This notification is provided in accordance with art. 13 of Italian Legislative Decree 196/2003 (the Data Protection Act) for the users of the web services of Villa Carlotta, which are accessible online via the address https://www.villacarlottajesolo.it. Data controller: data regarding identified or identifiable persons may be processed after visits to the website. Pursuant to Italian Legislative Decree 196 of 30 June 2003, the data controller is the legal representative of Villa Carlotta, who may be contacted via email at priv@villacarlottajesolo.it. Place of data processing: the data processing connected to the web services of this site takes place at Villa Carlotta and it is carried out exclusively by the appointed data processors, along with anyone who is asked to perform occasional maintenance work. The data originating from the web service are never made available or disclosed to others. The personal data provided by users who send requests for information materials are only used in order to supply the items or services requested and they will only be passed on to third parties if it is deemed necessary for this purpose (for example, for making contact to provide information). Data that are provided voluntarily by the users: by expressly and voluntarily opting to send electronic mail to the addresses on this website, users are providing their email addresses (which are required in order to reply to requests) and any other personal data included in the messages. A brief reminder of this is given on the information request page of the website. Processing methods: the personal data are processed with computer systems for the amount of time that is strictly necessary in order to achieve the goals for which they are collected. Specific security measures are taken to prevent data loss, illicit or improper use of data, and unauthorized access. Rights of the interested parties: in accordance with art. 7 of the Italian Data Protection Act (Italian Legislative Decree 196/2003), people have the right to be told at any time whether personal data concerning them exist or not and to be informed of the content and origin of any personal data about them. It is possible to check the accuracy of the processed data and to ask for them to be supplemented, updated or corrected. It is possible to ask for data to be deleted, made anonymous or blocked if they have been processed illegally, and in any case it is possible to oppose the processing for legitimate reasons. Requests of this kind must be sent to the data controller.nnn