INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA
(ART. 13 EU REG. 2016/679)
Dear Customer,
for the purposes set out in the above-mentioned EU Regulation 2016/679 (hereinafter “G.D.P.R. 2016/679”), containing the new provisions for the protection of “privacy” and relating to the protection and processing of personal data, we hereby inform you that the processing of personal data already provided and acquired by you and which will be provided by you in the future as an “interested party”, will be processed in compliance with the legislation set out in the aforementioned Regulation and the obligations of confidentiality, correctness, lawfulness and transparency.
a) Data Controller
The data controller is ISOLA SRL with registered office in MILAN, VIA FIENO 3, C.F.08558150960 P.Iva 08558150960.
b) Purpose of processing
The personal data provided are necessary for the purposes of fulfilling the current obligations of guest registration at the time of check-in at the facility.
c) Methods of processing and storage
The processing of the data provided by you is carried out both in automated and manual form in compliance with the provisions of art. 32 of the G.D.P.R. 2016/679, by persons specifically appointed and in compliance with the provisions of art. 29 of the G.D.P.R. 2016/679. We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the G.D.P.R. 2016/679, subject to your free and explicit consent expressed in the attachment to this information, your personal data will be retained for the period of time necessary to achieve the purposes for which they are collected and processed and in any case no longer than the terms established by tax, labor and social security regulations and the civil code on the matter and for a further ten years.
d) Scope of communication and dissemination
We also inform you that the data collected will never be disseminated and will not be communicated without your explicit consent, except for necessary communications that may involve the transfer of data to public bodies, consultants or other parties for the fulfillment of legal obligations. Furthermore, such data may be known, within the limits of current legislation, by employees and/or collaborators expressly appointed and appointed by the Data Controller.
e) Special categories of personal data
Pursuant to Articles 9 and 10 of the G.D.P.R. 2016/679, you may provide our organization with data that can be classified as "special categories of personal data", that is, data that reveal "racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sexual life or sexual orientation of the person". These categories of data may be processed only with prior and explicit consent, expressed in writing in the attachment to this information notice.
f) Rights of the interested party
In relation to the data subject to the processing referred to in this information notice, the interested party is recognized at any time the right to:
• Access (art. 15 EU Regulation no. 2016/679);
• Rectification (art. 16 EU Regulation no. 2016/679);
• Erasure (Article 17 of EU Regulation No. 2016/679);
• Restriction (Article 18 of EU Regulation No. 2016/679);
• Portability, understood as the right to obtain from the data controller the data in a structured, commonly used and machine-readable format to transmit them to another data controller without impediments (Article 20 of EU Regulation No. 2016/679);
• Objection to processing (Article 21 of EU Regulation No. 2016/679);
• Revocation of consent to processing, without prejudice to the lawfulness of processing based on consent acquired before revocation (Article 7, paragraph 3 of EU Regulation No. 2016/679);
• Lodge a complaint with the Data Protection Authority (Article 51 of EU Regulation No. 2016/679).