We wish to inform you that Il Grattacielo SRLS will process your personal data as the Data Controller, in full compliance with the GDPR (GDPR) 679/2016 concerning to the protection of personal data.
Data controller and controller
In relation to your personal data, you can exercise all the rights provided for in Articles 13 (data collected from the data subject) and 14 (data not collected from the data subject) of the GDPR (GDPR) 679/2016, such as,for example, modification, cancellation, rectification and anything else provided for by the standard by directly contacting the data controller directly: il Grattacielo S.R.L.S Piazza Beverini 4 - 19121 La Spezia (SP) tel.: +39 3382641118 , e-mail:grattacielosrls@icloud.com The guest house collects data both independently (when booking online from its website and when guests check in ) or through External Data processors (hotel booking portals and travel agencies): these are the means that triggers our Data Processing as the Data Controller.
Legal basis of the processing
The legal basis for Data processing is the consent of the Data subject , which is requested each time and not related to the conferment obtained during the on-line booking and registration with the guest house. External Data processors. We list below the technical partners whose correspondence is marked by symbols:
• Blastness srl, P.IVA/C.F.: 01195440118, N.ISCRIZIONE REA DI MILANO 2107189, Registered Office: Galleria del Corso, 2 – 20122 Milan, Italy
• CSL SRLS Occupational Safety Center with registered office in Via Zara 8 , 19123 La Spezia (SP) C.F. /P.I. 01497900116
Processing of data and related purposes
Each section described below allows the collection of data for the specific purpose: Failure to complete the fields marked as mandatory (marked with an asterisk) will correspond to a failed conferment of consent ,thus preventing the processing of data and therefore ,we will not be able to pro provide the service requested. Your personal data, subject to the provision of multiple hospitality services at our structures, will be collected by Il Grattacielo SRLS and its technical partners, the data will be recorded and processed on paper and / or with the help of electronic means and can be stored in special databases. The data will not be used for other purposes, except those required by the current Public Security legislation;
• 'Booking' page - the profile of users who request information through the 'Booking' page will be used by Il Grattacielo Srls for exclusive hotel hospitality operations carried out by Il Grattacielo Srls
• 'Contacts' page - the profile of users who request information through the 'Contacts' page will be used by Il Grattacielo Srls for communication regarding the individual request received by Il Grattacielo Srls;
• 'Mailing list' (newsletter) - the profile of users who subscribe to the 'Newsletter' will be used by Il Grattacielo Srls for the periodic informative and advertising communication related to Il Grattacielo Srls;
Your data will not be "disseminated",published or disclosed to third parties in Italy , within the European Union or outside the EU. However, your data will be made known to the staff of Il Grattacielo Srls who have received appropriate training and its technical partners, who are nominated and listed under the external data processor section in Compliance with GDPR. The Grattacielo Srls undertakes not to use personal data reported as inaccurate until the inaccuracy has been corrected . All data are collected for the legitimate interest of the Data Controller will not be published, shared or transferred to third parties, either in Italy or abroad.
Freedom to grant consent, consequences of denial, duration of data retention
• Booking - the provision of your data is optional. However, if you refuse consent for the purposes indicated, we will not be able to host you. The data received will be kept for the minimum duration provided for by legal obligations.
• Contacts - the provision of your data is optional. However, if you refuse consent for the purposes indicated, we will not be able to respond to you . The data received will be kept for 6 months.
• Mailing list (newsletter) - the provision of your data is optional. However, if you refuse consent for the purposes indicated, we will not be able to provide you with periodic communication services. The data received will be kept until revoked by the data subject.
The data subject can consciously monitor and manage the data flow and, in particular, exercise the following rights: (I) the right to access data, (II) the right to ask for the correction, deletion or the limitation of the processing, (III) the right to oppose to processing, (IV) the right to the portability of the data, (V) the right to revoke the consent to processing at any time, (VI) the right to lodge a complaint with the supervisory authorities. You can exercise all the rights provided for in articles 13 (data collected from the data subject) and 14 (data not collected from the data subject) of GDPR (GDPR) 679/2016, by directly contacting the data controller referred to in the section data controller and data processor.
