INFORMATION PURSUANT TO ARTS. 13 AND 14 OF REGULATION (EU) 2016/679

Interested Parties: Potential customers.

"ALBERGO 'QUATTRO STAGIONI' DI ZANGHERI GIANLUCA", as the Data Controller of your personal data, pursuant to and for the purposes of Regulation (EU) 2016/679 hereafter 'GDPR', hereby informs you that the aforementioned legislation provides for the protection of data subjects regarding the processing of personal data and that such processing will be based on principles of correctness, lawfulness, transparency, and protection of your privacy and your rights.

To achieve its purposes related to the management of the relationship, the Data Controller needs to acquire personal data, such as, by way of example, name and surname, telephone or mobile number, email address, tax code.

Your personal data will be processed in accordance with the legislative provisions of the aforementioned legislation and the confidentiality obligations provided therein.

Purposes of processing

Quote request: your data will be processed to manage requests received via the online booking form available on the website www.riccionehotelsadria.com of "ALBERGO 'QUATTRO STAGIONI' DI ZANGHERI GIANLUCA".

The legal basis of the processing is pre-contractual and contractual in terms where data processing is envisaged following preliminary operations to the stay; as well as the fulfillment of legal obligations by the data controller for tax and accounting purposes.

Consequences of failure to communicate

The processing of data is necessary for the use of the online booking service in order to implement the purposes indicated above and ensure the correct management of the relationship. Any non-communication, or incorrect communication, of one of the mandatory information, may cause the Data Controller's inability to guarantee the congruity of the processing itself.

Optional purposes:

a) Subject to your free consent, the Data Controller may also process your data to satisfy market surveys, statistics, and for promotional activities also inherent to the sending of advertising and promotional material via e-mail, post and/or sms and/or phone calls or possibly via WhatsApp (subject to consent) - other than those necessary to guarantee the execution of the relationship.
The legal basis for processing is the consent of the data subject.

b) Subject to your consent for the use of WhatsApp, given by clicking on the box near the indication of your mobile number, in order to make communications faster and more effective, we intend to use this communication channel. It is your right to disable the use of WhatsApp at any time from the WhatsApp features themselves, for example by blocking the number, or by the methods indicated subsequently for the exercise of your rights via email.
The legal basis of the processing set out above is the consent of the data subject.

Consequences of refusal for optional purposes: The provision of data is optional for you regarding the aforementioned purposes, and your possible "refusal to process" both for the optional purpose for marketing (a), and for the use of Whatsapp (b), does not compromise the continuation of the relationship or the congruity of the processing itself. Regarding "optional purpose b)", your possible refusal does not allow the receipt of the quote through the WhatsApp messaging service but only through e-mail communication.

In any case, you may exercise the right to withdraw consent even subsequently, both through the emails received (at the bottom of the text), and by requesting it through the contact channels of the data controller.

Processing methods

The processing is carried out with manual and/or IT and telematic tools, in such a way as to guarantee the security, integrity, and confidentiality of the data in compliance with the physical and logical organizational measures provided for by the provisions in force, in order to minimize the risks of destruction or loss, unauthorized access, modification, and unauthorized disclosure in compliance with the methods set out in Arts. 6, 32 of the GDPR.

Recipients

For the performance of certain activities, or to provide support for the operation and organization of the activity, some data may be brought to the attention of or communicated to recipients. These subjects are distinguished into:

• Third parties (communication to: natural or legal persons, public authorities, service or other body that is not the data subject, the data controller, the data processor, and the authorized persons responsible for processing) including:
  • Companies managing traditional or computerized postal services;
  • Any other subjects whose data communication is necessary for the achievement of the purposes indicated above.
• Data Processors (the natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller):
  • Providers of IT, web, or other services necessary for the achievement of the purposes necessary for the management of the relationship.

Within the company structure, your data will be processed solely by personnel expressly authorized by the Data Controller, with assurance of adoption of a confidentiality agreement.

Dissemination and Transfer

Dissemination: Your personal data will not be disseminated in any way.

Transfer of data to third countries: The controller does not transfer personal data to non-EU countries. Should the need arise, the data subjects will be informed in advance, and guarantee measures will be adopted for the transfer towards the recipients, which depending on the cases may be: verification of the existence of adequacy decisions for the recipient country by the Commission, signing of standard contractual clauses, verification of the adoption of any supplementary measures in implementation of the EDPB recommendation 01/2020. In derogation of these guarantees, for data processing (in ref. to Art. 49 of the GDPR), where applicable, the existence of a contract or pre-contractual measures in favor of the data subject or consent to the transfer is verified.

Retention period

We inform you that, in compliance with the principles of lawfulness, limitation of purposes, data minimization, pursuant to Art. 5 of the GDPR, the retention period of your personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed. In the event that a contract is signed, this retention period may cease with the forfeiture or withdrawal of the contract; the same data may be kept, where applicable, for a further period of time for the purpose of managing any disputes.

The retention period for data processing related to marketing is functional to the purposes pursued by the data controller, and in any case not exceeding 3 years from the last contact or feedback received.

Data Controller

The Data Controller, pursuant to the law, is "ALBERGO 'QUATTRO STAGIONI' DI ZANGHERI GIANLUCA", with registered and operational headquarters in Viale Tassoni, 10-47838 Riccione (RN), VAT: 03570920409, Tel: +39 0541 642409 in the person of its legal representative pro tempore.

By sending an e-mail to the following address info@riccionehotelsadria.com you can request more information regarding the data provided.

EU Reg. 2016/679: Arts. 15, 16, 17, 18, 19, 20, 21, 22, 23 - Rights of the Data Subject

1. The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning them, even if not yet registered, and their communication in intelligible form.
2. The data subject has the right to obtain the indication:
   1. of the origin of personal data;
   2. of the purposes and methods of processing;
   3. of the logic applied in case of processing carried out with the aid of electronic instruments;
   4. of the identification details of the controller, processors, and the designated representative pursuant to article 5, paragraph 2;
   5. of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers, or agents.
3. The data subject has the right to obtain:
   1. updating, rectification or, when interested, integration of data;
   2. cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
   3. attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right.
   4. data portability.
4. The data subject has the right to object, in whole or in part:
   1. for legitimate reasons to the processing of personal data concerning them, even if pertinent to the purpose of the collection;
   2. to the processing of personal data concerning them for the purpose of sending advertising material or direct selling or for carrying out market research or commercial communication.

Complaint: Data subjects, where the conditions are met, also have the right to lodge a complaint with the Guarantor as a supervisory authority according to the procedures provided.

For any further information, and to assert the rights recognized to you by the European Regulation, you may contact the data controller at the references reported above.

Consent