We inform you that, for the establishment and execution of contractual relationships with you, our organisation holds your data, also acquired verbally, directly or through third parties, qualified as personal by the European Regulation 2016/679 (GDPR).
According to the indicated legislation, this processing will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
Pursuant to article 13 of the GDPR 2016/679, we therefore provide you with the following information.
Nature of the data processed
We process your personal, fiscal and economic data necessary for the performance of existing or future contractual relationships with your company, as well as to achieve effective management of commercial relations.
The data are processed without your express consent (Article 24 letter a, b, c Privacy Code and Article 6 letter b, e GDPR), solely and exclusively for the following Service Purposes: to fulfil pre-contractual, contractual and tax obligations arising from existing relationships with you; to fulfil the obligations established by law, by a regulation, by EU legislation or by an order of the Authority; to exercise the rights of the Controller, for example the right of defence in court.
We do not hold any of your data that can be qualified as special or judicial (articles 9 and 10 of the GDPR).
Purpose of the processing and duration
Your data are processed for the entire duration of the contractual relationship and also afterwards, for contractual needs and related fulfilment of legal and tax obligations, and for an effective management of financial and commercial relationships, operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR.
The Data Controller will process personal data for the time necessary to fulfil the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the Service Purposes.
Processing methods
The processing will be carried out both with manual and/or IT and telematic tools with organisational and processing logics strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and confidentiality of the data in compliance with the organisational, physical and logical measures provided for by the provisions in force.
Obligation or right to provide data
As regards the data that we are obliged to know in order to fulfil the obligations established by law, failure to provide them makes it impossible to establish or continue the relationship, within the limits in which such data are necessary for its execution.
Who may know your data
The following categories of subjects may become aware of your data, as processors or persons in charge, appointed by the undersigned company, data controller: managers, directors and auditors; internal secretarial offices; accounting and billing staff; staff marketing our services; agents and representatives.
Communication and dissemination
Your data will not be disclosed by us to indeterminate subjects by making them available or consultable.
Your data may be communicated by us, as far as their respective and specific competence is concerned, to Bodies and in general to any public or private subject with respect to which there is an obligation for us (or a right recognised by law, secondary or EU legislation) or need for communication, as well as to our consultants, within the limits necessary to carry out their assignment at our organisation, subject to our letter of appointment imposing the duty of confidentiality and security.
Your rights
As a data subject, you have the rights referred to in art. 7 of the Privacy Code and art. 15 GDPR, namely the rights to: i. obtain confirmation of the existence or not of personal data concerning you, even if not yet recorded, and their communication in an intelligible form; ii. obtain information on: a) the origin of the personal data; b) the purposes and methods of the processing; c) the logic applied in case of processing carried out with electronic instruments; d) the identity of the controller, processors and representative appointed pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may learn about them; iii. obtain: a) the updating, rectification or integration of data; b) the erasure, anonymisation or blocking of data processed unlawfully; c) certification that the operations under a) and b) have been brought to the attention of those to whom the data have been communicated or disseminated, unless this proves impossible or involves a manifestly disproportionate effort; iv. object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you; b) to the processing of personal data concerning you for advertising, direct sales, market research or commercial communication.
Where applicable, you also have the rights referred to in Articles 16-21 GDPR (right of rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.
We kindly ask you to promptly report any changes to your personal data to the company so that we can comply with art. 11, letter (c) of the aforementioned legislation, which requires that the data collected be accurate and up to date.
Data controller
The data controller is Rainbow Srl, Via Giomein 53, 11028 Breuil-Cervinia (AO), Italy, VAT IT01194510077.
To exercise your rights or for any clarification on personal data protection, please write to info@bergman-hotel.com.