INFORMATION FOR INFORMATION REQUESTS REGARDING THE PROTECTION OF PERSONAL DATA PURSUANT TO ART. 13 REGULATION (EU) 2016/679

Pursuant to art. 13 of Regulation (EU) 2016/679, the company HOTEL GARDENIA DI LAVEZZO ADOLFO & C. SNC based in the Poarello Region 11, 10090, Romano Canavese (TO), as Data Controller, informs the subjects requesting information, on which are the purposes and methods of processing the personal data collected, their scope of communication and dissemination, as well as the nature of their conferment.

STAKEHOLDERS

Users of internet services requesting information. DATA PROCESSED
Personal data (consisting of name, surname and email) provided by the data subject through the form on the website of the Data Controller.

PURPOSE OF TREATMENT

The personal data (consisting of name, surname and email) provided by the interested party through the form on the website of the Data Controller are used in full compliance with the principle of correctness and lawfulness and with the provisions of the law to provide feedback to the request of the interested party and for related and instrumental activities. Personal data may be processed, with prior consent, also for marketing and advertising purposes by the Data Controller, by sending information messages and commercial and promotional communications relating to the Data Controller’s activities, products and services, through automatic means. such as e-mail and text messages, as well as traditional means, such as telephone contact with an operator, in full compliance with the principles of lawfulness and correctness and the provisions of the law.

NATURE OF DATA PROVISION

The provision of data by the interested party is optional. However, in default, the owner will be unable to carry out the processing operations for the purposes described above.

LEGAL BASIS OF THE PROCESSING

The legal basis of the processing is the consent to the processing of the aforementioned data also for marketing and advertising purposes. Consent is considered given by flagging the appropriate boxes at the bottom of the form.

PROCESSING METHOD

The data processing is carried out through IT procedures or in any case electronic means and paper supports by subjects, internal or external, specifically appointed and authorized to do so and committed to confidentiality. The data is processed and stored with suitable tools to ensure its security, integrity and confidentiality through the adoption of adequate security measures as required by law.

DATA RETENTION PERIOD

The data will be processed and stored for the time strictly necessary for the aforementioned purposes and according to the terms of the law and in any case for two years from the first contacts if in the meantime the right of opposition is not exercised by the interested party, without prejudice to the possible establishment of contractual relationships with the owner. With reference to the processing for the purpose of sending commercial and promotional communications of products and services of the Data Controller and for sending information messages relating to its activity, the data will be kept for 24 months following the last contact with the Data Controller. the establishment of contractual relationships or until the interested party exercises the right to object. The opposition to the processing can be advanced by the interested party independently for one or the other method of contact.

COMMUNICATION AND DIFFUSION, RECIPIENTS

The data collected will not be disclosed, sold or exchanged with third parties without the express consent of the interested party, except for any communications to authorized third parties – committed to confidentiality or in the case appointed as data processors pursuant to art. 28 of Regulation (EU) 2016/679 (as companies operating in the IT and IT assistance sector and hosting companies, web-marketing and telemarketing companies) where necessary for the purposes referred to in this information. The complete and updated list of data processors can be found, upon request, through the methods indicated in this statement. The data may be communicated to the competent authorities, according to the terms of the law. Personal data can be transferred outside the European Economic Area.

TRANSFER OF DATA ABROAD TO COUNTRIES OUTSIDE THE EUROPEAN ECONOMIC AREA

In relation to the processing purposes provided above, the data may be transmitted abroad and processed by third parties, also established in the territory of countries outside the European Economic Area, such as the United States of America. The transfer to these third countries takes place on the basis of adequacy decisions of the European Commission or the signing of standard contractual clauses approved by the European Commission itself. Please note that the laws on data protection and other laws of other countries outside the European Economic Area to which the data may be transferred may offer a lower level of protection than that of the country of residence of the interested party. In such cases, the Data Controller will take appropriate precautions, in accordance with applicable law, to ensure that the personal data of the data subject remain protected. These measures also include the use of standard contractual clauses to safeguard the transfer of data outside the European Economic Area. In any case, the user concerned has the right to obtain reference to the appropriate or appropriate guarantees adopted for the transfer of personal data and the means to obtain a copy of such personal data or the place where they were made available. For more information, or to request a copy of the contractual agreements in force, please contact the email address info@hgardenia.com.

RIGHTS OF THE INTERESTED PARTY

The interested party can assert his rights as expressed in articles 15 to 22 of Regulation (EU) 2016/679, by contacting HOTEL GARDENIA DI LAVEZZO ADOLFO & C. SNC at the following addresses: address Regione Poarello 11, 10090, Romano Canavese (TO) based in the Poarello Region 11, 10090, Romano Canavese (TO) email info@hgardenia.com. In particular, pursuant to the applicable legislation, the interested party has the right to:

a) obtain:

• information on the origin of personal data, on the purposes and methods of processing, on the legal basis of the processing, on the logic applied in case of processing carried out with the aid of electronic tools and in the event that an automated decision-making process exists and in in this case the importance and expected consequences of such processing;

• indication of the identification details of the Data Controller and of the Managers;

• information about the subjects or categories of subjects to whom the data may be communicated or who may become aware of them as appointed representative in the state territory, managers or agents;

• information about the retention period of personal data or, if this is not possible, the criteria used to determine this period; • access, updating, rectification or integration of data concerning him;

• cancellation without undue delay or limitation of processing;

• data portability, ie the transmission of data in a commonly used format that can be read by any device and the right to transfer them to another data controller (where technically feasible);

• the attestation of the fact that the operations referred to in the preceding points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is impossible or involves the use of means that are manifestly disproportionate to the protected right;

b) revoke the consent given at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation;

c) lodge a complaint with a supervisory authority;

d) object, in whole or in part, at any time, to the processing of personal data concerning him, provided for the purposes of commercial information or sending advertising or direct sales material or for carrying out market research or communication commercial.

OWNER AND MANAGERS OF THE TREATMENT

The owner is the company HOTEL GARDENIA DI LAVEZZO ADOLFO & C. SNC with headquarters in the Poarello Region 11, 10090, Romano Canavese (TO).

The updated list of internal contact persons, of the data processors appointed by the Data Controller pursuant to art. 28 of EU Regulation 679/2016, is available at the registered office of the Data Controller. For any communication relating to the exercise of the rights of the interested party, the Data Controller provides the address info@hgardenia.com.

CHANGES AND UPDATES

This information may be subject to changes and additions, also as a consequence of the updating of the applicable legislation relating to the protection of individuals with regard to the processing of personal data as well as the free circulation of such data. Changes The text of the most updated information can be viewed on the website www.hgardenia.com.