Disclosure to the customer pursuant to the GDPR (General Data Protection Regulation 679/2016
Introduction
Dear Customer,
we are always attentive to the protection of personal data of all our Clients and, for this reason, we are working to implement a management system privacy in compliance with the principles of the new Regulation on the protection of personal data apply from may 25, 2018.
Holder of the treatment
The Holder of the treatment is the HERO 2024 S. R. L. – P. IVA IT1746410109 – Fourth Street Annunziata 80/A, – 00189 – Rome
Pursuant to article 13 of the EU Regulation 679/2016, the Company, in quality of Owner of the treatment of the data, informs you that the processing of personal data, and, if applicable, special categories of personal data (art. 9 Regulation (EU), his and her minor children, provided by You will be processed in a way that is relevant and transparent and in compliance with the principles of lawfulness and necessity in accordance with the provisions in force on the matter.
Purposes of the Processing
The personal data will be processed for institutional purposes, connected or instrumental to the activity of our Company, and, therefore, to:
a) giving execution to the hotel services, and operations, consequential, or one or more contractually agreed operations in the context of the HERO 2024 SRL;
(b) fulfil the requirements of the law of nature, tax, accounting and administrative matters;
c) fulfil the requirements of operational and management internal to the Company related to the service provided;
(d) provide, via e-mail, post or telephone contact information related to the products or services provided by the Company;
e) to send commercial activities, advertising and promotion restricted to customers of the Company and implemented by the Company itself or by subsidiaries, affiliated or otherwise connected;
f) to carry out profiling activity by treatment of the data in the automated mode, or online in order to provide tailored promotions based on the choices and habits of the user;
(g) deal with the data of his son/ her minor children, on which to exercise parental responsibility in order to provide the service of booking and registration at the hotel.
The legal basis of the Processing
The legal basis for the processing of the data is desired from the specific contractual relationship established, and by the specific and informed consent of the person concerned.
Mandatory and optional data provision
Notwithstanding that, with regard to the processing of data related to the execution of the contract and to the performance of legal obligations referred to in point (a), (b), (c) of the paragraph “Purposes of the processing” is not required to consent to treatment, it is stated that:
- the provision of data for the purposes referred to above sub-paragraphs a), b), c) is optional, but necessary for the performance of the customer service provided and the failure to consent may have the consequence of allowing the performance of such services;
- the consent to the processing sub (d), (e), (f) is free and optional, and in any case, the data subject may object at any time to the processing in question, easily and free of charge, by contacting the data controller, also through the use of electronic mail, getting a quick response, confirming that the interruption of this treatment; notwithstanding the foregoing, however, any refusal to provide the requested personal data may result in the inability to be promptly informed about the services offered by our company, to take advantage of some of the benefits reserved to the clients of the Company to obtain customized promotions based on the choices and habits of the user;
- treat the data of his son/ her minor children, on which to exercise parental responsibility to the end in order to provide the service of booking and registration at the hotel. the provision of data and consent to its processing for the purposes referred to above sub-paragraph (g) is mandatory and is necessary for the performance of the services in respect of minors.
Methods of processing the data
The processing of personal data will be processed using paper-based, computerised or telematic and with appropriate security measures to ensure the security and confidentiality of your personal data in accordance with the EU Regulation 679/2016.
The transfer, storage and processing of user data that are collected through this site are secured through appropriate technical measures. All user information is protected with encryption AES 256-Bit. Furthermore the website is provided over the encrypted connection HTTPS.
The data of the users are collected, stored and stored on a secure server protected by firewalls and are physically located in a web farm of the access controlled. Each access user is under the protection of the encryption of military quality.
In accordance with the principles of proportionality and necessity, the data will not be stored for periods longer than those necessary for the realization of the purposes listed above, the service offered and /or the specific rules of law.
Recipients of personal data
The collected data will be processed exclusively within the framework of the aforesaid purposes and may be communicated to subsidiaries, affiliated or otherwise associated with the Group, both in Italy and abroad exclusively for the management of the services offered. In compliance with the appropriate security measures put in place by the Owner, His data and those of his son/ her minor children may also be communicated to authorities, public safety and other public and private entities for the fulfillment of obligations under the law, fiscal, administrative, financial, and similar. In no case will the data be disclosed.
For certain processes, strictly related to the purposes referred to in point (e), (f) of the section “Purposes of the Processing, the data controller may provide the user data to third parties in a way that is relevant and transparent in accordance with the provisions in force on the matter.
Rights of the interested party
The person to whom the personal data refer may exercise your rights towards the data controller, pursuant to article 15 and following of EU Regulation 679/2016, i.e. the right to obtain confirmation of the existence of His / her personal data and request their communication in intelligible form. You will also have the right to obtain access to, updating, correction, integration and deletion of data, or the restriction of processing. Finally, you will have the right to object, in whole or in part, for legitimate reasons, to the processing of your personal data, even if pertinent to the purpose of the collection, as well as the right to data portability and to lodge a complaint to the supervisory authority, as well as the sending of advertising material or direct sales or for carrying out market research or commercial communication, by contacting the data controller.
Cookie Policy
For information related to the use of cookies via the website, please the person concerned to read the relevant Cookie Policy.
For any further information and to exercise the rights you are entitled to by the european Regulation, you may contact: info@herosgardenrelais.com
