INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to articles 13 and 14 of the EU Regulation 2016/679 of 27/04/2016
we wish to inform you, pursuant to article 13 of EU Regulation 2016/679 of 27/04/2016, hereinafter referred to as GDPR (General Regulation for the Protection of Personal Data) that, the processing of your personal data will take place with correctness and transparency , for lawful purposes and protecting your privacy and your rights. The data controller is the Hotel Silver located in via Riccardo Lombardi n. 9/11-Milan, Tel. 02 48916779, firstname.lastname@example.org, to which you can contact to exercise the rights recognized by the GDPR.
PURPOSE OF THE TREATMENT
The personal data you provide will be processed exclusively for the following purposes: a) provision of the hotel hospitality service and other services offered by Hotel Silver; fulfillment of obligations under the law, regulations, applicable legislation and other provisions issued by authorities invested by the law and by supervisory and control bodies. The processing of personal data for the aforementioned purposes does not require your express consent (art.6 lett. B) and e) of the GDPR).
The data required for the purposes referred to in letters a) and b) above must be provided for the fulfillment of legal obligations and / or for the conclusion and execution of the contractual relationship and the provision of the requested services. Therefore your eventual refusal, even partial, to provide such data would make it impossible for the Supplier to establish and manage the relationship itself and to provide the requested service.
c) carrying out marketing and promotional activities of the owner’s products and services, commercial communications, both with automated means without operator intervention (e.g. sms, fax, mms, e-mail etc.) and traditional (by telephone, mail) ;
d) preparation of studies and market research;
e) conservation of personal data of the interested party in order to speed up the registration procedures in case of subsequent stays;
f) the possibility of communicating, by authorized personnel, to third parties who request the presence of the interested party in the accommodation facility and transferring calls or messages from outside to the interested party. The processing of personal data for the aforementioned purposes requires your express consent (art.7 of the GDPR).
This consent concerns both the automated and traditional methods of communication described above. You will always have the right to object easily and free of charge, in whole or in part only to the processing of your data for these purposes, for example excluding automated contact methods and expressing your will to receive commercial and promotional communications exclusively through traditional ways of contact.
DATA PROCESSING METHODS
The processing of personal data is carried out by means of the operations indicated in art. 4 no. 2) GDPR, for the aforementioned purposes, both on paper and computerized means, by means of electronic or automated tools, in compliance with current legislation in particular regarding privacy and security and in accordance with the principles of correctness, lawfulness and transparency and protection of customer rights. The treatment is carried out directly by the owner’s organization, by its managers and / or agents.
COMMUNICATION AND DIFFUSION
Your personal data may be communicated, within the limits strictly pertinent to the obligations, tasks and purposes referred to above and in compliance with current legislation on the subject, to the following categories of subjects:
persons in charge who are part of the administrative area of our company;
external subjects who may carry out tax obligations, accounting obligations, management of information systems, as well as carrierson behalf of our company;
credit institutions for the management of payments and collections deriving from the execution of contracts;
subjects to whom the right to access the data is granted by law or regulations;
other subjects required by law
STORAGE PERIOD OF PERSONAL DATA
Personal data will be kept for the entire duration expressed by the contract stipulated with the Data Controller concluded which the data will be kept for the fulfillment of the terms established by law for the conservation of administrative documents, after which they will be deleted.
RIGHTS OF THE INTERESTED PARTY
In your capacity as an interested party, Pursuant to art. 13, par.2, lett. b), c), d) of EU Reg. 2016/679, by contacting the Data Controller, you can assert the following rights, relating to the processing of personal data:
right of access (art.15);
right of rectification (art.16);
right of cancellation (art.17);
right of limitation (art.18);
right to data portability (art.20)
right of opposition (art.21)
right to lodge a complaint with a supervisory authority (art.77);
right to withdraw consent, in the cases provided for by art. 6, par.1, lett. a) or by art. 9, par.2, lett. to)