Pursuant to art. 13 of Legislative Decree 196/2003 (Personal Data Protection Code), the data controller informs you that:
a) the processing of your personal data will be carried out in fulfillment of:
1. contractual obligations: supply of goods and services to guests,
2. legal obligations: invoicing, mandatory bookkeeping and accounting records, communication to requesting authorities;
3. communication to banks and similar institutions, for debt collection activities and other activities related to contractual obligations;
4. the offer of services during your stay (secretarial service, delivery of correspondence, booking of external services) or after your stay (communication of special offers, events, or similar).
The processing will be carried out using manual and/or automated systems designed to store, manage and transmit the data, using logic strictly related to those purposes, based on the data in our possession and with your commitment
to promptly inform us of any corrections, additions or updates;
b) Should you refuse to give consent regarding points 1, 2, 3 of paragraph a), the following will result:
1. the impossibility of establishing or continuing the relationship, or of carrying out certain operations, if the data are necessary for the performance of the relationship or the operation;
2. the impossibility of carrying out certain operations that require the communication of data to parties functionally connected to their performance;
3. the failure to communicate data to parties carrying out further activities not functionally connected to the performance of the relationship.
c) your data, in addition to being processed by staff authorized within the Company acting as data controller, may be communicated to:
1. the hotel facilities where you will be staying;
2. the tax consultant (for administrative matters);
3. public and private entities, including as a result of inspections or audits;
4. parties who may access your data by virtue of legal provisions;
5. external companies supplying goods or services.
d) at any time you may exercise your rights with respect to the data controller, pursuant to article 7 of Legislative Decree 196/2003, which for your convenience we reproduce in full:
Art. 7. Right of access to personal data and other rights
1. The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning them, even if not yet recorded, and to have it communicated in an intelligible form.
2. The data subject has the right to obtain information on:
a. the origin of the personal data;
b. the purposes and methods of the processing;
c. the logic applied in the case of processing carried out with the aid of electronic tools;
d. the identifying details of the data controller, the data processors, and the representative designated pursuant to article 5, paragraph 2;
e. the parties or categories of parties to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative within the State's territory, as data processors, or as authorized personnel.
3. The data subject has the right to obtain:
a. the updating, rectification or, where they have an interest, the completion of the data;
b. the deletion, anonymization or blocking of data processed unlawfully, including data that does not need to be kept for the purposes for which it was collected or subsequently
processed;
c. certification that the operations referred to in points a) and b) have been brought to the attention, including as regards their content, of those to whom the data was communicated or disclosed, except where this proves
impossible or involves a use of resources that is manifestly disproportionate to the right being protected.
4. The data subject has the right to object, in whole or in part:
a. on legitimate grounds, to the processing of personal data concerning them, even if relevant to the purpose of the collection;
b. to the processing of personal data concerning them for the purpose of sending direct marketing material or for conducting market research or commercial communications.
