This information is intended to disclose the procedures for the processing of your personal data, carried out in compliance with the obligations established by EU Regulation 679/2016 on the processing of personal data (so-called GDPR).
The Data Controller is L.G.I.Srls, represented by Chiara Frappietri, with headquarters in Via Cella Raibano, 12 / F 47843 Misano Adriatico (RN), VAT number no. 04353180401 (hereinafter referred to as "the Owner").
The data provided by the Customer (or "the party") will be used in order to stipulate the "online store contract" and may be disclosed to third parties only if this is necessary for this purpose. According to the art. 6, paragraph 1, lett. B) GDPR, when the processing of data is necessary for the execution of a contract (as in the case of a relationship between customer and buyer), the consent to the processing of data is not required.
Your data will be kept for the time strictly necessary to provide you with the requested service, subject to the conservation obligations set forth by law.
Only if you wish, you can express your consent to further services performed by the Data Controller, such as:
We remind you that any refusal to provide your consent will in no way affect the execution of the hotel contract but will make it impossible for us to provide you with the additional services offered.
In the event that you have given your consent for the aforementioned services, your data will be stored for a period of 2 years, for the purposes of Marketing (Provision of the Guarantor 2/24/2005) and for the period of 5 years in case of data retention to facilitate the registration procedure in case of new stays.
Your data will be processed by personnel appointed by the Data Controller with procedures, technical and IT tools suitable for protecting the confidentiality and security of data and consists of their collection, registration, organization, storage, consultation, processing, modification, selection , extraction, comparison, use, interconnection, blocking, communication, diffusion, cancellation, destruction of the same including the combination of two or more of the aforementioned activities.
As part of his activity and for the purposes indicated above, the Data Controller may use services rendered by third parties that operate on behalf of the Data Controller and according to his instructions, as data processors. These are subjects that provide the Owner with processing or instrumental services (eg. IT services for the operation of the platform) or that in any case provide a service strictly and necessarily connected to the activity of the Owner: tax consultants; public and private bodies, also in relation to inspections or checks; subjects who can access the data pursuant to legal provisions; external companies that supply goods or services. The interested party may request a complete and updated list of the persons appointed as data controllers by contacting the contact indicated below.
Your data may be transferred within the European Union, where the Data Controller or its suppliers are based or have their own servers. The data will not be transferred outside the European Union.
The interested party has the right, at any time, to exercise towards the Data Controller:
the right of access (art. 15 GDPR); the right to request the correction of data concerning him (art. 16 GDPR); the right to obtain the cancellation of their data (art. 17 GDPR); the right to obtain the limitation of the processing (art. 18 GDPR); the right to object to the processing (art. 21 GDPR) and the right to data portability (art. 20 GDPR).
In the event of rectification or deletion or limitation of the data, the Data Controller shall communicate the occurred changes to the recipients to whom the data are transmitted (art. 19 GDPR).
The interested party also has the right not to be subjected to any automated processing that produces legal effects that concern him or that significantly affects his person (art, 22 GDPR).
In any case, the interested party may contact the Guarantor Authority or the Judicial Authority.
To contact the Data Controller: email firstname.lastname@example.org
UPDATED INFORMATION ON: May 23rd 2018