Dear Guest,
We wish to inform you, in accordance with current national legislation and in particular EU Regulation No. 679 of 2016 (GDPR) on the protection of personal data, that the processing of your personal data is carried out correctly and transparently, for lawful purposes and protecting your privacy and your rights.
Data Controller
The Data Controller of your personal data is HOTEL VILLA SAN PAOLO S.N.C. of Squarcia – Sabatini – Strada Provinciale per Certaldo 1 snc – Fraz. San Paolo – 53037 San Gimignano (SI), VAT number and tax code 00367450525, in the person of the Legal Representative REMO SQUARCIA with tax code SQRRME58E13H875D.
Data Collection
The personal data we process includes:
- Name, surname, date and place of birth, citizenship, identity document number and e-mail address;
- Credit card details (card type and number, name on the card, expiry date and CVC code).
Purpose of Processing
The data is processed exclusively for the following purposes:
- To fulfill the obligation provided for by the “Consolidated Law on Public Safety” (Article 109 of Royal Decree 773/1931), which requires us to communicate the details of lodged guests to the Police Headquarters for public safety purposes;
- To fulfill current administrative, accounting and tax obligations;
- To speed up registration procedures in the event of your subsequent stays at our facility (inclusion in the “customer registry” computer archive);
- To carry out the function of receiving messages and telephone calls addressed to you during your stay;
- To send newsletters on promotions, offers and updates on rates.
The provision of your data for the processing referred to in points 1 and 2 is mandatory, and in case of refusal we will not be able to confirm the reservation and consequently we will not be able to accommodate you in our facility and provide you with the requested services. If, on the other hand, you wish the processing referred to in points 3, 4 and 5 to be carried out, we will need to acquire your consent, which can be revoked at any time.
Recipients
The following may become aware of your data, in relation to the processing purposes set out above:
- Employees of the Data Controller in their capacity as persons authorized to process data or internal data processors;
- Third parties (administrative, tax and accounting consulting companies, e-mail marketing management companies, companies for technical assistance of IT products and their employees/collaborators) who carry out activities on behalf of the Data Controller, in their capacity as external data processors;
- Police Headquarters.
In any case, the dissemination and transfer of your data outside of Italy is excluded.
Method and Time of Processing
Personal data is processed using manual and/or automated systems for the time strictly necessary to achieve the purposes for which it was collected, in detail:
- Administrative, accounting and tax activity for the period provided for in art. 2220 of the Civil Code indicated as 10 years, which could be extended in the event of tax audits;
- Computerized archiving of your personal details for a maximum period of 10 years;
Rights
EU Regulation No. 679 of 2016 (GDPR), from Article 15 to 22, recognizes the following rights:
- Right of access;
- Right to rectification;
- Right to erasure;
- Right to restriction of processing;
- Right to data portability;
- Right to object.
For any further information and to exercise the aforementioned rights, you can contact the Data Controller directly by sending a written request by registered mail with return receipt to: HOTEL VILLA SAN PAOLO S.N.C. of Squarcia – Sabatini – Strada Provinciale per Certaldo 1 snc – Fraz. San Paolo – 53037 San Gimignano (SI), or by e-mail to the certified e-mail address (PEC): sabvolpini@pec.it
In any case, if you believe that your right to privacy has been violated, you can lodge a complaint with the competent supervisory authority (Italian Data Protection Authority), pursuant to art. 77 of the Regulation.