Privacy policy

DATA PROCESSING METHODS

Following a policy of transparency and correctness, in compliance with current regulations and with particular reference to the applicable national legislation and the European Privacy Regulation n. 679/2016 ("GDPR", hereinafter "Privacy Code"), Sima Immobilier sarl provides some information regarding the processing of personal data provided by the user.

Five stars holiday house is a registered trademark and web portal owned by SIMA IMMOBILIER SARL

It should be noted that, based on article 4, paragraph 1, letter a), of the Privacy Code, treatment must be understood as: "any operation or set of operations, carried out even without the aid of electronic instruments, concerning the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and destruction of data, even if not recorded in a database".

1. PURPOSE OF THE TREATMENT
1.1. The data provided or otherwise acquired by the Data Controller directly from the User or from third parties, are processed by our company and/or by our representatives for the following purposes:
1. a) for the performance of its activity in execution, management, conclusion, fulfillment of the pre-contractual and contractual relationships in place, to provide the services requested or envisaged in favor of the User, as well as for the performance of strictly connected activities;
2. b) for the fulfillment of the obligations established by laws, regulations, provisions issued by supervisory and control authorities and bodies;
3. c) for carrying out commercial activities for the promotion of services and products offered by the Data Controller and/or its commercial partners, including the sending of advertising material or periodic communications.
1.2. The Data Controller will proceed with the collection or processing of the data. However, these data may subsequently be acquired and processed by the Data Controller's Partners who will have to deliver the goods or provide the services purchased, always to the extent that such processing is instrumental for the specific purpose pursued by the operation or services requested.
1.3. The data collected will also be processed by the Data Controller, without the need for explicit consent in accordance with the provisions of article 130, paragraph 4, of the Privacy Code and the provision of the Guarantor "Simplifications of certain obligations in the public and private sphere with respect to treatments for administrative and accounting purposes” of 06/19/2008, for commercial communication, the offer of products or services, the sending of advertising material, the carrying out of market research by the Data Controller by paper mail and e-mail. Pursuant to article 7, paragraph 4, of the Privacy Code, the customer can object at any time "to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communications".
2. DATA PROCESSING METHODS
2.1. The processing in question is carried out according to the methods set out in the Privacy Code, also by means of IT and automated tools, but not limited to collection, registration, organization, conservation, processing, selection, comparison, use, interconnection, consultation, communication, cancellation, destruction, blocking of data, according to the principles of safety/protection, accessibility, confidentiality, integrity. The same data are processed and held in accordance with the provisions of the law, within the limits and in the manner specified by the same. The treatment is carried out directly by the owner's organization and by subjects external to this organization, belonging to the network of its commercial partners, delegated as persons in charge/managers of the same company and/or subjects closely connected to the functioning of the same and/or to carry out the activities contractually envisaged and requested by you (in addition to what is specified in point 4). The data is not subject to disclosure.

2.2. SPECIFIC INFORMATION FIVE STAR APP
The Five stars holiday house app may require the use of the user's location. If explicitly requested by the application, this permission has the sole purpose of guaranteeing its correct technical functioning.

Data relating to the user's location are NOT collected by the data controller in any way.
3. PROVISION OF DATA
The provision of personal data is necessary for the conclusion, management of the contract and for the best execution of the contractual services envisaged, as well as for the performance of the activities strictly connected to the fulfillment of these services. The provision of data may be mandatory on the basis of law, regulation, community legislation.
Any refusal of express consent to the processing of data will make it impossible to conclude or execute the contract and/or to perform the services requested or contractually envisaged. The provision of personal data for the purpose of information and commercial promotion of the services and offers promoted by the Data Controller is optional and does not entail consequences in relation to the contractual relationship.


4. SCOPE OF COMMUNICATION AND DISSEMINATION OF DATA
4.1. The data provided may be communicated by virtue of the purposes described in point 1.1 a) and to be subjected to treatments for the same purposes, to the following subjects:
1. a) Collaborators of the Data Controller;
2. b) Individuals external to the Data Controller's organization who carry out connected and instrumental activities aimed at managing the relationship
contract, including trusted personnel, lawyers, experts, business consultancy firms, consultants, professional firms, data and service management bodies, debt collection companies, bodies and organizations that carry out electronic data and media management activities of payment, companies that carry out printing, transmission, enveloping, transport and sorting of communications to customers, document filing services and companies specialized in data entry services, supply of IT services, administrative and accounting management services, through subjects appointed by the Owner.
The data may then be communicated for the purposes referred to in point 1.1 c) to collaborators and persons in charge of the Data Controller.
4.2. Personal data will not be disclosed, made available or given for consultation in any form to subjects other than those indicated in point 4.1 above or to indeterminate subjects.

5. RIGHTS OF THE INTERESTED PARTY IN RELATION TO THE PROCESSING OF PERSONAL DATA
5.1.The interested party has the rights pursuant to art. 7 Privacy Code and art. 15 (right of access) of the European Regulation EU 2016/679 or the rights of:
1. obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form.
2. obtain the indication: a) of the origin of the personal data; b) the purposes and methods of processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the owner, of the managers and of the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representatives in the territory of the State, managers or agents.
III. obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is proves impossible or involves the use of means manifestly disproportionate to the protected right.
1. oppose, in whole or in part: a) for legitimate reasons, the processing of personal data concerning him, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communications;
2. the right to lodge a complaint with the Supervisory Authority for any matter relating to the aforementioned data processing. Pursuant to articles from 16 to 22 of the European Regulation EU 2016/679 The interested party can exercise:
3. the right to rectification (art. 16),
VII. the right to be forgotten (cancellation art. 17),
VIII. the right to limit the processing (art. 18),
1. the right to obtain from the Data Controller notification to the recipients to whom the data have been transmitted of any corrections or cancellations or limitations on processing (art. 19),
2. the right to portability (art. 20),
3. the right to object (Article 21),
XII. the right to refuse the automated process (art. 22).
In this way you are allowed to access your data for:
Verify its veracity;
Modify them if they become inaccurate;
Integrate them also with a supplementary declaration;
Request its cancellation;
limit its processing;
Oppose the treatment.
The interested party may revoke the consent expressed in relation to the distinct purposes indicated above at any time, except for the impossibility of continuing commercial relations as indicated and without prejudice to the processing of data previously acquired for the fulfillment of fiscal and tax obligations dependent on the concluded contracts.
DATA DELETION
In compliance with the corresponding right of access to the interested party, the Data Controller has set up procedures for which interested parties can request the cancellation without unjustified delay of personal data or the limitation of the processing of personal data concerning them for the following reasons: • Because the data are no longer necessary for the purposes for which they were collected; · Why the interested party has revoked the consent; • Why the interested party opposes the treatment; • Why the data is treated illegally.
5.2 To exercise the rights just summarized, you can contact the Data Controller directly, in the manner described in art. 9 of the Privacy Code. In particular, you may send a communication by registered letter addressed to: SIMA Immobilier sarl, with headquarters at 34 Rue de la buffa – 06000 Nice (France) ; an email to the address: [email protected]

6. OWNER OF THE TREATMENT
6.1. The data provided may be processed by the Data Controller and by all its collaborators and/or employees.
6.2. The data provided may be processed by third parties, possibly called to carry out processing operations on behalf of the Data Controller, appointed for this purpose as external data processors:
1. a) subjects linked to the Owner by an agency relationship pursuant to art. 1742 and following of the Civil Code;
2. b) companies that carry out activities of transmission, enveloping, transport and sorting of communications to customers;
3. c) companies that carry out archiving services for documentation relating to relationships with customers;
4. d) survey company regarding: quality of services provided, customer satisfaction, offer of new products, etc.;
5. e) companies that perform services related to the provision, measurement and optimization of websites and communication campaigns via the Internet.
6.3. The list of data processors is constantly updated and can be requested by sending a communication in the manner indicated in point 5.2.
7. TYPES OF DATA COLLECTED
7.1. Among the Personal Data collected by this Platform, independently or through third parties, there are: Website, Name, Surname, Telephone Number, Company name, VAT number, Address, Province, E-mail, Cookies, Data of usage, Type of service chosen by the prospect and Password.
7.2. Other Personal Data collected may be indicated in other sections of this privacy policy or through information texts displayed at the same time as the Data is collected. Personal Data may be entered voluntarily by the User, or collected automatically during the use of this Platform.
Any use of Cookies - or other tracking tools - by this Platform or by the owners of third-party services used by this Application, unless otherwise specified, has the purpose of identifying the User and recording the relative preferences for strictly linked to the provision of the service requested by the User.
7.3. Failure by the User to provide certain Personal Data could prevent this Platform from providing its services.
7.4. The User assumes responsibility for the Personal Data of third parties published or shared through this Platform and guarantees that he has the right to communicate or disseminate them, freeing the Owner from any liability to third parties.
8. FURTHER INFORMATION ABOUT THE TREATMENT
8.1. Minimum security measures and storage methods for collected data
Pursuant to art. 31 of the Privacy Code, a series of measures must be adopted to guarantee the security of the data collected and of the systems, minimizing the risks of destruction, loss, even accidental, of the data itself and preventing any type of unauthorized access for unauthorized processing. permitted or not compliant with the purpose of the collection. The data provided will be collected by the Data Controller with the aid of electronic tools and for this reason, in compliance with the provisions of Annex B of the Privacy Code, additional security measures will be observed, such as:
1. a) the adoption of an IT authentication system;
2. b) the adoption of an authorization system, if different ambit authorization profiles are identified for the persons in charge.
In the first hypothesis, the authentication credentials consist either of a code for the identification of the person in charge of the treatment associated with a keyword or of an authentication device, both confidential and known only by the same. The identification code cannot be assigned to multiple appointees, not even at different times, while the authentication credentials are deactivated or in the event of prolonged inactivity (at least six months) or in the event of loss of the quality which allowed the in charge of being able to access personal data.
In the second hypothesis, however, the authorization profiles must be identified and configured prior to the start of the processing of personal data and the existence of the conditions for their conservation must be verified, at least annually.
SIMA Immobilier sarl, in its capacity as data controller, undertakes to equip itself with suitable electronic tools, updated at least every six months, designed to protect the personal data collected against the risk of intrusion and against the risk of diffusion of computer programs aimed at damage or disrupt your computer system. The programs aimed at preventing the vulnerability of electronic instruments will be updated annually, while at least weekly technical instructions must be given in order to save the collected data. In the event that the Data Controller makes use of personnel external to his own structure, a written declaration of the intervention carried out must always be issued in order to certify its compliance with the regulatory requirements.
8.2. Personal data security measures
Pursuant to article 32 of the European Regulation EU 2°16/679, the appropriate security measures will be adopted to guarantee the security of personal data and in the event of their violation, this will be communicated to the National Supervisory Authority in the ways indicated in the art. 33 of the same European Regulation, also in the cases provided for in the following art. 34, the violation will be communicated to the interested party.
8.3. Defense in court
The User's Personal Data can be used for defense by the Owner in judgment or in the preparatory stages for its eventual establishment, from abuses in the use of the same or related services by the User.
8.4. Specific information
In addition to the information contained in this privacy policy, this Platform may provide the User with contextual information regarding specific services, or the collection and processing of Personal Data.
8.5. System and maintenance logs
For needs related to operation and maintenance, this Platform and any third party services used by it may collect System Logs, i.e. files that record the interactions and which may also contain Personal Data, such as the User IP address.
8.6. Information not contained in this policy
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact information.
8.7. Exercise of rights by Users
The subjects to whom the Personal Data refer have the right at any time to obtain confirmation of the existence or otherwise of the same from the Data Controller, to know its content and origin, to verify its accuracy or request its integration , cancellation, updating, rectification, transformation into anonymous form or blocking of Personal Data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their treatment. Requests should be addressed to the Data Controller. This Platform may not support "do not track" requests, i.e. those that do not allow the User to be traced. To find out if any third-party services used support them, consult their privacy policies.
8.8. Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Therefore, please consult this page often, referring to the date of the last modification indicated at the bottom. In the event of non-acceptance of the changes made to this privacy policy, the User is required to cease using this Application and may request the Data Controller to delete their Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to the Personal Data collected up to that moment.

9. COOKIE POLICIES
In compliance with Provision no. 229 issued by the Guarantor for the Protection of Personal Data on 8 May 2014, Sima Immobilier sarl provides the following information on cookies, their functions and how to disable them if necessary.

POLICY RELATING TO THE USE OF COOKIES
Like many other web pages, the fivestar platform also uses cookies. In this section we explain our cookie policy, so that you understand what we are talking about.

What is a cookie?
A cookie is a small file that is downloaded to a user's browser in order to store data that can be retrieved by the entity responsible for its installation. Cookies are essential for the functioning of the Internet and, moreover, they facilitate navigation.
What is a cookie for?
Cookies are used to store various types of information. There are many types of cookies, they can be classified according to the entity that manages them (own or third-party cookies), the period of time they remain active (session or persistent cookies), or according to the purpose (technical cookies, personalisation, advertising analysis or behavioral advertising). For example, a cookie is one that allows you to remember the start of a user's session (if we store data on your computer such as your preferences and configurations, these, such as the language for example, can be automatically restored on your next visit without having to set them again), obtain information on your browsing habits (in order to improve your experience), or be able to present you with the most relevant advertising based on the information collected.
How can I revoke my consent and delete cookies?
What you can do is configure your browser to stop accepting cookies or notify you every time you visit a web page that uses them. Please note that if you withdraw your consent there are likely to be sections or applications of the website that you will not be able to use.
Types of cookies used by fivestar

– Performance improvement cookies

These types of cookies save your preferences for some services or settings (such as language or currency) so that you don't have to reconfigure them every time you visit our portal. In some cases, these changes may be made by third parties.
– Statistical analysis cookies

These cookies allow us to count the number of visitors and statistically analyze the use of our Platform by users. This data can be processed by us or by third parties and thanks to them we can study navigation within our Platform and improve its appearance.

– Geolocation cookies

They are used to geographically locate the location of computers, smartphones or tablets in order to be able to offer the most appropriate content and services based on where they are.

– Registration cookies

When you register on our Platform, cookies are generated that identify you as a registered user. They can be used to identify your user profile and associated services and remain saved if you do not exit your profile, turn off your computer or device. These cookies can be used by combining analytical data to individually identify your preferences in our portal.
-Advertising cookies

They are the ones that allow you to effectively manage the promotional spaces of our Partners, in such a way as to be able to adapt the content of the advertisement to the use you will make of our website. They can be processed by us or by third parties and thanks to them we will be able to know your Internet browsing habits and show you advertising related to them.
– Other third-party cookies

Sima Immobilier sarl may also eventually install Partner cookies that allow you to manage and improve the services they offer.
Sima Immobilier sarl through its IT platform at the address FIVESTARS HOLIDAYHOUSE.COM may use the types of cookies indicated above for communications for commercial profiling purposes and for direct marketing which will only take place with the consent of the interested party to online profiling (such consent is optional and is requested, together with others, when the user registers on the Platform).
In the event that a user requests the deletion of cookies through his browser, our cookies will actually be removed (this is not one of those cookies that resist the cancellation request made via the browser). For this reason, we recommend that all interested parties who do not want our cookie to delete it simply by going to the privacy settings of their browser and selecting the option to delete cookies.

The use of other persistent cookies and session cookies (which are not stored permanently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the website.
The cookies used on this site avoid the use of other IT techniques potentially prejudicial to the confidentiality of users' browsing and do not allow the acquisition of personal identification data of the User.
sima Immobilier sarl, for its own statistical purposes, may possibly use the Google Analytics service, a web analysis service provided by Google, Inc. ("Google"). Google Analytics uses cookies, which are text files that are stored on your computer, to allow SIMA Immobilier sarl to analyze how users use the Platform. The information generated by the cookies on your use of the Platform (including your IP address) will be transmitted and stored on Google's servers in the United States. Google will use this information for the purpose of tracking and examining access to the Platform and providing other services relating to Internet use. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf.