INFORMATION NOTICE GIVEN UNDER ARTICLES 13-14 OF GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679 and Art. 13 of the Privacy Code Legislative Decree 196/2003.
Data controller
The data controller is DIMORA IL MANDORLO DI CALELLA STEFANO with registered office in OSTUNI (BR) CONTRADA CERVAROLO SN CAP 72017 – P.IVA 02603460748 – REA BR – 161661.
You can get in touch with the Data Controller/Data Processor by email at [email protected]
Method and purpose of processing (legal basis and recipients)
Personal biographical data (First Name, Last Name, Date of Birth, Identification Document, Residence, etc.), along with personal contact information (Phone, Fax, Email) and, if applicable, details of identity documents provided at check-in, will be processed with the support of the following means:
- Paper-based (Forms of: quote, quote confirmation, reservation, contract)
- Computerized (Internal management systems)
- Telematics (WhatsApp, SMS, Electronic Mail)
The processing will be carried out through the use of electronic tools following logics of security, process and internal organization strictly related to the purposes set out below, so as to ensure the confidentiality and integrity of the data while respecting the rights of the interested party provided for by the provisions in force.
The data will be subject to:
- Treatments in relation to contractual obligations and related terms and conditions or better:
- Delivery of services requested by the data subject (requests for quotations, communications concerning the stages of progress of the service provided in the contract)
- Quality Control of the services offered by Dimora il Mandorlo. This purpose may include electronic submission or manual delivery of a satisfaction survey at the end of the stay
- Administrative purposes (invoices and receipts)
- Treatments in relation to legal obligations:
- Administrative purposes related to legal obligations (bookkeeping, records, ect.)
- Purposes related to public security obligations under Article 109 of the T.U.L.P.S.
With reference to the purposes just illustrated, the conferment of data is to be considered mandatory, and their failure or partial conferment will make it impossible to proceed with the provision of the services requested.
Subject to the explicit consent of the data subject, the data will also be processed for the following marketing purposes:
-
Sending newsletter with the latest Dimora il Mandorlo news, our offers, discounts and last minute promotions
This information will be recorded and used exclusively for the marketing purposes outlined above and to improve the quality of the booking experience (fast check-in) and stay of our guest.
We would also like to inform you that, with regard to any special data that Dimora il Mandorlo may become aware of as a result of specific requests (differently abled, special dietary regimens, etc.), such data will be processed exclusively in the interest of our guest for the period of their stay only, will not be archived, but will be destroyed or anonymized at the end of their stay.
Recipient Categories and Data Transfer Policy
Without prejudice to communications performed in fulfillment of legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of data subjects:
- Internal data processors:
- Administrative
- Sales and Marketing
- Owner of the Facility
- Public safety organs
Furthermore, the interested party is informed that, Dimora il Mandorlo does NOT transfer data to third parties/organizations. That such data are managed directly and exclusively by Dimora il Mandorlo and kept electronically at VIA LEONARDO DA VINCI 20/4 CAP 72014 CISTERNINO (BR) with exclusive access to the data by Dimora il Mandorlo.
Period of data retention
The compulsory data processed for contractual, administrative and public security purposes will be stored in our information system and retained for as long as necessary to carry out the contractual relationship and in any case for as long as required by current regulations (tax and public security).
For all other purposes, if the data subject has given consent, the data will remain archived in our information system and retained until the data subject requests its deletion.
However, please note that if no communication between the parties takes place for a period longer than 10 years, the data will be anonymized and kept for statistical purposes only.
Rights of the data subject
Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the interested party may, in the manner and within the limits provided by the current legislation, exercise the following rights:
- Request confirmation of the existence of personal data concerning him/her (right of access),
- Request portability of their data;
- Know its origin;
- Receive intelligible communication;
- Have information about the logic, methods and purposes of processing;
- Request the updating, rectification, integration, cancellation, transformation into anonymous form, and blocking of data processed in violation of the law, including data no longer necessary to achieve the purposes for which they were collected;
- In cases of consent-based processing, receive their data provided to the controller, in a structured, machine-readable form and in a format commonly used by an electronic device and/or withdraw consent to processing at any time;
- The right to file a complaint with the Supervisory Authority.
Requests may be submitted to the Data Controller/Representative by sending a request to the following email address [email protected].
About Cookies
Technical cookies
These are those that are essential for the site to function, for example, for access to one’s private area. They cannot be disabled because otherwise the site would stop working.
Performance cookies
Analytics cookies also belong to this category. These are cookies that collect information about a user’s use of a website and help improve its operation. Such information can also be taken anonymously.
Profiling cookies
Other cookies, on the other hand, can be used to monitor and profile users during browsing, study their movements and web browsing or consumption habits (what they buy, what they read, etc.), including for the purpose of sending targeted and personalized service advertisements. We speak in this case of profiling cookies. The use of said cookies requires the prior acquisition of the user’s free informed consent in accordance with Article 7 of EU Regulation 2016/679.
Third-party cookies
It may also happen that a web page contains cookies from other sites and contained in various elements hosted on the page itself, such as advertising banners, images, videos, maps, or specific links to web pages from other domains that reside on servers other than the one on which the requested page is located. In other words, these cookies are set directly by website operators or servers other than this website. We speak, in these cases, of so-called third-party cookies, which are usually used for profiling purposes. The use of these cookies requires the prior acquisition of the user’s free informed consent in accordance with Article 7 of EU Regulation 2016/679.
Types of cookies used by our sites
The main functions of the cookies installed by www.dimorailmandorlo.it are technical; they are used to constantly improve the Service, for authentication, and for statistical purposes, such as counting site visits. The use of cookies is therefore strictly for the purpose of facilitating the server functions of while browsing the Service.