Privacy Policy

Welcome to our website www.orsiniresort.it (the Site). Your privacy and the security of your personal data are very important to us, which is why we collect and handle your personal data with the utmost care and take specific measures to keep it safe. Below you will find our Privacy Policy containing detailed information about the processing of your personal data and the terms and conditions of our services.

1. General information

Who is the Data Controller?
The Data Controller, that is, the person who decides how and why to process your personal data, is:

Clan Cagi Srl
Via Sommito – Passo di Mirabella
83036 Mirabella Eclano (AV)
VAT: 02218430649
E-Mail: info@orsiniresort.it
Telephone: +39.0825449786

You can contact Clan Cagi Srl, you can write to the above address with the subject “privacy” or you can call +39.0825449786.

Who is the Data Processor?
The Data Processor, whom you can contact to exercise your rights under Art. 12 of GDPR 2016/679 and/or for any clarifications regarding personal data protection, can be reached by sending an email to info@orsiniresort.it

2. What personal data do we collect?

When you browse or register on the Site, it collects and processes personal information necessary to conclude and execute your request, such as your first and last name, e-mail address, shipping address, billing address, and telephone.
We collect information about your browsing anonymously, such as the pages you visit and how you interact with the individual page, and we store this information on our servers. Please note that the Site does not process personal information about minors of age. If you access the Site and use the services offered, you represent that you are of legal age.

3. How do we use the personal data collected?

The Site collects and processes your personal data for the following purposes:
- concluding and executing requests about products and/or services offered;
- provision of the proposed services. To this end, the Site needs to collect, in relation to each service and its characteristics, the personal data necessary to carry out the service you have requested;
- management of requests to our offices, which use the personal data you provide to fulfill your requests for information and assistance;
- statistical analysis and surveys. We use certain information about your use of the Site to conduct statistical analysis and surveys in order to improve our offerings and services;
- subject to your express consent, we may use the contact information you have provided to us for marketing communications about our products and services in order to keep you up to date on news, new arrivals, exclusive products, offers and promotions. Also, again with your consent, we may use your contact information as part of conducting market research and satisfaction surveys in order to improve our services and relationship with our users. These communications will take place only in the manner you have chosen.

Should you not wish to receive further communications or wish to limit the ways in which you can be contacted, you can stop these communications at any time by clicking on the appropriate “unsubscribe” link at the bottom of each communication or by calling +39 0825 449786 or writing to info@orsiniresort.it indicating “privacy” as the subject line.

Please note that you may receive further communications from us even after you submit your unsubscribe request, as some mailings may have already been scheduled and our systems may take some time to process your request. In connection with all of the above activities, we will process your personal data predominantly through computer and electronic means; the tools we use ensure high standards of security, in full compliance with relevant legislation.

4. Cookie Policy

This Site uses tracking tools. To learn more, see our Cookie Policy.

5. Legal basis for processing

We process your personal data only if at least one of the following conditions stipulated by current legislation is met:
(a) for the conclusion and execution of a contract to which you are a party
When we process your data for the conclusion of a purchase contract to which you are a party, we take care to use only the minimum information necessary for its execution.
This basis legitimizes the processing of personal data that takes place in the following activities:
- conclusion and execution of a purchase contract for the products and/or services offered;
- provision of services offered on the Site;
- management of your requests by our offices.
The provision of your personal data for these activities is a contractual obligation. You are free to give us your data or not, but without the required data we will not be able to conclude or execute the contract and your requests. This means that you will not be able to enjoy the services of the Site and we will not be able to handle your requests.

(b) to give effect to a legal obligation
If you conclude a contract for the purchase of goods and/or services on the Site, your data will be processed to give effect to the legal obligations to which the Site is subject in accordance with tax and other regulations to which the Site is subject. You are free to decide whether or not to enter into a contract and whether or not to disclose your data to us, but if you do enter into a contract your data will be necessary and will be processed to give effect to the aforementioned legal obligations to which the Site is subject.

(c) on the basis of your consent
The conduct of marketing and opinion polling and market research activities will only take place if you have given us your express consent.
Providing us with your personal data for such activities is absolutely optional. You are free to provide us with your data for such purposes or not, but in their absence it will not be possible to carry out the activities of marketing and opinion surveys and market research and analysis of your habits.

6. Who will process your data?

Your personal data will be processed by our internal staff specifically trained and authorized to process it.
Your personal data will also be transmitted to third parties that we use to provide our services; these parties have been properly selected and offer suitable guarantees of compliance with the regulations on the processing of personal data. These parties have been designated as data processors and carry out their activities according to the instructions given to them and under its control.
The third parties in question belong to the following categories: banking operators, internet providers, companies specializing in computer and telematic services, couriers, companies performing marketing activities, companies specializing in market research and data processing. Your data may be transmitted to the police and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and safeguard against threats to public safety, to enable the Site to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.

7. Payment process

During the payment process we collect information about you. As you visit our site, we track:
- The services/offers you have viewed: we will use this information to, for example, show you the services you have recently viewed
- Location, IP address, and browser type: we will use this information for an estimate of taxes and shipping
- We will also use cookies to keep track of the contents of your shopping cart as you are browsing our site.
We generally keep your information as long as we need it for the purposes for which we collect and use it and as long as we are legally required to continue to keep it. We also store comments and reviews, if you choose to leave them with us.
We accept payment by credit card, debit card, and prepaid cards. The Site does not store the Customer's credit card number, but thanks to the secure communication system of the referring credit institution. The Referring Credit Institution uses the SSL protocol to encrypt the data transmitted between its server and the Customer's browser.

8. Transfer of data abroad

The management and storage of personal data will take place on servers of the Data Controller and/or third party companies duly appointed as External Data Processors located within the European Union.
Personal data may be transferred abroad, in accordance with current regulations, including to countries outside the European Union. Transfer to non-EU countries, in addition to cases where this is guaranteed by Commission Adequacy Decisions, is carried out in such a way as to provide appropriate and adequate Guarantees in accordance with Articles 46, 47 and 49 of the Regulations.

9. How long do we keep the data?

We keep your personal data for a limited period of time, which differs depending on the type of activity involving the processing of your personal data.
After this period has expired, your data will be permanently deleted or otherwise irreversibly anonymized.
Your personal data are stored in accordance with the terms and criteria specified below:
- data collected to conclude and execute contracts for goods or services provided will be retained until the conclusion of administrative-accounting formalities. Data related to billing will be retained for ten years from the date of billing;
- data collected in the context of the use of services offered will be retained until the termination of the service or deletion by user request;
- data related to user requests to our offices that will be useful in assisting you will be kept until your request is fulfilled;
- data provided for commercial communications, opinion polling and market research activities will be retained until requested by the user to discontinue the activity or in any case within 2 years of the user's last interaction of any kind with the Site;
- data used to personalize the Site and to display personalized commercial offers will be retained until the user requests termination or in any case within two years of the user's last interaction of any kind with the Site;
- data used for conducting market research and satisfaction surveys will be kept until the User requests termination.
In any case, for technical reasons, the termination of the processing and the consequent definitive deletion or irreversible anonymization of the relevant personal data will be final within thirty days of the above deadlines.

10. Your rights

You can exercise your rights at any time with reference to specific processing of your personal data by the Site. The ways to exercise them are:
- Access and modify your data. You have the right to access your personal data and to request that it be corrected, amended or supplemented with other information. If you wish, we will provide you with a copy of the data we hold about you.
- Revoking your consent. You can revoke at any time a consent you have given for the processing of your personal data in relation to any activity with marketing purposes. In this regard, please note that sending commercial and promotional communications, conducting market research and satisfaction surveys for customizing the website and commercial offers according to your interests are considered marketing activities. Upon receipt of your request, we will promptly cease processing of your personal data that is based on such consent, while different processing or processing based on other assumptions will continue to be carried out in full compliance with current regulations.
- Object to the processing of your data. You have the right to object at any time to the processing of your personal data carried out on the basis of our legitimate interest by explaining to us the reasons justifying your request; before granting it, the Site will have to evaluate the reasons for your request.
- Deletion of your data: in the cases provided for by current regulations, you can request the deletion of your personal data. Upon receiving and screening your request, if legitimate, we will promptly cease processing and delete your personal data.
- Request that the processing of your personal information be temporarily restricted. In this case, the Site will continue to store your personal data but will not process it, unless you request otherwise or unless exceptions are provided by law. You can obtain restriction of processing when you dispute the accuracy of your personal data, when processing is unlawful but you object to the deletion of your data, when we no longer need your data but you need it to exercise a right of yours in court, when you object to processing, during the period in which we evaluate the grounds for your request.
- Request your data or transfer it to a different party (“right to data portability”). You can request to receive your data that we process based on your consent or under a contract with you in a standard format. If you wish, where technically possible, we may at your request transfer your data directly to a third party specified by you to us.
In order to exercise some of your rights described above you may contact us by calling +39 0825 449786 or by writing to the Data Controller above specifying “privacy” as the subject. In order to ensure that our users' data is not violated or used illegitimately by third parties, before we grant your request to exercise any of the rights indicated above, we will ask you for certain information to be certain of your identity.

11. Security measures

We protect your personal data with specific technical and organizational security measures designed to prevent your personal data from being used illegitimately or fraudulently. In particular, we use security measures that ensure the confidentiality, integrity, and availability of your data, the resilience of the systems and services that process it, and the ability to restore data in the event of a data breach. In addition, the Site is committed to regularly testing, auditing and evaluating the effectiveness of technical and organizational measures to ensure continuous improvement in the security of processing.

12. Complaints

If you believe that the processing of your personal data has been carried out unlawfully, you can file a complaint with one of the competent data protection supervisory authorities. In Italy, the complaint can be filed with the Garante per la Protezione dei Dati Personali.

More information on how to submit is available on the Guarantor's website at http://www.garanteprivacy.it.

13. Amendments to this policy

The constant evolution of our services may result in changes in the characteristics of the processing of your personal data described so far. Consequently, this privacy policy may be subject to changes and additions over time, which may also be necessary with reference to new regulatory interventions in the field of personal data protection. We therefore invite you to periodically check its contents: if possible, we will try to inform you in a timely manner about the changes made and their consequences. The updated version of the privacy policy, in any case, will be published on this page, indicating the date of its last update.

14. Legislative references and useful links

The processing of your personal data is carried out in full compliance with the relevant regulations set out in Regulation (EU) 2016/679 General Data Protection Regulation, the Italian data processing regulations and the provisions of the Italian Data Protection Authority (http://www.garanteprivacy.it).

Last update: Jan. 14, 2025