We inform you,
pursuant to art. 13 of the GDPR n. 2016/679 (hereinafter “GDPR”), which in the event of the collection of personal data concerning you, this treatment will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights;
a) our organization, as a legal person, has the dual role of data controller and data processor;
b) the data controller and the data processor (see contact details on the last page); once the internal evaluations of the case have been completed, they have not designated the data protection officer, since, pursuant to art.37 paragraph 1 of the GDPR n. 2016/679 is not part of the obligation.
Your data will be processed
c / i) pursuant to art. 6 letter b) and c), for purposes related to the execution of a contract or the execution of pre-contractual measures and to fulfill the legal obligations to which the data controller is subject; for example, data processing necessary for the management of requests, quotes and reservations, fulfillment of all contractual, accounting and tax obligations, management of payments also with credit cards, POS and advanced online services managed by the respective credit institutions or litigation agencies and management; furthermore, for all obligations under the law; for example, regulations, community and local regulations or by orders of the authorities, registration and communication of data to the authorities and management of any disputes; in addition to this, for the pursuit of the legitimate interest of the data controller or third parties under the conditions laid down by the GDPR;
c / ii) pursuant to art. 7, subject to your freely expressed consent, for other service and marketing purposes; for example; data processing necessary for sending promotional offers on our services and other events, updating rates, other estimates made, as well as communications for greetings and holidays; to perform additional services such as external communication of data relating to your stay for the exclusive purpose of allowing the function of receiving objects, messages and telephone calls addressed to you;
for the treatment of particular categories of personal data in order to offer better level of hospitality; for example, food intolerances, allergies or other particular data;
for the treatment of advanced online services; for example, signing up to our management program to use your e-mail address to send your account, receipt or invoice, to manage loyalty scores and other similar services;
c / iii) pursuant to art. 7, subject to your freely expressed consent, for further purposes; for example; data processing necessary to LOGIN to our public WIFI / LAN network to surf the internet;
as well as data processing necessary during the use of our institutional website whose transmission is implicit in the use of internet communication protocols, these data are not collected to be associated with identified interests, but by their very nature they could, through processing and associations with data held by third parties, allowing users to be identified; for example, this category of data includes the IP addresses or the names of the devices used by the users who connect to the site, the URI notation addresses of the requested resources, the request time, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the server response and other parameters relating to the operating system and the user’s information environment;
the aforementioned data may be used for the sole purpose of obtaining anonymous statistical information on the use of the public WIFI / LAN network and the institutional website; for example, to check the correct functioning of our IT infrastructure and improve the service;
likewise, the data could be used by the competent authorities, for example, to ascertain responsibility in case of hypothetical computer crimes or damage to our WIFI network, LAN, our IT system and our institutional site.
d) pursuant to art. 6 paragraph 1 letter f), taking into account the reasonable expectations of the parties, for purposes of legitimate interests pursued by the data controller or by third parties; for example; data for fraud prevention purposes (attendance monitoring, entry register, biometric data, video surveillance images …) and direct marketing purposes.
The recipients and categories of recipients of your data are
e) natural or legal persons, public authorities, collaborators such as employees, professionals, service providers, bodies and associations.
Your personal data can be transferred to a third country or to an international organization
f) due to the foregoing, your data as well as being processed in paper form in the internal archives of our organization or with third parties; they are mainly processed and stored electronically on our mass storage inside our facility or within the European Union through hosting, server and cloud services. In any case, it is understood that the owner, if necessary, will have the right to move the hosting, server and cloud servers also to non-EU areas; likewise, the owner ensures as of now that the transfer of data to non-EU areas will take place in accordance with the applicable legal provisions, subject to stipulation of the standard contractual clauses provided by the European Commission.
SECTION 02
The processing of your data is correct and transparent, carried out by means of the operations of collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and / or automated processing.
They may be processed, only for the purposes referred to above c / i, c / ii, c / iii and, also by employees and collaborators of the owner or to other entities based in Italy and other European countries, by third-party companies or others subjects; for example, by way of example, credit institutions, professional firms, insurance companies for the provision of insurance services, managers of IT and telephone services or other entities that provide services / products on behalf of the Owner, in their capacity as external managers of the treatment. If personal data are not obtained from the interested party, the data controller, in application of art. 14 of the GDPR, will provide within one month, any specific circumstance; otherwise, this information applies to you.
The retention period of your data is defined
a) at a time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes referred to in the previous points c / i and for no more than 2 years from the collection of data for the purposes referred to in the previous points c / ii, c / iii and d.
As an interested party, by sending a registered letter or an email to the data controller, you can assert the following rights.
b) right of access, pursuant to art. 15 of the GDPR, to obtain confirmation that personal data processing is or is not being processed and in this case, to obtain access to personal data and information; in case of request for further copies of data, the owner and the holder of the treatment reserves the right to charge you a reasonable cost contribution based on administrative costs;
right of rectification, of which art. 16 of the GDPR, to obtain the correction of inaccurate personal data concerning him without undue delay;
right to cancellation, of which art. 17 of the GDPR, to obtain the cancellation of personal data concerning you without undue delay;
right to limit the treatment, of which art. 18 of the GDPR, to obtain the limitation of the treatment;
right to data portability, of which art. 20 of the GDPR, to receive the personal data concerning him / her provided to a data controller in a structured format and to transmit such data to another data controller without hindrance;
right of opposition, of which art. 21 of the GDPR, to object at any time to the processing of personal data concerning you pursuant to art. 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions.
c) right to withdraw consent, for the cases provided for by the GDPR, at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
d) right to lodge a complaint with a supervisory authority, in Italy Privacy Guarantor PIAZZA DI MONTE CITORIO n. 121 00186 ROME mail garante@gpdp.it
e) Nature of data provision and consequences of refusing to answer
The provision of data for the purposes referred to in the previous point c / i is also mandatory, taking into account the purposes of legitimate pursued whose previous point d the provision must be consented to; in their absence, our organization cannot guarantee the provision of services and the fulfillment of your expectations. Without the need for express consent, the processing of such data can be carried out by the Authorities, by the insurance company for the provision of insurance services, by the study of professionals also for the management of disputes, as well as to those subjects to whom communication is mandatory by law for the accomplishment of said purposes. These subjects will process the data in their capacity as independent data controllers. Your information will not be disseminated. The provision of data for the purposes set out above c / ii and c / iii is optional. Taking into account the reasonable expectations of the parties for the purposes. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the services offered and to take advantage of internet connections through our WIFI network / LAN publishes as well as a series of advanced services available on our institutional website. However, you will continue to be entitled to the services referred to above c / i
f) It is your right not to be subjected to a decision based solely on automated processing
referred to in the previous points c / ii and c / iii, including profiling that produces legal effects concerning him or that similarly significantly affects your person. Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or neither of the two types of communication.
date 25/05/2018
Contact details of the data controller HOTEL PERU ‘S.N.C. di Di Tos Lorenzo and C. – P.Iva: 00260660279, info@hotelperujesolo.com, 0421.362273, VIA ALTINATE 63, 30016, JESOLO, VENICE
