1. Data Controller
The Data Controller of your Personal Data is FAROALTO S.P.A responsible to you for the legitimate and correct use of your Personal Data and who you can contact for any information or request at the following addresses:
Data Controller: FAROALTO S.P.A
Legal Representative: DENIS MILOVIDOV
Via Pier Capponi, 73 50123 FLORENCE (FI)
VAT number: 01009580320 REA: FI 615530
PEC: faroaltoholding@legalmail.it 2.
Types of data collected, purpose and legal basis.
The Personal Data processed are collected as they are provided directly by the User/Interested Party or collected automatically through the site. Data provided directly by the User/Interested Party: The data provided directly by the User/Interested Party are all Personal Data entered by the same on the site or that in any case are provided to the Data Controller in any way. These data will be processed in compliance with the guarantees of confidentiality and security measures provided for by current legislation, also with the aid of electronic tools directly and/or through third parties, for the purposes set out below together with the legal basis of reference:
A) PURPOSE: Purposes strictly related to the execution of pre-contractual measures and to respond to specific requests of the user/interested party. PROCESSED DATA: Name, Surname, Email, Telephone, Company Data. LEGAL BASIS: Contract of which the interested party is part and/or execution of pre-contractual measures adopted at the request of the interested party.
B) PURPOSE: Exercise of the Data Controller's rights, for example the right of defense in court PROCESSED DATA: Name, Surname, Email, Telephone, Company Data. LEGAL BASIS: Legitimate interest
C) PURPOSE: Direct and indirect marketing and market research purposes, for the purpose of sending newsletters, emails, SMS messages and instant messages and WhatsApp messages containing advertising and informational material.
PROCESSED DATA: Name, Surname, Email, Telephone, Company Data.
LEGAL BASIS: Consent
D) PURPOSE: Profiled marketing: analysis of your preferences, habits, behaviors, inferred interests, collected during your visit to this portal and in subsequent relationships with the company, in order to send you personalized commercial communications and carry out promotional actions aimed at your profile.
DATA PROCESSED: Name, Surname, Email, Telephone, Company Data. LEGAL BASIS: Consent E) PURPOSE: Purposes of direct and indirect marketing and market research, for the purpose of sending newsletters, emails, SMS messages and instant messages and WhatsApp messages containing advertising and informational material from third parties (e.g. partners of the Data Controller) DATA PROCESSED: Name, Surname, Email, Telephone, Company Data. LEGAL BASIS: Consenso F) PURPOSE: Booking, reception and administrative/accounting services. DATA PROCESSED: Name, Surname, Email, Telephone, Company data.
LEGAL BASIS: Contract of which the interested party is a party and/or execution of pre-contractual measures adopted at the request of the interested party. The user/interested party assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and guarantees to have the right to communicate or disseminate them, freeing the Data Controller from any responsibility to third parties. Data collected automatically through the site: The data collected automatically is the information collected automatically through the site www.faroalto.it (also from third-party applications integrated into this Application), including, for example: the IP addresses or domain names of the computers used by the User/Data Subject who connects to this site, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the computer environment of the User/Data Subject. Full details on each type of data collected are provided in the dedicated sections of the cookie policy of this site. The data collected automatically is processed exclusively for the purposes for which they are collected, as described below. The Data Controller processes the data provided by the interested parties to allow the operation of the site, optimization and distribution of traffic in addition to the additional purposes described in this document and in the cookie policy.3. Mandatory or optional nature of the provision of data and consequences of a possible refusal to provide data The provision of data for the purposes referred to in point a, b is optional but necessary to execute the contract. The provision of data for the purposes referred to in points c, d is optional and your data may be used with your consent, in case of lack of consent your data cannot be processed for the purposes described in these points. Unless otherwise specified, all the data required for browsing the site are mandatory. If the User/Data Subject refuses to communicate them, it may be impossible for this Application to provide the Service. In cases where this Application indicates some data as optional, Users are free to refrain from communicating such data, without this having any consequence on the availability of the Service or its operability. Users who have doubts about which Data is mandatory, are encouraged to contact the Data Controller.1. Data Controller
The Data Controller of your Personal Data is FAROALTO S.P.A responsible to you for the legitimate and correct use of your Personal Data and who you can contact for any information or request at the following addresses:
Data Controller: FAROALTO S.P.A
Legal Representative: DENIS MILOVIDOV
P.zza Sangiovanni 19/R 50123 FLORENCE (FI)
VAT number: 01009580320
Certified email: faroaltoholding@legalmail.it
2. Types of data collected, purpose and legal basis.
The Personal Data processed are collected as they are provided directly by the User/Interested Party or collected automatically through the site.
Data provided directly by the User/Interested Party:
The data provided directly by the User/Interested Party are all Personal Data entered by the same on the site or that in any case are provided to the Data Controller in any way. These data will be processed in compliance with the guarantees of confidentiality and security measures provided for by current legislation, also with the aid of electronic tools directly and/or through third parties, for the purposes set out below together with the legal basis of reference:
A)
PURPOSE: Purposes strictly related to the execution of pre-contractual measures and to respond to specific requests of the User/Interested Party.
PROCESSED DATA: Name, Surname, Email, Telephone, Company Data.
LEGAL BASIS: Contract of which the interested party is part and/or execution of pre-contractual measures adopted at the request of the interested party.
B)
PURPOSE: Exercise of the Data Controller's rights, for example the right of defense in court
PROCESSED DATA: Name, Surname, Email, Telephone, Company Data.
LEGAL BASIS: Legitimate interest
C)
PURPOSE: Direct and indirect marketing and market research purposes, for the purpose of sending newsletters, emails, SMS messages and instant messages and WhatsApp messages containing advertising and informational material.
PROCESSED DATA: Name, Surname, Email, Telephone, Company Data.
LEGAL BASIS: Consent
D)
PURPOSE: Profiled marketing: analysis of your preferences, habits, behaviors, inferred interests, collected during your visit to this portal and in subsequent relationships with the company, in order to send you personalized commercial communications and carry out promotional actions aimed at your profile.
PROCESSED DATA: Name, Surname, Email, Telephone, Company Data.
LEGAL BASIS: Consent
E)
PURPOSE: Direct and indirect marketing and market research purposes, for the purpose of sending newsletters, emails, SMS messages and instant messages and WhatsApp messages containing advertising and informational material from third parties (e.g. partner of the Data Controller)
PROCESSED DATA: Name, Surname, Email, Telephone, Company Data.
LEGAL BASIS: Consent
F)
PURPOSE: Booking, reception and administrative/accounting services.
PROCESSED DATA: Name, Surname, Email, Telephone, Company Data.
LEGAL BASIS: Contract of which the interested party is part and/or execution of pre-contractual measures adopted at the request of the interested party.
The User/Data Subject assumes responsibility for the Personal Data of third parties obtained, published or shared through this Application and guarantees to have the right to communicate or disseminate them, freeing the Data Controller from any liability to third parties.
Data collected automatically through the site:
The data collected automatically is the information collected automatically through the site www.faroalto.it (also from third-party applications integrated into this Application), including, for example: the IP addresses or domain names of the computers used by the User/Data Subject who connects to this site, the addresses in URI (Uniform ResourceIdentifier) notation, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the computer environment of the User/Data Subject. Full details on each type of data collected are provided in the dedicated sections of the cookie policy of this site.
The data collected automatically are processed exclusively for the purposes for which they are collected, as described below.
The Data Controller processes the data provided by interested parties to allow the operation of the site, optimization and distribution of traffic in addition to the additional purposes described in this document and in the cookie policy.
3. Mandatory or optional nature of the provision of data and consequences of a possible refusal to provide it
The provision of data for the purposes referred to in point a, b is optional but necessary to execute the contract.
The provision of data for the purposes referred to in points c, d is optional and your data may be used with your consent, in case of lack of consent your data cannot be processed for the purposes described in those points.
Unless otherwise specified, all data required for browsing the site are mandatory. If the User/Data Subject refuses to communicate them, it may be impossible for this Application to provide the Service. In cases where this Application indicates some data as optional, Users are free to refrain from communicating such data, without this having any consequence on the availability of the Service or on its operation.
Users who have doubts about which Data are mandatory are encouraged to contact the Data Controller.
4. Methods of treatment
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.
If your consent is provided to the processing of personal data for profiling purposes, the processing will take place with data processing tools that, after crossing, will create your commercial and behavioral profile. The processing carried out in this way has, as expected consequences, for example, the sending of highly profiled commercial communications, the sending of discounts, the sending of invitations to events considered to be of interest, etc.
The User/Data Subject has, in any case, the right to obtain human intervention in the decision-making process by the Data Controller, to express their opinion, to obtain an explanation of the decision reached and to challenge the decision itself.
5. Recipients
In addition to the personnel in charge of processing, your data may also be communicated to the following subjects also appointed, if necessary, as Data Processors by the Data Controller:
Partners and Consultants and companies that assist the Company from an IT and infrastructure point of view;
Partners, other Companies, Professionals and Agents who collaborate with the Company to carry out the services;
Business partners of the company;
Employees and collaborators of the company responsible for communications, reservations and reception;
Employees and Collaborators engaged in accounting and administrative services.
The updated list of Managers can always be requested from the Data Controller.
The data will not be subject to other methods of dissemination.
6. Place of processing
The data are processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For more information, contact the Data Controller.
The data provided directly by the User/Data Subject and collected automatically may be transferred to a country other than the one in which the User/Interested Party is also located outside the European Economic Area. In this case, FAROALTO SPA ensures that the processing of your Personal Data by these subjects to whom the data is transferred takes place in compliance with European Regulation 679/2016, all always in accordance with the principles indicated in art. 45 of the GDPR 2016/679 regarding the existence of an adequacy decision by the European Commission, or in the absence of such decisions in compliance with art. 46 relating to the transfer in the presence of adequate guarantees or in compliance with art. 49 paragraph 1 letter b) — transfer necessary for execution of a contract concluded between you and the Data Controller or for the execution of pre-contractual measures.
7. Storage period
Data provided directly by the User/Interested Party
Personal data provided directly by the interested party collected for the purpose of responding to specific requests and/or for carrying out pre-contractual/contractual negotiations will be processed and stored for the period of time necessary for the pursuit of the purposes indicated above and in any case no longer than 2 years from their collection.
Personal data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is satisfied. In the event of pending judgment, the data will be processed further until their resolution. In addition, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
Personal Data collected for direct and indirect marketing and market research purposes, for the purpose of sending newsletters, communications and advertising and informational material will be processed and stored for the period of time necessary for the pursuit of the purposes indicated above and in any case no longer than 2 years from their collection.
Personal Data collected for profiled marketing purposes will be processed and stored for the period of time necessary for the pursuit of the purposes indicated above and in any case no later than 1 year from their collection.
The data collected automatically will be retained for the period better specified in the cookie policy.
At the end of the storage period, Personal Data will be deleted. Therefore, at the expiry of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
Data collected automatically through the site
The data collected automatically will be retained for the period better specified in the cookie policy.
At the end of the storage period, Personal Data will be deleted. Therefore, at the expiry of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
8. Rights of the User/Interested Party
Pursuant to articles 15 to 22 of the GDPR, each User/Interested Party has the right to obtain confirmation of the existence or not of His Personal Data, even if not yet registered, and their communication in an intelligible form.
In particular, the interested party has the right to obtain from the Data Controller the indication:
of the origin of Personal Data;
the purpose and methods of processing;
of the logic applied in the case of treatment carried out with the aid of electronic/computer tools;
the identification details of the Data Controller, the Managers and the designated Representative;
of the subjects and categories of subjects to whom the data may be communicated or who may become aware of them as designated Representative in the territory of the State, Managers or Officers.
In addition, the interested party has the right to obtain from the Data Controller:
updating, rectifying or integrating their data;
the cancellation, transformation into anonymous form or blocking of data processed in violation of the law;
access to your data, that is, the confirmation of whether or not Personal Data concerning you is being processed;
the limitation of treatment,
data portability, i.e. the right to receive Personal Data concerning it in a structured format;
right to complain to the Supervisory Authority.
Finally, the interested party has the right to object, in whole or in part, for legitimate reasons, to the processing of Personal Data concerning him, even if relevant to the purpose of the collection. In particular, the interested party has the right to object to the processing of Personal Data concerning him for the purpose of sending commercial advertising material or for commercial communication purposes. The rights referred to in the previous points can be exercised by writing to us at the contacts indicated in point 1 of this information.
Please note that the interested party has the right to access data concerning them at any time, by addressing your request to our designated data manager for feedback, sending a registered letter with return receipt or certified e-mail to the addresses indicated below:
Data Protection Officer — FAROALTO SPA — P.zza Sangiovanni 19/R 50123 FIRENZE (FI)
Certified email: faroaltoholding@legalmail.it
9. List of linked sites and applications:
Below we specify the list of websites and applications linked to www.faroalto.it and which can be accessed directly from the pages of the site, with reference to the privacy document that is the owner of each link.
Facebook
PURPOSE: We work with Facebook to disseminate Landing Pages, products and services and Multimedia content in addition to acquiring the way in which you use and interact with our website through behavioral metrics to improve and market our products/services. Website usage data is collected using proprietary and third-party cookies and other tracking technologies to determine the popularity of products/services and online activities. In addition, we use this information for site optimization, for fraud protection, security and advertising purposes.
PRIVACY URL: https://www.facebook.com/about/privacy/previous#:~:text=Information%20associated%20with%20yo
Google
PURPOSE: We work with Google to disseminate Landing Pages, products and services and Multimedia Content in addition to acquiring the way in which you use and interact with our website through behavioral metrics to improve and market our products/services. Website usage data is collected using proprietary and third-party cookies and other tracking technologies to determine the popularity of products/services and online activities. In addition, we use this information for site optimization, for fraud protection, security and advertising purposes.
PRIVACY URL: https://policies.google.com/privacy
Instagram
PURPOSE: We work with Instagram to disseminate Landing Pages, products and services and Multimedia content as well as acquiring the way in which you use and interact with our website through behavioral metrics to improve and market our products/services. Website usage data is collected using proprietary and third-party cookies and other tracking technologies to determine the popularity of products/services and online activities. In addition, we use this information for site optimization, for fraud protection, security and advertising purposes.
PRIVACY URL: https://help.instagram.com/519522125107875/?maybe_redirect_pol=0
TikTok
PURPOSE: We work with TikTok to disseminate Landing Pages, products and services and Multimedia Content in addition to acquiring the way in which you use and interact with our website through behavioral metrics to improve and market our products/services. Website usage data is collected using proprietary and third-party cookies and other tracking technologies to determine the popularity of products/services and online activities. In addition, we use this information for site optimization, for fraud protection, security and advertising purposes.
PRIVACY URL: https://www.tiktok.com/legal/privacy-policy-eea?lang=it
WhatsApp
PURPOSE: We work with Whatsapp to access Messaging Groups, Direct Messaging, Instant Messaging and sending multimedia content
PRIVACY URL: https://faq.whatsapp.com/general/security-and-privacy/
Microsoft
PURPOSE: We work with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heat maps, and session playback to improve and market our products/services. Website usage data is collected using proprietary and third-party cookies and other tracking technologies to determine the popularity of products/services and online activities. In addition, we use this information for site optimization, for fraud protection, security and advertising purposes.
PRIVACY URL: https://privacy.microsoft.com/privacystatement
LinkedIn
PURPOSE: We work with LinkedIn to disseminate Landing Pages, products and services and Multimedia Content in addition to acquiring the way in which you use and interact with our website through behavioral metrics to improve and market our products/services. Website usage data is collected using proprietary and third-party cookies and other tracking technologies to determine the popularity of products/services and online activities. In addition, we use this information for site optimization, for fraud protection, security and advertising purposes.
PRIVACY URL: https://it.linkedin.com/legal/privacy-policy
Last Updated: 6/18/25
