Privacy Policy
Pursuant to and for the purposes of the provisions of EU Regulation 2016/679 and subsequent amendments, concerning the protection of personal data, we inform you of how we process, store, and protect the data you provide using the ravenn.io Site and each of its subdomains (hereinafter the 'Site').
Privacy is very important to us, and we want you to always feel protected. For this reason, we invite you to read this notice carefully.
By subscribing to the service, you share with us only the information that allows us to provide the service; below we clarify:
1) Who is the Data Controller of your data;
2) What data we use;
3) The purposes for which we process your data;
4) On what legal basis we collect your data;
5) How your data is used;
6) Which data is mandatory and which is optional;
7) How long your data is stored;
8) To whom your data may be communicated;
9) Independent data controllers;
10) Data transfer;
11) What your rights are.
1. Who is the Data Controller for your information
The Data Controller of your personal data is Ravenn S.r.l., in the person of the legal representative pro tempore, VAT number 04092180928, with registered office at Via Maddalena 54, 09124 Cagliari, email: support@ravenn.io.
The Data Controller reserves the right to appoint a Data Protection Officer (DPO), whose name will be promptly communicated to the individual concerned.
2. What data we use
At the time of purchasing the stay through the Site, you will be asked for the following information: first name, last name, tax code, phone number, billing details.
The Data Controller does not collect further categories of personal data beyond those indicated above for the stated purposes; therefore, they are not responsible for any additional personal information voluntarily provided via email and/or phone and/or through the App by the interested party.
3. Purposes for which we process personal data
Your personal data will be processed for the following purposes:
a) to book the stay;
b) to send you communications for marketing and/or promotional purposes and to subscribe you to our newsletter;
c) to transfer data to third parties for purposes related to the performance of the contract;
d) fiscal, accounting, administrative, and anti-money laundering purposes
4. On what legal basis do we collect your data
The legal basis for processing for the purposes referred to in letters a) and c) of the previous paragraph is the fulfillment of the contract pursuant to Art. 6 letter b) Reg. EU 16/679.
The legal basis for processing for the purposes referred to in letter b) is explicit consent pursuant to Art. 6 letter a) of Reg. EU 16/679.
The legal basis for processing for the purpose referred to in letter d) is processing necessary to fulfill a legal obligation pursuant to Art. 6 letter c) of Reg. EU 16/679.
5. How your data is used
Your data is collected, recorded, stored, and used for execution purposes.
Your data is subjected to electronic processing and stored in databases and servers of Ravenn s.r.l.
Your personal data is protected in a way that minimizes the risk of destruction and loss, unauthorized access/use, or use
incompatible with the initial purpose of collection. This is achieved through the application of technical and organizational security measures by Ravenn S.r.l.
Some of the main security measures employed by Ravenn to protect the personal data of the Interested Party are as follows:
- specific instructions to Ravenn personnel authorized for processing; continuous training of authorized personnel;
- access control to computer systems;
- encryption in the storage/conservation of data;
- encryption in the transmission of data;
- firewalls and antivirus;
- data pseudonymization.
6. Which data are mandatory and which are optional
Providing personal data for the purposes referred to in letters a) and c) is mandatory.
If such personal data is not provided, it will not be possible to proceed with the execution of the service.
Providing personal data for the purpose referred to in letter b) is optional and does not affect the execution of the service.
7. How long are your data stored
The collected data will be stored for the next 3 years and subsequently for legal obligations for up to 10 additional years.
Personal data used for the purpose of sending commercial communications, possible profiling, and for newsletter subscription will be stored for 24 months from the acquisition of consent.
8. To whom can your data be disclosed
For the pursuit of the purposes indicated above, your Personal Data may be communicated/known to the following categories of recipients:
the collaborators of the Data Controller, specifically authorized;
● third parties involved in the execution of the service provided or carrying out technical, organizational, or operational tasks on behalf of Ravenn.
The third parties to whom Personal Data may be communicated act as: 1) Data Controllers, i.e., entities that determine the purposes and means of processing Personal Data; 2) Data Processors, i.e., entities that process Personal Data on behalf of the Controller.
In particular, the data processors are as follows:
Data Processors:
Hosting, cloud, and infrastructure services:
https://vercel.com/
Professionals and consultants (e.g., accountants)
9. Independent Data Controllers
partner companies of Ravenna
authorities, in specific cases, for the exercise of rights and to satisfy specific requests;
any other companies, in case of merger or acquisition.
10. Data Transfer
partner companies of Ravenn.io
authorities, in specific cases, for the exercise of rights and to satisfy specific requests;
any other companies, in case of merger or acquisition.
11. What are your rights.
We explain what your rights are to always have control over your privacy and your information.
You can exercise the rights referred to in Articles 15 to 22 of the UE Regulation by sending an email to the Data Controller at the email address
support@ravenn.io.
You have the right to:
receive confirmation of whether or not your personal data exists and request that such data be made available to you in a clear and comprehensible way. In particular, you can ask for details and, if applicable, a copy of the origin and category of your personal data, the logic of use, the purposes and methods of processing, the identification details of the Data Controller and processors, the subjects or categories of subjects to whom your personal data may be communicated or who may become aware of it, the period during which your data is stored or the criteria used to determine this period, when possible, the existence of an automated decision-making process, including profiling, the logic used, the significance and the consequences expected for you.
obtain, without unjustified delay, the updating, modification, rectification of your incorrect data or the integration of your incomplete data, should you have an interest;
obtain the deletion of your data whenever the data is unnecessary in relation to the purposes, or should you decide to withdraw consent, or oppose processing, or when the data was processed unlawfully, or erased for a legal obligation, obtain the restriction of processing in the case of: dispute regarding the accuracy of personal data, if you have not preferred to request the modification, updating, modification or rectification of your data;
unlawful processing by the Data Controller to prevent its deletion;
exercise of your right in court;
verification of whether the legitimate reasons of the Data Controller prevail over those of the data subject;
receive, if the processing is carried out by automated means, without impediments and in a structured, commonly used and readable format, the personal data concerning you that you have provided us with consent or under contract to transmit them to another Data Controller or – if technically feasible – obtain the direct transmission from one Data Controller to another;
object at any time, totally or partially:
for legitimate and prevailing reasons related to your particular situation, to the processing of your personal data;
to the processing of personal data concerning you for marketing purposes.
not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects your person.
withdraw consent at any time.
In all the cases mentioned above, if necessary, the Data Controller will notify third parties to whom your personal data is communicated of any exercise of your rights, except in specific cases (e.g., when such fulfillment proves impossible or involves a manifestly disproportionate effort compared to the right protected).
Finally, for the processing activities covered by this notice, you have the right to lodge a complaint with the Personal Data Protection Authority
(www.garanteprivacy.it).
This notice may undergo changes. For updates, we invite you to consult our website and other channels made available.