Source: https://www.residencecampana.it/request-en/
Timestamp: 2019-04-19 06:15:42+00:00

Document:
The data controller is Residence Campana, established in Via Campagnola 20, 37011 Bardolino, VR.
The Data Controller collects and uses the Data for the performance of the activities indicated above and for the further purposes indicated below.
What types of personal data we process.
The information systems acquire, during the use of the platform and for its regular use, data that by their nature have no identifying function, but which could take it in limited cases when processed or associated with data held by third parties.
For example, the IP addresses, the Uniform Resource Identifier (URI) addresses of the requested resources, such as the time of requests, the characteristics of the device used, the size of the exchanged files or other types of information fall into this category. This data that is anonymous or aggregated ordinarily does not allow your identifiability and are used to identify anomalies and problems.
During the provision of the service, it may happen, subject to its explicit consent and following the pro tempore current authorizations, to have to deal with particular categories of data according to art. 9.2.a); this could happen, for example, to fulfill specific requests related to eating habits, health problems or other special needs.
If this is necessary, we will ask you to issue a specific and express consent to be able to fulfill your requests. In the absence of such consent, we will not be able to process particular data in order to provide the service.
Below we indicate you following art. 6 of the Privacy Regulation the purposes and the legal basis connected with the processing of your data.
The provision of data for the use of the service is necessary at the conclusion of the contract. In the absence of the requested data, we will not be able to provide you with the functionality of our platform.
Consent for further purposes, such as communication to third parties, is optional and does not entail any negative consequences for your user experience. We remind you however that consenting to these purposes allows us to grow and provide better and less expensive services.
On the basis of the legitimate interest and as better specified in the previous paragraph, we may communicate your data to other companies belonging to our group for better organizational efficiency, adopting all the necessary technical and legal precautions.
Furthermore, we communicate the data to our suppliers for the necessity of supplying the service or, where there is a legitimate interest, as indicated in the previous paragraph.
Suppliers could include booking management companies, delivery partners, IT companies, legal advisors, payment processing companies, marketing, and analytics companies.
The Data Controller can request at any time the list of data processors according to article 28 of the GDPR.
The transfer to countries outside the European Economic Area takes place according to one of the modalities permitted by the current law, such as the consent of the interested party, the adoption of Standard Clauses approved by the European Commission, the selection of subjects belonging to international programs for free data circulation (eg EU-USA Privacy Shield) or operating in countries considered safe by the European Commission. It is possible to have more information, upon request, from the Owner to the above contacts.
The Data Controller processes Personal Data by taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may have access to the Data subjects involved in the organization of the Project (administrative, commercial, marketing, legal, system administrators) or external subjects (as suppliers of third party technical services, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller. Data Controller can always request the updated list of Managers.
Personal data will be stored only and only for the needs related to each of the purposes indicated in the relevant paragraph and compliance with the principle of minimization of processing.
We may require your data to defend our rights or those of Users, as well as to comply with the obligations to maintain accounting records. Therefore we keep this data for as long as necessary and in any case no later than ten years.
We also keep user data whenever required by law or by order of public authorities.
We keep data for marketing purposes for two years from the last commercial contact. The possibility for the User to withdraw consent at any time is reserved.
You have the right to access your data at any time, according to art. 7 of the Privacy Code and articles 15-22 GDPR. In particular, it may request access (Article 15 of the Regulations), the amendment (Article 16 of the Regulations), the cancellation (Article 17 of the Regulations), the limitation of the processing of data in the cases provided for by art. 18 of the Regulations, to obtain the portability of data concerning you in the cases provided for by art. 20 of the Regulations, as well as proposing a complaint to the competent supervisory authority (Guarantor for the Protection of Personal Data). You also have the right to withdraw your consent at any time, according to Article 7 of the Rules; it is specified that the withdrawal of consent does not prejudice in any case the lawfulness of the treatment based on the consent prior to the revocation.
You can request opposition to the processing of your data according to art. 21 of the Regulations in which to give evidence of the reasons justifying the opposition: the Data Controller reserves the right to evaluate your request, which would not be accepted if there are legitimate reasons to proceed with the processing that prevail over your interests, rights, and freedoms.

References: art. 9
 art. 6
 art. 7
 art. 18
 art. 20
 art. 21