Hotel
Beach

Privacy Policy

Information notice on the processing of personal data pursuant to Regulation (EU) 2016/679 and Legislative Decree No. 196/2003. This Website (ledune.com) collects certain Personal Data from its Users. This document may be printed using the print command available in the settings of any browser.

Data Controller

LE DUNE SPA
VIA ROVANI GIUSEPPE 7, 20123 – MILAN (MI)
VAT Number: 05091920156
CIN: IT059024A182E5H9I6
Email: info@ledune.com

Types of Data collected

Among the Personal Data collected by this Website, either independently or through third parties, are: Tracking Tool, Usage Data, email address. Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information notices displayed prior to the collection of the data itself. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically while using this Website. Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide it, it may be impossible for this Website to provide the Service. In cases where this Website specifically states that some Data is optional, Users are free not to provide such Data, without any consequence on the availability or operation of the Service. Users who are uncertain about which Data is mandatory are encouraged to contact the Controller. Any use of Cookies – or other tracking tools – by this Website or by the owners of third-party services used by this Website, unless otherwise specified, is intended to provide the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, if available. The User assumes responsibility for the Personal Data of third parties obtained, published, or shared through this Website and warrants that they have the right to communicate or disclose it, releasing the Controller from any liability towards third parties.

Method and place of processing of the collected Data

Methods of processing

The Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. Processing is carried out by means of IT and/or telematic tools, using organizational methods and logic strictly related to the purposes indicated. In addition to the Controller, in some cases, the Data may be accessible to other parties involved in the organization of this Website (administrative, commercial, marketing, legal staff, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies), also appointed, where necessary, as Data Processors by the Controller. The updated list of Data Processors may always be requested from the Data Controller.

Legal basis of processing

The Controller processes Personal Data relating to the User if one of the following conditions applies:

  • The User has given consent for one or more specific purposes;
  • Processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures;
  • Processing is necessary for compliance with a legal obligation to which the Controller is subject;
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
  • Processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.

In any case, it is always possible to ask the Controller to clarify the specific legal basis of each processing activity and in particular to specify whether the processing is based on the law, provided for by a contract, or necessary to enter into a contract.

Place

Data is processed at the Controller’s operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Controller. The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information about the place of processing, the User may refer to the section concerning details on the processing of Personal Data. The User has the right to obtain information regarding the legal basis of Data transfers outside the European Union or to an international organization governed by public international law or established by two or more countries, such as the UN, as well as regarding the security measures adopted by the Controller to protect the Data. The User may verify whether any of the transfers described above take place by examining the section of this document concerning details on the processing of Personal Data or by requesting information from the Controller using the contact details provided at the beginning.

Retention period

Data is processed and stored for as long as required by the purposes for which it was collected. Therefore:

  • Personal Data collected for purposes related to the performance of a contract between the Controller and the User will be retained until such contract has been fully performed.
  • Personal Data collected for purposes attributable to the legitimate interest of the Controller will be retained until such interest has been satisfied.
  • Where processing is based on the User’s consent, the Controller may retain the Personal Data for a longer period until such consent is withdrawn.
  • Furthermore, the Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, once this period has expired, the right of access, erasure, rectification, and the right to Data portability can no longer be exercised.

Purposes of processing the collected Data

User Data is collected to allow the Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its own rights and interests (or those of Users or third parties), identify any malicious or fraudulent activities, as well as for the following purposes:

  • Analytics
  • Displaying content from external platforms
  • Remarketing and behavioral targeting

To obtain detailed information on the purposes of processing and on the Personal Data processed for each purpose, the User may refer to the section “Details on the processing of Personal Data”.

Details on the processing of Personal Data

Contact form (This Website)

By filling in the contact form with their Data, the User consents to their use in order to respond to requests for information, quotations, or any other kind of request indicated by the form header. Personal Data collected: surname, first name, email address, telephone/mobile number, and IP address.

Newsletter form (This Website)

By filling in the form with their Data, the User consents to their use in order to respond to requests for information, quotations, or any other kind of request indicated by the form header. Personal Data collected: surname, first name, email address, telephone/mobile number, and IP address. The site features a bimonthly Newsletter dedicated to all readers who voluntarily wish to receive exclusive editorial content by email. For the delivery and management of the Newsletter, the service provided by MailChimp (The Rocket Science Group, LLC, 512 Means St., Suite 404 – 30318 – Atlanta, Georgia) is used, and the collected data is stored on the secure servers of the delivery service provider. According to MailChimp’s privacy policy, the data will never be used directly by MailChimp nor sold by it to third parties. MailChimp uses duly authorized operators for service maintenance and, in carrying out this function, they may have access to your data. In any case, the safeguards provided for by MailChimp’s privacy policy apply.

Interaction with live chat platforms

This type of service allows interaction with live chat platforms, managed by third parties, directly from the pages of this Website. This enables the User to contact this Website’s support service or allows this Website to contact the User while browsing its pages. If a live chat interaction service is installed, it may collect Usage Data related to the pages where it is installed, even if Users do not actively use the service. Furthermore, live chat conversations may be recorded.

Information on how to disable interest-based advertising

In addition to any opt-out features provided by any of the services listed in this document, Users may read more about how to disable interest-based advertising in the relevant section of the Cookie Policy.

This document contains information regarding the technologies that enable this Website to achieve the purposes described below. Such technologies allow the Controller to collect and store information (for example through the use of Cookies) or to use resources (for example by running a script) on the User’s device when the latter interacts with this Website. For simplicity, in this document such technologies are briefly defined as “Tracking Tools”, unless there is reason to differentiate. For example, although Cookies may be used in both web and mobile browsers, it would be inappropriate to refer to Cookies in the context of mobile applications, as they are Tracking Tools that require the presence of a browser. For this reason, within this document, the term Cookie is used only to specifically indicate that particular type of Tracking Tool.

Cookies used

Technical and session cookies

Their use is limited solely to the transmission of session identification data to allow normal browsing of the site and they are automatically deleted when the browser is closed (non-persistent). These Cookies do not require the User’s prior consent in order to be installed and used.

Tag Management

This type of service is functional to the centralized management of tags or scripts used on this Website. The use of such services involves the flow of User Data through them and, where applicable, their retention. Google Tag Manager (Google Ireland Limited): Google Tag Manager is a tag management service provided by Google Ireland Limited.

  • Personal Data processed: Tracking Tool.
  • Place of processing: Ireland – Privacy Policy.
  • Storage duration: _dc_gtm_*: 1 minute, _gcl_au: 3 months.

Traffic optimization

This type of service allows this Application to distribute its content through servers located across different territories and to optimize its performance. The Personal Data processed depends on the characteristics and method of implementation of these services, which by their nature filter communications between this Application and the User’s browser. Cloudflare (Cloudflare Inc.): Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc. The way Cloudflare is integrated means that it filters all traffic to this Application, i.e. communications between this Application and the User’s browser, while also allowing the collection of statistical data on it.

  • Personal Data processed: Tracking Tools; various types of Data as specified in the service’s privacy policy.
  • Place of processing: United States – Privacy Policy.

Displaying content on external third-party platforms

This type of service allows content hosted on external platforms to be displayed directly from the pages of this Website and to interact with it.

  • Font Awesome (Fonticons, Inc.): Allows font styles to be integrated into its pages. Personal Data processed: Usage Data and Tracking Tool. Place of processing: United States – Privacy Policy.
  • Google Fonts (Google Ireland Limited): Allows font styles to be integrated into its pages. Personal Data processed: Usage Data; Tracking Tool. Place of processing: Ireland – Privacy Policy.
  • Google Maps widget (Google Ireland Limited): Allows maps to be integrated into its pages. Personal Data processed: Usage Data. Place of processing: Ireland – Privacy Policy.

Anti-spam protection

This type of service analyzes application traffic, potential content, and filters to prevent spam submissions. Google reCAPTCHA (Google Ireland Limited): This is a spam protection service provided by Google Ireland Limited. Use of the reCAPTCHA system is subject to Google’s privacy policy and terms of use.

  • Personal Data processed: clicks; Usage Data; keypress events; motion sensor events; touch events; mouse movements; scroll position; responses to questions; Tracking Tool.
  • Place of processing: Ireland – Privacy Policy.

How to manage preferences and provide or withdraw consent

There are various ways to manage preferences relating to Tracking Tools and to provide or withdraw consent, where necessary:

  • Manage preferences directly through device settings;
  • Set preferences in the cookie notice;
  • Remove previously saved Tracking Tools by deleting browsing history.

User rights

  • Withdraw consent at any time.
  • Object to the processing of their Data.
  • Access their Data.
  • Verify and request rectification.
  • Obtain restriction of processing.
  • Obtain the deletion or removal of their Personal Data.
  • Receive their Data or have it transferred to another controller.
  • Lodge a complaint with the competent data protection supervisory authority.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page. Last updated: 02/12/2024.