Privacy and Personal Data Policy – applicable to Users of this Hospitality Business when making a booking
Data Controller (us):
The Hospitality Business that will provide you, the user, with the requested service. Our identification and contact details are available on the website you used to make your booking / to ask us your questions. They will also appear on our invoice that we will send to you.
Chief Data Compliance Officer:
Not applicable to the activities of Data Controllers.
User:
You, who filled out the booking form or any other documentation related to it.
Goal:
The purpose of the processing of the data provided through this form is to manage the reservations made by you, the user and / or respond to the questions / requests made.
Legal Basis:
– Or the need to perform our contract with you, user / the need to take action at your request before entering into a contract.
– Or the consent of you, the user, by checking the box of acceptance of the Terms and Conditions of which this privacy and personal data policy is an integral part.
Duration:
We will store the data provided by you, the user, for the time necessary for the management of the reservation made, as well as the requested hosting services. Once the management is complete, your data will be kept for six (6) months. If you consent to receive marketing and/or commercial information, your data will be stored until you revoke your consent.
Data entities other than users:
When you, the user, provide us with personal data belonging to a data subject other than you, you are responsible for such acts, as well as for obtaining the respective consent of such data subjects for the provision of their data.
Data Transfer:
We must not transfer personal data to a third country outside the EEA (European Economic Area).
Rights of data subjects:
Data subjects may exercise their rights of access, rectification, cancellation and opposition by sending an email or through the postal service to the contact details on our booking website and on our invoices.
Supervisory Authority:
Where a data subject considers that his or her rights are affected, he or she may also have recourse to the competent supervisory authority of the Member State concerned. More information at: https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en.
