Source: https://www.hotelartatelier.com/zh-hans/request-zh/
Timestamp: 2019-04-21 10:32:32+00:00

Document:
This information will be reviewed and adapted, if necessary, in the event of a regulatory update.
This is an information that is also provided pursuant to art. 13 of EU Regulation 2016/679 to those who connect to the website www.hotelartatelier.com and make use of the relevant web services starting from the address info@hotelartatelier.com . The information is provided only for the sites mentioned above and not for other websites that may be consulted by the user through special links on the site.
This informative report respects and complies fully with the Recommendation no. 2/2001 that the European Data Protection Authorities adopted on 17 May 2001 to identify certain minimum requirements for the collection of personal data online and, in particular, the methods, timing and nature of the information that the owners of treatment must provide users when they connect to web pages, regardless of the purpose of the link. It is specified that the consent mechanisms will be evident, brief and easily understandable; if the original conditions for which consent was requested should be changed, for example if the purpose of data processing changed, further consent will be required pursuant to EU Regulation 2016/679.
According to the rules of the Regulations, the treatments carried out by AMORINO 14 SRL will be based on the principles of lawfulness, correctness, transparency, purpose and retention limits, data minimization, accuracy, integrity and confidentiality.
Pursuant to art. 13 of EU 2016/679 Regulation, AMORINO 14 SRL, Data Controller, informs you that all personal data collected will be processed in compliance with EU Regulation 2016/679.
These informations are not collected to be associated with identified interested parties, but which by their nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: apart from this possibility, the data on web contacts do not persist for more than seven days.
- Judicial data pursuant to art. 10 GDPR.
The collected data (for example: name and surname, company name, VAT number, address, telephone number, fax number, e-mail address), object of the treatment, let us know through the website in order to register with the portal and access the reserved area, will be used for the sole purpose of providing the services offered through access to the reserved area itself on the site, in full compliance with the right to privacy and protection of personal data, the principle of fairness and the provisions of law in the field.
The use of the so-called session cookies (which are not stored permanently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient browsing of the site.
The so-called session cookies used on this site avoid the use of other technologies that could compromise the privacy of users' browsing and do not allow the acquisition of personal identification data.
i) Pursuant to art. 7 EU Regulation 2016/679, your data will be processed for the following marketing purposes: communication via e-mail, mail and / or text messages and / or telephone contacts, newsletters, commercial communications and / or advertising material on products or services offered from the Data Controller or surveys of the degree of satisfaction with the quality of the services; send them via e-mail, mail and / or sms and / or telephone contacts commercial communications and / or advertising material on products or services offered by third parties (for example, business partners).
The processing of your personal data is carried out by means of the operations indicated in art. 4 n. 2) EU Regulation 2016/679 and precisely: collection, registration, organization, structuring, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are not subject to disclosure, with the exception of cases expressly provided for by law, or to any fully automated decision making process, including profiling. Personal data will be processed in paper form, computerized and telematic, with logic strictly related to the same purposes also through the use of fax, telephone, mobile phone, e-mail or other remote communication techniques; personal data will be entered in the relevant databases to which only the Data Controller and its representatives will be able to access. Personal data will be managed by implementing appropriate technical and organizational measures to guarantee a level of security appropriate to the risk pursuant to art. 32 EU Regulation 2016/679.
The legal basis of the processing of personal data for the purposes described above is the art. 6 par. 1 lett. b) of EU Regulation 2016/679 as the treatments are necessary for the provision of the contracted services. The provision of personal data for these purposes is optional but failure to provide it would make it impossible to activate the required Services. The purposes related to legal obligations are a legitimate processing of personal data pursuant to art. 6 par. 1 lett. c) of the 2016/679 EU Regulation. Once the personal data have been transferred, the processing may indeed be necessary to comply with legal obligations to which AMORINO 14 SRL is subject. The treatments performed for marketing and newsletter purposes described above are based on the issue of your consent pursuant to art. 6 par. 1 lett. a) of the EU 2016/679 Regulation. The provision of your personal data for these purposes is entirely optional and does not affect the use of the services. Subsequent processing, carried out for purposes of e-mail marketing on products or services similar to those purchased by you, is instead based on its legal basis, pursuant to art. 6 par. 1 lett. f) of EU Regulation 2016/679, in the legitimate interest of AMORINO 14 SRL to promote its products or services in a context in which the interested party can reasonably expect this type of treatment, to which you can also oppose at any time. In fact, if you wish to oppose the processing of your data for these marketing purposes, you may at any time do so through its control panel, or by sending a request to AMORINO14 SRL at direzione@hotelartatelier.com or through the mechanism proposed in the same text of the commercial email.
Without the need for express consent (Article 6 letter b) and c) EU Regulation 2016/679 the holder may communicate your data for the purposes referred to in this information to: Supervisory bodies, Judicial authorities, as well as those subjects to whom the communication is mandatory by law for the accomplishment of the purposes expressed. These subjects will process the data in their capacity as independent data controllers.
- Studies of recognized lawyers related to the profession of assistance to companies when the communication is due by law, regularly in charge of this form of treatment in full compliance with the minimum measures in force, or when the communication is in the interest of the subject (natural or legal person ).
Only if you have given a specific consent, your data may be shared with commercial partners for their separate and autonomous purposes. The Data Controller also informs that it does not intend to transfer data to a non-EU third country or to an international non-EU organization.
The management and storage of personal data will be carried out on servers located within the European Union of the Owner and / or third-party companies appointed and duly appointed as Data Processors. In any case, it is understood that the Data Controller, where necessary, will have the right to move the server location to Italy and / or the European Union and / or non-EU countries. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection and / or adopting the standard contractual clauses provided for European Commission.
Regulation 2016/679. Beyond this period, personal data will be stored anonymously or destroyed.
- the right to bring a judicial remedy in case of unlawful processing of data, even against acts taken by the Guarantor pursuant to Article 78 of the 2016/679 EU Regulation.
To exercise your rights you can contact the Data Controller at the contact points indicated in this statement.
The provision of personal data necessary for the provision of the services requested by the user is optional, but any failure to provide it makes it impossible to activate the services requested.
With respect to the data that the owner is obliged to know in order to fulfill the obligations established by law, regulations and community legislation, or by provisions issued by Authorities legitimated by the law and by supervisory and control bodies, their failure to provide on the part of the user implies the impossibility of establishing or continuing the relationship, within the limits in which such data are necessary for the execution of the same.
The provision of personal data for marketing and newsletters, as described in this statement, is entirely optional and does not affect the use of the services requested.
Finally, we inform you that if you believe that your rights have been violated by the Data Controller and / or a third party, you have the right to lodge a complaint with the Personal Data Protection Authority and / or with another competent Supervisory Authority. of the EU Regulation n. 2016/679.

References: art. 13
 art. 13
 art. 10
 art. 7
 art. 4
 art. 32
 art. 6
 art. 6
 art. 6
 art. 6