Privacy Policy

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

Given that:
In compliance with Regulation EU no. 2016/679 (hereinafter “GDPR”) on the protection of personal data, it is mandatory to provide the user with information regarding the processing of their personal data when accessing and browsing the website: www.phibeach.com (hereinafter “Website”).

the following notice is provided:

Data Controller
The Data Controller of personal data (hereinafter also referred to as “Controller”) is MEDEX S.R.L, VAT No. 07251260969, located at Viale Costa Smeralda 27 – 07021 ARZACHENA (SS), Tel. 0789955012, e-mail: amministrazione@phibeach.com, certified e-mail: medex@legalmail.it

Personal Data Processed
Browsing Data
The computer system responsible for the functioning of the website acquires, during its normal operation, some personal data of the user. These are pieces of information that are not collected to be associated with identified interests, but due to their nature, through further processing and association, they could allow users to be identified. This includes: IP addresses, numerical code indicating the response status from the server (e.g., error, etc.), time of requests made for accessing pages and browsing.

Cookies
A cookie is a small-sized text file transferred from the server to the user’s computer/smartphone/tablet when accessing and browsing the Website. Cookies retain information considered personal data of the user, in relation to specific purposes; the user, through a specific banner, is provided with details on the cookies in use and the possibility to select/deselect them. For more information, consult the Cookie Policy.

Purposes and Legal Basis for Processing Personal Data
The personal navigation data are processed solely for the purpose of obtaining anonymous statistical information on the use of the Website and to check its correct functioning. The legal basis lies in the free and express selection of cookies.

Methods of Processing Personal Data and Communication
The personal data indicated in this notice are processed with the aid of computer tools in compliance with the principles of fairness, legality, transparency, and confidentiality as provided by current regulations; moreover, they are not subject to automated decision-making processes, nor any form of profiling.

Transfer of Personal Data
The user's personal data are not transferred to third countries or international organizations.

Retention Period for Personal Data
Navigation data are stored for strictly necessary periods for the purposes indicated.

User Rights
In accordance with the GDPR and the Decree, the user may at any time ask the Data Controller to exercise the following rights: right of access, right to rectification, right to erasure, right to restriction of processing, obligation to notify in case of rectification or erasure of personal data or restriction of processing, right to data portability; the exercise of such rights must be requested through written communication to the Controller. The interested party can lodge a complaint with the Supervisory Authority of the State in which they reside.