In compliance with the European Privacy Regulation 2016/679 (GDPR) the accommodation facility declares:
That the undersigned Sonia Castelli owner of the Casa Castelli Tourist Lease with headquarters in via Vicolo Volto San Luca, 18 - 37122 Verona (VR) Tax Code CSTSNO91R41L781D, as Data Controller, pursuant to and for the purposes of art. 13 Legislative Decree 30.6.2003 n. 196 (hereinafter, "Privacy Code") and art. 13 EU Regulation no. 2016/679 (hereinafter, "GDPR"), informs you, in your capacity as Data Subject (as defined in art. 4 of the Privacy Code and art. 4 of the GDPR), that your personal data will be processed in the full compliance with current legislation on the protection of personal data and with the implementation of all security measures, technical and organizational, considered suitable for the purposes of protecting the aforementioned data.
Subjects authorized to process data
For the correct performance of the treatments referred to in this information, they will have access to your data:
to. Sonia Castelli, specifically appointed by the same as persons in charge and authorized to the treatment in question.
Communication and dissemination of data
The Data Controller may communicate your data to Supervisory Bodies and / or Judicial Authorities as well as to all other subjects to whom communication is required by law for the accomplishment of the aforementioned purposes. Your data will not be otherwise disclosed and / or communicated.
Purpose of the treatment
The personal data you provide are necessary for the obligations required by law.
Methods of treatment and conservation
The processing will be carried out in an automated and / or manual form, in compliance with the provisions of art. 32 of the GDPR 2016/679 and Annex B of Legislative Decree 196/2003 (Articles 33-36 of the Code) on security measures, by persons specifically appointed and in compliance with the provisions of art. 29 GDPR 2016/679.
We point out that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, subject to your free and explicit consent expressed at the bottom of this information, your personal data will be kept for the period of time necessary to achieve the purposes for which they are collected and processed.
Communication and dissemination scope
We also inform you that the data collected will never be disclosed and will not be communicated without your explicit consent, except for the necessary communications that may involve the transfer of data to public bodies, consultants or other subjects for the fulfillment of legal obligations.
Transfer of personal data
Your data will not be transferred either to member states of the European Union or to third countries not belonging to the European Union.
Rights of the interested party
The interested party will have the right to exercise the rights referred to in art. 7 of the Privacy Code and art. 15 GDPR.
In particular, the User has the right at any time to obtain confirmation from the Owner of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form.
In relation to the treatments described in this Notice, the interested party may, under the conditions set out in the GDPR, exercise the rights enshrined in articles 15 to 21 of the GDPR and, in particular, the following rights:
a) ask for confirmation of the existence or otherwise of their personal data;
b) obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
c) obtain the rectification and cancellation of data;
d) obtain the limitation of the processing;
e) obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
f) oppose the processing at any time and also in the case of processing for direct marketing purposes;
g) oppose an automated decision-making process relating to individuals, including profiling.
h) ask the data controller to access personal data and to correct or delete them or limit their processing or to oppose their processing, in addition to the right to data portability;
i) withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation;
j) propose a complaint.
How to exercise the rights
To exercise the rights referred to in the previous article, the User may, at any time, contact the owner of the site via email:
firstname.lastname@example.org or at the following address: +39 3471668587