INFORMATION ON THE PROCESSING OF PERSONAL DATA
Information for the processing of personal data pursuant to Legislative Decree No. 196/2003 and Chapter III of EU Regulation 679/2016
We would like to inform you that Chapter III of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data provides for the protection of individuals. According to the regulations indicated, this processing will be based on the principles of correctness, lawfulness and transparency and the protection of your privacy and your rights.
Article 13 Paragraph 1 – Regulation (EU) 2016/679
A1) Data controller
The Data controller is:
84014 Fosso Imperatore SA
Partita IVA 04540620657
B1) Categories of data subject to processing
Personal Data (Name and Surname), Your Contact Data (personal or corporate)
C1) Purpose of the processing operated by the accommodation
Sending information/promotional material and commercial offers related to activities or products marketed by the Company (direct marketing).
To achieve this purpose, you will be asked for a precise and explicit consent provided directly on the web page by means of a tick and the press of a confirmation button.
C1.1) The legal basis of the processing carried out by the accommodation
Data processing is for the purpose 1), are carried out by the Accommodation Facility only to pursue its legitimate interest by following up your request for information.
For the purpose 2) the legal basis of the processing is your consent to the processing.
D1) Categories of subjects to which data may be communicated
In relation to the purposes indicated in the previous letter C), the accommodation company communicates your personal data to the following public bodies (non-economic):
• Police, armed forces and other public administrations, in compliance with obligations laid down by law, regulations or Community legislation; Financial administration.
The accommodation also communicates your personal data to private individuals and/or public economic entities in particular to the following subjects:
• Email or SMS service provider
E1) Transfer of data to third countries
The personal data collected may be transferred to countries outside the European Community that provide for data protection regulations consistent with those provided for by European Regulation 679/2016.
A2) Data retention period
If you do not consent to the processing for direct marketing purposes, your personal data will be deleted within a month following your request.
In the case of consent to the processing for direct marketing purposes, the data will be kept until the possible withdrawal of consent to the request for cancellation of the data subject.
In any case, after 5 (five) years from the consent to the processing, the data subject will be required to renew it and otherwise the data will be deleted.
B2) Rights of the data subject
The interested party can request the Data Controller
• access to personal data
• the correction
• the cancellation of the same
The data subject may also request the restriction of processing or oppose it. For the type of data the data subject has the right to receive in a structured format, of common use and readable by automatic device the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without hindrance by the data controller.
C2) Right to withdraw consent
The data subject has the right to revoke the consent given to the processing of direct marketing at any time.
D2) Right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with a supervisory authority that at the moment is the Data Protection Authority and on whose website http://www.garanteprivacy.it the methods of complaint to be used are indicated.
E2) Mandatory or optional provision of data and consequence of failure to provide it
In reference to the purposes of the processing indicated above:
1) The provision of data, therefore, is mandatory because its refusal would make it impossible to provide the information or indications requested by you.
2) The provision of data is optional and in the absence of this the accommodation after having responded will not activate the direct marketing processing and the data provided will not be stored.
F2) Existence of automated decision-making
No profiling activities are planned.