Privacy Policy

Dear Guest,
having regard to the Art. 13 of the Legislative Decree 196/03 and in accordance with the Regulation (EU) 2016/679 of the European Parliament, in particular the Art. 13 and 14 thereof, Iselba s.r.l., with its seat in Campo nell’Elba (LI) (pc.57034) at 786, Viale degli Etruschi and hereby acknowledged as “Controller”, lets you know that your personal data shall be processed in observance of the abovementioned Regulation, in order to safeguard your fundamental rights and freedoms in terms of privacy.
Iselba s.r.l. lets you even know that you are responsible for any third-party personal data that you shared with Iselba and that in order to make the processing lawful, you hereby confirm that you have the third party’s consent to provide the Data to Iselba.

Objectives and legal basis for the processing of your personal data
The processing of your personal data is necessary in the context of the contract between you as a guest and Iselba, for performing job tasks such as filling in of guests’ data, internal statistics, accountancy keeping, administrative management, invoicing, safeguarding of corporate assets and eventually for accomplishing the obligations foreseen in the guidelines concerning civil and fiscal law. In accordance with the Art. 6 of the GDPR, processing data is necessary for the completion of the contract between you and Iselba and also applies for processing procedures which are required for the performance of pre-contract measures, for meeting legal obligations regarding the controller and for pursuing the interests of the company. As foreseen by the Art 6, par.1 of the GDPR, processing could also aim at fulfilling marketing goals such as sending of informative and/or commercial newsletters.

Categories of processed data
Data processed by the Controller include: personal data (first and last name, age, sex, taxpayer’s code number), address, phone numbers and mail, bank details and/or payment details.

Methods of data Processing and duration
Your data are lawfully collected and archived for the abovementioned purposes and in accordance with the principles of the Art 5, par. 1 of the GDPR. Processing of your personal data is carried out by means of manual devices and information systems, taking into account the objectives for which data have been collected and archived, in such a way as to safeguard and protect your privacy. Data can be processed and archived for a maximum of 10 years after the end of the contract with Iselba and at any rate for no longer than is necessary for the purposes for which your personal data have been archived and processed.

Associations or other bodies representing categories of controllers of personal data
In order to accomplish the tasks or pursue the abovementioned goals, your data could be accessed by or transmitted to the following associations or bodies: business consultants, banks, credit institutions, police, Chamber of Commerce(CCIAA), Tax Office and civil service. These associations and bodies of professionals represent and act as controllers of your personal data.

Transfer of personal data to third countries
The transfer of your personal data to third countries can take place if is necessary for the accomplishment of the undertaken tasks.
Transferred data will be processed ensuring the same level of protection adopted for all collected data. The transfer of personal data is allowed only when the processing is compatible with the purposes for which the personal data were initially collected. For such processing, the art. 43 and 44 of this Code and the Item V of the GDPR should apply.

Right of access to, erasure, portability and rectification of personal data or restriction of processing
The controller lets you that the Art. from 15th until 20th of the GDPR will be applied during processing your personal data.
Mail for obtaining confirmation as to whether or not your personal data are being processed and, should
that be the case, for being allowed to access to your data and details concerning processing. We let you even know that you can be provided of a copy of your data and also that you can request rectification or erasure of your personal data if one of the conditions referred to in the Art. 17 of the GDPR exists or you can ask for the restriction of processing of your personal data if one of the cases listed in the Art. 18 occurs. The information can be provided in a commonly used electronic form and transferred to a third controller if possible.

Right to object
According to the Art. 21 of the GDPR, you have the right to object at any time to the processing of your personal data which is based on the controller’s interest and on marketing purposes (if consented). If you wish to object to processing mail at Your data shall no longer be processed unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Right to lodge a complaint with the competent supervisory authority
The controller lets you know that you can lodge a complaint with the competent Supervisory Authority for the Protection of Personal Data, if you maintain that your Rights have been breached. Check out the website for further info:

With our kindest regards