Privacy


PRIVACY POLICY


Information on the processing of online data through the Oscar WiFi service
pursuant to art. 13 of the General Regulation on the protection of personal data (RGPD 2016/679)

WHY THIS INFORMATION

This information describes the management methods of the Oscar WiFi web service, from now on Service, granted free of charge to customers of the activity Antica Hostaria Massa in reference to the processing of personal data of the same, identified or identifiable, that use and interact with it.
The information is provided only for the Oscar WiFi web service and not for other external web pages, which may be consulted by the user via links.

DATA CONTROLLER

Data controller is:
ANTICA HOSTARIA MASSA - AHM S.r.l.
Via F. Palizzi, 19/A - 80127 Napoli (Italia)
info@ristorantemassa.it

PURPOSE, LEGAL BASIS OF TREATMENT, TYPES OF DATA AND CANCELLATION PERIOD

Should you decide to provide us with your data through the form for accessing the Oscar WiFi service, these may be processed:

1. to provide connectivity to the Internet via the Oscar WiFi service and the services provided in the platform
Legal basis: execution of a contract, legitimate interest of the owner
Cancellation period: 7 days from the last access

2. to perform statistical analysis
Legal basis: legitimate interest of the owner
Cancellation period: until the user/guest does not exercise the right to object (revocation of consent) or cancellation or at most 60 days from the last access

3. to measure your level of satisfaction in relation to the services you have used and send you service communications (e.g. timetables, unavailability of some services) using the email address and / or the social channel WhatsApp specifically:
measure the degree of satisfaction of the user / guest by sending a link via email to a specific area of the Service where, if you wish, you can answer a series of questions regarding your stay and / or to the services present in the structure which it may have used.
The social channel (WhatsApp) will be used, for sending service communications, only to users/guests who log in via WhatsApp and only during their period of stay at our facility
Legal basis: legitimate interest of the owner
Cancellation period: until the user/guest does not exercise the right to object (revocation of consent) or cancellation or at most 28 days from the last access

4. to carry out generic mail marketing activities specifically:
send mail marketing messages, related to services similar to those previously used, to the users / guests present or who have visited the structure as customers.
Legal basis: legitimate interest of the owner (opt-out)
Cancellation period: until the user/guest does not exercise the right to object (revocation of consent) or cancellation, or, at most 24 months

5. to carry out email marketing, social marketing, via WhatsApp, relating to our services to users / guests present or who have frequented the facility as customers, specifically:
send generic email marketing messages relating to our services to users / guests present or who have frequented the facility as customers.
social marketing, via WhatsApp, will be carried out only towards those who have logged in via WhatsApp
Legal basis: consensus
Cancellation period: until the user/guest does not exercise the right to object (revocation of consent) or cancellation, or, at most 24 months

8. to ensure the efficiency and security of the WiFi service specifically:
to guarantee the efficiency in terms of service quality by managing the available bandwidth in the best possible way as well the security of the WiFi service against unauthorized access or made with the aim of causing damage to the owner or a third
Legal basis: legitimate interest of the owner
Cancellation period: 7 days from last login date

We also remind you that the optional, explicit and voluntary sending of e-mails to the e-mail addresses related to the owner indicated on the Service's web pages entails the subsequent acquisition of the sender's address, necessary for respond to requests, as well as any other personal data included in the message. In general, these data referred to or referable to the user will be deleted when no longer necessary to achieve the stated purposes (respond to user requests). In this case the legal basis for carrying out the processing is execution of pre-contractual measures adopted at the request of the interested party.

To pursue the aforementioned processing purposes we will use common personal data that directly identifies or indirectly the interested party (eg name, surname, email address, MAC address, access session data, username and password, language, interests).

Consequences in cases of failure or opposition to treatment
If, if in the foreseen cases, you do not give us your consent or should exercise your right of opposition in relation to one or more processing purposes, it will not face any consequence, it will still have access to the network internet and may use the Service. However, as you can easily foresee, it will have consequences in relation to the specific purpose for which we ask you to express your will, e.g. if you deny us the processing of your data to show you the best route to reach a place of interest we could not indicate this route. We remind you that at any time you can revoke the intentions expressed with a simple communication addressed to the owner, also using the form that we have put to his layout OMD_01_ModuloEsercizioDiritti to the contact details provided, or through the unsubscribe procedures you will find at the end of the emails we will send you, or by accessing your personal area.

Cookies and other tracking systems
The Service uses session and technical cookies (non-persistent) strictly limited to what is necessary for the safe and efficient navigation; analytics of third parties to collect news in aggregate and anonymous form on the number of users and how they visit the site; third-party profiling cookies that are downloaded to your terminal and used directly by third parties whose services we use (eg Google Maps). For information on the use of cookies and the ability to choose which specific cookies to allow access to the extended information on the use of cookies that can be reached from the following link: cookie policy.

The Service does not use technologies other than cookies to profile the user (eg pixel tags, web beacons etc ...)

DATA ADDRESSEES

The following subjects are recipients of the data collected following the consultation of the Service:

  • - InWYA S.r.l., with headquarters in Viale Giacomo Matteotti 53 / A, 50052 Certaldo (FI) for the construction, supply, maintenance and updating of the Service as well as the archiving and backup of the database integrated in the application, statistical analysis and customer mailing service, which acts, together with the external subjects of which one uses for the provision of some services, as data controller on behalf of the owner;
  • - our authorized personnel for treatment who act on the basis of specific instructions provided (eg employees and collaborators of the owner);

To have a complete list of managers, you can contact the data controller at any time.

TRANSFERRING PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

Your data, because we use third-party services, through the controller, are or could be transferred:

  • saving (backup) of the data is carried out in the server farm of a US company, A2 Hosting, Inc .; the company guarantees an adequate level security with regard to data protection and provides adequate guarantees through the signing of contractual clauses as data controller. The company guarantees an adequate level of security in relation to the transfer of data to foreign offices which is carried out on the basis of or an adequacy decision, https://www.privacyshield.gov/participant?id=a2zt0000000TOSEAA4&status=Active or contractual clauses.
  • - the messaging service on the controller's customers is carried out through the use of a service in the cloud of the company TWILIO INC. - SENDGRID, INC .; companies guarantee an adequate level of security with regard to data protection and provide adequate guarantees through the signing of contractual clauses as data controllers. The companies guarantee an adequate level of security in relation to the transfer of data to foreign offices which is carried out on the basis of an adequacy decision, https://www.privacyshield.gov/participant?id=a2zt0000000TNLbAAO&status=Active standard contracts.
  • the messaging service on the owner's customers is carried out through the use of a cloud service from the AWS company (Amazon Web Services, Inc.); the company guarantees an adequate level of security with regards to data protection and provides adequate guarantees through the signing of contractual clauses as data controller. The company guarantees an adequate level of security in relation to the transfer of data to foreign offices that is carried out based on standard contractual clauses.
  • - the statistical analysis of the web platform is carried out through the use of a cloud service, Google analytics, third party, Google Ireland Ltd with headquarters in Europe; the company guarantees an adequate level of security with regards to data protection and provides adequate guarantees through the signing of contractual clauses as data controller. In relation to size and possible relationships that bind companies collected under the Google brand, we cannot say that personal data is not transferred to United States of America or other foreign locations. However, the company still guarantees an adequate level of security as regards data protection and provides adequate guarantees through the signing of contractual clauses as data controller. The transfer to foreign offices is carried out on the basis of an adequacy decision, https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active standard contracts.

AUTOMATED TREATMENTS

We do not carry out treatment based on an automated decision-making process, including profiling that they produce legal effects against you or that can have a significant impact on you.

RIGHTS OF INTERESTED PARTIES

As an interested party you can assert your rights pursuant to art. from 15 to 21 of the RGPD 2016/679, summarized below, addressing the data controller at any time.
Specifically, you may have access to personal data concerning you, obtain the rectification or cancellation of themselves, limitation of processing, portability of data or object to processing.
To exercise your rights you can:

  • - submit a request to the holder, also through the form we have made available to it OMD_01_ModuloEsercizioDiritti, using the contact details you will find at the end of the document
  • - in the foreseen cases (eg mail marketing) using the unsubscribe procedure that will be found at the end of the messages of e-mail that we will send you
  • - by accessing his personal area from his personal area where he will have, directly, the possibility of exercising the above rights.

CLAIM RIGHT

Interested parties who believe that the processing of personal data referring to them carried out through this site takes place in violation of the provisions of the Regulations they have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the same Regulation, or to take the appropriate judicial seats (art. 79 of the Regulation).

CONTACT DATA FOR THE RIGHT BY THE INTERESTED PARTY


ANTICA HOSTARIA MASSA - AHM S.r.l.
Via F. Palizzi, 19/A - 80127 Napoli (Italia)
info@ristorantemassa.it



For more details about our privacy policy click here

This page was created in: 0.01 seconds

Copyright 2020 Oscar WiFi

This website or its third-party tools use cookies, which are necessary to its functioning and required to achieve the purposes illustrated in the cookie policy. By closing this banner, scrolling this page, clicking a link or continuing to browse otherwise, you agree to the use of cookies. If you want to know more or withdraw your consent to all or some of the cookies, please refer our Cookie Policy More info