Information letter

Pursuant to Legislative Decree 30 June 2003, n. 196 and of the EU Regulation 2016/679

Pursuant to Legislative Decree n. 196/2003 and of the art. 13 of EU Reg. 2016/679, in relation to personal data of which HOTEL GARDEN SPA, with headquarters in Corso delle Terme 7, I-35036 Montegrotto Terme(PD), VAT number 00898530282, in the person of its legal representative pro tempore, will enter in possession, we inform you of the following:

1. PURPOSE OF DATA PROCESSING

The processing aims at collecting, storing and processing data for commercial purposes of sending advertising material, direct sales, carrying out commercial research and commercial communication, with particular reference to the processing of the e-mail address, also for newsletter purposes.

2. METHOD AND LEGAL BASIS OF THE TREATMENT

The processing is carried out with or without the aid of electronic or automated means. The processing is carried out by the individual data processors specifically appointed under the supervision and in accordance with the instructions of the Data Controller and / or of the different specifically appointed data processors. The legal basis of the processing is included in the specific consent of the interested party released through the appropriate functionality of the website of the Hotel.

3. PROVISION OF DATA AND STORAGE PERIOD

The provision of common personal data (identification data / personal data and delivery address) referred to in this statement is not mandatory but is necessary for the purposes of carrying out the activities referred to in point 1, In the event that data deletion is not required / opposition to the processing / termination of the service (at the bottom of each message of the newsletter this specific feature will be available), the data will be stored, for the purposes set out above, for a period equal to the duration of the newsletter service. The interested party will be able to revoke the consent originally provided at any time with the consequent immediate interruption of the processing of the data provided.

4. REFUSAL OF DATA PROVISION

Any refusal by the interested party to provide personal data as set forth in point 3, or incorrect communication of such data, makes it impossible to carry out the activities referred to in point 1 .

5. COMMUNICATION AND DIFFUSION OF DATA

Personal data may be disclosed for the purposes referred to in point 1 to public / private entities for which communication is mandatory or necessary in fulfilment of legal obligations and constitutional or constitutional importance bodies. Personal data are not subject to disclosure.

6. RIGHTS OF THE INTERESTED PARTY AND POSSIBILITY OF CLAIM

The EU Reg. 2016/679 grants the interested party specific rights, including the right to access their personal data and making them available in an intelligible form. The interested party also has the right to obtain updating, rectification (if incorrect), integration (if incomplete) or deletion of data (in the case of unlawful processing), data portability (right to receive or have transmitted the data to another holder in structured format, commonly used and readable by an automatic device) revocation of consent (if legal basis for processing) transformation into anonymous form or blocking / limitation of data processed in violation of the law; the interested party has the right to object, for legitimate reasons, to the processing of data. With reference to the processing of the data provided, in the event that the interested party identifies violations of the law on privacy, he will be entitled to lodge a complaint with the Privacy Guarantor. The interested party may exercise his / her rights by making a request to the Data Controller or Data Protection Officer (also requiring them to receive specific forms and possibly the list of appointed managers).

7. OWNER AND R.P.D. (Responsible for data protection)

The data controller is HOTEL GARDEN S.P.A. (P.IVA 00898530282 – PEC gardenterme@pec.it – e-mail garden@gardenterme.it), with headquarters in Corso delle Terme, 7, I-35036 Montegrotto Terme(PD). The Data Protection Officer is Avv. Francesco Cecchinato (C.C. CCCFNC89M07G224U – PEC francesco.cecchinato@ordineavvocatipadova.it – e-mail cecchinato@admassociati.it) with an address in Padua (35129 – PD), Via San Crispino n. 82