Privacy Policy
Personal Data Processing Notice under Articles 13 and 14 of EU Regulation 679/2016 and Legislative Decree 196/2003 and subsequent amendments
DATA CONTROLLER
PT COVE DEVELOPMENTS BALI PERUMAHAN GRAHA PERTIWI, Desa/Kelurahan Abianbase, Kec. Mengwi, Kab. Badung, Provinsi Bali, Postal Code: 80351 NIB: 1809230104931
This Privacy Policy is published for the website https://numabali.com/, prepared in accordance with the provisions of the GDPR (General Data Protection Regulation) approved by EU Regulation 2016/679 of the European Parliament and Council of April 27, 2016, applicable from May 25, 2018. It contains information related to the processing of personal data of users who visit the site and use the services offered. Its primary function is to inform users about the identity of the Data Controller, the use of their personal data, and the exercisable rights. In accordance with Article 4 of the GDPR, to facilitate the understanding of this notice, the Data Controller provides the following:
DEFINITIONS
Data Controller The natural or legal person, public authority, service, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools used, including security measures related to the operation and use of this Website. Unless otherwise specified, the Data Controller is the owner of this Website.
User The individual who uses this Website, who, unless otherwise specified, coincides with the Data Subject.
Data Subject The natural person to whom the Personal Data refers.
Personal Data (or Data) Any information that, directly or indirectly, identifies or makes an individual identifiable.
Usage Data Information collected automatically through this Website (including from third-party applications integrated into this Website).
Legal References PT COVE DEVELOPMENTS BALI (hereinafter for brevity “PT”), has always adhered to the core principles established by Italian Law, such as fairness, legality, and transparency, particularly with regard to privacy and personal identity and the right to personal data protection. It has always complied with the processing of personal data of its Users, initially conforming to the provisions of the Privacy Code – specifically Article 13 of Legislative Decree 196/2003 and its subsequent updates with the implementation of Legislative Decree No. 101/2018 and Decree Law 139/2021, converted with modifications by Law 205/2021 – and periodically implementing not only the provisions of GDPR 2016/679 but also all measures in the field published by the Data Protection Authority on its official portal. Users visiting this website, having voluntarily typed it into their browser or having indirectly landed on this page through internet navigation, should note that this privacy policy is expressly drafted for the website https://numabali.com/. The Data Controller cannot be held responsible if the user navigates similar domain names to https://numabali.com/ (hereinafter for brevity “Site”).
Under the services of the information society (i.e., provided remotely, electronically, through IT tools), the GDPR has set a specific regulation with Article 8, which does not generically cover all processing of minor data but provides for the lawfulness of processing minor data, where such processing: i. concerns a direct offer of information society services to minors who are at least 16 years old (or, according to Article 8, a different age set by the national legislator); ii. is based on consent, according to Article 6, paragraph 1, letter a of the GDPR (if the processing has another legal basis, such as compliance with a legal obligation, legitimate interests, etc., the aforementioned rule does not apply).
Where these two requirements are not met, Article 8 requires consent from the person with parental responsibility. Please review this notice periodically to check for any updates and/or revisions that may be necessary. Specifically, EU Regulation 2016/679 imposes the obligation to inform the Data Subject about the various fundamental elements (specified in Articles 13 and 14) regarding the processing of Personal Data concerning them. This document may be subject to changes and updates. If there are significant changes and/or updates, these will be notified to the interested user.
Place of Processing Processing related to the web services of this site takes place at the aforementioned location of the Data Controller and in any other place where the parties involved are located and is managed solely by technical personnel appointed for processing. If necessary, data related to site services may be processed by the webmaster who maintains the technological part of the site.
Purpose of Processing Personal data collected are processed according to principles of fairness, legality, and transparency and mainly for the following activities:
- to respond to emails or messages received through the contact form;
- to contact the user and manage requests related to the contact form service;
- to send communications via mailing list and newsletter;
- for any completion of questionnaires and/or data collection forms;
- to manage interactions with social networks or other external platforms;
- to fulfill legal and regulatory obligations;
- to comply with requests from authorities, public entities, and bodies, and related provisions, for the exercise of rights, including those of third parties, in judicial proceedings as well as administrative procedures or in arbitration or conciliation processes.
Legal Basis The processing of data on the website https://numabali.com/ is legitimized for the fulfillment of legal obligations to which the Data Controller is subject (Article 6 letter c) EU Regulation 2016/679), as well as for the pursuit of a legitimate interest of the Data Controller (Article 6 letter f) EU Regulation 2016/679). Additionally, according to Article 6 paragraph 1 letter a) of EU Regulation 2016/679, the legal basis of the website’s notice consists of the user’s express consent, i.e., a free, specific, informed expression of will by which the Data Subject expresses their consent to data processing, including merely by consulting this site or by sending communications and newsletters. By voluntarily subscribing to the newsletter or mailing list, the user’s email address is automatically included in a contact list to which periodic communications containing updates, information, and also commercial and promotional communications related to the website will be sent. Personal data that may be collected in the newsletter include: First Name, Last Name, Email Address. For more information, please consult the extended newsletter notice. Additionally, the legal basis is also found in the exercise of contractual and pre-contractual activities at the request of the Data Subject.
Rights of the Data Subject The Data Subject has the right to request from the Data Controller, under Articles 15 et seq. of EU Regulation 2016/679 (GDPR): a) access to their personal data and all information referred to in Article 15 of the GDPR; b) correction of inaccurate personal data and completion of incomplete data under Article 16 of the GDPR; c) deletion of their data, except for data contained in records that must be mandatorily retained by the Data Controller and unless there is a prevailing legitimate reason for continuing the processing under Article 17 of the GDPR; d) restriction of processing in the cases provided for in Article 18 of the GDPR. The Data Subject also has the right to object to the processing of their personal data, subject to what is provided regarding the necessity and obligation of processing for establishing the relationship, as well as data portability (Article 21 GDPR) and to withdraw consent for non-mandatory data processing, without affecting the lawfulness of the processing based on consent given. These rights may be exercised by the Data Subject by sending a written communication to the email address of the Data Controller: info@numabali.com According to Article 15 letter f) of the aforementioned Regulation EU 2016/679, the Data Subject has the right to lodge a complaint with the Data Protection Authority if they believe that their rights have been violated.
Data Processing Methods Data are collected and processed in compliance with EU Regulation 679/2016 and Legislative Decree 196/2003 and subsequent amendments, both electronically and, when necessary, in paper form. Electronic data processing is carried out with the aid of IT and/or telematic tools (e.g., smartphones, computers, and tablets), generally automated, with organizational and logical methods strictly related to the purposes indicated above. Collected personal data will not be subject to unauthorized dissemination, disclosure, and/or destruction. In addition to the Data Controller, in some cases, individuals involved in the organization of this website (such as administrative staff, commercial, legal, marketing personnel, system administrators, etc.), internal and external collaborators to the association, associates, or if applicable, external authorized subjects (e.g., third-party technical service providers, hosting providers, IT companies, communication agencies) may have access to the collected data. For security purposes, automatically registered data during user navigation may include data such as IP address, browser types, and parameters of the device used to connect, ISP (Internet Service Provider), date and time of visit, referring web pages, and other parameters related to the user’s operating system and computing environment. These data will never be used for user identification and/or profiling but only for site and user protection purposes and will be processed based on the legitimate interests of the Data Controller. Information that users choose to make public through the services and tools provided is provided by the user knowingly and voluntarily, releasing the website and Data Controller from any responsibility for potential violations of laws. The Data Controller adopts all appropriate security measures to prevent unauthorized access, disclosure, modification, and/or destruction of the said data and ensures their confidentiality in accordance with the principles applicable to personal data processing under Article 5 of the Regulation. It is informed that personal data will be processed by internal collaborators, authorized by the Data Controller and in compliance with instructions provided by them. This site processes user data lawfully and correctly, for the purposes specified above and in accordance with the principles of transparency and necessity.
Cookies This website uses cookies and similar technologies to provide and improve the service provided. Detailed information on the types of cookies used and their specific purposes is available in the Cookies Policy.
Communication to Third Parties The Data Controller does not disclose personal data to third parties or to other parties not involved in the processing. Data are disclosed to third parties only for strictly necessary reasons and only to the extent necessary for the execution of services. Third parties will receive only the information necessary for the specific purposes related to the provision of services. Data may also be disclosed to judicial authorities or public entities if necessary to protect the rights and interests of the Data Controller.
Retention Period Personal data are retained for the time strictly necessary to achieve the purposes for which they are collected and in compliance with the principles of data minimization and storage limitation, in accordance with Article 5 of EU Regulation 679/2016. The Data Controller shall assess the retention period based on the purpose of the processing, any contractual obligations, and legal obligations.
Changes to the Privacy Policy The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing users on this page and, if possible, on this site. Users are therefore requested to consult this page periodically, taking into account the date of the last modification indicated at the bottom.
