Dear Guest,
In accordance with current regulations on the protection of personal data (EU Regulation No. 679 of 2016), we wish to inform you that the processing of your personal data is carried out fairly and transparently, for lawful purposes and with respect for your privacy and rights.
Processing is also carried out using electronic means for the following purposes:
- To acquire and confirm your booking for accommodation and ancillary services, and to provide the requested services. As this processing is necessary for establishing the contractual agreement and its subsequent execution, your consent is not required, unless special ("sensitive") data is provided. If you refuse to provide personal data, we will be unable to confirm your booking or provide the requested services. Processing will cease upon your departure, though some of your personal data may or must continue to be processed for the purposes described in the following points.
- To comply with the obligation set out in the "Consolidated Law on Public Security" (Article 109 of Royal Decree 18.6.1931 No. 773) , which requires us to report guests' personal details to the Police Authority for public security purposes, in accordance with the procedures established by the Ministry of the Interior (Decree of 7 January 2013). Providing this data is mandatory and does not require your consent; refusal to provide it means we will be unable to accommodate you at our facility. Data collected for this purpose is not retained by us, unless you provide consent for retention as described in point 4.
- To fulfil current administrative, accounting, and tax obligations. For these purposes, processing is carried out without requiring your consent. Data is handled by us and our staff, and is shared externally only to comply with legal obligations. Refusal to provide the necessary data will prevent us from delivering the requested services. Data collected for these purposes is retained for the period required by the respective regulations (10 years, and potentially longer in the event of tax audits).
- To expedite check-in procedures for future stays at our facility. For this purpose, subject to obtaining your revocable consent, your data will be retained for a maximum of 10 years and used during future visits for the purposes outlined in the preceding points.
- To perform the function of receiving messages and phone calls addressed to you during your stay. This requires your consent, which you may withdraw at any time. Processing will cease upon your departure in any case.
- To send you promotional messages and updates on rates and offers. For this purpose, subject to obtaining your consent, your data will be retained for a maximum of 10 years and will not be shared with third parties. You may withdraw your consent at any time.
- For the protection of persons, property, and company assets through a video surveillance system covering certain areas of the facility, identifiable by the presence of appropriate signage. Your consent is not required for this processing, as it serves our legitimate interest in protecting people and property against possible assault, theft, robbery, damage, vandalism, and for fire prevention and workplace safety purposes. Recorded images are deleted after 24 hours — except on public holidays or other days the facility is closed — and in any case no later than one week. They are not shared with third parties, except when required to comply with a specific investigative request from the judicial or law enforcement authority.
We also wish to inform you that the European Regulation grants you certain rights, including the right of access and rectification, erasure, restriction of processing, and the right to object to processing, as well as the right to data portability where applicable (Articles 15 to 22 of EU Regulation No. 679 of 2016). You may also lodge a complaint with the supervisory authority in accordance with the procedures provided for by current regulations.
For any further information, and to exercise the rights granted to you under the European Regulation, please contact:
Data Controller and Processor: Matteo Grasso – Via Della Ghiara 83, 19123 La Spezia
Email: info@acasadimilly.com