INFORMATION PROVIDED PURSUANT TO ART. 13-14 GDPR 2016/679

GENERAL DATA PROTECTION REGULATION (PRIVACY POLICY)

SECTION 01

We inform you,
pursuant to art. 13 and of the art. 14 of the GDPR n. 2016/679 (hereinafter, "GDPR"), that in case of collection of personal data concerning you, this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights;

a)
Our organization, as a legal person, plays the dual role of data controller and data processor;

b)
The data controller and the data processor (see contact details on the last page); having carried out the assessments of the case internally, they have not designated the data protection officer, as, pursuant to article 37 paragraph 1 of the GDPR n. 2016/679 does not fall within the obligation.

Your data will be processed

c/i)

c/ii)
pursuant to art. 7, subject to your freely expressed consent,

c/iii)
pursuant to art. 7, subject to your freely expressed consent,

The aforementioned data may be used for the sole purpose of obtaining anonymous statistical information on the use of the public WIFI/LAN network and the institutional website; for example, to check the correct functioning of our IT infrastructure and improve the service;

likewise, the data could be used by the competent authorities, for example, to ascertain responsibility in the event of hypothetical computer crimes or damage to our WIFI, LAN networks, our IT system and our institutional website.

d)
pursuant to art. 6 paragraph 1 letter f), taking into account the reasonable expectations of the parties,
for purposes of legitimate interests pursued by the data controller or by third parties; (for example; data for fraud prevention purposes (attendance monitoring, entry register, biometric data, video surveillance images ...) and direct marketing purposes).

The recipients and categories of recipients of your data are

e)
natural or legal persons, public authorities, collaborators such as employees, professionals, service providers, bodies and associations.

Your personal data may be transferred to a third country or to an international organization

f)
due to the foregoing, your data, in addition to being processed in paper format in the internal archives of our organization or with third parties, are mostly processed and stored in electronic format on our mass memories inside our structure or within the European Union through hosting, server and cloud services. In any case, it is understood that the owner, if necessary, will have the right to move the hosting, servers and cloud servers also to non-EU areas. Likewise, the owner ensures from now on that the transfer of data to non-EU areas will take place in compliance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses envisaged by the European Commission.

SECTION 02

The processing of your data is correct and transparent

Carried out by means of the operations of collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data is subjected to both paper and electronic and/or automated processing.

They may be processed, only for the purposes referred to above c/i , c/ii , c/iii and d , also by employees and collaborators of the owner or other entities based in Italy and in other European countries, by third party companies or other subjects; for example, by way of example, credit institutions, professional firms, insurance companies for the provision of insurance services, IT and telephone service providers or other entities that provide services/products on behalf of the Data Controller, in their capacity as external managers of the treatment. If personal data are not obtained from the interested party, the data controller, in application of art. 14 of the GDPR, will provide within one month, any specific circumstance; otherwise, this information applies to you.

The retention period of your data is defined

a)
for a time necessary to fulfil the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes referred to in the previous points c/i and for no more than 2 years from the collection of data for the purposes referred to in the previous points c/ ii, c/iii and d.

As an interested party, by sending a registered letter or an email to the data controller, you can assert the following rights.

b)

right of access, pursuant to art. 15 of the GDPR, to obtain confirmation as to whether or not personal data concerning him is being processed and, if so, to obtain access to personal data and information; in case of request for further copies of data, the owner and the data controller reserves the right to charge you a reasonable expense contribution based on administrative costs;
right of rectification, pursuant to art. 16 of the GDPR, to obtain the rectification of inaccurate personal data concerning him without unjustified delay;
right to cancellation, pursuant to art. 17 of the GDPR, to obtain the cancellation of personal data concerning him without unjustified delay;
right to limit the processing, pursuant to art. 18 of the GDPR, to obtain the limitation of the treatment;
right to data portability, pursuant to art. 20 of the GDPR, to receive the personal data concerning him provided to a data controller in a structured format and to transmit such data to another data controller without impediments;
right of opposition, pursuant to art. 21 of the GDPR, to oppose at any time the processing of personal data concerning him pursuant to art. 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions.

c)

right to withdraw consent, for the cases provided for by the GDPR, at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

d)

right to lodge a complaint with a supervisory authority, in ITALY Guarantor of Privacy PIAZZA DI MONTECITORIO n. 121 00186 ROME email garante@gpdp.it

e)

Nature of data provision and consequences of refusal to respond
The provision of data for the purposes referred to in the previous point c/i is mandatory, likewise, taking into account the purposes of legitimate prosecutions referred to in the previous point d, the provision must be consented to; in their absence, our organization cannot guarantee the provision of services and the fulfilment of your expectations. Without the need for express consent, the processing of such data can be carried out by the Authorities, by the insurance company for the provision of insurance services, by professional studios also for the management of disputes, as well as by those subjects to whom the communication is mandatory by law for the accomplishment of said purposes. These subjects will process the data in their capacity as independent data controllers. Your information will not be disseminated.

The provision of data for the purposes referred to in c/ii and c/iii above is optional.

Taking into account the reasonable expectations of the parties for the purposes. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the services offered and use the internet connections via our WIFI network / Public LAN as well as a series of advanced services and present on our institutional site. However, you will continue to be entitled to the services referred to above c/i.

f)

It is your right not to be subjected to a decision based solely on automated processing
referred to in the previous points c/ii and c/iii, including profiling that produces legal effects concerning you or that significantly affects your person in a similar way. Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or neither of the two types of communication.

Place and date Jesolo: 11/22/2022
Organization Data Controller: Flavio Rumiato
Contact details of the Data Controller: HOTEL RESIDENCE MARA DI RUMIATO FLAVIO
Registered office: VIA MANZONI, 9 – 30016 JESOLO LIDO (VENICE) ITALY
Contacts: +39 0421 380522
VAT number: 01610960278
Rea: VE-174411

Dear user,
Our institutional site is managed by the Hotel Mara di Flavio Rumiato as data controller, does not use profiling cookies and uses technical cookies for the sole purpose of transmitting data to the extent strictly necessary to improve the provision of services.

Due to the foregoing, technical cookies are not used for other purposes, they can be installed directly and are divided into

The installation of technical cookies does not require the user's prior consent but the obligation to provide this information.

Cookies, in general, are portions of code installed within the browser; some of the purposes of installation of the Cookies may also require the user's consent, if among the tools indicated below there are services managed by third parties. These could - even without the knowledge of our organization - carry out tracking activities of the user.

You can block Cookies through the DO NOT TRACK functions supported by all major browsers (Internet Explorer, Chrome, Safari etc...) which automatically communicate to the site the wish not to be tracked; that said, blocking some cookies could invalidate some features of the site.

For the DO NOT TRACK functions, it is advisable to read the disclosure of the browser used.

Without prejudice to the foregoing, we advise any user to always protect their personal data, to periodically consult all the privacy policies and cookie policies and to use the information provided by the following sites:

http://www.youronlinechoices.eu/
https://www.aboutads.info/consumers/
https://youradchoices.ca/understanding-online-advertising/

In view of the foregoing, the Data Controller advises all users to use these resources in addition to the information provided in this document.

For further information or any reports, write to the contact address on the website www.hotelresidencemara.it

Place and date Jesolo: 11/22/2022
Organization Data Controller: Flavio Rumiato
Contact details of the Data Controller: HOTEL RESIDENCE MARA DI RUMIATO FLAVIO
Registered office: VIA MANZONI, 9 – 30016 JESOLO LIDO (VENICE) ITALY