INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to art. 13 of the GDPR EU Regulation no. 2016/679
The Agency “RESIDENZE DOLOMITICHE di Anna Stuffo” as data controller pursuant to articles 4, n. 7, and 24 of EU Regulation 2016/679 of 27/04/2016 on the protection of personal data of natural persons with regard to the processing of personal data (hereinafter, “GDPR”) informs you, pursuant to art. 13 of the GDPR EU Regulation n. 2016/679 with reference to your Personal Data requested by the same in the context of the real estate brokerage services, that such processing will be based on the principles of correctness, lawfulness and transparency and protection of your privacy and your rights. In this regard, we ask you to read this Notice carefully.
Subject of the Processing: The Data Controller processes personal identification data in particular: name, surname, tax code, VAT number, email, telephone number, address of residence, etc., which we will have absolute need to detect in the pre-contractual and/or contractual phase or at the time of the conclusion of a service contract. Since they are not relevant for the purposes of the existing relationship, no sensitive particular data will be recorded or processed.
1) Legal Basis and Purpose of Processing:
The legal basis is based on contractual and/or legislative obligations, or on the consent of the interested party. The Data is collected by us from the interested party with the exclusive purpose of fulfilling the contractual obligations provided for by the professional mandate you have given us, and more specifically for:
1.1 to acquire and confirm your booking of accommodation services and ancillary services, and to provide the requested services. Since these are necessary treatments for the definition of the contractual agreement and for its subsequent implementation, your consent is not required, except in the case in which particular data, so-called sensitive data, are provided. In the event of refusal to provide personal data, we will not be able to confirm the booking or provide you with the requested services. The processing will cease upon your departure, but some of your personal data may or must continue to be processed for the purposes and in the manner indicated in the following points;
1.2 to fulfill the obligation set forth in the “Consolidated Law on Public Safety” (Article 109 of Royal Decree 18.6.1931 no. 773) which requires us to communicate to the Police Headquarters, for public safety purposes, the personal details of guests staying in accordance with the procedures established by the Ministry of the Interior (Decree of 7 January 2013). Providing the data is mandatory and does not require your consent, and if you refuse to provide it, we will not be able to host you in our facility. The data acquired for this purpose will not be retained by us, unless you provide us with consent to their retention as set forth in point 1.4;
1.3 to comply with current administrative, accounting and tax obligations. For these purposes, processing is carried out without the need to obtain your consent. The data is processed by us and our agents, and is communicated externally only in compliance with legal obligations. In the event of refusal to provide the data necessary for the above-mentioned obligations, we will not be able to provide you with the requested services. The data acquired for these purposes is retained by us for the time required by the respective regulations (10 years, and even longer in the event of tax audits);
1.4to speed up the registration procedures in case of your subsequent stays at our facility. For this purpose, after obtaining your consent which can be revoked at any time, your data will be stored for a maximum period of 3 (three) years, and will be used when you are our guest again for the purposes set out in the previous points;
1.5 to send you our promotional messages and updates on rates and offers. For this purpose, after obtaining your consent, your data will be stored for a maximum period of 3 (three) years and will not be disclosed to third parties. You may revoke your consent at any time.
2) Treatment Methods:
The Data is processed by us both manually, and the related paper documentation will be correctly maintained and protected by us for the entire time necessary for the processing or prescribed by law, and by means of our computer system, and in this case they will be recorded on protected computer media.
3) Nature of the provision of data and consequences of refusal to respond
Please be advised that, taking into account the purposes of the processing as illustrated above, for the purposes indicated in points 1.1) to 1.4) the provision of data is mandatory and failure to provide it, or partial or incorrect provision, may result in the impossibility of carrying out the activity itself and prevent us from fulfilling the contractual obligations as provided for in the mandate contract. For the marketing purposes referred to in point 1.5), the provision of data is optional, and failure to provide it does not preclude the existing relationship.
4) Communications
The Data collected and processed may be:
made available to the Data Controller's employees and collaborators as Data Processors or Persons in Charge of Processing:
communicated and shared with Consultants internal and external to the Data Controller's structure only if involved and functional to the relationship or services requested of us. These individuals will operate as external Data Processors, providing them with adequate operating instructions;
communicated to Financial Offices, Chamber of Commerce bodies and in general with all Bodies responsible for checks and controls regarding the correct fulfillment of the purposes relating to the assignment carried out;
5) Rights of the interested party
We also inform you that, as the interested party, pursuant to articles 15 to 23 of the GDPR, you are granted the following specific rights:
Request and obtain information on the origin of the personal data, the purposes and methods of processing as well as the logic applied, the identification details of the owner and managers, the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them;
Obtain the updating, rectification or integration of the data, the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, certification that such requested operations have been brought to the attention of those to whom the data were communicated, except in the case where such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected. Where applicable, you also have the rights referred to in articles. 16-21 of the GDPR including the Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object, as well as the right to lodge a complaint with the Guarantor Authority. The interested party has the right to withdraw his/her consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal.
For any further information, and to assert the rights granted to you by the European Regulation, you can contact:
Data controller – RESIDENZE DOLOMITICHE di Anna Stuffo, E-mail: info@residenzedolomitiche.it, PEC: residenze.dolomitiche@legalmail.it, tel. (+39)345 31 79 317, Via Giacomelli, 97 - 32042 Calalzo di Cadore (BL).