Information to the customer pursuant to art. 13 of the 2016/679 EU Regulation
Pursuant to Article 13 of EU Regulation 679/2016 Michele Ruschioni (hereinafter “BB San Michele”), as Data Controller, informs you that the processing of your personal data, and possibly of the particular categories of personal data (Article 9 of the EU Regulation), your and your minor children, you provide will be treated in a relevant and transparent manner and in compliance with the principles of lawfulness and necessity in accordance with the applicable provisions.
Purpose of the Treatment
In this regard, we inform you that the processing of personal data will be for institutional purposes, connected or instrumental to the activity of our Company, and, therefore, for:
a) to implement the hotel reception service, and consequent operations, or to one or more contractually agreed operations;
b) comply with legal, accounting and administrative obligations;
c) comply with the operational and management needs internal to BB San Michele and related to the service provided;
and, subject to the acquisition of your free, specific and distinct consent:
d) providing, through e-mail (newsletter), commercial, advertising and promotional initiatives reserved for customers;
e) to process the data of his / her / her minor children over which he / she exercises parental authority in order to be able to make the reservation and registration service at the hotel.
Legal basis of the processing
The legal basis of data processing is given by the specific contractual relationship established and by the specific free and informed consent of the interested party.
Methods of data processing
Personal data will be processed using paper, computerized or telematic means and with adequate security measures to guarantee the security and confidentiality of your personal data.
In compliance with the principles of proportionality and necessity, the data will not be stored for longer periods than those necessary for achieving the aforementioned purposes and, therefore, for the service offered or the specific legal provisions.
Recipients of personal data
The collected data will be processed exclusively for the aforementioned purposes and may be communicated to subsidiaries, affiliates or otherwise connected, both in Italy and abroad exclusively for the management of services offered to customers. In compliance with the appropriate security measures, implemented by the Data Controller, your data and those of your child / minor children may also be disclosed to public security agencies and other public and private entities for the fulfillment of obligations by law also of fiscal, administrative, financial and similar nature. In no case will the data be disseminated. At any time you can exercise your rights, and possibly those on behalf of your child / his minor children against the data controller, pursuant to Article 15 and following of the Regulation or you can get access, confirmation of ‘ existence of your personal data and request their communication in an intelligible form. Also, you will have the right to obtain the updating, rectification, integration and deletion of data. Finally, you will have the right to object, in whole or in part, for legitimate reasons, to the processing of your personal data, and possibly those of your minor children, even if pertinent to the purpose of collection, as well as the sending of advertising material or direct sales or for the fulfillment of market research or commercial communication in an automated manner, by contacting the Data Controller, where the complete and updated list of Data Processors is also available on request.
Obligation and optional nature of the provision of data
Notwithstanding that with regard to the processing of data preordained to the execution of the contract and the fulfillment of legal obligations as per letter a), b) c) of the paragraph “Purpose of processing”, consent to the processing is not necessary. specifies that:
– the provision of data for the aforementioned purposes sub-paragraphs a), b) and c) is optional, but necessary for the purpose of providing the services to the clientele envisaged and the lack of consent could have the consequence of not allowing the execution of such services;
– the consent to the processing under letter d) is free and optional and in any case the interested party can oppose at any time the treatment in question, easily and free of charge, by contacting the owner also through the use of electronic mail, obtaining a immediate confirmation that confirms the interruption of this treatment; without prejudice to the foregoing, however, any refusal to provide the requested personal data may result in the inability to be promptly updated on the new services offered by our company and to take advantage of some services and advantages reserved to customers.
– to process the data of his / her minor children on whom he / she exercises parental authority in order to be able to make the booking and registration service at the hotel. the provision of data and consent to the processing for the purposes referred to above sub letters d) is mandatory and is necessary for the purpose of providing services to minors;
Rights of the interested party
The subject to whom the personal data refer will be able to exercise your rights towards the Data Controller, in accordance with article 15 and following of the EU Regulation 679/2016, that is to obtain confirmation of the existence of your personal data and request the their communication in intelligible form. Furthermore, you will have the right to obtain access, updating, rectification, integration and deletion of data or limitation of processing. Finally, you will have the right to object, in whole or in part, for legitimate reasons, to the processing of your personal data, even if pertinent to the purpose of the collection, in addition to the right to data portability and to submit a complaint to the supervisory authority, as well as to the sending advertising or direct sales material or for carrying out market research or commercial communication, by contacting the Data Controller, where the complete and updated list of Data Processors is also available on request.
Requests should be addressed to the Data Controller.
Transfer of personal data
BB San Michele may transfer personal data to a third country or to an international organization and the existence or absence of an adequacy decision by the Commission or, in the case of transfers referred to in Article 46 or 47, or to the 49 of the Regulations, second paragraph, the reference to appropriate or appropriate guarantees and the means to obtain a copy of such data or the place where they were made available.
The data controller is Ruschioni Michele based in Rome – 00198, Via Messina, 15. Tel. +39.06.44250596