(EU Regulation 2016/679 – GDPR)
Information on the processing of personal data
Pursuant to article 13 and 14 of the EU Regulation 2016/679 (GDPR), the Guesthouse La Rosa dei Venti informs users of the website about the processing of personal data.
Data controller
Guesthouse "La Rosa dei Venti"
Via della Compera
19015 Levanto (SP) – Italy
Tel. 0187 808165
Cell. 328 7428268
Email: info@larosadeiventilevanto.com
VAT number 01390040119
CITR 011017-AFF-0055
(hereinafter "Titular").
Types of processed data
The consultation of the site may involve the processing of the following data categories:
a) Navigation data
The computer systems and software procedures of the site automatically acquire some technical data necessary for the operation of the service, including:
- IP address;
- browser data and device used;
- date and time of visit;
- pages visited;
- technical information on navigation.
These data are processed exclusively for technical and safety purposes.
b) Data communicated voluntarily
You can contact the structure by:
- email;
- telephone;
- WhatsApp.
Personal data such as:
- name and surname;
- telephone number;
- email address;
- content of the request;
- any data necessary for the management of the reservation or the stay.
Purpose of treatment
Personal data are processed for:
- protect the rights of the Owner in judicial or extrajudicial premises.
- respond to requests for information;
- manage reservations and stays;
- fulfil administrative, tax and regulatory obligations;
- ensure safe and proper operation of the site;
Legal basis for processing
The treatment is based on:
- execution of pre-contractual or contractual measures;
- fulfilment of legal obligations;
- legitimate interest of the Data Controller to the security of the site and to the management of communications;
- consent of the data subject, where required.
Methods of treatment
The data are processed with computer and paper tools, in compliance with the principles of:
- lawfulness;
- correctness;
- transparency;
- minimisation;
- security.
Appropriate technical and organizational measures are taken to prevent unauthorized access, loss or unlawful use of data.
Data retention
Personal data will be kept for the time strictly necessary for the purposes indicated and however:
- for the duration necessary to manage requests and reservations;
- for the terms provided for by tax and civil law;
- for any legal protection requirements.
Data communication
The data may be communicated to persons operating on behalf of the Data Controller, such as:
- tax and administrative consultants;
- IT service providers and hosting;
- competent authorities in cases provided for by law.
The data are not indiscriminate.
Hosting the site
The site is hosted by hosting service providers who can process technical navigation data for operation and service security purposes.
External links and social networks
The site may contain links to external services, including:
- Facebook;
- Google Maps;
- WhatsApp;
- Booking.
The use of such services entails the processing of data according to the respective privacy statements of the respective managers.
The Data Controller is not responsible for processing carried out by third party websites or platforms.
Rights of the data subject
The data subject may exercise the rights provided for in Articles 15–22 GDPR, including:
- access to data;
- rectification
- cancellation
- restriction of processing;
- opposition;
- data portability;
- revoke consent.
Requests can be sent to:
info@larosadeiventilevanto.com
The data subject also has the right to lodge a complaint with the Data Controller.
