Information pursuant to art. 13 of Legislative Decree 196/2003 and articles 13-14 of EU Regulation no. 2016/679 (General Data Protection Regulation)

Pursuant to art. 13 of Legislative Decree 196/2003 (hereinafter "Privacy Code") and art. 13 of the EU Regulation n. 2016/679 (hereafter "GDPR 2016/679"), laying down provisions for the protection of persons and other subjects regarding the processing of personal data, we wish to inform you that the personal data you provide will be processed in compliance with the aforementioned law and the confidentiality obligations of the B & B CASALE COLLEONI.

1. Data controller

The Data Controller is Andrea Colleoni domiciled for the office in Tivoli at the Via di Villa Adriana, 192.

2. Purpose of the processing

The personal data supplied by you are necessary for the fulfilments required by law.

3. Methods of processing and conservation

The treatment will be carried out in an automated and / or manual form, in compliance with the provisions of art. 32 of the GDPR 2016/679 and Annex B of the Legislative Decree 196/2003 (articles 33-36 of the Code) on the subject of security measures, by persons specifically appointed and in compliance with the provisions of art. 29 GDPR 2016 / 679. Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, subject to your free and explicit consent expressed at the bottom of this information, your personal data will be kept for the period of time necessary to achieve the purposes for which they are collected and processed.

4. Scope of communication and dissemination

We also inform that the collected data will never be disclosed and will not be communicated without your explicit consent, except for the necessary communications that may involve the transfer of data to public bodies, consultants or other subjects for the fulfillment of legal obligations.

5. When we can collect your personal data

We can collect them when:

• purchase or use one of our products or services

• contact us for information or support through our social channels

• sign up for our website's newsletter

• contact us from the form (request for information) of our website

• Our website uses cookies. For more information, visit our website www.casalecolleoni.it in the Cookies Policy section

6. Transfer of personal data

Your data will not be transferred either to Member States of the European Union or to third countries outside the European Union.

7. Particular categories of personal data

Pursuant to articles 26 and 27 of Legislative Decree 196/2003 and articles 9 and 10 of EU Regulation no. 2016/679, you could confer, to the owner of the data qualifying as "particular categories of personal data" and that data that reveal "the racial or ethnic origin, political opinions, religious or philosophical beliefs, or belonging trade union, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person ". These categories of data may be processed only upon your free and explicit consent, expressed in writing at the end of this information.

8. Existence of an automated decision-making process, including profiling

The Data Controller does not adopt any automated decision-making process, including profiling, referred to in Article 22, paragraphs 1 and 4 of EU Regulation no. 679/2016.

9. Purpose of the treatment

The treatments are also carried out with the help of IT tools for the following purposes:

• to acquire and confirm your booking of accommodation services and ancillary services, and to provide the requested services. Since these are necessary treatments for the definition of the contractual agreement and for its subsequent implementation, its consent is not required, except in the case in which particular, so-called sensitive data are given. In case of refusal to provide personal data, we will not be able to confirm the booking or provide the requested services. The treatment will cease on his departure, but some of his personal data may or must continue to be processed for the purposes and with the methods indicated in the following points;

• to fulfill the obligation set forth in the "Consolidated Law on Public Security Laws" (article 109 RD 18.6.1931 No. 773) which requires us to communicate to the Police Headquarters, for purposes of public security, the particulars of clients accommodated in accordance with the procedures established by the Ministry of the Interior (Decree of 7 January 2013). The provision of data is mandatory and does not require its consent, and in case of refusal to provide it we will not be able to host it in our facility. The data acquired for this purpose are not stored by us, unless you provide us with the consent to the conservation as foreseen in point 4;

• to comply with current administrative, accounting and tax obligations. For these purposes, the processing is carried out without the need to acquire your consent. The data are processed by us and our representatives, and are communicated to the outside only in fulfillment of legal obligations. In case of refusal to provide the data necessary for the above-mentioned obligations, we will not be able to provide the requested services. The data acquired for these purposes are stored by us for the time provided for by the respective regulations (10 years, and even more in the case of tax assessments);

• to speed up registration procedures in case of subsequent stays at our facility. For this purpose, after obtaining its revocable consent at any time, your data will be kept for the maximum period prescribed by law, and will be used when it will be our guest again for the purposes referred to in the previous points;

• to perform the function of receiving messages and telephone calls addressed to her during her stay. For this purpose, your consent is required. You can withdraw your consent at any time. The treatment will cease at its departure anyway;

• to send you our promotional messages and updates on rates and offers. For this purpose, after obtaining your consent, your data will be kept for the maximum period provided by law and will not be disclosed to third parties. You can withdraw your consent at any time;

• for the protection of people, property and company assets through a video surveillance system of some areas of the structure, identified by the presence of appropriate signs. For this treatment, your consent is not required, as it pursues our legitimate interest in protecting people and property with respect to possible aggressions, thefts, robberies, damage, acts of vandalism and for purposes of fire prevention and job security. The recorded images are deleted after 24 hours, except holidays or other cases of closure of the exercise, and in any case not more than a week. They are not the object of communication to third parties, except in cases where it is necessary to adhere to a specific investigation request by the judicial or judicial authorities.

10. Rights of the interested party

At any time, you can exercise, pursuant to art. 7 of Legislative Decree 196/2003 and articles from 15 to 22 of EU Regulation no. 2016/679, the right to:

a) request confirmation of the existence or otherwise of personal data;

b) obtain information on the purposes of the processing, the categories of personal data, recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period;

c) obtain the correction and deletion of data;

d) obtain the treatment limitation;

e) obtain data portability, ie receive them from a data controller, in a structured format, commonly used and readable by automatic device, and transmit them to another data controller without hindrance;

f) oppose the processing at any time and also in the case of treatment for direct marketing purposes;

g) to oppose an automated decision-making process concerning individuals, including profiling.

h) ask the data controller to access personal data and to rectify or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability;

i) withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation;

j) to propose a complaint to a supervisory authority.

 

You can exercise your rights with a written request sent to This email address is being protected from spambots. You need JavaScript enabled to view it., to the postal address of the registered office in Tivoli, via di Villa Adriana 192 or to the e-mail address This email address is being protected from spambots. You need JavaScript enabled to view it.

You can contact the Guarantor through the procedures http://www.garanteprivacy.it/web/guest/home/footer/contatti

Last update 25 May 2018