PRIVACY NOTICE – PERSONAL DATA PROCESSING
Dear Guest, pursuant to Italian Legislative Decree no. 196/2003 (Personal Data Protection Code) and EU Regulation no. 2016/679 (General Data Protection Regulation), we inform you that the personal data you provide and that are collected by the undersigned will be processed in compliance with Italian and European legislation, as well as with the rights granted to you.
1. Purposes of the processing
1.1 for the correct and complete execution of the contract;
1.2 for compliance with legal obligations connected to the contractual relationship, including – by way of example and not limitation – public security obligations relating to the communication to the Police Authorities (Questura) of the personal details of accommodated guests, as well as obligations towards Public Authorities for the payment of taxes or duties;
1.3 for the fulfilment of administrative, accounting and tax obligations;
1.4 for marketing purposes through the sending of promotional and advertising material, including discount codes for future bookings, relating to products or services similar to those covered by the existing contractual relationship;
1.5 for any other purposes connected to the present booking.
2. Methods of personal data processing
The processing will be carried out in paper and/or digital and/or electronic form, with or without the aid of electronic tools, through operations such as collection, registration, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, communication, blocking, erasure and destruction of data.
The processing is carried out by the Data Controller and by persons expressly authorised by the Data Controller.
3. Provision of data and refusal
3.1 The provision of personal data is essential for the purposes indicated in section “1”, numbers 1.1, 1.2 and 1.3.
3.2 If the data subject refuses to provide such data, the activities related to those purposes cannot be performed; therefore, for such purposes, the data subject’s consent is not required.
4. Communication of data
Personal data may be accessed only by personnel authorised to process them and may be communicated, for the purposes indicated in section “1”, to:
4.1 entities providing specific services or consultancy;
4.2 Public Security Authorities;
4.3 Public Bodies;
4.4 subjects to whom communication is necessary for the correct fulfilment of the obligations arising from the contract.
5. Data retention
5.1 Personal data will be retained for a period of five years.