Information on data processing - Hotel Corte Bianca Cardedu Ogliastra Sardegna

INFORMATION TO BE PROVIDED TO THE INTERESTED PERSON DATA COLLECTED AT THE INTERESTED PARTY

(ex art.13 GDPR 2016/679)

TREATMENT: GE021 – Management of clients requesting accommodation

Dear Interested,

below we provide you with some information that you need to bring to your knowledge, not only to comply with legal obligations, but also because transparency and fairness towards the interested parties is a fundamental part of our business.

HOLDER OF THE TREATMENT

The Data Controller of your personal data is Corte Bianca Srl – Loc. San Gemiliano, 08048 Arbatax, Italia – sede operativa: Hotel Corte Bianca, Loc. Foddini, 08040 Cardedu, Italia – P. IVA 01621070919

PURPOSE OF THE TREATMENT

Your personal data are collected and processed for the following purposes together with the reference legal basis:

Purpose: Customer management

Data processed: Tax code and other personal identification numbers; Name, address or other elements of personal identification; Contact details (telephone number, e-mail, etc.); List of services and products requested and purchased; Bank details, credit and debit card details

Legal basis: Processing is necessary for the execution of a contract of which the interested party is a part or for the execution of pre-contractual measures adopted at the request of the same – European Union Standard (GDPR 2016/679)

Purpose: Reservation of accommodation services and accessories

Data processed: Name, address or other elements of personal identification; Contact details (telephone number, e-mail, etc.); List of services and products requested and purchased; Bank details, credit and debit card details; Date and time of arrival and departure

Purpose: Acceptance and registration

Data processed: Contact data (telephone number, e-mail, etc.); Tax code and other personal identification numbers; Bank details, credit and debit card details; List of services and products requested and purchased; Data relating to allergies, food intolerances, etc .; Identification data; Date and time of arrival and departure; Data related to the relationship

Purpose: Information to customers of new services / products

Data processed: Name, address or other elements of personal identification; Contact details (telephone number, e-mail, etc.)

Legal basis: The processing is necessary for the pursuit of the legitimate interest of the data controller or third parties – Member State Standard (Legislative Decree 30 June 2003 Art. 130 paragraph 4 Add. 30/12/2019)

The processing of your data is based on legitimate interests of the data controller recognized by the law, in particular:

Purpose: Information to customers of new services / products

Legitimate Interest of the Owner: D. LGS. 06/30/2003 ART. 4 NOVELED ON 30/12/2019: WHEN THE INTERESTED PARTY IS ALREADY A CUSTOMER OF THE COMPANY AND ONLY FOR SIMILAR PRODUCTS OR SERVICES, IT MAY DEROGATE FROM THE REQUEST FOR CONSENT AS THE INTERESTED PARTY, BEING ALREADY THE CUSTOMER OF THE DATA CONTROLLER, HAS PROVIDED THE PERSONAL CONTACT DATA (FOR EXAMPLE, THE E-MAIL ADDRESS) IN THE CONTEXT OF THE SALE. PROMOTIONAL MESSAGES MUST BE SENT DIRECTLY BY THE OWNER AND NOT BY THIRD PARTIES, MUST RELATE PRODUCTS AND SERVICES SIMILAR TO THOSE ALREADY PURCHASED AND MUST OFFER THE CUSTOMER THE OPPORTUNITY TO OPPOSE THE PROCESSING IN QUESTION. ANALOGUALLY, IF THE PROMOTIONAL ACTIVITY IS CARRIED OUT THROUGH PHONE CALLS WITH OPERATOR OR PAPER MAIL AND THE INTERESTED PARTY DOES NOT OPPOSE.

Particular categories of personal data

In relation to the processing of personal data, specifically sensitive, genetic, biometric data, related to health (art.9 EU Regulation 2016/679), the processing concerns, among others, the following types of data:

Data relating to allergies, food intolerances, etc. (Health data).

The processing of personal data belonging to these particular categories is possible because it is based on the following conditions:

– It is possible because the interested party intends to give his explicit consent to the processing of such personal data for one or more specific purposes.

RECIPIENTS

Your data may be sent to the following recipients or categories of recipients:

Categories of recipients

Consultants and freelancers in single or associated form; Banks and credit institutions; Companies and companies (Companies operating in the field of logistics)

DURATION OF TREATMENT:

In addition to the above information, to ensure that your data is processed as correctly and transparently as possible, you must be aware of the fact that:

– has the right to ask the data controller to access your personal data and to correct or cancel them or limit the processing that concerns you or to oppose their treatment;

– if you have given consent for one or more specific purposes, you have the right to withdraw this consent at any time;

– has the right to lodge a complaint with the following Supervisory Authority: Guarantor for the protection of personal data;

Moreover,

has a contractual obligation to provide your data, the absence of which is to be considered a violation of the clauses contained therein or the knowledge of your personal data is a necessary requirement for the conclusion of the contract and it will not be possible to proceed with its stipulation in the absence of them.

The interested party has the right to the portability of his personal data.

PROFILING

The treatment takes place through automated processes that do not determine the profiling of the interested parties

The data controller CORTE BIANCA S.R.L.

Donato Bovi