Based on the European law on data security (Art.13, European Regulation 2016/679) the User acknowledges that MA.VA. srl. undertakes to process the User's personal data according to the principles of correctness, lawfulness and transparency and protection of confidentiality. Therefore, the User is informed that:

• CATEGORIES OF DATA: the object of the processing may be your personal data such as identification data, personal data and contact data.

• OWNER OF THE TREATMENT: The owner of the treatment is MA.VA. srl, Viale delle Terme 32/34 – 57021 Venturina Terme (LI), P.I. 01422970499 who can be contacted by phone on 0565/857070 or by email info@lecortidelsole.it

• SOURCE OF PERSONAL DATA: The personal data held by the Data Controller are collected directly from the interested party.

• PURPOSE OF DATA PROCESSING AND LEGAL BASIS: The processing of your data, collected and stored in relation to the compilation of this form, has your consent as its legal basis and is carried out for the following purposes: contact management by our staff in order to provide the necessary advice to your requests expressed through the contact form

• DATA RECIPIENTS: Within the limits pertinent to the indicated processing purposes, your data may be communicated to partners, consultancy firms, private companies, appointed as Data Processors by the Data Controller. Your data will not be disseminated in any way.

• TRANSFER OF DATA ABROAD: the data collected is not subject to transfer to third countries outside the European community.

• CONSERVATION PERIOD: The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed ("conservation limitation principle", art.5, GDPR) or on the basis of the deadlines set by the regulations of law. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

• RIGHTS OF THE INTERESTED PARTY: The interested party always has the right to request from the Data Controller access to your data, the rectification or cancellation of the same, the limitation of the treatment or the possibility of opposing the treatment, to request the portability of the data , to revoke the consent to the processing by asserting these and the other rights provided for by the GDPR by simple communication to the Data Controller. The interested party can also lodge a complaint with a supervisory authority.

• OBLIGATORY OR NOT OF CONSENT: We inform you that the provision of data is optional for some fields and for others (indicated by an asterisk) mandatory and their eventual non-provision involves the non-performance of the requested service.

• DATA PROCESSING METHODS: The personal data you provide will form the object of processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the activity of the Data Controller. The data will be processed both with IT tools and on paper and on any other type of suitable support, in compliance with the appropriate security measures pursuant to the GDPR.