ManidiPace OdV

INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to article 13 of Regulation (EU) 2016/679

 
Dear Sir / Madam, pursuant to Article 13 of Regulation (EU) 2016/679, we provide you with the following information:

1. Who we are: ManidiPace OdV, with headquarters in Ballabio (LC), Via Mazzini, 52 mail This email address is being protected from spambots. You need JavaScript enabled to view it. As the Data Controller, we place the utmost attention to the performance of our business security and confidentiality of the personal data of our members. The Data Processor is the owner of the accomodation.

2.Which personal data we process and for what purposes: name, surname, date and place of birth, fiscal code, residence, address, e-mail and telephone number. Our accomodation does not treat sensitive data, meaning "the personal data that can reveal the racial and ethnic origin, the religious, philosophical or other convictions, the political opinions, the accession to parties, unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data that can reveal the state of health and sexual life".

3. Rules governing the processing of data: Article 36 of the Civil Code, the Statute of the association, Article 90 of Law 289 of 2002, Article 148 of the TUIR and in particular paragraphs 3 and 8, Article. 4 paragraph 4 of Presidential Decree 633 of 1972.

4. Obligation to provide data and consequences in case of refusal: The data referred to in point 2 above are mandatory for the purpose of fulfilling the legal obligations related to tourist activity.

5. The processing of data will take place in the manner set out in article 4 n.2) GDPR and more precisely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, inter-connection , blocking, communication, cancellation and destruction of data. To this end, electronic instruments will be used, adequately protected against IT risks, equipped with anti-virus, firewalls and subject to periodic backups and paper supports, by internal subjects specifically appointed and adequately trained in the protection and security of privacy, located and kept at the inside of locked rooms, accessible only to the same appointees.

6. Storage time: The structure will process the personal data for the time necessary to fulfill the purposes referred to in the previous point 2 and in any case for no more than 10 years from data collection, a term beyond which they will be destroyed or rendered nimi, without prejudice to the broader terms of conservation envisaged by the Law.

7. Subjects to whom the data will be communicated: exclusively to the Municipal and Regional Authorities that deal with tourism and to the Lecco Police Headquarters, all this in order to fulfill the legal obligations.

8. You have the right, at any time, pursuant to articles 15 to 20 of EU Regulation no. 2016/679, of: a) requesting confirmation of the existence or otherwise of personal data; b) obtain information about the purposes of the processing, the storage period and any recipients to whom the personal data have been or will be communicated; c) oppose the processing, limit it, obtain the correction and / or deletion of data; d) obtain the portability of the data, that is, receive it from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit it to another data controller without hindrance; e) revoke the consent at any time without affecting the lawfulness of the processing based on the consent given before the revocation; f) make a complaint to the Guarantor for the protection of personal data or to the different control authority that will be set up for the purpose.

9. You can exercise your rights as per the previous art. 8, requesting it to the Data Controller, by registered letter, e-mail. Your request will be satisfied within 30 days of receipt.

10. No data processing feeds an automated decision-making process, including profiling, to the Data Controller or to third parties.