PROCESSING OF PERSONAL DATA ACCORDING TO THE EU REGULATION artt. 13 e 14 2016/679
Dear customer,
as interested party, i.e. natural person to whom the provided data refer to, Venezia Spiagge S.p.A., company with registered office in Sestiere San Marco, 30124 – Palazzo Comunale Ca’ Farsetti – Tax ID Code/VAT number 02532890270, as treatment owner (from now called “Company” or “Owner”), inform you as it follows, according to the article n.13 of the Regulation (EU) 2016/679 (which now is called “GDPR”).
1. WHICH PERSONAL DATA OF YOURS CAN BE COLLECTED
It can be collected the following personal data categories, which concern Yourself (the term “Personal Data” will refer to all the following categories, here conjunctly reported):
– Birth information and contact data – information concerning name, surname, birthday and place of birth, residence, telephone number, e-mail address, gender, tax id code;
– Payment data – information concerning the rent and its payment (for example debit or credit card number, bank account number and other payment methods, as well as any information on the payment of any sums still due);
– Further information – information concerning the bath resort, rent type and rental period.
2. HOW WE COLLECT YOUR PERSONAL DATA
This Company collects and treats Yours Personal Data by virtue on the basis of Yours rental request for the summer season.
If You give us someone else’s personal data, You have to be ensured that the interested party are aware of this Privacy Policy.
This Company asks You to maintain Your contacts update, and the Company will inform You about any changes.
3. REASONS FOR WE ARE COLLECTING YOUR PERSONAL DATA
The Company could use Your data for some of the following purposes, as it is indicated by the juridical precondition time by time.
a) Management of rental request and connected activities.
The Company will use Your personal data to manage Your rent request for the bathing season, to proceed at the facility’s assignment and to enter into contractual relationship, as well as for the execution of the related activities.
Precondition for the data processing: the contract’s execution, in which You represent a party, or the precontractual action execution implemented as You request ex. art. 6, first clause lett. b) of the GDPR.
Your Personal Data contribution is mandatory for the exam, the creation and the management of the contractual relationship of the bathing season. Without it, the Company will not be able to examine Your rental request and it will not be able to create a contractual relationship with You.
b) Communications regarding product’s promotion and similar facilities to the one purchased before, in accordance with art. 130, 4th clause, of the Privacy Code.
The Company will treat your e-mail address to sent You promotion communication and material related to products and facilities similar to Your previous purchase (for example, regarding a previous rent request or rent assignation for the bathing season).
Precondition for the data processing: it is in the Company’s legit business, as written in ex art. 6, first clause, lett. f) of the GDPR to maintain an efficient contractual relationship with You.
The e-mail address’s provision is optional, its absence will not have implication on the contractual relationship.
c) To comply with the juridical constrained request asked by the juridical authority, furthermore to resolve the legal duties defined by laws, rules or disposition.
The Company could use Your Personal Data with the purpose to comply to the request of the judicial authority, as saying to accomplish to a legal obligation.
Precondition for the data processing: as to accomplish any legal obligation to which the Company is subject to ex art. 6, first clause lett. c) of the GDPR. The provision of the personal data for this purpose is mandatory, because without it the Company will find itself in the impossibility to comply to specific legal duties.
d) Right’s defence during judicial, administrative or extrajudicial trial, and during dispute situation arose from the contractual relationship.
The Company can use Your Personal Data in defence of its rights, but also to take action, more over to make demand against You or against a third party.
Precondition for the data processing: it is in the legit interest of the Society ex art. 6, first clause, let. f) of the GDPR in the protection of its own rights. In this case, a new specific contribution is not required, as the Company will pursuit this new purpose, when it would be needed to, treating the collected data as to reach the objectives above, which will be considered suitable with this rule (even in reason of the context in which the data are collected, their nature and appropriated guarantee, further than the link between the purposes above, as written in points from a) to c), and this last one).
4. HOW WE KEEP YOUR DATA SAFE
The Company will use proper security measures, as to improve Your Personal Data security, integrity and accessibility.
All of Your Personal Data are present in our protected server or in the ones of our suppliers (or in paper copies properly stored), and they are accessible and usable according to our standard and to our security policies (or to our suppliers’ equivalent measures).
5. HOW LONG WE ARE KEEPING YOUR DATA WITH US
We will keep Your personal data with us for the time needed to pursuit the contract’s purposes for which they have been collected or any legit related reason. For those reasons, as Your data are kept with two different purposes, we will keep them until the latest one expires; nevertheless, we will not treat Your Data for the goals which conservation period has expired.
The access to Your Data is restricted only to the ones who needs them for relevant purposes. Your Personal Data which are no more needed, or for which there are no more juridical requirements for their conservation, are being irreversibly anonymized (as they can be no more utilized) or safely erased.
Under below there are the preservation times related to the different purposes mentioned before:
a) Fulfilment of the contractual obligation: Personal Data are treated to fulfil to any contractual obligation, and it could be kept by the Company for all the contractual period, however no more than 10 years after the end of the contract. As to verify any possible outstanding matter including accounting document (such as invoices);
b) Information transmission for commercial and promotion purposes: Your Personal Data will be used for those reasons until 30 days after Your objection to receive any further information.
c) Purposes related within the obligation related to law’s duties, or obligations related to European code or European regulation, or the requirements/measurements given and legitimated by laws or by security or control authorities. The Personal Data treated with those purposes could be stored strictly for the period needed to the fulfilment of the contractual obligation;
d) Right’s defence during juridical, extrajudicial and administrative trial, and during disagreement related to the facilities offered: Your Personal Data used for this purpose could be preserved for the time needed by the Company to preserve its rights.
6. WITH WHOM WE CAN SHARE YOUR PERSONAL DATA
Our properly authorized employees can access to Your Personal Data, as well as our external suppliers which can be elected, if it necessary, responsible of the treatment.
We kindly ask you to contact us at the following e-mail address privacy@veneziaspiagge.com if You would like to have the list of all the treatment responsibles and of all the other subjects to which Your Data have been communicated to.
7. INTERNATIONAL MOVEMENTS
The Company informs You that Your Personal Data will be processed, for the purposes written in the paragraph n.3, only and exclusively within the countries of the European Union (EU) or to the European Economic Area (EEA).
8. YOUR RIGHTS IN DATA PROTECTION SUBJECT AND YOUR RIGHT REGARDING DATA PROTECTION MATTER AND YOUR RIGHT TO MAKE RECLAIM AT THE CONTROL AUTHORITIES
You have the right to obtain from the Company, after juridical assumption substance at the base of Your request:
a) The access to Your Personal Data, as expected by the art. 15 of GDPR;
b) The correction or the integration of Your Personal Data held by us which are incorrect, as expected by the art. n. 16 of GDPR;
c) The deleting of Your Personal Data for which the Company has no more juridical assumption substance for the treatment, as expected by the art. n.17 of GDPR;
d) The Treatment restriction of Your Personal Data, when one of the foreseen hypotheses by the art.18 of the GDPR will occur;
e) The copy of Your Personal Data that You had given to the Company in a common structural form, which must be readable by any automatic device and their spread to any other treatment’s owner (so called portability), as designed by the art.20 of the GDPR.
Opposition Right: besides the rights above, You have the right to object at any time to Your Personal Data’s treatment, because of any reason related to Your specific situation, in every moment. The objection application must be addressed to the following e-mail address: privacy@veneziaspiagge.com or on paper trough recorded delivery letter A/R addressed to the Company’s legal residence.
In the case You consider that Your Personal Data Treatment is being violated, You have the right to reclaim to the Personal Data Security’s Guarantor by using the contacts reported on the following website www.garanteprivacy.it, or in the appropriate judicial office.
9. CONTACTS
The Company’s contact informations, as treatment’s owner, are the following ones: Venezia Spiagge S.p.A. with legal residence in Sestiere San Marco, 30124 – Palazzo Comunale Ca’ Farsetti – Tax ID Code/ VAT number: 02532890270, PEC veneziaspiagge@pec.veneziaspiagge.it, E-mail veneziaspiagge@veneziaspiagge.com, tel. 041 5261249.
As to exercise Your rights, You may contact the Company at the following e-mail addresses: E-mail privacy@veneziaspiagge.com, PEC veneziaspiagge@pec.veneziaspiagge.it or on paper trough recorded delivery letter A/R addressed to the Company’s legal residence.
The Company is supported by a Personal Data Protection Responsible (“RPD”, also known as Data Protection Officer – “DPO”) designed in accordance with art. 37 of GDPR, which can be contacted at the following e-mail address: dpo@veneziaspiagge.com.
The undersigned declares to have read the treatment above.
Lido di Venezia, ……………………………………… Signature …………………………………………………………………..