PRIVACY NOTICE pursuant to Articles 12 et seq. of Regulation (EU) 2016/679

Introduction – The GDPR provides for the protection of individuals and other subjects with regard to the processing of personal data. Under such legislation, the processing of personal data relating to a data subject shall be carried out in accordance with the principles of fairness, lawfulness and transparency, as well as the protection of confidentiality and the rights of the data subject.

Types of Data Collected

We inform you that you may be asked to provide us, even partially, with certain information including:

  • personal data such as name, tax code, residence and domicile, landline or mobile phone numbers and personal email address; information relating to the composition of your household;
  • browsing data.

Please note that if you provide personal data relating to third parties (i.e. not directly referring to you) to Italy Hotel & Resort S.r.l., you shall act as an independent data controller, assuming all legal obligations and responsibilities. In this respect, you grant the widest indemnity to Italy Hotel & Resort S.r.l. against any dispute, claim, request for damages arising from unlawful processing, etc., that may be brought by third parties whose personal data have been processed through your spontaneous submission in breach of applicable data protection laws. In any event, where you provide or otherwise process personal data of third parties, you hereby guarantee – assuming full responsibility – that such processing is based on an appropriate legal basis pursuant to Article 6 of the Regulation, legitimising the processing of the relevant information.

Data Controller

At any time, you may contact Italy Hotel & Resort S.r.l., with registered office in Padua (PD), Via della Croce Rossa no. 6, VAT no. 05009400283, as the “Data Controller”, represented by its legal representative pro tempore, at the email address privacy@italyresort.it for information and/or to report any issues.

Purposes and Legal Basis of the Processing

The above-mentioned data shall be processed for the following purposes:

  1. A) to carry out activities preliminary to the conclusion of a professional engagement or to perform the same. The legal basis for processing is the performance of a contract. The data will be retained for the duration of the contract and, after termination, for 10 years. In the event of legal disputes, for the entire duration thereof, until the expiry of the applicable limitation periods;
  2. B) to comply with administrative, accounting and tax obligations to which the Data Controller is subject. The legal basis is compliance with legal obligations. The data will be retained for the duration of the contract and, after termination, for 10 years. In the event of legal disputes, for the entire duration thereof, until the expiry of the applicable limitation periods;
  3. C) subject to your consent, to send you commercial communications aimed at promoting the services of the Data Controller. The data will be retained for 24 months from the date consent is given.

Methods of Processing

Processing is carried out by means of the following operations: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of data.

We inform you that we also use automated systems for the storage and processing of your data, for which appropriate technical and organisational measures have been implemented.

The data shall not be subject to automated decision-making processes, including profiling.

Disclosure of Data and Categories of Recipients

LWe further inform you that your data will be transmitted to predetermined recipients with whom specific appointments and/or agreements have been entered into, regulating the processing of data on our behalf and imposing confidentiality and data protection obligations, including:

  • employees and collaborators of Italy Hotel & Resort S.r.l. authorised to process data;
  • professionals, professional firms or companies providing assistance, consultancy or collaboration to Italy Hotel & Resort S.r.l. in accounting, administrative, legal, tax and financial matters, marketing, advertising and workplace safety;
  • third-party companies/professionals performing specific activities involving data processing, such as IT service providers including supply, maintenance and updating of IT infrastructure and software used by Italy Hotel & Resort S.r.l.;
  • companies and/or individuals carrying out specific activities on our behalf under specific service agreements (e.g. concierge services, cleaning, catering);
  • insurance companies and/or insurance agents, where necessary.

In any case, your data may be disclosed to judicial authorities in the exercise of their institutional functions when required by applicable law.

You have the right to request at any time from Italy Hotel & Resort S.r.l. an updated and complete list of the recipients as indicated above.

Obligation to Provide Personal Data

    The provision of your personal data for the purposes referred to in paragraph 3, letters a) and b), constitutes a contractual obligation, as it is necessary for the establishment and performance of the contract and the related legal obligations, as well as to respond to your requests. Therefore, failure to provide such data will make it impossible for Italy Hotel & Resort S.r.l. to perform the contract and/or respond to your requests.

    Conversely, the provision of data for the purposes referred to in letter c) is optional. Italy Hotel & Resort S.r.l. may pursue such purposes only with your prior consent, which may be withdrawn at any time. Withdrawal of consent shall not affect the performance of the contract.

    Rights of the Data Subject

    We are obliged to respond to your requests to know how and why we process your data; to rectify inaccurate data, supplement incomplete data and update outdated data; to erase data and restrict processing on legitimate grounds; to transmit data to you and/or to third parties indicated by you; and to cease processing if you object, unless we have a legitimate interest and/or legal obligation to continue such processing.

    If you wish to exercise one or more of the above rights, please contact our privacy office by sending a request to privacy@italyresort.it so that we can respond promptly and effectively. If you are not satisfied with our response, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).