Information on the processing of personal data pursuant to EU Regulation 679/2016 Art. 13 and Legislative Decree 196/03 Art.13
Dear interested party, we wish to inform you that the “European Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data" (from now on “GDPR") provides for the protection of persons and other subjects regarding the processing of personal data. Houses of Corniglia di Monti Angela & amp; C s.a.s ., As “Owner" of the treatment, pursuant to Article 13 of the GDPR,
therefore, it provides you with the following information:
DATA CATEGORIES: Case di Corniglia di Monti Angela & C s.a.s. will only process personal data and / or belonging to “particular categories" as defined in Article 9 of the GDPR which will be included in the form.
SOURCE OF PERSONAL DATA: The personal data of which Case di Corniglia di Monti Angela & amp; C s.a.s. will be in possession are collected directly by the interested party when completing this form.
DATA CONTROLLER: The data controller is Case di Corniglia di Monti Angela & amp; C s.a.s. with registered office in Via Alla Stazione, 19 – 19018 – Corniglia (SP); Tax Code and VAT number 01181440110, which can be contacted at the email address info@casedicorniglia.eu
PURPOSE OF DATA PROCESSING AND LEGAL BASIS: The processing of your data, collected and stored in relation to the compilation of this form, has your consent as its legal basis and is carried out for the following purposes: respond to requests for information sent via the form; proceed with the booking of a stay inside the structure, and collect any information on the needs or preferences of customers; send information and commercial communications.
TRANSFER OF DATA ABROAD: the data collected will not be transferred abroad.
PERIOD OF CONSERVATION: The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed (“conservation limitation principle", Article 5, GDPR) or on the basis at the deadlines set by law. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.
RIGHTS OF THE INTERESTED PARTY: The interested party always has the right to request the Data Controller to access your data, to rectify or delete them, to limit the processing or to oppose the processing, to request the portability of data, to revoke the consent to the processing by asserting these and the other rights provided by the GDPR by simply communicating to the Data Controller. The interested party can also lodge a complaint with a supervisory authority.
OBLIGATORY OR LESS TO PROVIDE DATA: We inform you that the provision of data is optional for some fields and mandatory for others, and failure to provide the mandatory data will result in NOT sending the form.
OBLIGATORY CONSENT: The provision of consent to data processing by means of the appropriate check is optional, but essential to proceed with the submission of the form.
DATA PROCESSING METHOD: The personal data you provide will be subject to processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the activity of the Data Controller. The data will be processed both with IT tools and on paper and on any other type of suitable support, in compliance with adequate technical and organizational security measures provided for by the GDPR.