INFORMATION PROVIDED PURSUANT TO ART. 13-14 GDPR 2016/679

GENERAL DATA PROTECTION REGULATION (PRIVACY POLICY)

SECTION 01

We inform you,
pursuant to art. 13 and of the art. 14 of the GDPR n. 2016/679 (hereinafter, "GDPR"), that in case of collection of personal data concerning you, this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights;

a)
Our organization, as a legal person, plays the dual role of data controller and data processor;

b)
The data controller and the data processor (see contact details on the last page); having carried out the assessments of the case internally, they have not designated the data protection officer, as, pursuant to article 37 paragraph 1 of the GDPR n. 2016/679 does not fall within the obligation.

Your data will be processed

c/i)

pursuant to art. 6 letter b) and c), for purposes relating to the execution of a contract or the execution of pre-contractual measures and to fulfil the legal obligations to which the data controller is subject; (for example, data processing necessary for the management of requests, estimates and bookings, fulfilment of all contractual, accounting and tax obligations, management of payments also with credit cards, POS and advanced online services managed by the respective credit institutions or agencies and dispute management)
moreover, for all the obligations established by law; (for example, regulations, community and local regulations or by orders from the authorities, registration and communication of data to the authorities and management of any disputes)
in addition to this, for the pursuit of the legitimate interest of the data controller or of third parties under the conditions set out in the GDPR;

c/ii)
pursuant to art. 7, subject to your freely expressed consent,

for other service purposes such as, for example, surveys, marketing and profiling; (for example; data processing necessary to carry out surveys and/or market research, send promotional offers on our services and other events, update rates, other quotes applied as well as communications about greetings and holidays; to implement additional services such as external communication of data related to your stay for the exclusive purpose of allowing the function of receiving objects, messages and phone calls addressed to you and better managing the services according to your expectations and requests; )
for the treatment of particular categories of personal data in order to offer better performance in the provision of services;
for the treatment of advanced online services; (for example, subscription to our management program to use your e-mail address to send the bill, receipt or invoice, to manage loyalty scores and other similar services)

c/iii)
pursuant to art. 7, subject to your freely expressed consent,

for other purposes; (for example; data processing necessary to LOG IN to our public WIFI / LAN network to surf the internet)
as well as necessary data processing during the use of our institutional website whose transmission is implicit in the use of internet communication protocols, such data are not collected to be associated with identified interests, but by their very nature could, through processing and associations with data held by third parties, allow users to be identified; for example, this category of data includes the IP addresses or names of the devices used by users who connect to the site, the URI notation addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response and other parameters relating to the operating system and the user's information environment;

The aforementioned data may be used for the sole purpose of obtaining anonymous statistical information on the use of the public WIFI/LAN network and the institutional website; for example, to check the correct functioning of our IT infrastructure and improve the service;

likewise, the data could be used by the competent authorities, for example, to ascertain responsibility in the event of hypothetical computer crimes or damage to our WIFI, LAN networks, our IT system and our institutional website.

d)
pursuant to art. 6 paragraph 1 letter f), taking into account the reasonable expectations of the parties,
for purposes of legitimate interests pursued by the data controller or by third parties; (for example; data for fraud prevention purposes (attendance monitoring, entry register, biometric data, video surveillance images ...) and direct marketing purposes).

The recipients and categories of recipients of your data are

e)
natural or legal persons, public authorities, collaborators such as employees, professionals, service providers, bodies and associations.

Your personal data may be transferred to a third country or to an international organization

f)
due to the foregoing, your data, in addition to being processed in paper format in the internal archives of our organization or with third parties, are mostly processed and stored in electronic format on our mass memories inside our structure or within the European Union through hosting, server and cloud services. In any case, it is understood that the owner, if necessary, will have the right to move the hosting, servers and cloud servers also to non-EU areas. Likewise, the owner ensures from now on that the transfer of data to non-EU areas will take place in compliance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses envisaged by the European Commission.

SECTION 02

The processing of your data is correct and transparent

Carried out by means of the operations of collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data is subjected to both paper and electronic and/or automated processing.

They may be processed, only for the purposes referred to above c/i , c/ii , c/iii and d , also by employees and collaborators of the owner or other entities based in Italy and in other European countries, by third party companies or other subjects; for example, by way of example, credit institutions, professional firms, insurance companies for the provision of insurance services, IT and telephone service providers or other entities that provide services/products on behalf of the Data Controller, in their capacity as external managers of the treatment. If personal data are not obtained from the interested party, the data controller, in application of art. 14 of the GDPR, will provide within one month, any specific circumstance; otherwise, this information applies to you.

The retention period of your data is defined

a)
for a time necessary to fulfil the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes referred to in the previous points c/i and for no more than 2 years from the collection of data for the purposes referred to in the previous points c/ ii, c/iii and d.

As an interested party, by sending a registered letter or an email to the data controller, you can assert the following rights.

b)

right of access, pursuant to art. 15 of the GDPR, to obtain confirmation as to whether or not personal data concerning him is being processed and, if so, to obtain access to personal data and information; in case of request for further copies of data, the owner and the data controller reserves the right to charge you a reasonable expense contribution based on administrative costs;
right of rectification, pursuant to art. 16 of the GDPR, to obtain the rectification of inaccurate personal data concerning him without unjustified delay;
right to cancellation, pursuant to art. 17 of the GDPR, to obtain the cancellation of personal data concerning him without unjustified delay;
right to limit the processing, pursuant to art. 18 of the GDPR, to obtain the limitation of the treatment;
right to data portability, pursuant to art. 20 of the GDPR, to receive the personal data concerning him provided to a data controller in a structured format and to transmit such data to another data controller without impediments;
right of opposition, pursuant to art. 21 of the GDPR, to oppose at any time the processing of personal data concerning him pursuant to art. 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions.

c)

right to withdraw consent, for the cases provided for by the GDPR, at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

d)

right to lodge a complaint with a supervisory authority, in ITALY Guarantor of Privacy PIAZZA DI MONTECITORIO n. 121 00186 ROME email garante@gpdp.it

e)

Nature of data provision and consequences of refusal to respond
The provision of data for the purposes referred to in the previous point c/i is mandatory, likewise, taking into account the purposes of legitimate prosecutions referred to in the previous point d, the provision must be consented to; in their absence, our organization cannot guarantee the provision of services and the fulfilment of your expectations. Without the need for express consent, the processing of such data can be carried out by the Authorities, by the insurance company for the provision of insurance services, by professional studios also for the management of disputes, as well as by those subjects to whom the communication is mandatory by law for the accomplishment of said purposes. These subjects will process the data in their capacity as independent data controllers. Your information will not be disseminated.

The provision of data for the purposes referred to in c/ii and c/iii above is optional.

Taking into account the reasonable expectations of the parties for the purposes. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the services offered and use the internet connections via our WIFI network / Public LAN as well as a series of advanced services and present on our institutional site. However, you will continue to be entitled to the services referred to above c/i.

f)

It is your right not to be subjected to a decision based solely on automated processing
referred to in the previous points c/ii and c/iii, including profiling that produces legal effects concerning you or that significantly affects your person in a similar way. Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or neither of the two types of communication.

Place and date Jesolo: 11/22/2022
Organization Data Controller: Flavio Rumiato
Contact details of the Data Controller: HOTEL RESIDENCE MARA DI RUMIATO FLAVIO
Registered office: VIA MANZONI, 9 – 30016 JESOLO LIDO (VENICE) ITALY
Contacts: +39 0421 380522
VAT number: 01610960278
Rea: VE-174411

Dear user,
Our institutional site is managed by the Hotel Mara di Flavio Rumiato as data controller, does not use profiling cookies and uses technical cookies for the sole purpose of transmitting data to the extent strictly necessary to improve the provision of services.

Due to the foregoing, technical cookies are not used for other purposes, they can be installed directly and are divided into

Navigation and session cookies
necessary for normal navigation and use of the site's pages;
Cookie analytics
necessary to collect information, in aggregate form, on the number of users and how they visit the site;
Functionality cookies
necessary to allow user navigation according to a series of selected criteria in order to improve the service rendered to the same.

The installation of technical cookies does not require the user's prior consent but the obligation to provide this information.

The installation of profiling cookies, including those of third parties, requires the prior consent of the user by following the instructions in the Cookie Banner of our institutional website and, depending on the case, adequate notification to the guarantor.

Cookies, in general, are portions of code installed within the browser; some of the purposes of installation of the Cookies may also require the user's consent, if among the tools indicated below there are services managed by third parties. These could - even without the knowledge of our organization - carry out tracking activities of the user.

You can block Cookies through the DO NOT TRACK functions supported by all major browsers (Internet Explorer, Chrome, Safari etc...) which automatically communicate to the site the wish not to be tracked; that said, blocking some cookies could invalidate some features of the site.

For the DO NOT TRACK functions, it is advisable to read the disclosure of the browser used.

Without prejudice to the foregoing, we advise any user to always protect their personal data, to periodically consult all the privacy policies and cookie policies and to use the information provided by the following sites:

http://www.youronlinechoices.eu/
https://www.aboutads.info/consumers/
https://youradchoices.ca/understanding-online-advertising/

In view of the foregoing, the Data Controller advises all users to use these resources in addition to the information provided in this document.

For further information or any reports, write to the contact address on the website www.hotelresidencemara.it