Privacy policy on personal data processing – Articles 13- 14 EU 2016/679 Regulation

Interested parties: Requesters of information and subscription to the newsletter dedicated to all inclusive hotels

The ALL INCLUSIVE HOTELS CONSORTIUM, with registered office in Via Macanno 38/q, 7923 Rimini (RN), [email protected], as Data Controller of your personal data, pursuant to and for the purposes of (EU) 2016/679 Regulation hereinafter ‘GDPR’, hereby informs you that the aforementioned legislation envisages the protection of the interested parties with regard to the processing of personal data and that this processing will be based on the principles of correctness, lawfulness, transparency for the protection of your privacy and your rights.

To achieve its objectives, regarding the management of the relationship, the Data Controller needs to acquire personal data, such as, by way of example, the name and surname, name of their business, telephone or mobile number, email address, and your request.

Your personal data will be processed in accordance with the legislative provisions of the aforementioned legislation and the confidentiality obligations set forth therein.

Purpose of data processing: Provision of the service: Your data will be processed in order to respond to any requests that may come from the forms to be completed, and forms available on the website, or requests received by email.

Legal basis: The legal basis of the data processing is of a contractual nature in terms of a data processing in response to a request for information which is followed by a response.

Consequences of failure to communicate data: The processing of functional data for the fulfilment of these obligations is necessary for the correct management of the relationship and their provision is mandatory in order to implement the purposes indicated above. The Data Controller also informs you that any non-communication, or incorrect communication, of any of the mandatory information, may make it impossible for the Data Controller to guarantee the adequacy of the processing itself.

Optional purposes: Marketing – newsletter receiving service: in particular, your data will be processed, subject to your free consent, for receiving of newsletters, by entering your email address in the appropriate text box containing the information regarding subscription to the newsletter, or by selecting/ticking the appropriate box indicating “subscription to newsletter” on the forms.

Legal basis: The legal basis doe the processing is the consent of the interested party.

Consequences of refusing the optional purposes: The provision of data is optional for you with regard to the aforementioned purposes, and your refusal to the processing does not compromise the continuation of the relationship or the adequacy of the processing itself.

Processing methods: The processing is carried out using manual and/or IT and telematic tools, in order to guarantee the security, integrity and confidentiality of the data in compliance with the physical and logical organisational measures, provided for by the current provisions, in order to minimise the risks of destruction or loss, unauthorised access, modification and unauthorised distribution in compliance with the methods set out in articles 6, 32 of the GDPR.

Recipients: To perform certain activities, or to provide support for the functioning and organisation of the activity, some data may be disclosed or communicated to recipients. These parties can be distinguished as follows:

Third parties: (communication to: natural or legal persons, public authorities, service or other body that is not the interested party, the data controller, the data processing manager and the authorised persons responsible for the processing) including:

– Companies that manage traditional or computerised postal services

– Public authorities, police forces if they request it in the context of their institutional duties.

Data processing managers: (the natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller)

– Providers of IT, web, or other services necessary to achieve the purposes necessary for managing the relationship.

Within the corporate structure, your data will only be processed by personnel expressly authorised by the Data Controller, with assurance of the adoption of a confidentiality agreement and, in particular, by the following categories of workers:

– Administration;

– Other workers whose processing is necessary for the correct implementation of the relationship;

Distribution: Your personal data will never be distributed in any way.

Data transfer to non-EU countries:

Your data will be stored in paper and electronic format c/o server providers through agreements with suppliers (managers, sub-managers of the processing) of hosting, cloud and connectivity services, located both in EU countries and in non-EU countries (United States ) through suppliers who are signatories of the Privacy Shield agreement, or other confidentiality agreements or clauses. These systems are managed by system administrators and authorised and educated persons, with the guarantee of adoption of technical and organisational security measures for the protection of personal data with reference to articles 29, 32 of EU Regulation 679/2016 through technical, administrative and commercial staff.

Storage: the storage of your data will be functional for the purposes of the data controllers for which they were collected, and will be kept until any request you make for cancellation, which can be done at any time after the communications received.

Data Controller: the Data Controller, pursuant to the legislation, is “CONSORZIO ALL INCLUSIVE HOTELS”, with registered and operational headquarters in Via Macanno 38/Q – 47923 Rimini (RN), VAT number/Tax Code 03678700406, in the person of its pro tempore legal representative.

By sending an e-mail to the following address [email protected] you can request more information regarding the data provided. The website www.allinclusivehotels.it contains further information regarding the privacy policies adopted by our Consortium.

The data protection officer (DPO)

Is designated by the data controller pursuant to art. 37 of the GDPR as Studio Paci &C srl (contact person: Luca Di Leo), Via Edelweiss Rodriguez Senior, 13 – 47924 – Rimini – Tel. 0541.1795431

EU 2016/679 Regulation: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Interested party

1. The interested party has the right to obtain confirmation of the existence or non-existence of personal data concerning him/herself, even if not yet recorded, and its communication in an intelligible form.

2. The interested party has the right to obtain information regarding:

a. the origin of the personal data;

b. the purposes and methods of the data processing;

c. the logic applied in case of processing carried out with the aid of electronic tools;

d. the identity of the data controller, managers and representative appointed pursuant to article 5, paragraph 2;

e. the individuals or categories of individuals to whom the personal data may be communicated or who may gain knowledge of them, in the capacity of appointed representative in State territory, managers or officials.

3. The interested party has the right to obtain:

a. the updating, rectification or, when interested, integration of data;

b. the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including that for which

storage is not necessary relative to the purposes for which the data was collected or subsequently processed;

c. attestation that the operations referred to in letters a) and b), also with regard to their content, have been brought to the attention of those to whom the data has been communicated or distributed, except in the case in which such fulfilment proves impossible or involves the use of means that are clearly disproportionate with respect to the protected right;

d. data portability.

4. The interested party has the right to object, in full or in part:

a. for legitimate reasons, to the processing of personal data concerning him/herself, even if relevant to the purpose of the data collection;

b. to the processing of personal data concerning him/herself, for purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.

Complaint: The interested parties, if the conditions are met, also have the right to lodge a complaint with the Data Protection Authority (Garante) as supervisory authority according to the established procedures. For any further information, and to assert the rights granted to you by the European Regulation, you can contact the data controller at the contact information referenced above.

Consent

Formula for acquiring the consent of the interested party

Your consent for receiving the newsletter will be recorded (IP address, email, date and time) by ticking the box below the email entry, or after affixing / clicking in the appropriate box, and jointly pressing the “submit” / “ok” button. This consent will be archived to prove its conferment, and to allow you to unsubscribe at any time, in addition to all the other rights set out above.