Information on the processing of personal data

Dear Customer,

hereby are to provide you with information concerning the processing of your personal data.

Premise

Pursuant to the legislation on personal data protection (EU Regulation 2016/679 and Legislative Decree 196/2003), we inform you that the personal data you provide will be processed in compliance with the aforementioned law and the confidentiality obligations our activity is inspired.

Data controller

The Data Controller is Hotel Palos Di Pari Paola & C. S.A.S. in the person of the legal representative pro tempore, I.V.A. 00281590406, based in Rimini, Via Porto Palos, 154, e-mail info@hotelpalos.com, P.E.C. hotelpalos@pec.it

Personal data are collected by the Data Controller through registration and filing in our paper and electronic databases.

The treatment is based on principles of correctness, lawfulness, transparency, purpose limitation and retention, data minimization, accuracy, integrity and confidentiality and accountability.

Purposes of data processing and legal basis

The data collected and processed will be used exclusively for the purposes of:

• FULFILLMENT OBLIGATIONS CONTRACT WITH HIS STIPULATED
• ADEMP MEASURES OBLIGATIONS OF LAW;
• ADMINISTRATIVE ADMISSIONS - ACCOUNTING
• DIRECT MARKETING ACTIVITY

The processing of personal data - including any sensitive data ("special categories of data") and relating to criminal convictions or crimes ("judicial") for which you need your consent to be expressed at the bottom of this statement - collected, takes place for the management purposes identified above.

All data collected are treated, therefore, exclusively for obligations related to the activity of the owner, whose legal bases are found in the consent (eg for the treatment of "particular categories of personal data" or for marketing), in the need to perform a contract of which you are a party or of pre-contractual measures adopted upon your request, in fulfilling legal obligations to which the undersigned Holder is subject, in the legitimate interest of the same.

Nature of the provision of data

The provision of personal data and the consequent processing by the Data Controller, for the purposes set out above, are necessary for the establishment, for the continuation and for the correct management of the relationship between the Data Controller and the Data Subject or must be understood as mandatory on the basis of law, regulation or community legislation; any refusal to provide the requested personal data may cause the impossibility, in whole or in part, to refine and manage the relationship in being or in progress. The provision of personal data and the consequent processing by the Data Controller for the purposes referred to in point << d) DIRECT MARKETING ACTIVITY >> - as a direct activity to provide promotions and special offers by e-mail, mail, telephone o sms - is optional and failure to provide, even partially, will not result in any consequence.

Data processing methods

The data will be processed - by the persons in charge of processing it - with manual, computerized and telematic tools within and for the purposes specified above and, in any case, always respecting the security and confidentiality of the same, also in compliance with the law and the provisions of the Guarantor for the protection of personal data.

Categories of subjects to whom data can be communicated:

The processing of personal data will be carried out by subjects expressly and specifically designated as specifically instructed persons in charge; these subjects will process the data according to the instructions received from the Data Controller, according to the operating profiles assigned to them in relation to the functions performed.

The data may also be processed by third parties (outsourcers), which are used for the provision of services related to the purposes pursued, such as:

• accountants and business consultants

It should be noted that our organization evaluates from time to time, to ensure greater protection, the appointment of external managers of the treatments carried out by them. In all cases, these subjects will process the data in accordance with the instructions received from the Controller, according to operational profiles assigned to them in relation to the functions performed, limited to what is necessary and instrumental for the execution of specific operations within the requested services and exclusively for the achievement of the purposes indicated in this statement.

It should also be noted that your data will be communicated by the Data Controller to all subjects who are recognized by law or by secondary legislation the right to access such data, such as the Police Headquarters.

It should also be noted that if necessary, your data could be communicated to health organizations, the medical profession and paramedical personnel, as well as to the family members of the interested party.

Please note that your data will not be disseminated.

Duration of treatment and storage

The collected data will be stored for a period of time not exceeding that necessary for the purposes for which they were collected, to fulfill contractual or pre-contractual obligations, of the law and / or regulation (without prejudice to the statutory and legal terms, in respect for the rights and in compliance with the consequent obligations).

In particular, the criteria used to determine the retention period are established by specific laws that regulate the activity of the Data Controller (eg from the tax legislation regarding the processing of administrative and accounting data) or specific measures of the Guarantor for the protection of personal data that have regulated the processing activity and the purposes pursued by the Data Controller; Finally, it is specified that your personal data may be kept even up to the time allowed by Italian law

Rights of the interested party:

The rights of:

• obtain cancellation or transformation into anonymous form or blocking of data processed in violation of the law;
• obtain updating, rectification and integration of data;
• obtain the attestation that these operations have been brought to the attention of those to whom data are communicated;
• oppose for legitimate reasons the processing of data or any automated decision making process (including profiling);
• obtain treatment limitation or portability from another holder.

These rights may be exercised by means of a request sent to the Data Controller via e-mail or registered letter, at the addresses indicated above.

It should also be noted that the interested party always has the right to lodge a complaint with the Guarantor for the protection of personal data for the exercise of his rights or for any other matter concerning the processing of his personal data.

The data subject is always entitled to withdraw consent to the processing provided for the purposes indicated above, without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation.