PRIVACY DISCLOSURE PURSUANT TO ART. 13 OF THE 2016/679 EUROPEAN REGULATION (GDPR) FOR THE TREATMENT OF PERSONAL DATA
In compliance with European Regulation 2016/679 (GDPR) and subsequent changes, we are here to provide you with the necessary information regarding the processing of the personal data you provide for the reservation of rooms / services. This is an information provided pursuant to Art. 13 of the European Regulation on the protection of personal data.
1) The "OWNER OF THE TREATMENT", is E.A.R. CERETTI DI CERETTI DAVIDE & C. SAS - HOTEL STAR MILAN, Via dei Bossi, 5 20121 Milan mail hotelstar@hotelstar.it tel 02.801501.
2) The treatment will be carried out both with manual and computerized and telematic instruments in compliance with the regulations in force and the principles of correctness, lawfulness, transparency, relevance, completeness and not excess, accuracy and with organization and processing logics strictly correlated to the aims pursued and in any case in such a way as to guarantee the security, integrity and confidentiality of the data processed, in compliance with the organizational, physical and logical measures provided for by the provisions in force.
For the purposes expressed in this statement, only non-specific personal data will be processed, any communications of particular data communicated by the interested party will be processed only with explicit consent
3) Purpose of the processing
Carry out and reply to the stay reservations of the user / interested party and all the activities strictly connected to this booking, including those of an administrative and accounting nature.
The data required for this purpose are name, surname, email, telephone number, credit card number and any services requested, the provision is necessary to fulfill the requests of the interested party. Any failure to provide the data has the sole effect of not being able to make the booking.
The legal basis and lawfulness of the processing can be identified in the contractual or pre-contractual obligations connected with the provision of a service or in responding to requests from the interested party. (Article 6 letter b).
The data provided for this purpose will be processed up to the arrival of the interested party at the facility or up to its possible cancellation, net of the time necessary for the debit of any penalties provided for in the contract.
Please note that the data provided may be processed for the protection of the legitimate interests of the owner, including in particular the defense in court. Also in this case the principles of necessity, proportionality and no excess will be applied and the conservation will be aligned to what was previously indicated or to the actual protection needs for the specific case (art 6 point f).
4) Dissemination, any recipients or categories of data recipients
No data will be disseminated in any way.
The data provided will be processed exclusively by persons authorized for processing and appropriately trained, under the control of the Data Controller, as well as by data controllers linked to the data controller by a specific contract (Article 28 of Regulation 2016/679), such as: company that they provide services for the management of the IT system and telecommunications networks, a company providing the booking engineering system, professionals and consultants or service providers to the owner. The data will still be communicated in relation to the strict technical or professional need, preferring anonymous treatment where possible.
The data will be processed in the EU.
The list updated with the identification details of all Data Processors may be requested by you at any time from the aforementioned Owner.
The data may also be communicated to Third Parties (Public Bodies, Police Forces, Judicial Authorities, etc.), but exclusively for the purpose of fulfilling legal or regulatory obligations or community legislation.
5) Rights of the interested parties Articles 15, 16, 17, 18,19 20, 21 and 77 of the GDPR
We inform you of the existence of the right to know the recipients of the possible communication, access to personal data, rectification, cancellation and possibly oblivion, limitation of processing, portability of data and opposition at any time to the treatment of personal data concerning you.
We also inform you that you have the right to withdraw your consent to the processing of your data at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation (Article 7, paragraph 3, of the GDPR).
According to the art. 77 of the Regulation, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you habitually reside, work or in the place where the alleged violation occurred, which in Italy corresponds to the Guarantor Authority for the Protection of personal data, whose references can be found on www.garanteprivacy.it
You may exercise these rights by simply contacting the owner through the contacts indicated in this Statement.
This information was prepared in Milan on 04/24/2019.
The data controller: E.A.R. CERETTI DI CERETTI DAVIDE & C. SAS - HOTEL STAR MILANO
