DISCLOSURE PURSUANT TO ART. 13 OF THE REGULATION OF THE EUROPEAN UNION No. 679/2016 IN APPLICATION OF THE NATIONAL LAW N. 247/2012
According to the new U.E. Regulation n. 679/2016, customers are informed that the processing of personal data relating to the activities performed by "LA DIMORA DI CABOTO B & B" in carrying out the tasks and performance of the functions provided for by the Law will be based on principles of correctness, lawfulness, transparency and to protect your privacy and your rights
According to article 13 of the GDPR 2016/679, therefore, we provide you with the following information:
1. GENERAL INFORMATION
DIMORA DI CABOTO B & B will process your personal data acquired at check-in, or which will be given by filling out the forms on the website, in carrying out the activities required by law, for the purposes of the Regulation (EU) 2016 / 679 providing precise information on the processing of personal data and the rights due. The following common data will be treated, by way of example and without limitation: name, surname, tax code, residence, domicile, date of birth, family situation, financial situation, tax situation, e.g. e p.e.c. The particular categories of personal data and personal data relating to criminal convictions and crimes pursuant to articles 9 and 10 of the U.E. Regulation n. 679/2016.
Furthermore, it is specified that the personal data provided may be collected, recorded, organized, structured, stored, adapted or modified, extracted, consulted, used, distributed, communicated by transmission, limitation, cancellation or destruction.
2. HOLDER OF THE TREATMENT AND RESPONSIBLE FOR THE PROTECTION OF PERSONAL DATA
The Data Controller is La DIMORA DI CABOTO B & B, registered office in Piazza Mazzoccolo 13 - Gaeta (LT) CAP 04024.
The owner of the treatment ut supra has appointed his Personal Data Protection Manager, who can be contacted at the following addresses: INFO@LADIMORADICABOTO.IT
The owner does not adopt any automated decision making process, including profiling pursuant to art. 22 paragraphs 1 and 4 Regulations U.E. n. 679/16. The Data will be processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For further information, also with reference to the list of data processors, contact the Data Controller or view the website in the dedicated section.
3. PURPOSE OF THE TREATMENT
The personal data processed are provided solely and exclusively by the interested party and for the following purposes:
a) it is necessary to fulfill a legal obligation to which the holder is subject, in particular for the fulfillment of obligations under the law, regulations, community legislation (including, but not limited to, anti-money laundering obligations) , usury, fraud prevention, tax and tax assessment) and related to the obligations arising from provisions given by judicial authorities, administrative officials or police (such as, for example, officials of the Guardia di Finanza) legitimized by the law or by supervisory and control bodies;
b) the treatment is necessary for the execution of a housing task, also aimed at the protection and compliance with current regulations, also in respect of the public interest;
The provision of personal data for the aforementioned purposes is mandatory and any refusal to provide them implies the impossibility for the DIMORA DI CABOTO B & B to fulfill the obligations set by law and to carry out the duties and duties due to him as per Law . The conferment of your data will be done by completing the form
and signing the chosen form, taking care to read this information. In this particular context, the processing of your data will be lawful and does not require your consent, as the conditions set forth in art. 6.1 letter c) and e) of the Regulations U.E. n. 679/16. As a consequence you assume the responsibility referred to in art. 26 of the law of 4 January 1968, n. 15, as well as article 6 of the D.P.R. 20 October 1998 n. 403 in the hypothesis of falseness in acts and false declarations.
4. PARTICULAR DATA CATEGORIES
Article. 9 of the U.E. Regulation n. 679/2016 regulates the treatment of particular categories of data, where in point 1 it is forbidden to process personal data revealing racial or ethnic origin, political opinions, religious or philosophical convictions, or union membership, and to process genetic data , biometric data intended to uniquely identify a natural person, data relating to a person's health or sexual life or sexual orientation. DIMORA DI CABOTO B & B will be able to handle the particular categories of data and data related to criminal convictions and crimes provided for by art. 10 of the U.E. Regulation n. 679/2016 only to fulfill the obligations deriving from the purposes referred to in the previous point. In this hypothesis of treatment also recurs the normative provision as per art. 9 paragraph 2 lett. f) and g) of the Regulations U.E. n. 679/2016 as an alternative hypothesis to consent by way of derogation from paragraph 1. In this case, the processing of data will be proportionate to the objectives pursued, providing appropriate and specific measures to protect the fundamental rights of those concerned. The processing of the data indicated here will take place in the context of legitimate activities and with adequate guarantees by the data controller, and may be necessary for reasons of public and relevant interest on the basis of national or Union law.
5. COMMUNICATION TO THIRD PARTIES AND DIFFUSION
The DIMORA DI CABOTO B & B, without the need for express consent of the interested parties, will allow the consultation of the lists and registers, as required by national law and regulations. Your data will be processed exclusively by the owner and legal representative p.t. and by collaborators of the DI DIMORA DI CABOTO B & B or of the companies expressly appointed responsible for the treatment. Apart from these hypotheses, your data will not be disclosed, nor will they be disclosed to third parties, except in cases where it is necessary to communicate them to other subjects involved in the preliminary activity and in the cases specifically provided for by national or Union law European. In some specific cases, only for the purposes referred to in point 3, and in compliance with the obligations established by the community and internal legislation, by laws and regulations, the data referred to in art. 9 and 10 of the U.E. Regulation n. 679/16, functional for the accomplishment of the tasks and functions required by law. In particular, the personal data of interested parties including those provided for pursuant to art. 9 and 10 Regulations U.E. n. 679/16, may be communicated to the Public and Judicial Authorities, to the National Forensic Council, to the National Fund for forensic and legal assistance, to the Data Processors, and to all those to whom it is necessary for the fulfillment of the intended treatment purposes. Therefore you can view the information provided on the related websites and prepared by the subjects to whom the personal data are communicated for the reasons indicated above. In the case of treatments carried out by persons appointed as data controllers, for purposes other than those provided for in the contract signed with the holder, the same will result as independent holders subject to the U.E. Regulation. n. 679/16. Your personal data will not be transferred to a country other than that in which the person is located, and will not be transferred to an Extra-EU country. The applicant is aware of the possibility of sending communications by e-mail, p.e.c., sms, telephone and fax only for the purposes referred to in point.
6. STORAGE PERIOD
Your data will be processed and stored for the time necessary to achieve the purposes for which they were collected. Many data could be stored for an unlimited period of time for reasons of significant public interest based on national law. Therefore your personal data will be stored in compliance with the principles of lawfulness, limitation and minimization of data pursuant to art. 5 of the U.E. Regulation no .679 / 16, and for the period of time necessary for the achievement of the purposes envisaged according to the provisions of the Law. In addition, it is specified that your personal data may be kept for a longer period, in compliance with a legal obligation or by an order of an authority, allowing to delete only those no longer necessary and relevant or to use pseudonymisation techniques and / or minimization to guarantee security. Consequently, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
7. RIGHTS OF THE INTERESTED PARTY
At any time, in relation to the processing of your personal data, you may exercise, pursuant to art. 15 - 22 of the U.E. Regulation n. 679/16 the following rights:
a) To obtain confirmation that personal data processing is in progress or not, obtaining the indication of the origin of personal data, of the purposes and methods of processing, of the logic applied in case of treatment carried out with the help of electronic tools, the identifying details of the data controller, any data controllers and persons authorized to process the data, the subjects or the categories of subjects to whom the personal data they can be communicated or who can learn about them as appointed representative in the territory of the State, managers or persons authorized to process data;
b) Obtain the updating, rectification or, when interested, integration of data, cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be stored in relation to the purposes for which the data were collected or subsequently processed, the attestation that the operations referred to in letters a), b) and c) have been brought to the attention, including as regards their content, of those which data have been communicated or disseminated, except in the case where such fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right. Please note that cancellation can only take place after the mandatory data retention period has expired as indicated in point 6 and when it will no longer be necessary with respect to the purposes for which it was collected or otherwise processed. Furthermore, personal data that have the sole legal basis for processing the consent can be deleted, and this is revoked by the interested party, or when the data are processed unlawfully, or when the data subject is opposed pursuant to art. 21;
c) Obtaining the limitation of processing when the data subject disputes the accuracy of personal data, for the period necessary for verification of accuracy, when the processing is unlawful and the interested party opposes the cancellation and asks that its limitation be limited use, when the data are necessary for the interested party to ascertain, exercise or defend a right in court, when the in terested party has opposed the treatment pursuant to art. 21;
d) Receive your data or transfer them to another owner, in fact the data subject has the right to receive their data in a structured format, commonly used and readable by automatic device and, where technically feasible, to obtain the transfer without obstacles to a other holder. This provision is applicable when the data are processed with automated tools and the processing is based on the consent of the interested party, on a contract of which the interested party is a party or on contractual measures connected to it;
e) Oppose at any time, for reasons connected with your particular situation, to the processing of your personal data pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions.
If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him / her for such purposes, including profiling in so far as it is connected to such direct marketing;
f) Not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects affecting him or which significantly affects his person;
g) Propose a complaint to the competent personal data protection supervisory authority or act in court, and to mandate a non-profit organization, organization or association for the exercise of its rights;
The rights listed above may be exercised only if they are provided for by current Community legislation as well as by national legislation and regulations governing the duties and functioning of the hotelier's profession. If the data controller intends to further process your personal data for a different purpose than that for which they were collected, prior to such further processing information will be provided about this different purpose and any additional relevant information. To exercise the rights referred to in this paragraph, interested parties may address a written request to the contact details of the owner indicated in this document, both at the postal address of the operational headquarters.