Dear Guest,
Pursuant to the regulations in force regarding the protection of personal data (EU Regulation No. 679 of 2016), we wish to inform you that the processing of your personal data is carried out with fairness and transparency, for lawful purposes and in protection of your privacy and rights.
Processing is also carried out with the aid of electronic means for the following purposes:
- To acquire and confirm your booking for accommodation and related services, and to provide the services requested. As this processing is necessary for establishing and fulfilling the contractual agreement, your consent is not required, except where special (so-called sensitive) data is provided. Should you refuse to provide personal data, we will be unable to confirm the booking or provide the requested services. Processing will cease upon your departure, though some personal data may or must continue to be processed for the purposes described in the following points.
- To comply with the obligation set out in the “Consolidated Law on Public Security” (Article 109, Royal Decree 18.6.1931 No. 773), which requires us to report guests’ personal details to the Police Authority for public security purposes, in accordance with the procedures established by the Ministry of the Interior (Decree of 7 January 2013). Providing this data is mandatory and does not require your consent; refusal to provide it means we will be unable to accommodate you at our facility. Data collected for this purpose is not retained by us, unless you provide consent for its storage as described in point 4.
- To fulfil current administrative, accounting, and fiscal obligations. For these purposes, processing is carried out without the need for your consent. Data is handled by us and our designated staff, and is only disclosed externally in compliance with legal obligations. Refusal to provide the necessary data will mean we are unable to provide the requested services. Data collected for these purposes is retained for the period required by the respective regulations (10 years, and longer in the event of tax audits).
- To speed up the check-in process for future stays at our facility. For this purpose, subject to obtaining your revocable consent, your data will be stored for a maximum period of 10 years and used on future visits for the purposes described in the preceding points.
- To handle the receipt of messages and calls addressed to you during your stay. This purpose requires your consent, which you may withdraw at any time. Processing will cease upon your departure in any case.
- To send you our promotional messages and updates on rates and offers. For this purpose, subject to obtaining your consent, your data will be stored for a maximum period of 10 years and will not be shared with third parties. You may withdraw your consent at any time.
- For the protection of persons, property, and company assets through a video surveillance system covering certain areas of the facility, identifiable by the presence of appropriate signs. Your consent is not required for this processing, as it pursues our legitimate interest in protecting persons and property against possible assaults, thefts, robberies, damage, acts of vandalism, and for fire prevention and workplace safety purposes. Recorded images are deleted after 24 hours, except on public holidays or other closures, and in any case no later than one week. They are not shared with third parties, except where required in response to a specific investigative request from judicial or law enforcement authorities.
We also wish to inform you that the European Regulation grants you certain rights, including the right of access and rectification, erasure, restriction of processing, and objection to processing, as well as the right to data portability, where applicable (Articles 15 to 22 of EU Regulation No. 679 of 2016). You may also lodge a complaint with the supervisory authority in accordance with the procedures provided for by applicable law.
For any further information, and to exercise the rights granted to you under the European Regulation, please contact:
Data Controller and Processor: Matteo Grasso – Via Della Ghiara 83, 19123 La Spezia Email: info@acasadimilly.com