PRIVACY POLICY

Last updated: 25 January 2024

This Privacy Policy describes the ways in which Casa Corallina (hereinafter, the ‘Owner’ or ‘we’) collects, uses, stores and protects the personal data of users (hereinafter, ‘User’ or ‘you’) of the website www.casacorallinacollection.com (hereinafter, the ‘Site’). This information is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (‘GDPR’) and current Italian legislation on the protection of personal data.

1. Data Controller

The Data Controller is: Dario Azzi Casa Corallina

Email: casacorallinacollection.com

Address: Vicoletto Belledonne 6 a Chiaia, 80121 Naples (Italy)

2. Personal data collected

2.1 Data provided voluntarily by the User

-Contact or booking form: when the User fills in contact or information request forms, data such as name, surname, email address, telephone number and any other information voluntarily provided are collected.

-Email and direct communication: if the User contacts us via email or other channels, we may receive and retain the content of the message, email address and contact information provided.

2.2 Navigation data

The computer systems and software procedures used to operate this Site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow Users to be identified. This category of data includes, by way of example, IP addresses, the domain names of the computers used by Users who connect to the Site, URI (Uniform Resource Identifier) addresses, the time of the request and other parameters relating to the User's operating system and computer environment.

2.3 Cookies

The Site uses cookies or similar technologies (such as pixels and web beacons) to collect information about the User, for example to facilitate navigation or for statistical analysis. For more information, please see our Cookie Policy (or dedicated section).

3. Purposes and legal bases of processing

We will process personal data for the following purposes and according to the indicated legal bases:

- Responding to requests for information and/or bookings -Purpose: to provide you with the requested service, answer your questions, prepare quotes, manage bookings. -Legal basis: execution of pre-contractual measures and of a contract to which the User is a party (Art. 6(1)(b) of the GDPR).

- Fulfilment of legal obligations -Purpose: to comply with obligations laid down in laws, regulations, Community legislation and by supervisory and control authorities. -Legal basis: legal obligation (Art. 6(1)(c) of the GDPR).

- Direct marketing (subject to consent) -Purpose: to send promotional communications, newsletters or other information on events and offers, by email or other means of communication (if you have given your consent). •Legal basis: explicit consent of the User (art. 6, par. 1, letter a of the GDPR). The User can revoke consent at any time.

4. Legitimate interest

-Purpose: prevention of fraud and misuse of the Site, management of the proper functioning of the services offered.

-Legal basis: explicit consent of the User (Art. 6(1)(a) GDPR). The User may revoke consent at any time.

- Processing methods

The processing of personal data is mainly carried out electronically and sometimes on paper, in compliance with the security measures provided for by the regulations, in order to guarantee confidentiality and data protection. The data will be processed by personnel specifically instructed and authorised by the Data Controller or by external parties designated as Data Processors, where necessary.

5. Data retention

-Data collected for contractual purposes (bookings or enquiries) are kept for the time strictly necessary to perform the service and for any further period required by law (e.g. tax matters).

-Data processed for direct marketing purposes will be kept until consent is revoked by the User or for the period indicated at the time consent was collected, and in any case no longer than the limits provided for by law.

-Navigation data are retained for the period strictly necessary to guarantee the security of the Site and for aggregate statistical purposes.

6. Communication of data to third parties

The User's personal data may be communicated to:

-Suppliers of technical or hosting services of the Site, necessary for its proper functioning.

-Payment or booking management service providers (if used), for purposes related to the performance of the services requested.

-External professionals and consultants (e.g. accountants, legal advisors) for the fulfilment of legal and business management obligations.

-Judicial or supervisory authorities, where required by law. In any case, personal data shall not be disseminated or transferred outside the European Economic Area, unless necessary for the performance of specific purposes, in compliance with the guarantees provided for by the GDPR.

7. User Rights In accordance with the GDPR, the User has the right to:

1. Access the personal data concerning him/her (art. 15 GDPR).

2. Obtain the rectification of inaccurate personal data or the integration of incomplete personal data (art. 16 GDPR).

3. Obtain the deletion (‘right to be forgotten’) of personal data in the cases provided for (art. 17 GDPR).

4. Limit the processing of your personal data in the cases provided for (art. 18 GDPR).

5. Request data portability where applicable (art. 20 GDPR).

6. Object to the processing of personal data based on legitimate interest or direct marketing purposes (art. 21 GDPR).

7. Revoke consent at any time, if the processing is based on consent (art. 7 GDPR).

To exercise their rights, the User can contact the Owner at the email address indicated in this Privacy Policy. The User also has the right to lodge a complaint with the Italian Personal Data Protection Authority (www.garanteprivacy.it).

8. Data security

We take appropriate technical and organizational security measures to protect personal data against destruction, loss, alteration, unauthorized disclosure or unauthorized access. However, we cannot guarantee that the measures taken will exclude any risk of unauthorized access or disclosure of data.

9. Links to third party sites

The Site may contain links to third party websites. These sites have their own privacy policies, which may differ from this one. We recommend that you consult their privacy policies. We assume no responsibility for the content or use of third party sites.

10. Changes to this Privacy Policy

We reserve the right to make changes to this Privacy Policy at any time by posting the updated version on the Site with the ‘Last Updated’ date indicated above. We therefore invite you to regularly consult this page to be informed of any changes.

11. Contact For any question, information or request relating to this Privacy Policy or the processing of your personal data, you can contact us at the following addresses:

Casa Corallina Email: casacorallinacollection@gmail.com Address: Vicoletto Belledonne 6 a Chiaia, 80121 Naples (Italy)

Disclaimer: This Privacy Policy is provided for information purposes only and does not constitute legal advice. We recommend that you consult a legal professional specialised in data protection in order to verify full compliance with applicable regulations.