art. 13 European Regulation 2016/679 (GDPR)
1. Who we are – Data Controller
The data controller is Vittoria Righetti CF RGHVTR03P64Z154O – Via Campagnol di Tombetta, 63 Borgo Roma 37134 Verona (VR), / info@casalorenzoverona.it
2. What data we process – purpose and legal basis
In order to provide the requested service, Casa Lorenzo acquires and processes personal data of users (interested parties), who provide them directly, inserting them on the casalorenzoverona.it website or communicating them to the owner. These are the registration data (name, surname, email address), data necessary for billing (Name, Surname, Email, telephone). Acquisition and processing of this data are necessary to allow the interested party to book the desired room(s).
The data processed are exclusively those necessary and functional to provide the requested service. The legal basis of the processing is therefore represented by the execution of the contract between Casa Lorenzo and the interested party. For this reason, it is not necessary to obtain the consent of the interested party.
3. Mandatory nature of providing data
Failure, partial or incorrect provision of data by the interested party may make it impossible – total or partial – to provide the requested service.
4. Treatment methods
The data is processed solely with electronic and IT tools, stored on IT media and transmitted via the Internet. The treatment takes place at Via Campagnol di Tombetta, 63 Borgo Roma 37134 Verona (VR).
In any case, the processing takes place in compliance with the principles indicated in the GDPR, such as minimization (only strictly essential data is processed), correctness and transparency, as well as adopting the appropriate security measures to guarantee data protection.
There is no automated decision-making process.
5. Recipients – communication of data
The personal data is collected and processed by Casa Lorenzo and may therefore be known to the personnel who, as collaborators or employees, provide services in the interest of the data controller and who, for this purpose, receive specific authorization, together with instructions to ensure compliance with current legislation on privacy. The data may also be communicated to external parties such as managers of web platforms (for example for payment) or subjects in charge of invoicing, for purposes related to compliance with legal obligations or obligations assumed contractually. In these cases, the subjects operate as independent owners or as external managers, appointed and appointed with a specific deed.
The identification data of those present and possibly those relating to the voice will finally be accessible to the speakers of the event followed via videoconference. This processing is functional to the provision of the service.
The data may be transferred to recipients resident in countries outside the European Union, as part of the execution of contracts between Casa Lorenzo and entities that provide hosting services or specific functions necessary for the use of the site. In this case, the Data Controller has verified that adequate guarantees have been provided and that the interested parties have enforceable rights and effective remedies.
6. Shelf life
The data is kept for the time strictly necessary to provide the service and for billing needs.
7. Rights of the interested party
Regarding the processing of data, if the conditions are met, the interested party can exercise the rights provided for by current legislation. In particular:
a) access your personal data held by the Data Controller;
b) obtain the rectification, updating, integration and cancellation of your personal data;
c) obtain the limitation of processing;
d) object to the processing;
e) obtain data portability;
f) lodge a complaint with the supervisory authority (Guarantor for the protection of personal data – Privacy Guarantor).
To exercise these rights, the interested party can contact the following email: info@casalorenzoverona.it
Any contractual termination or in any case any refusal by the interested party to continue the processing does not affect the lawfulness of the processing previously carried out by virtue of the legal basis indicated above.