PRIVACY POLICY
By booking a stay at Vista Lago - Lake Como collection the guest accepts without reservation the following regulations pursuant to art. 13 of the EU Regulation 2016/679 (GDPR).
In compliance with the provisions of the European Regulation on the protection of personal data 2016/679 and the Legislative Decree 30 June 2003, n. 196 (so-called Privacy Code) novated pursuant to Legislative Decree 10 August 2018 no. 101, the purpose of which is to protect the fundamental rights and freedoms of natural persons, in particular the right to the protection of personal data, it is necessary for you to read a series of information that may help you to understand the reasons for and the methods of processing your personal data, as well as to know your rights and the ways through which to exercise them.
1. Purpose and legal basis of personal data processing
Your personal data are processed for the primary purpose of:
(a) to fulfil legal obligations in the field of statistics, including:
- responding to the statistical surveys ‘IST-00138 Movement of guests in accommodation establishments’ and ‘IST-00139 Capacity of accommodation establishments’, which are compulsory for accommodation facilities and included in the National Statistical Program (NSP) owned by ISTAT
- provide data on Guests and their stay to the competent Public Safety Authorities, in accordance with article 109 of the T.U.L.P.S. (Consolidated Law on Public Security)
b) facility management purposes
c) collection for marketing purposes (e.g. sending newsletters)
2. Data controller
The data controller, i.e. the body that determines how and why your data is processed, is Rosanna Giudici.
Details of the data controller: ROSANNA GIUDICI , as legal representative of VISTA LAGO - LAKE COMO COLLECTION di Giudici Rosanna (701) located in DOMASO(CO), at the address via Garibaldi 13, who can be contacted by writing an e-mail with the subject ‘Privacy’ to the e-mail address [email protected], telephone +39 333 342 6392.
3. Interested parties
Customers of the accommodation.
4. Type of data processed
Common personal data: identification data (surname and first name, tax code, copy of a valid identity document with photograph); personal data (nationality and state of birth, place and date of birth, residence, etc.), contact data (telephone numbers, e-mail, etc.), data relating to qualifications.
5. Methods of data processing
Data is processed with the aid of electronic or otherwise automated means and transmitted via telematic networks. The same data are processed in paper form. The Data Controller adopts appropriate technical and organisational measures to guarantee a level of security appropriate to the type of data processed.
6. Compulsory nature of consent
We inform you that, in the absence of your consent for the purposes referred to in point 1 letter a.1, a2. above, it will not be possible to process your personal data, as well as those of your family/group, and this will make it impossible to accommodate you at our facility.
If you also authorise us to process the data referred to in point 1 letters b) and c), whose consent is optional, you must instead provide us with your explicit authorisation by ticking the relevant box on the guest registration form completed at check-in, or by ticking the relevant box on the website on the contact page.
7. Communication and dissemination of personal data
Your data may be communicated, for the primary purposes (point 1 letter a.1, a.2) and as fulfilment of legal obligations to other autonomous public data controllers such as Provincial Offices, Lombardy Region and the Ministry of the Interior. Such data will be processed with due and appropriate technical and organisational measures in order to guarantee their confidentiality and security, also through the tourism data management system made available through ARIA spa - Regional Agency for Innovation and Procurement, for the statistical purposes envisaged by the National Statistical Program (PSN). For the purposes referred to in point 1 letter a), your data will be anonymised and communicated to ISTAT in aggregate form. Such data may also be communicated to third parties (e.g. suppliers), in their capacity as Data Processors, appointed by the Data Controller. The list of said Third Parties is available from the Controller. The recipients of your personal data have been adequately trained to process your personal data and ensure the same level of security offered by the Controller. Your personal data will not be disseminated.
8. Rights of the data subject
You may exercise the rights set forth in Articles 15-22 of EU Regulation 679/2016, where applicable, and, among these, we point out the right to obtain the rectification, integration or deletion (so-called right to be forgotten) of your personal data, the right to obtain the restriction of processing and the right to data portability, the right to object to the processing of personal data, including profiling. Your requests to exercise the rights granted to you should be sent to the e-mail address [email protected] of the accommodation facility, or by registered mail with return receipt to the address: VISTA LAGO - VIA GARIBALDI, 13 - 22013 DOMASO (CO) to the attention of Rosanna Giudici. You also have the right to lodge a complaint with a Control Authority: if you believe that the processing of the data concerning you does not comply with the provisions in force, or if the response to a request with which you have exercised one or more of the rights provided for in Articles 15-22 of the GDPR is not received within the indicated timeframe or is unsatisfactory, you may refer the matter to a Control Authority.
