B&B La Rosa dei Venti with its registered office in Marina di Gioiosa Ionica (RC) at Via Piero Gobetti 99 and its operational office in Marina di Gioiosa Ionica (RC)
at Via Piero Gobetti 99, VAT number 03316020803 (hereinafter, the “Data Controller”), in its capacity as the data controller, informs you pursuant to Art. 13 of Legislative Decree No. 196 of 30 June 2003 (hereinafter, the “Privacy Code”) and Art. 13 of EU Regulation No. 2016/679 (hereinafter, the “GDPR”) that your data will be processed in the following manner and for the following purposes:
- Subject of the Processing The Data Controller processes personal and identifying data (e.g., name, surname, company name, address, telephone number, email, bank and payment details) – hereinafter, “personal data” or simply “data” – provided by you when entering into contracts for the Data Controller’s services.
- Purpose of Processing Your personal data is processed: A) without your express consent (Art. 24 letters a), b), c) of the Privacy Code and Art. 6 letters b), e) of the GDPR), for the following Service Purposes: – to conclude contracts for the Data Controller’s services; – to fulfill pre-contractual, contractual, and tax obligations arising from existing relationships with you; – to fulfill obligations under the law, regulations, EU legislation, or orders from authorities (e.g., anti-money laundering regulations); – to exercise the Data Controller’s rights, such as the right to defense in court. B) Only with your specific and separate consent (Arts. 23 and 130 of the Privacy Code and Art. 7 of the GDPR), for the following Marketing Purposes: – to send you newsletters, commercial communications, and/or promotional material via email, mail, and/or SMS and/or telephone contacts regarding products or services offered by the Data Controller and to measure satisfaction with the quality of services; – to send you commercial and/or promotional communications from third parties (e.g., business partners, insurance companies, other companies) via email, mail, and/or SMS and/or telephone contacts. Please note that if you are already our customer, we may send you commercial communications regarding services and products similar to those you have already used, unless you object (Art. 130, para. 4 of the Privacy Code).
- Processing Methods Your personal data is processed through the operations specified in Art. 4 of the Privacy Code and Art. 4, para. 2 of the GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data. Your personal data is processed both on paper and electronically and/or automatically. The Data Controller will process your personal data for the time necessary to fulfill the above purposes and in any case for no more than 10 years after the termination of the relationship for Service Purposes and no more than 2 years after data collection for Marketing Purposes.
- Access to Data Your data may be accessed for the purposes specified in Art. 2.A) and 2.B) by: – employees and collaborators of the Data Controller; – third-party companies or other entities (e.g., banks, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that perform outsourced activities on behalf of the Data Controller, in their capacity as external data processors.
- Data Disclosure Without the need for express consent (Art. 24 letters a), b), d) of the Privacy Code and Art. 6 letters b) and c) of the GDPR), the Data Controller may disclose your data for the purposes specified in Art. 2.A) to supervisory authorities (e.g., IVASS), judicial authorities, insurance companies for the provision of insurance services, as well as to entities to whom disclosure is mandatory by law for the fulfillment of said purposes. These entities will process the data as independent data controllers. Your data will not be disseminated.
- Data Transfer Personal data is stored on paper, on hard disks, and on servers managed by Netson Italia. In this case, the Data Controller ensures that the transfer of data will comply with applicable legal provisions, subject to the stipulation of standard contractual clauses.
- Statistics The services contained in this section allow the Data Controller to monitor and analyze traffic data and track user behavior. Google Analytics 4 (Google Ireland Limited) Google Analytics is a statistical service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other services developed by Google. Google may use the Personal Data to contextualize and personalize ads in its advertising network. In Google Analytics 4, IP addresses are collected and then deleted before the data is recorded in any data center or server. For more information, please refer to Google’s official documentation. To learn about Google’s use of data, consult their partner policy and their Commercial Data page. Personal Data processed: Usage data; number of Users; session statistics; Tracking Tools. Place of processing: Ireland – Privacy Policy – Opt Out.
Displaying Content from External Platforms This Application uses Tracking Tools to display content hosted on external platforms directly on its pages and interact with it. Google Fonts Google Fonts is a font style display service managed by Google Ireland Limited that allows this Application to integrate such content within its pages. Personal Data processed: Usage data; Tracking Tools. Place of processing: Ireland – Privacy Policy.
- Nature of Data Provision and Consequences of Refusal Providing data for the purposes specified in Art. 2.A) is mandatory. Without it, we cannot guarantee the Services under Art. 2.A). Providing data for the purposes specified in Art. 2.B) is optional. You may therefore choose not to provide any data or to deny the processing of data already provided: in this case, you will not receive newsletters, commercial communications, or promotional material related to the Services offered by the Data Controller. You will still be entitled to the Services under Art. 2.A).
- Rights of the Data Subject As a data subject, you have the rights under Art. 7 of the Privacy Code and Art. 15 of the GDPR, specifically: i. to obtain confirmation of the existence or absence of personal data concerning you, even if not yet recorded, and their communication in an intelligible form; ii. to obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic tools; d) the identification details of the data controller, data processors, and the designated representative under Art. 5, para. 2 of the Privacy Code and Art. 3, para. 1 of the GDPR; e) the entities or categories of entities to whom the personal data may be disclosed or who may become aware of it as designated representatives in the territory of the State, data processors, or persons in charge of processing; iii. to obtain: a) the updating, rectification, or, where relevant, integration of the data; b) the deletion, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed; c) certification that the operations under letters a) and b) have been brought to the attention of those to whom the data has been disclosed or disseminated, except where this proves impossible or involves a disproportionate effort; iv. to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising material or direct sales or for market research or commercial communication, through automated calling systems without human intervention, via email, and/or through traditional marketing methods via telephone and/or postal mail. Please note that the data subject’s right to object, as set out in point b) above, for direct marketing purposes through automated means extends to traditional methods, and the data subject may still exercise the right to object in part. Therefore, the data subject may choose to receive communications only through traditional methods or only through automated means, or neither. Where applicable, you also have the rights under Arts. 16-21 of the GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the supervisory authority.
- How to Exercise Your Rights You may exercise your rights at any time by sending: – a registered letter with return receipt to B&B La Rosa dei Venti – Operational Office in Marina di Gioiosa Ionica (RC) at Via Piero Gobetti 99 – a PEC email to info@gioiosabb.it
- Data Controller, Processors, and Persons in Charge The Data Controller is B&B La Rosa dei Venti with its registered office in Marina di Gioiosa Ionica (RC) at Via Piero Gobetti 99, VAT number 03316020803.
The Data Processor, duly appointed, is [Name and Surname of the Data Processor]. All documentation, including the data processing register, is kept at the registered office. Cookie Policy This Application uses Tracking Tools. For more information, the User can consult the Cookie Policy available on the dedicated page of the website >>.