, Remarketing and behavioral targeting, Backup storage and management, Platform services
and hosting and performance testing of content and functionality (A/B testing). To obtain further detailed information on the purposes of the processing and the Personal Data concretely relevant for each purpose, the User may refer to the relevant sections of this document. Fairness criterion is: the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the data subject's request
Founded on a legal basis Norma Union

3.  Treatment modalities: The Data shall be processed by the Company with electronic and manual systems in accordance with the principles of fairness, loyalty and transparency provided for by the applicable legislation on the protection of personal data and protecting the confidentiality of the Data Subject by means of technical and organisational security measures to ensure an adequate level of security. Further information on the period of storage of personal data and the criteria used to determine this period may be requested by writing to the Data Controller.

4.    Recipients of personal data: Judicial Offices,Local Authorities,Companies and Enterprises,
Consultants and freelancers in individual or associated form, law offices, banks and
credit institutions,institutional bodies,health bodies, medical personnel and
paramedics, institutes, schools and universities, non-economic and economic public bodies,
Employers, Job Placement Bodies,Employment Agencies
brokers, risk centres, insurance companies, customers and users,
Dissemination to the public,Vocational training centres,Third sector associations and cooperatives,Companies for job placement or training,Insurance companies,Banks, chambers of commerce, professionals to whom we turn to fulfil tax and legal obligations,Clients, carriers, shippers, agents, software users, professionals to whom we turn to fulfil obligations.

5.    Data CommunicationThe Data shall be processed, to the extent necessary, by the authorised, adequately instructed and trained staff of the Data Controller as well as by the staff of third parties who provide services to the Data Controller and process the Data on its behalf and on its instructions as data processors. The Personal Data may be disclosed and communicated to third parties for the achievement of the purposes. The same Personal Data may also be communicated to third parties for the fulfilment of obligations required by law.

4.  Storage and Duration of Treatment: Data are processed and stored for the time required by the purposes for which they were collected, therefore:
Personal Data collected for purposes related to the performance of a contract between the Controller and the User will be retained until the performance of such contract is completed or will be retained until the legitimate interest of the Controller is served. The User may request further information regarding the legitimate interest pursued by the Controller.
When processing is based on the User's consent, the Controller may retain the
Personal Data for a longer period until such consent is revoked. In addition, the Controller may be obliged to retain Personal Data for a period due to legal obligations. At the end of the retention period the Personal Data will be deleted.
-Profiling and/or automatic processing activities
Where the processing of your data involves profiling or
automatic processing, these are the characteristics:
Processing involves automated processes or profiling

5.  Data controller: The data controller is Pajega srl di Elisabetta Battistello. Any Data Processors will be appointed, when the Data Controller entrusts external tasks for the performance of which it is necessary to share your data, from among those who offer sufficient guarantees to implement appropriate technical and organisational measures so that processing meets the requirements of the Regulation and guarantees the protection of the rights of the data subject, and subject to the signature by the Data Processor of a specific
contract/addendum to the professional assignment containing the requirements and specifications of the treatment itself.

6.  Rights of the data subject: The Data Subject may exercise, in relation to the data processing described herein, the rights provided for by the GDPR (Articles 15-21), including:
receive confirmation of the existence of the Data and access to their content (rights of
access); update, amend and/or correct the Data (right of rectification);
request the deletion or restriction of data processed in
violation of the law, including those that do not need to be stored in
relation to the purposes for which the Data were collected or otherwise processed (right
to oblivion and right to limitation); to object to the processing (right to object); to lodge a complaint with the Supervisory Authority (Data Protection Authority www.garanteprivacy.it) in the event of a breach of data protection regulations; to receive an electronic copy of the Data concerning him/her as Data Subject, when such Data has been rendered in the context of the contract and to request that such Data be transmitted to another data controller (right to data portability). To exercise these rights, the Data Subject may contact the Data Controller by sending a communication to:
Aria B&B - company Pajega S.r.l. Via Sant'Anna 3 - 19015 Levanto - info@aria-bnb.com | pec: pajega@pec.it

7. The full list of the data subject's rights is available in hard copy at the Data Controller's Head Office or by email upon written request by the same. Levanto, 20/01/2020