INFORMATION ON THE PROCESSING OF PERSONAL AND SENSITIVE DATA OF THE CUSTOMER WITHIN THE MEANING OF THE ART. 13 And SS. OF THE 2016/679 EU REGULATION
Pursuant to articles 13 and ss. of the EU Regulation 2016/679 and in relation to the personal data of which Algi di Bonasera Angela & sas will come into possession from the moment of registration on the site www.hotelaquilia.com, we inform the user of the following: 1. Data controller. The data controller is Algi di Bonasera Angela & sas, with registered office Via Mazzini 79 - ALASSIO (SV) (AT) 2. Purposes of data processing. The treatment is aimed at the correct and complete provision of the services requested in favor of the user. In addition, the data provided may be used for marketing activities, within the limits permitted by law, as well as, in case of express consent, for sending newsletters regarding our news, offers and updates, including details of our products and services, special offers, discounts or promotions, new products or services, and upcoming events or competitions. Your personal data may be processed, without the need for your consent, in cases where this is necessary to fulfill obligations arising from statutory provisions on civil, tax, anti-money laundering, as well as any other Community legislation, standards, codes or procedures approved by Authorities and other national competent institutions. Furthermore, your personal data may be processed to follow up requests from the competent administrative or judicial authority and, more generally, from public entities in compliance with the legal formalities. Your personal data will also be processed for the purposes related and / or related to the activities carried out by the owner, such as: - for those who register with the site or who contact us via the website or via email for the provision of the services requested by them with the inclusion of data on the site or by sending emails, as well as for the retention of data to purposes of operational and administrative management of contacts. In this regard, remember that during the negotiation phase, it is not mandatory to acquire consent if the treatment is necessary to fulfill - before the conclusion of the contract - to your specific requests; - for the execution of the contractual relationship and the accessory services and / or connected to these contracts. In such cases, we inform you that according to the applicable law regarding personal data, the acquisition of your consent is not required if the processing is necessary to fulfill obligations arising from a contract; - for the management of payments (with the relative treatment - according to the law - of payment data, including credit card or prepaid card identification details) of the services requested and of any accessory financial charges, based on the provisions of the contract ; o fulfillment of legal, accounting, fiscal, administrative and contractual obligations related to the provision of the requested services; - for the analysis and improvement of the services provided, such as the possible conduct of surveys to obtain suggestions from customers; - for supplying the customer with technical assistance, if provided for in the contract; - your personal data, in addition, may be processed for the defense of a right in court or whenever it is necessary for the purpose of ascertaining, exercising or defending a right of the Owner; - for the surveys of the degree of customer satisfaction on the quality of the services provided; - for the realization of extraordinary operations and rents or sales of companies, in favor of the other parties contractually involved. - It is made known to the subjects who register with the site or who contact us via the website or via email that browsing and browsing the site do not require or allow profiling activities. - In any case, all data acquired during navigation are treated anonymously and may be used without the express consent of the User only for the purposes of accessing the www.hotelaquilia.com website and presenting the services of Algi di Bonasera Angela & sas - In particular, as regards navigation data, we inform you that the computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. - Furthermore, the data could be used to ascertain responsibility in case of hypothetical computer crimes against the site. It is specified that, your personal data may also be processed, subject to the issuance of its optional and expressed separate consent, for the following additional purposes functional to the activity of the Owner: market research, economic analysis and statistics; marketing of the services of the Owner, sending of advertising / informative / promotional material and participation in initiatives and offers aimed at rewarding the Customers of the Owner. 5. Communication of data. Personal data may be disclosed to the persons in charge of processing and may be communicated for the purposes referred to in point 2 to third-party consultancy and assistance providers, to banks, to the companies of the owner's group, to the sales network, and, more generally , to all those public and private subjects to whom communication is necessary for the correct fulfillment of the purposes indicated in point 2 or for legal obligations. 3. Transfer of data abroad. Personal data may be transferred to countries of the European Union and to third countries with respect to the European Union. 4. Data retention period. The personal data provided will be held for the entire duration of the relationship between Algi di Bonasera Angela & sas and the user. RIGHTS OF THE INTERESTED PARTY 5. Right of access. The interested party has the right to ask the data controller to access their personal data. Upon request, the data controller provides a copy of the personal data being processed. In the event of further copies requested by the data subject, the data controller may charge an administrative fee based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format. 6. Right of rectification. The data subject has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing an additional declaration. 7. Right to cancellation ("right to be forgotten"). The interested party, with the exception of the provisions of Article 17, paragraph 3, of EU Regulation 2016/679, has the right to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller has the obligation to cancel personal data without undue delay, if one of the cases provided for in Article 17, paragraph 1, of the 2016/679 EU Regulation exists. 8. Right of limitation of treatment. The interested party has the right to obtain from the data controller the limitation of the processing using one of the hypotheses as per art. 18 of EU 2016/679 Regulation. 9. Right to opposition to treatment. The interested party has the right to object at any time, for reasons connected with his particular situation, to the processing of his personal data pursuant to Article 6, paragraph 1, letters e) or f) of EU Regulation 2016/679. The data controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or the defense of a right in court. 10. Right to data portability. The data subject has the right to receive, in a structured, commonly used and automatically readable form, the personal data concerning him / her provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller who provided them only in the cases provided by law and without prejudice to the rights and freedoms of others. 11. Withdrawal of consent. If the treatment is based on art. 6, paragraph 1, letter a), or on art. 9, paragraph 2, letter a) of EU Regulation 2016/679, the interested party has the right to revoke the consent given at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation. 12. Right of complaint. The interested party has the right to lodge a complaint with the Supervisory Authority. 13. Refusal to provide data. Any refusal by the interested party to provide personal data will make it impossible to provide the services requested. 14. Data communication. Personal data may be disclosed to the persons in charge of processing and may be communicated for the purposes described to third parties exclusively for purposes related to the provision of the services requested. 15. Dissemination of data. Personal data are not subject to disclosure.