Privacy disclaimer

PRIVACY NOTICE
ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679

Data Subjects: Website visitors, service users.

"FELDBERG S.R.L.", in its capacity as Data Controller of your personal data, pursuant to and for the purposes of Regulation (EU) 2016/679 hereinafter ’GDPR’, hereby informs you that the aforementioned legislation provides for the protection of data subjects regarding the processing of personal data, and that such processing will be based on principles of correctness, lawfulness, transparency, and the protection of your privacy and rights.
In order to achieve its purposes related to relationship management, the Controller needs to acquire personal data, such as, by way of example, name and surname, telephone or mobile phone number, email address, tax code. Your personal data will be processed in accordance with the legislative provisions of the above-mentioned regulation and the confidentiality obligations specified therein.

Purposes of processing
Service provision: your data will be processed to handle requests received through the online booking form available on the website www.hotelfeldbergriccione.com of "FELDBERG S.R.L.".

The legal basis for processing is pre-contractual and contractual in terms of data processing being required for operations preliminary to purchase and for the purchase itself; as well as the fulfillment of legal obligations by the controller for tax and accounting purposes.

Consequences of failure to communicate data: Data processing is necessary to use the online booking service in order to implement the purposes indicated above and to ensure proper management of the relationship. Filling out the booking form using your social media profile is not mandatory, as it can also be done manually by entering the requested data. Any failure to communicate, or incorrect communication of, mandatory information may make it impossible for the Controller to guarantee the adequacy of the processing itself.

Optional purposes: Subject to your free consent, the Controller may also process your data to carry out market research, statistical analysis, and promotional activities, including the sending of advertising and promotional material - via email, post and/or SMS and/or phone calls - other than those necessary to guarantee the execution of the relationship.
The legal basis for processing is the data subject’s consent.

Consequences of refusal of optional purposes: Providing data for the above-mentioned purposes is optional, and your refusal to allow processing will not affect the continuation of the relationship or the adequacy of the processing itself. In any case, you may exercise your right to withdraw consent at a later time, either through the received emails (at the bottom of the text) or by requesting it via the controller’s contact channels.

Processing methods: Processing is carried out using manual and/or IT and telematics tools, in order to guarantee the security, integrity, and confidentiality of data in compliance with physical and logical organizational measures established by applicable regulations, minimizing the risks of destruction or loss, unauthorized access, alteration, and unauthorized disclosure in accordance with Articles 6 and 32 of the GDPR.

Recipients:
To carry out certain activities, or to support the operation and organization of activities, some data may be made known or communicated to recipients. These entities are divided into:
Third Parties (communication to: natural or legal persons, public authorities, agencies, or another body other than
the data subject, the data controller, the data processor, and persons authorized to process personal data) including:
•  Banking institutions, payment service providers for the management of financial transactions and collections;
•  Companies managing traditional or digital postal services;
•  Entities/Bodies to whom data disclosure is required by legal obligation, or whose authority to access your data is recognized by
legal requirements;
•  Any other subjects to whom data communication is necessary to achieve the purposes indicated above.
Data Processors (the natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller):
•  Companies, consultants, and independent professionals appointed for the management of tax,
administrative, accounting compliance, legal advisory activities, etc.;
•  IT, web, or other service providers required to achieve the necessary purposes for
managing the relationship.
Within the company organization, your data will be processed solely by personnel expressly authorized by the
Controller, ensuring the execution of a confidentiality agreement.

Dissemination: Your personal data will not be disseminated in any way.

Data transfer to third countries:
The controller does not transfer personal data to non-EU countries. However, by consenting to analytical and/or profiling cookies, your data may be transmitted to the USA, a country that currently does not provide adequate guarantees for the processing of your data; however, Google has declared the implementation of supplementary security measures that the Controller has evaluated as sufficient.

Retention period: Please note that, in accordance with the principles of lawfulness, purpose limitation, and data minimization pursuant to Art. 5 of the GDPR, the retention period for your personal data is set for a period not exceeding the fulfillment of the purposes for which they are collected and processed. If a contract is executed, this retention period may end upon termination or withdrawal from the contract; the same data may be stored, where applicable, for a further period to manage potential litigation, the legal basis for such storage being the legitimate interest of the data controller. The retention period for marketing-related processing is functional to the purposes pursued by the controller, and in any case not exceeding 3 years from the last contact or response received.

Data Controller: The Data Controller, pursuant to law, is "FELDBERG S.R.L.", with registered and operational headquarters in Via Fucini, 10 – 47838 Riccione (RN), VAT No.: 01746430402, in the person of its legal representative pro tempore. By sending an email to the following address info@hotelfeldbergriccione.com or a fax to 0541 - 640025, you may request further information regarding the provided data.

The Data Protection Officer ("DPO") is Studio Paci & C. Srl (Contact person Dr. Gloriamaria Paci), reachable at the following address: dpo@studiopaciecsrl.it, telephone: 0541 – 1795431, and Certified Email (PEC): studiopaciecsrl@pec.it.
 
EU Reg. 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22, 23 - Rights of the Data Subject
1.  The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exist, even if not yet registered, and their communication in an intelligible form.
2.  The data subject has the right to obtain information regarding:
a.  the origin of the personal data;
b.  the purposes and methods of processing;
c.  the logic applied in case of processing carried out with the aid of electronic instruments;
d.  the identification details of the controller, processors, and designated representative pursuant to Article 5,
paragraph 2;
e.  the entities or categories of entities to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, processors, or authorized personnel.
3. The data subject has the right to obtain:
a.  updating, rectification or, when interested, integration of the data;
b.  erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is not necessary for the purposes for which the data were collected or subsequently processed;
c.  certification that the operations referred to in letters a) and b) have been brought to the attention, including as regarding their content, of those to whom the data were communicated or disseminated, except where this proves impossible or involves a effort manifestly disproportionate to the protected right;
d.  data portability.
4. The data subject has the right to object, in whole or in part:
a.  on legitimate grounds, to the processing of personal data concerning him or her, even if relevant to the purpose of the collection;
b.  to the processing of personal data concerning him or her for the purpose of sending advertising material, direct selling, or for carrying out market research or commercial communication.

Complaint: Data subjects, where the requirements are met, also have the right to lodge a complaint with the Data Protection Authority as the supervisory authority according to the established procedures. For any further information, and to assert the rights granted to you by the European Regulation, you may contact the data controller using the contact details provided above.

Consent
Form for obtaining data subject consent

Your consent for marketing purposes will be recorded (IP address, email, date, and time) by checking the box below the email input area, or following the placement / clicking on the dedicated checkbox, jointly with pressing the "submit" / "ok" button. Such consent will be stored to prove its provision and allow you to revoke it at any time, alongside all other rights set forth above.