Privacy policy
Data Controller
Rudiae Boutique B&B
Holder's email address: info@rudiaeboutique.com
Customer information pursuant to GDPR
(General Data Protection Regulation) 679/2016
Dear Customer,
we have always been attentive to the protection of personal data of all our Clients and, for this reason, we have implemented a privacy management system in compliance with the principles dictated by the new Regulation on the protection of personal data, applicable as of May 25, 2018.
Data Controller
Pursuant to Article 13 of the EU Regulation 679/2016, the Company, as the Data Controller, informs you that the processing of personal data, and possibly special categories of personal data (Article 9 EU Regulation), of you and your minor children, provided by you will be processed in a relevant and transparent manner and in accordance with the principles of lawfulness and necessity in compliance with the relevant provisions in force.
Purposes of the Processing
Personal data will be processed for institutional purposes, connected or instrumental to the activity of our Company, and, therefore, to:
(a) execute the hotel reception service, and consequent operations;
b) fulfill legal obligations of a fiscal, accounting and administrative nature;
c) fulfill operational and management needs inherent to the service provided;
d) provide, by e-mail, paper mail or telephone contact information related to the products or services provided;
e) to send commercial, advertising and promotional initiatives reserved for customers;
f) carry out profiling activities by processing data in an automated manner in order to be able to provide personalized promotions based on the user's choices and habits;
g) process the data of your child/your minor children over whom you exercise parental responsibility in order to be able to carry out the booking and registration service at the hotel.
Legal Basis of Processing
The legal basis of data processing is desired by the specific contractual relationship established and the specific and informed consent of the data subject.
Obligatory and optional nature of the provision of data
Without prejudice to the fact that with regard to the processing of data preordained to the execution of the contract and the fulfillment of legal obligations referred to in letters a), b), c) of the paragraph “Purposes of the Processing”, consent to the processing is not required, it is clarified that:
- the provision of data for the purposes mentioned above under letters a), b), c) is optional, but necessary for the purpose of carrying out the planned customer services and failure to consent may have the consequence of not allowing the performance of such services;
- consent to the processing under letters d), e), f) is free and optional and in any case the interested party may object at any time to the processing in question, easily and free of charge, by contacting the Data Controller also through the use of electronic mail, obtaining a prompt reply confirming the interruption of such processing; without prejudice to the foregoing, however, any refusal to provide the personal data requested may result in the impossibility of being promptly updated on the services offered by our company, of taking advantage of certain benefits reserved for customers and of obtaining personalized promotions based on the user's choices and habits;
- process the data of your child/your minor children over whom you exercise parental responsibility in order in order to be able to carry out the booking and registration service at the hotel. the provision of data and consent to the processing for the purposes referred to above under letter g) is mandatory and is necessary for the purpose of carrying out the services in respect of minors.
Methods of data processing
The processing of personal data will take place by means of paper, computer or telematic tools and with appropriate security measures to ensure the protection and confidentiality of your personal data in compliance with EU Regulation 679/2016.
The transfer, storage and processing of user data that are collected through this site are ensured through the appropriate technical measures. All user information is protected with AES 256 Bit encryption. In addition, the site is delivered over HTTPS encrypted connection.
User data is collected, stored and maintained on a secure server protected by firewall.
Data retention
In accordance with the principles of proportionality and necessity, data will not be retained for longer periods than necessary for the fulfillment of the purposes stated above, the service provided and/or specific legal regulations.
Recipients of personal data
The data collected will be processed exclusively within the scope of the above-mentioned purposes and may be disclosed to subsidiaries, affiliates or otherwise related to the Group, both in Italy and abroad exclusively for the management of services offered. In compliance with the appropriate security measures put in place by the Data Controller, your data and those of your child/your minor children may also be communicated to public security agencies and other public and private entities for the fulfillment of obligations provided for by law, including those of a fiscal, administrative, financial and similar nature. Under no circumstances will the data be disseminated.
For certain processes, which are strictly related to the purposes set out in (e), (f) of the paragraph “Purposes of the Processing”, the Data Controller may provide the user's data to third parties in a relevant and transparent manner in accordance with the relevant provisions in force.
Rights of the data subject
The person to whom the personal data refer may exercise his or her rights vis-à-vis the Data Controller, pursuant to Article 15 et seq. of EU Regulation 679/2016, i.e., he or she may obtain confirmation of the existence of his or her personal data and request their communication in an intelligible form. Also, you will have the right to obtain access, updating, rectification, integration and deletion of data or restriction of processing. Finally, he/she will have the right to object, in whole or in part, for legitimate reasons, to the processing of his/her personal data, even if pertinent to the purpose of collection, as well as the right to data portability as well as to lodge a complaint with the supervisory authority, as well as to the sending of advertising or direct sales material or for the conduct of market research or commercial communication, by contacting the Data Controller.
Cookie Policy
For information regarding the use of cookies through the site, please read the relevant Cookie Policy.
For any further information and to enforce your rights under the European Regulation, you may contact: info@rudiaeboutique.com
