Types of Personal Data Processed:
a) personal identification information
b) contact information
c) information relating to previously booked services
d) information relating to your family and its members.
e) information necessary for accounting and tax purposes
Methods of processing
Your data is processed lawfully and fairly, in accordance with the provisions of Articles 5 and 6 of the Regulation.
Purpose of processing
a) to acquire and confirm your reservation of accommodation and ancillary services, and to provide the services requested.
b) to comply with the obligation set forth in the ‘Consolidated Law on Public Security’ (Article 109 of Royal Decree No. 773 of 18 June 1931), which requires us to communicate the personal details of our guests to the police headquarters for public security purposes
c) to comply with current administrative obligations
d) The data is processed by us and our representatives and is only communicated externally in compliance with legal obligations.
e) to facilitate registration procedures in the event of your subsequent stay at our facility.
f) to send you our promotional messages and/or updates on our offers
External processing
Data may be disclosed to family members or acquaintances only with the express authorization of the data subject through the granting of consent.
Data transfer
Due to the nature of the service provided to you, we inform you that the processing of your data does not require: ☒Transfer outside the EU.
Duration of processing
Your data will be stored for the time necessary to achieve the purposes for which it is processed.
YOUR RIGHTS AND HOW YOU CAN EXERCISE THEM
• obtain confirmation from the Data Controller as to whether your Personal Data exists (Right of Access, Art. 15);
• obtain from the Data Controller, without undue delay, the rectification of your Data (Right of Rectification, Art. 16);
• obtain the erasure of your data without undue delay (Right to be forgotten, Art. 17);
• obtain the restriction of processing in certain cases (Right to restriction of processing, Art. 18);
• receive your Data in a commonly used and readable format (Right to data portability, Art. 20);
• object to automated processing, including profiling (Right to object, Art 21);
• withdraw your consent at any time (Conditions for consent, Art. 7 and Art. 13);
• receive notification of a personal data breach without undue delay (Art. 34);
• lodging a complaint with a supervisory authority (Data Protection Authority);
• be informed of the existence of adequate safeguards pursuant to Article 46.
NATURE OF DATA PROVISION - CONSEQUENCES OF REFUSING CONSENT
In the case of letters, a), b) and c) in section 1 above, it is necessary to establish and maintain a commercial relationship with us, unless otherwise specified at the time of data collection or before. Without the provision of such data, we cannot establish and maintain a business relationship with you. If we collect additional data from you, we will inform you whether the provision of such information is based on a legal or contractual obligation, or whether it is necessary for other types of services. We normally indicate which information can be provided voluntarily and does not constitute a legal or contractual obligation, nor is it necessary for the purposes of an agreement. We inform you that in cases where your data is processed following your explicit, free and voluntary consent, you may revoke it at any time with effect for the future, for example by notification by post or email, using the contact information specified on the first page of this data protection policy.
RIGHT TO COMPLAIN
In the event of our non-compliance, Regulation 679/2016 grants you the right to lodge a complaint with: Garante Privacy Piazza Venezia, 11 - 00187 Rome e-mail protocollo@pec.gpdp.it
CONSENT
To proceed with the provision of our services, we kindly ask you to carefully consider the information provided in the information section and give your consent for the following purposes:
PURPOSES
• processing of data for the purposes referred to in point d)
• processing of data for the purposes referred to in point e)
• Communication of your health status and specific data (allergies, disabilities) to family members authorised by you
• processing of data for the purposes referred to in point f)