DATA PROCESSING

Dear Sir/Madam,

We would like to inform you that Chapter III of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data provides for the protection of individuals. According to the regulations indicated, this processing will be based on the principles of correctness, lawfulness and transparency and the protection of your privacy and your rights.

Article 13 Paragraph 1 – Regulation (EU) 2016/679

A1) Data controller

The Data controller is:

Ciesse Cucine

84014 Fosso Imperatore SA

Partita IVA  04540620657

Tel  0819372201

Email info@ciessecucine.com

B1) Categories of data subject to processing

Personal Data (Name and Surname), Your Contact Data (personal or corporate)

C1) Purpose of the processing operated by the accommodation

Sending information/promotional material and commercial offers related to activities or products marketed by the Company (direct marketing).

To achieve this purpose, you will be asked for a precise and explicit consent provided directly on the web page by means of a tick and the press of a confirmation button.

C1.1) The legal basis of the processing carried out by the accommodation

Data processing is for the purpose 1), are carried out by the Accommodation Facility only to pursue its legitimate interest by following up your request for information.

For the purpose 2) the legal basis of the processing is your consent to the processing.

D1) Categories of subjects to which data may be communicated

In relation to the purposes indicated in the previous letter C), the accommodation company communicates your personal data to the following public bodies (non-economic):

• Police, armed forces and other public administrations, in compliance with obligations laid down by law, regulations or Community legislation; Financial administration.

The accommodation also communicates your personal data to private individuals and/or public economic entities in particular to the following subjects:

• Email or SMS service provider

E1) Transfer of data to third countries

The personal data collected may be transferred to countries outside the European Community that provide for data protection regulations consistent with those provided for by European Regulation 679/2016.

A2) Data retention period

If you do not consent to the processing for direct marketing purposes, your personal data will be deleted within a month following your request.

In the case of consent to the processing for direct marketing purposes, the data will be kept until the possible withdrawal of consent to the request for cancellation of the data subject.

In any case, after 5 (five) years from the consent to the processing, the data subject will be required to renew it and otherwise the data will be deleted.

B2) Rights of the data subject

The interested party can request the Data Controller

• access to personal data

• the correction

• the cancellation of the same

The data subject may also request the restriction of processing or oppose it. For the type of data the data subject has the right to receive in a structured format, of common use and readable by automatic device the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without hindrance by the data controller.

More detailed information on the rights of the data subject can be found in the Privacy Policy of the site.

C2) Right to withdraw consent

The data subject has the right to revoke the consent given to the processing of direct marketing at any time.

D2) Right to lodge a complaint with a supervisory authority

The data subject has the right to lodge a complaint with a supervisory authority that at the moment is the Data Protection Authority and on whose website http://www.garanteprivacy.it the methods of complaint to be used are indicated.

E2) Mandatory or optional provision of data and consequence of failure to provide it

In reference to the purposes of the processing indicated above:

1) The provision of data, therefore, is mandatory because its refusal would make it impossible to provide the information or indications requested by you.

2) The provision of data is optional and in the absence of this the accommodation after having responded will not activate the direct marketing processing and the data provided will not be stored.

F2) Existence of automated decision-making

No profiling activities are planned.