POLICY PRIVACY

DISCLOSURE FOR THE PROCESSING OF PERSONAL DATA PURSUANT TO EU REGULATION N 2016/679
DATA CONTROLLER GARDA MOMENTS S.R.L. VIA VENEZIA, 26 – 37019 PESCHIERA DEL GARDA (VR) Phone: +39(0)457550111 Mail Address: INFO@ENJOYGARDAHOTEL.COM 

Purpose of the processing: Your personal data, freely disclosed and acquired as part of the activities carried by the owner, shall be processed lawfully and fairly for the following purposes:
∙ contractual; ∙ accounting and tax; ∙ informative, commercial and marketing. The data being processed (which may be generic data, identification data, sensitive data or judicial data), are up to date, complete and do not exceed the information required for the purposes listed above, for which they have been collected and subsequently processed.

Method of treatment: The data will be processed, with due regard for the necessary security and confidentiality, through the following methods: collection of data from the person concerned, collected and recorded for specific, explicit and legitimate purposes and used in further processing operations in terms compatible with these purposes, processing carried out with the aid of manual, electronic instruments.

Legal basis of the processing: The legal basis for the processing of your personal data is based on the performance of the contractual functions for accounting, tax, disclosure and commercial purposes.

Legitimate interests pursued by the Data Controller: The legitimate interests pursued by the Data Controller in the processing of data are given by having to respect and honour the contractual obligations entered into between the parties and develop its social aims. The lawfulness of the processing is based on the consent manifestly expressed by the data subject, documented in written or manifest form

Compulsory or optional nature of data provision and consequences of any refusal to reply 
The nature of the provision of data by you is mandatory in order for the controller to be able to provide the contractual services required for contractual, accounting and tax purposes. In case of refusal, the Owner will not be able to fulfill the contractual obligations.
The nature of the contribution for the informative, commercial and marketing purposes is optional

Disclosure of data to third parties 
Your personal data will be processed by the Data Controller, by any Data Controller appointed by him and by any data processor strictly authorized. Your data may be communicated following inspections or verifications (if required), to all inspection bodies responsible for checks and controls regarding the regularity of legal compliance
Your data may also be communicated to external companies/professional offices that provide
employment assistance and advice or to the employees of the controller, in accounting, administrative, tax, tax and financial matters, to public administrations for the performance of institutional functions within the limits set by law or regulations. Your personal data are not disseminated

Storage time 
The Data Controller will process personal data for the time necessary to fulfil the contractual, accounting, tax purposes
Your personal identification data will be processed until your revocation

Existence of automated decision-making 
There is no automated decision-making

Safety 
The Data Controller has taken appropriate security measures to protect your data against the risk of loss, abuse or alteration.

Intention of the Data Controller
The Data Controller will not transfer your personal data to a third country or an international organisation.

Rights of the person concerned
The person concerned shall have the right to:
1) obtain confirmation of the existence or absence of personal data concerning him, even if not
yet registered, and their communication in intelligible form 2) obtain the indication:
a) about the origin of personal data; b) about the purposes and modalities of processing; c) about the logic applied in the case of processing carried out with the aid of electronic
instruments; d) the identification details of the data controller, the person in charge and the
representative designated pursuant to art. 5, paragraph 2, Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects or categories of entity to whom or which the personal data may be
communicated and who or which may get to know as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing;
3) to obtain:
a) the update, the rectification, so, when there is interest, the integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified,
as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected; 4) to object totally or in part:
a) for legitimate reasons to the processing of personal data concerning him/her, even if
pertinent to the purpose of collection; b) to the processing of personal data concerning him/her for the purpose of sending
advertising materials or direct selling or for carrying out market research or commercial communication.
In particular, the data subject may ask at any time the Data Controller to access to the personal data and the rectification or cancellation of the same or the limitation of the processing concerning him/her, or to oppose to their processing, as well as the right to data portability. The data subject has the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent the given before the withdrawal and has the right to lodge a complaint with a supervisor.

Modality of the rights execution: 
The interested part, may, at any time, exercise the rights reserved to him, sanctioned by the art. 15 of EU Regulation 2016/679 – Right of access to personal data.
The execution of rights can be exercised by writing at the e-mail address: INFO@ENJOYGARDAHOTEL.COM
The full text of the Rules of Procedure UE 2016/679 www.garanteprivacy.it. 

THE DATA CONTROLLER

GARDA MOMENTS SRL
Viale Venezia 26 – 37019 Peschiera del Garda (VR)
VAT Code: 04096610235
Tax Code: 04096610235
REA:
Share capital:
Website: www.enjoygardahotel.com
E-mail: amministrazione@enjoygardahotel.com
PEC: gardamoments@legalmail.it
Telephone: +39 045 7550111
Fax: +39 045 7550051