Information on the Processing of Personal Data
Subject: Information on the Processing of Personal Data pursuant to Art. 13 of Regulation (EU) 2016/679.
This is to inform you that your personal data is processed by our company.
The processing is carried out in compliance with the criteria set forth in the European General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, in force since May 25, 2018 (hereinafter GDPR).
According to the aforementioned regulation, processing must be based on the principles of fairness, lawfulness, and transparency, and must protect your privacy and rights.
1) The data controller is Corte Quadri di Poli Mauro & Nicola s.n.c., represented by its legal representative pro tempore, with registered office at Via Pontespin, 17/L – 36045 – Lonigo (VI) – Tel.: +39 0444 83 40 08 – Email: hotel@cortequadri.it.
2) The data will be collected with your express consent (pursuant to Article 6.1 letter b) of the GDPR) and will be used for the following purposes: Sending requested information for which express consent is not required;
3) Methods: Personal data is processed by the data controller and duly appointed data processors for the proper fulfillment of the purposes indicated in point 2) using electronic tools and paper archives, as well as with the implementation of security measures designed to guarantee the confidentiality of personal data and prevent unauthorized access.
4) Communication: The data may be communicated to duly appointed internal and external parties who perform activities on behalf of the data controller. Communication to third countries outside the EU is not envisaged, nor is dissemination (e.g., social networks, websites, etc.). The data controller does not use automated processes, including profiling, to achieve the purposes set out in this policy.
5) The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and, in any case, for no longer than 2 years after the termination of the relationship for the purposes indicated.
6) The data subject has the right to request from the data controller access to his or her personal data, or the rectification or erasure of such data, or the restriction of processing concerning him or her, or the right to object to such processing, as well as the right to request data portability. The request may be made by email, fax, or registered mail with the subject line “Request by the data subject.” Specifying in the request the right the data subject wishes to exercise (erasure, rectification, portability, or right to be forgotten), along with a valid email address or certified email address to which the response should be sent. The data controller, or anyone designated by the data controller, will process the request within 30 days of receipt. If the response is complex, the timeframe may be extended to an additional 30 days, subject to timely notification to the data subject. If you deem it appropriate to exercise your rights, you have the right to lodge a complaint with the competent supervisory authority, the National Data Protection Authority, located at Piazza Venezia, 11 – 00187 Rome; protocollo@gpdp.it.