INFORMATION ON THE PROCESSING OF PERSONAL DATA
Sogedin S.p.A.; a single-member company under the management and coordination of Sogedin Finanziaria S.p.A., as owner of the processing of personal data (hereinafter the “Data Controller”), hereby issues this information notice to the Data Subject in compliance with European and Italian data protection regulations.
The Data Controller has appointed a data protection officer (DPO), who the interested party can contact by writing to the following address: dpo@sogedin.it.
This notice supplements the website's navigation policy by detailing how the Data Controller will specifically process the data entered in this booking form. We invite Users to read our privacy policy.
Legal Basis and Purpose of the Processing
The Data Controller shall process the Data Subject's personal data to fulfil the obligations deriving from the booking request and legal obligations (e.g. administrative, accounting, tax obligations, etc.) for finalising and executing the booking and providing the requested service. This includes following up on the Data Subject's request for accommodation and accessory services or responding to specific needs before and after execution of the contract. The legal basis for the pursuit of this purpose is the performance of a contract to which the Data Subject is a party or the performance of pre-contractual measures requested by said Data Subject.
Data Retention Period
Data will be processed for the time necessary to manage the booking requested by the Data Subject and for the duration of their stay in the accommodation facility. Subsequently, data will be retained to meet any obligations arising from the relationship established with the guest, as required by law and within the statute of limitations of the rights arising from the relationship, without prejudice to further retention for the time necessary to resolve (however reached) any disputes that may arise.
Nature of Data Provision and Consequences of Refusal
Data provision is necessary, and therefore, any refusal to provide them in whole or in part may make it impossible for the Data Controller to pursue the aforementioned purposes.
Categories of Recipients
The Data Controller will not disseminate the data but may communicate them to people within the Company who have been authorised to process them on account of their duties, to credit institutions, professionals or service companies, as well as public and private bodies, also following inspections and audits.
Should these recipients process data on behalf of the Data Controller, they will be appointed as Data Processors by way of a specific contract or other legal act.
Transfer of Data to a Third Country and/or International Organisation
Personal data will not be transferred to any third countries outside Europe or international organisations.
Rights of Data Subjects
Data subjects shall have the right to ask the Data Controller to access their personal data and to rectify any inaccuracies, to erase them or limit their processing if the conditions are met, to object to their processing for legitimate interests pursued by the Data Controller, as well as obtain the portability of personal data provided only if they have been processed by automated means based on consent or on a contract.
Data Subjects can exercise their rights by completing the form available here and sending it to the Data Controller at the email address: privacy@sogedin.it. Data Subjects also have the right to lodge a complaint with the competent Supervisory Authority, i.e. the Italian Data Protection Authority ( www.garanteprivacy.it).
