LARIO HOTELS SPA, with registered office in Cernobbio 12 – Como (CO), Email: firstname.lastname@example.org, VAT number 00787190131, in its capacity as Data Controller informs you that pursuant to art. 13 of EU Regulation 679/2016 “GDPR” your data will be processed using the procedures and for the purposes set out below.
The personal data communicated by you will be processed by the Data Controller on paper, computer or electronically.
Purposes of data processing
Send commercial information and other communications related to business activities using electronic means of communication. (Legal basis: consent)
Types of data processed
Retention and destruction
The personal data submitted will be retained for 5 years, without prejudice to the data retention obligations under prevailing rules and regulations. At the end of the retention period envisaged this data will be immediately erased.
Communication of personal data
Your data can be processed by Internal Subjects (Persons in charge of processing), trained to ensure full compliance with the rules on data processing, belonging to Management and administration or reception, and by the Mailchimp service used to send information and business communications. The Data Controller may communicate your Data to Supervisory Bodies and Judicial Authorities where obligated to do so by law.
The data will be communicated to The Rocket Science Group, LLC with registered office in 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA. It is appointed Data Processing Supervisor because it supplies the MailChimp service used to send the communications. Your data is stored on their servers in the USA (Non-EU country for which the EU Commission has issued the so-called “adequacy decision” governing cross-border transfer).
Nature of data submittal
Data submittal for the purposes set out above occurs spontaneously, according to the will of the data Subject.
Rights of Data Subject
In your capacity as data subject you may exercise the rights set forth in articles 15-21 of EU Regulation 679/2016 (Right of Access of the Data Subject, Right to Rectification, Right to erasure, Right to restriction of processing, Obligation to notify in case of rectification or erasure of personal data or restriction of processing, Right to data portability and Right to Object), as well as the right to lodge a complaint with the Supervisory Authority (Italian Data Protection Authority).
Procedures to exercise rights
You can exercise your rights at any time by sending an e-mail, fax or registered letter with acknowledgement of receipt to the address of the Data Controller.
Data controller, Data Supervisor and Person in charge of processing
The Data Controller is LARIO HOTELS SPA.
The updated list of the supervisors and persons in charge of the processing is held at the registered office of the Data Controller.