Hotel
PERSONAL DATA PROCESSING POLICY
The user's personal data are used by ALBERGO FIRENZE S.R.L., which is the data controller, in compliance with the principles of personal data protection established by GDPR Regulation 2016/679 and the national legislation in force.
SOURCE OF PERSONAL DATA
Personal data are collected by recording the data gathered directly from the data subject at the time of the initial contact or subsequent communications/acquired during the registration process through the website.
METHODS AND PURPOSES OF DATA PROCESSING
We hereby inform you that your personal data will be processed, in compliance with the provisions of the GDPR, using paper-based, IT and electronic tools, according to procedures strictly related to the purposes indicated and in such a way as to ensure their security and confidentiality in accordance with the provisions of Article 32 of the GDPR.
Processing purposes:
- Sending a quotation for a stay at the customer's request
- Fulfilling pre-contractual and contractual obligations arising from the performance of the service requested by you
- Management of the guest's name for the purposes of room assignment and booking
- Management of electronic payment instruments (credit and debit cards, electronic money)
- Sending newsletters, courtesy communications and/or promotional/informational material
In particular, for the purposes specified below, the user's data will be processed ONLY upon specific acceptance of consent:
- Sending newsletters, courtesy communications and/or promotional/informational material
- Consent to the processing of special categories of personal data (health data relating to the communication of food allergies and intolerances connected with the serving of food and beverages):
LEGAL BASIS
The legal bases on which the processing of ordinary personal data is based, pursuant to Art. 6 of the GDPR Regulation, are: Legitimate interest; Legal obligation; Consent;
The legal bases on which the processing of special categories of personal data is based, pursuant to Art. 9 of the GDPR Regulation, are: Legitimate interest; Consent;
CATEGORIES OF RECIPIENTS
Without prejudice to communications made in fulfilment of legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of recipients: Supervisory and control authorities; Banks and credit institutions; Police forces; Law firms; Judicial offices;
Furthermore, in managing your data, the following categories of persons authorised/appointed by the data controller and by external data processors (Accountant; Hotel management assistance centre; IT consultant; Marketing and communication agency;) may become aware of such data. These persons have been appointed in writing and provided with specific written instructions concerning data processing.
DATA RETENTION PERIOD
The data will be processed for the entire period necessary to carry out the existing business relationship and in accordance with the retention periods established by law.
DATA SUBJECT'S RIGHTS
1. Pursuant to European Regulation 679/2016 (GDPR) and the national legislation in force, the data subject may exercise the following rights, in accordance with the procedures and within the limits established by the applicable legislation:
- request confirmation as to whether or not personal data concerning them exist (data subject's right of access – Art. 15 of Regulation 679/2016);
- know their origin;
- receive intelligible communication thereof;
- obtain information concerning the logic, methods and purposes of the processing;
- request their updating, rectification, integration, erasure, transformation into anonymous form, blocking of data processed unlawfully, including data that are no longer necessary for the purposes for which they were collected (right to rectification and erasure – Arts. 16 and 17 of Regulation 679/2016);
- right to restriction of and/or objection to the processing of personal data concerning them (Art. 18 of Regulation 679/2016);
- right to withdraw consent;
- right to data portability (Art. 20 of Regulation 679/2016);
- in cases where processing is based on consent, receive the personal data provided to the controller in a structured, machine-readable format and in a commonly used format compatible with an electronic device;
- the right to lodge a complaint with the supervisory authority (data subject's right of access – Art. 15 of Regulation 679/2016).
The data controller of your personal data is ALBERGO FIRENZE S.R.L., VAT and tax code 00807210117, via Pietro Paleocapa 7 – 19122 La Spezia (SP)
Email: [email protected]
Telephone: 0187 713210