Personal Data Policy

INFORMATION FOR THE SUBJECTS CONCERNED – PERSONAL DATA

Statement pursuant to and in accordance with the provisions of Art. 13, Legislative Decree No. 196 of 30 June 2003
1. The „DATA CONTROLLER”, pursuant to the provisions of Art.28 of the Code on personal data protection, is identified as LE ROSE SAS DI DE LUIGI M. & C. in the person of its legal representative pro tempore, having its registered office in Rimini, Via Regina Elena, 46.
The DATA PROCESSOR, pursuant to the provisions of Art. 29 of the Code on personal data protection, responsible for the internal processing of personal data, is identified as Mr Marco De Luigi.

2. TYPES OF DATA COLLECTED AND PROCESSED
Personal and Identification Data.
Personal Data is data relating to a natural person, who is – or can be – identified, also indirectly, by reference to any other information, including a personal identification number. Identification Data si personal data allowing for the identification of the party involved (i.e., name, surname, date of birth, postal address, e-mail address, telephone number, etc.).

3. PURPOSES OF DATA PROCESSING FOR THE COLLECTION OF WHICH SUBJECTS’ CONSENT IS NECESSARY, WHERE REQUIRED (Art. 23 of Leg. Decree No. 196/03)
Personal data, provided to us voluntarily and willingly, shall be processed until no longer needed, or until the subject opposes its collection, for the sole purposes set out below:
a) To deal with, and to process, any enquiries concerning room availability and information on hotel services; to make reservations; for communication purposes meant to deal with your enquiries; for administrative-accounting purposes, for and in connection with the above purposes; to comply with any and all legal requirements.
We remind you that, for the purposes of implementing the provisions on personal data protection, data processing for administrative-accounting purposes means the processing of data required for the smooth performance of organizational, administrative, financial and accounting tasks, regardless of the nature of the processed data. In particular, internal organizational tasks, as well as functional tasks conducive to meeting contractual and pre-contractual obligations, and informative tasks, contribute to the fulfillment of such objectives.

4. MODE OF DATA PROCESSING – DATA STORAGE
Processing is carried out using electronic or paper files. The measures we apply and the tools we use ensure that we store personal data with the utmost safety and confidentiality, thanks to a team of dedicated people and in line with the requirements of Art. 31 and following of Legislative Decree No. 196/03. The data shall be kept for no longer than is deemed absolutely necessary to achieve the objectives for which it was collected and processed. Data processing concerning the web services offered by this website will be physically hosted by third companies.

5. SCOPE OF DISCLOSURE
Your data, which we have collected for processing purposes, shall not be disclosed to third parties, and shall be disclosed to the Data Controller’s business partners solely for the purposes herein expressed or, if necessary, when such disclosure is required by law. The personal data may be disclosed to the following third parties:
– third parties providing services for the management of the website and of the operating system used by the Data Controller, as well as for WiFi networks (including email messages);
– consultancy firms and organizations;
– authorities responsible for compliance with legal obligations and/or decisions issued by public bodies, on request.
The subjects listed above act in their capacity as Data Processors, or independently as Data Controllers. The list of Data Processors is constantly updated and is available at the owner’s premises. Further disclosures shall not be made without your prior consent.

6. NATURE OF DATA SUBMISSION AND REFUSAL
Submitting personal data for the purposes stated herein is voluntary. Lack thereof means your enquiries may not be dealt with, but it will still be possible for you to visit our website.

7. RIGHTS OF DATA SUBJECTS
You may, at any time, exercise your rights as stated in Arts. 7, 8, 9 and 10 of Legislative Decree No. 196 of 30 June 2003, by contacting the Data Controller – LE ROSE SAS DI DE LUIGI M. & C. – by calling our Head Office at +39 0541/394289, or by emailing info@lerosesuitehotel.com. You have the right, at any time, to know if your data has been stored, and to learn about its content and origin, to verify its accuracy or ask for it to be supplemented, updated or altered (Art. 7 of the Code on the protection of personal data). Pursuant to the provisions of said article, you have the right to ask for its removal, or for its transformation into anonymous format, or to block any data held in violation of the law, as well as to oppose its treatment for any and all legitimate reasons. Requests should be sent to the owner along with your email address, name, postal address and/or telephone numbers to allow for an effective and efficient management of your enquiry.