Privacy Policy

INFORMATION FOR THE TREATMENT OF PERSONAL DATA

In relation to the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data) we hereby communicate the necessary information regarding the processing of personal data provided by the interested party.

This information, which is provided pursuant to art. 13 of EU Reg. 2016/679 (European Regulation for the protection of personal data) and pursuant to art. 13 Legislative Decree 6/30/2003 n. 196 (Privacy Code).

1. OWNER OF THE TREATMENT

Pursuant to articles 4 and 24 of EU Reg. 2016/679 the data controller is the company Villa Carla di Villa G. e Baldin R. Snc – Via Venezia 18 – 34073 Grado (GO), Italy with the title of owner and legal representative.

2. DATA SUBJECT TO PROCESSING

The Data Controller processes personal identification data (for example, name, surname, company name, address, telephone, e-mail, bank and payment details), communicated by the interested party when concluding contracts for the services offered by the Holder.

3. PURPOSE AND LEGALITY OF THE TREATMENT

The personal data provided will be processed in compliance with the conditions of lawfulness pursuant to art. 6 lett. b of EU Reg. 2016/679, or for the execution of a contract to which the interested party is a party or for the execution of a preliminary contract or pre-contractual agreement, and in particular:

• navigation on the same website;
• possible compilation of data collection forms to send an information request to the data controller;
• fulfill the pre-contractual, contractual and tax obligations deriving from the existing relationships with the interested party;
• for administrative-accounting purposes (of an organisational, administrative, financial and accounting nature, regardless of the nature of the data processed);
• to fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority (such as for example in the matter of anti-money laundering);
• exercise the rights of the Owner, for example the right of defense in court;

Only with the specific and distinct consent of the interested party, pursuant to art. 7 GDPR of EU Reg. 2016/679, for the following Marketing Purposes:

• send via e-mail, mail and/or sms and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the Data Controller and detection of the degree of satisfaction with the quality of services;
• send via e-mail, mail and/or sms and/or telephone contacts commercial and/or promotional communications from third parties (for example, business partners, insurance companies).

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

The personal data provided may be communicated to recipients, appointed pursuant to art. 28 of EU Reg. 2016/679, who will process the data as managers and/or as natural persons acting under the authority of the Data Controller and Data Processor, in order to comply with contracts or related purposes. Specifically, the data may be communicated to recipients belonging to the following categories:

• entities that provide services for the management of the information system and communication networks of Villa Carla di Villa G. e Baldin R. Snc (including e-mail);
• studies or companies in the context of assistance and consultancy relationships;
• competent authorities for the fulfillment of legal obligations and/or provisions of public bodies, upon request;
• commercial information company for the assessment of solvency and payment habits and/or to subjects for credit recovery purposes.
  The subjects belonging to the aforementioned categories perform the function of data processing manager, or operate in total autonomy as separate data controllers.

5. TRANSFER OF DATA TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION

The personal data provided by the interested party will not be transferred abroad within or outside the European Union.

6. METHOD OF TREATMENT

The processing of personal data of the interested party is carried out by means of the operations indicated in art. 4 no. 2) GDPR of EU Reg. 2016/679 and precisely: collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data is subjected to both paper and electronic and/or automated processing.

7. DATA RETENTION PERIOD

The processing will be carried out in an automated and/or manual form, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed for this purpose.

In compliance with the provisions of art. 5 paragraph 1 lett. e) of EU Reg. 2016/679, the personal data collected will be kept in a form that allows the identification of the interested parties for a period of time not exceeding the achievement of the purposes for which the personal data are processed.

8. NATURE OF THE PROVISION AND REFUSAL

The provision of personal data for the purposes referred to in point 3 of this information document is necessary to follow up on the execution of the contract and use the services offered to the Data Controller. Failure to provide personal data may make it impossible to obtain the requested service or to use the services offered by the Data Processor.

9. RIGHTS OF INTERESTED PARTIES

The interested party will be able to assert his rights as expressed by the articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, by contacting the Data Controller, via the email address info@hotelvillacarla.com.

The interested party has the right, at any time to:

• obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form;
• obtain the indication: a) of the origin of the personal data; b) the purposes and methods of processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the owner, of the managers and of the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representative in the territory of the State, managers or agents;
• obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is proves impossible or involves the use of means manifestly disproportionate to the protected right;
• oppose, in whole or in part: a) for legitimate reasons, the processing of personal data concerning him, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and/or by traditional marketing methods by telephone and/or paper mail.
  Where applicable, the interested party also has the rights pursuant to articles 16-21 GDPR (Right to rectification, right to be forgotten, right to limitation of treatment, right to data portability, right to object),

Without prejudice to any other administrative and judicial appeal, if the interested party believes that the processing of data concerning him violates the provisions of EU Reg. 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Reg. 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Reg. 2016/679, you have the right to lodge a complaint with the Guarantor for the protection of personal data and, with reference to art. 6 paragraph 1, letter a) and art. 9, paragraph 2, letter a), has the right to revoke the consent given at any time.

In the event of a request for data portability by the interested party, the Data Controller will provide the personal data concerning him in a commonly used and readable format, without prejudice to paragraphs 3 and 4 of the art. 20 of EU Reg. 2016/679.

For contacts and further information:

Villa Carla di Villa G. e Baldin R. Snc
Via Venezia 18 – 34073 Grado (GO)
Phone +39 0431 82945
info@hotelvillacarla.com
tax code and P.I. 00379370315