INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF EUROPEAN REGULATION NO. 679/2016

DATA CONTROLLER
Hotel du Lac et du Parc Srl, with registered office in Riva del Garda (TN), Viale Rovereto no. 44

DATA PROCESSED
The management of the newsletter service involves the acquisition and processing of personal data and the e-mail address of the data subject.

PURPOSE OF THE PROCESSING:
The data are processed for the management of the newsletter service and, in particular, for direct and indirect marketing operations, through the forwarding of communications, commercial information and customer satisfaction surveys to the data subject. The legal basis for their processing is the consent of the data subject.

DATA RETENTION PERIOD
The data is processed and stored for the time required for the purposes for which it was collected.
When the processing is based on the User’s consent, the Data Controller may retain the Personal Data until such consent is revoked.

NATURE OF THE PROVISION
The provision of data is free. Consent to their processing is optional but necessary for the Data Controller to carry out the purposes indicated above.

METHOD OF PROCESSING
The data are processed in compliance with the technical and organisational security measures provided for by the EU Regulation through procedures that guarantee their confidentiality. The data will not be processed using automated decision-making processes. All data provided is processed in accordance with the principles of fairness, lawfulness and transparency, both in paper and electronic form, and protected by technical and organisational measures to ensure appropriate levels of security in accordance with Articles 25 and 32 of the GDPR.

SCOPE OF DATA DISCLOSURE
The data may be disclosed to the data controller, data processors and specially trained data processors. In addition to the subjects specified above, the data provided may be processed by third parties, appointed as data processors, to the extent necessary for the performance of their activities on behalf of the data controller and within the limits of the authorisation profiles identified for them. The data communicated will be transferred to third countries or international organisations outside the EU in strict compliance with the conditions laid down by law.

RIGHTS OF THE DATA SUBJECT
At any time, the data subject may exercise the rights referred to in Articles 15 et seq. of European Regulation No. 679/2016, namely: the right to know whether their personal data are being processed and, if so, to know their content and origin, to verify their accuracy or request their integration, deletion, restriction, updating, rectification, transformation into anonymous form or blocking, as well as the right to object in any case, for legitimate reasons, to their processing and to lodge a complaint with the Data Protection Authority. Consent to processing may be revoked at any time, resulting in the interruption of processing. These rights may be exercised vis-à-vis the Data Controller and the person designated as data protection officer by sending an email to [email protected]. The contact details of the person designated as data protection officer are as follows: [email protected].
The contact details of the supervisory authority are as follows: [email protected].