We wish to inform you that your personal data, collected through registration or booking, will be used by:
Grand Hotel Imperiale Srl, headquarters in Forte dei Marmi (LU) Via Mazzini n 20 — CF 05596900968 (hereinafter also HOLDER of the Treatment), in full compliance with the fundamental principles, dictated by Legislative Decree n. 196 of 30 June 2003 Personal Data Protection Code and of the EU REG 2016/679. The Data Controller may be contacted for any communication concerning privacy at the following pec address: email@example.com; or to the email address firstname.lastname@example.org or through the Ar collection to be sent to the head office of the Owner
The Data Controller processes your personal data for the following purposes:
a) Need to carry out contractual and pre-contractual activities upon your request, in order to provide booking / purchase services at the owner’s hotel and need to provide services to the hotel, in your interest and at your request, such as catering services, services provided by the Spa Wellness Center, beautician services in general and baby sitter services. The legal basis that legitimizes the processing is the consent of the interested party. The provision of data necessary for these purposes represents a contractual obligation and a necessary requirement for the conclusion of the contract; in the absence of these, the owner would be unable to establish the rapport..
b) Promotion of commercial activity, sale of products and services, «dedicated» products and services of third-party companies, specifically identified through the elaboration and analysis of information related to preferences, habits, consumption choices, aimed at a customer profiling also implemented through the enrichment of data with information acquired from third parties .
This activity can be carried out by sending new letters, text messages and phone calls. The legal basis that legitimizes the resulting processing is the consent of the interested party that is free to give or not and that can, however, be revoked at any time by contacting the Holder at the addresses indicated above. The provision of necessary data for these purposes is not mandatory and the refusal to supply them will only determine the impossibility of receiving dedicated commercial communications.
Data processed category and methods of treatment
The owner processes personal data collected directly from the interested party, or from third parties, including, but not limited to, personal data (eg name, surname, address, date and place of birth), information on the financial situation (eg financial situation , credit information relating to requests / credit reports), image data (eg photo on identity card) and other data referring to the categories indicated above.
Recipients or recipients categories of data
The data of the Data Subject may be disclosed to the natural and legal persons appointed as Data Processors and the individuals authorized to process the data necessary for the performance of the duties assigned to them: employees employed by the Data Controller or seconded by him, temporary workers, financial advisors to the offer off-site, interns and consultants, professionals, judicial authorities, public bodies.
The current legislation on data protection attributes specific rights to the data subject, who, for the exercise of the same, can directly contact the Data Controller at any time.
The rights of the interested party, described below, are:
— Right of access;
— Right of Rectification;
— Cancellation right;
— Right of limitation;
— Right to portability;
— Right of opposition;
Interested parties and legal entities, bodies and associations may at any time modify the consent whenever they wish.
Exemptions from the exercise of rights
Each interested party exercising their rights can contact the owner at the e-mail address email@example.com
The deadline for the reply is 15 (fifteen) days.
The exercise of rights is, in principle, free; the owner, having evaluated the complexity of processing the request and, in the event of manifestly unfounded or excessive (even repetitive) requests, reserves the right to request a contribution.
The holder has the right to request additional information necessary for the identification purposes of the applicant.
Data retention period
The owner treats and keeps the personal data of the interested party for the entire duration of the contractual relationship, for the execution of the related obligations, for the respect of the applicable legal and regulatory obligations, as well as for defensive purposes of the owner or third parties , until the end of the data retention period.
Transfer of data to third countries
Personal data may also be transferred to countries not belonging to the European Union or to the European Economic Area (so-called «Third Countries») recognized by the European Commission having an adequate level of personal data protection or, if not, only if contractually guaranteed by all the suppliers of the holder located in the Third Country a level of personal data protection appropriate to that of the European Union (eg through the signing of the standard contractual clauses provided by the European Commission) and that the exercise is always ensured of the rights of the interested parties
COMPLAINTS OR REPORTING TO THE GUARANTOR FOR THE PROTECTION OF PERSONAL DATA
If the interested party considers that he has suffered a violation of his rights, he can forward a complaint or make a report to the Guarantor for the Protection of Personal Data or appeal to the Judicial Authority. The contacts of the Guarantor for the Protection of Personal Data are available on the website www.garanteprivacy.it