Articles 13 and 14
Regulation (EU) 2016/679 of the European Parliament and of the Council
Dear Customer
In accordance with the current legislation regarding the protection of personal data (EU Regulation No. 679 of 2016), we would like to inform you that processing of your personal data is carried out correctly and transparently, for legitimate purposes and with due protection of your privacy and your rights.
OWNER OF PROCESSING AND CONTACTS
The owner of the processing of your personal data is GOLF IMMOBILIARE MONSIGNOR DELLA CASA srl, Tax Code and VAT Number 04391200484, which is accessible at the following contacts: Registered office - Via Palagetta 45 - 50013 Campi Bisenzio (FI) - E-mail: booking@monisgnore.comPEC: info@pec.monsignore.com
HEAD OF PERSONAL DATA PROTECTION (Data Protection Officer or DPO)
GOLF IMMOBILIARE MONSIGNOR DELLA CASA srl has not appointed a Data Protection Officer (DPO), as it does not undertake processing that makes this mandatory by law, in particular, it does not perform processing that, by its nature, scope and/or purpose, demands the regular and systematic monitoring of large-scale users, or the large-scale processing of particular categories of personal data referred to in Article 9 of the GDPR, or of data relating to the criminal convictions and offences referred to in Article 10 of the GDPR.
PURPOSES AND LEGAL BASIS FOR DATA PROCESSING- DATA RETENTION PERIOD
Your personal data is processed:
- to acquire and confirm your bookings by accommodation services and ancillary services, and supplying the services you have requested. Since such processing is necessary for defining the contractual agreement and its subsequent implementation, no consent for this is required. Where there is a refusal to supply personal data, we will not be able to confirm a booking or supply the requested services. The processing will cease on your departure, but some of your personal data may or must continue to be processed for the purposes and with the methods indicated under the following points;
- to fulfil the obligation laid out in the "Consolidated Text on Public Security Laws" (article 109 of the Italian Royal Decree of 18/6/1931 No. 773) that requires us to communicate to Police Headquarters, for purposes of public security, the identities of customers we accommodate, in accordance with the procedures established by the Ministry of the Interior (Decree of 7 January 2013). The provision of data is mandatory, and does not require your consent.
- to comply with current administrative, accountancy and tax requirements. For these purposes, processing is carried out without any need to obtain your consent. The data are processed by us and our representatives, and are communicated outside our organisation only to fulfil our legal obligations. In case of refusal to provide the data necessary for the above-mentioned obligations, we will not be able to provide the requested services. The data acquired for these purposes are stored by us for the time provided for by the respective regulations (10 years, and even more in the case of tax assessments);
- to speed up registration procedures for your subsequent stays at our facility. For this purpose, after obtaining your revocable consent at any time, your data will be kept for a period of two years at most, and will be used whenever you become our guest again, for the purposes referred to under the previous points;
- to perform the operations of receiving messages and telephone calls addressed to you during your stay. For this purpose, your consent is required. You can withdraw your consent at any time. Processing will cease once you have departed anyway;
- to send you our promotional messages and updates regarding rates and offers. For this purpose, after obtaining your consent, your data will be retained until that consent is revoked. You can withdraw your consent at any time;
- to improve our service by communicating your data to web travel portals which publish reviews by users. For this purpose, after obtaining your consent, your data will be retained until that consent is revoked. You can withdraw your consent at any time;
TYPES OF DATA PROCESSED
The personal data gathered is "simple" personal data: any information concerning an identified or identifiable natural person ("interested party"); e.g. name and surname, residence/domicile, e-mail address, telephone/mobile number, bank details, etc.
PROCESSING METHODS
Data processing will be carried out in compliance with the provisions of Art. 32 of the Regulations, and will take place with the aid of computer and telematic means, as well as with manuals and paper. The data will be stored in electronic and paper archives, for a period of time not exceeding the duration and processing needs defined in this informative report about personal data gathering. Using periodic checks, the Data Controller will verify that the data gathered is strictly relevant and not excessive relative to the obligations and purposes of processing.
The Data Controller will take appropriate technical and organisational security measures, in accordance with the provisions of the GDPR, in order to minimise risks to your personal data, such as destruction or loss, including accidental, unauthorised accesses or processing that is not permitted or not in accordance with the purposes of collection, as defined in this Information notice
Your personal data has been acquired and processed by GOLF IMMOBILIARE MONSIGNOR DELLA CASA srl for the above-mentioned purposes, will be handled exclusively by duly authorised and appropriately trained personnel,
YOUR RIGHTS AS AN INTERESTED PARTY
We hereby inform you that the European Regulations award several rights, including the right to access and rectify the data, and to delete or limit or object to it being processed, in addition to the right to data portability, if and as applicable (Articles 15 to 22 of EU Regulation No. 679 of 2016), which you can assert by making a specific request to the Data Controller as indicated above. You can also lodge a complaint with the supervisory authority, in accordance with the procedures established by current legislation.
You also have the right to withdraw, at any time, the consent you gave to your data being processed, the revocation taking effect from the moment at which GOLF IMMOBILIARE MONSIGNOR DELLA CASA srl become aware of it. We remind you that revocation, as foreseen by the Regulation, does not prejudice the lawfulness of processing based on the consent given beforehand.
INTENTION TO TRANSFER DATA ABROAD
In the event there is a need to transfer your personal data to a third country or an international organisation, this transfer, to non-EU countries, can only take place if there is a suitable decision from the European Commission or, for transfers referred to Article 46 or 47, or those in the second sub-paragraph of Article 49, in which reference is made to suitable or appropriate safeguards and the means of obtaining a copy of such data, or the place where it has been made available.