Privacy disclaimer

Name: Hotel Tiffany's Riccione
Address: Lungomare della Costituzione, 19, Riccione (RN), Emilia Romagna, 47838, Italia
Telephone: +39 0541 648390

INFORMATION
ARTICLE 13 AND 14 OF REGULATION (EU) 2016/679

Interested Parties: Potential customers.
“HOTEL TIFFANY'S SRL”, in its capacity as Data Controller of your personal data, pursuant to and for the purposes of Regulation (EU) 2016/679 hereinafter 'GDPR', hereby informs you that the aforementioned legislation provides for the protection of interested parties with respect to the processing of personal data and that such processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights. To achieve its purposes, relating to the management of the relationship, the Data Controller needs to acquire personal data, such as, by way of example, the name and surname, telephone or mobile number, email address, tax code.
Your personal data will be processed in accordance with the legislative provisions of the aforementioned legislation and the confidentiality obligations set out therein.

Purpose of processing
Quote request: your data will be processed to manage requests received via the online booking form available on the "HOTEL TIFFANY'S SRL" website www.hoteltiffanysriccione.com.

The legal basis of the processing is pre-contractual and contractual in the terms in which data processing is envisaged for operations preliminary to the stay; as well as the fulfillment of legal obligations by the owner for tax and accounting purposes.

Consequences of failure to communicate: The processing of data is necessary for the use of the online booking service in order to implement the purposes indicated above and guarantee the correct management of the relationship. Any non-communication, or incorrect communication, of any of the mandatory information may make it impossible for the Data Controller to guarantee the adequacy of the processing itself.

Optional purposes:
a) Subject to your free consent, the Data Controller may also process your data possibly to satisfy market surveys, statistics and for promotional activities also relating to the sending of advertising and promotional material - via e-mail, post and/or text message and/or telephone calls or possibly via WhatsApp (subject to consent) - other than those necessary to guarantee the execution of the relationship.
The legal basis of the processing is the consent of the interested party.
b) Subject to your consent for the use of WhatsApp, given by clicking on the box next to your mobile number, in order to make communications quicker and more effective, we intend to use this communication channel. You have the right to disable the use of WhatsApp at any time from the features of WhatsApp itself, for example by blocking the number, or from the methods indicated below for the exercise of your rights via email. The legal basis of the processing described above is the consent of the interested party.

Consequences of refusal to the optional purposes: The provision of data is optional for you with regard to the aforementioned purposes, and your possible "refusal to processing" both for the optional purpose for marketing (a) and for the use of Whatsapp (b) , does not compromise the continuation of the relationship or the adequacy of the treatment itself. With regards to "optional purpose b)", your possible refusal does not allow you to receive the quote via the WhatsApp messaging service but only via e-mail communication. In any case, you will be able to exercise the right to withdraw consent subsequently, either through the emails received (at the bottom of the text), or by requesting it through the owner's contact channels.

Processing methods: The processing is carried out with manual and/or IT and telematic tools, in order to guarantee the security, integrity and confidentiality of the data in compliance with the physical and logical organizational measures provided for by the provisions in force, in order to minimize the risks of destruction or loss, unauthorized access, modification and unauthorized disclosure in compliance with the methods set out in the articles. 6, 32 of the GDPR.

Recipients:
To carry out certain activities, or to provide support for the functioning and organization of the activity, some data may be brought to the attention of or communicated to recipients. These subjects are divided into:
Third parties (communication to: natural or legal persons, public authorities, service or other body other than the interested party, the data controller, the data controller and the authorized persons responsible for the processing) including:
• Companies that manage traditional or computerized postal services;
• Any other subjects whose communication of data is necessary to achieve the purposes indicated above.
Data controllers (the natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller):
• Providers of IT services, web, or other services necessary to achieve the purposes necessary for relationship management.
Within the company structure, your data will be processed only by personnel expressly authorized by the Data Controller, with assurance of adoption of a confidentiality agreement.

Dissemination: Your personal data will not be disclosed in any way.

Transfer of data to third countries: The owner uses a CloudFare hosting provider located in the USA Non-EU country, the existence of adequacy decisions for the recipient country by the Commission has been verified, the signing of standard contractual clauses, the verification of the adoption of any additional measures to implement recommendation 01/2020 EDPB.

Retention period: We inform you that, in compliance with the principles of lawfulness, limitation of purposes, data minimization, pursuant to art. 5 of the GDPR, the retention period of your personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed. If a contract is signed, this retention period may cease upon expiry. or withdrawal of the contract, the same data may be retained, where applicable, for a further period of time for the purpose of managing any disputes. The retention period for data processing relating to marketing is functional to the purposes pursued by the data controller, and in any case not exceeding 3 years from the last contact or feedback received.

Data Controller: the Data Controller, pursuant to the “HOTEL TIFFANY'S SRL” legislation, with registered and operational headquarters in Lungomare Sicurezza, 19 – 47838 Riccione (RN), VAT number: 03257160402 in the person of its legal representative pro tempore. By sending an e-mail to the following address info@hoteltiffanysriccione.com or a fax to the number 0541-644136 you can request further information regarding the data provided.

The Data Protection Officer (“DPO”) is Studio Paci & C. Srl (Contact Officer Dr. Gloriamaria Paci) who can be contacted at the following numbers: dpo@studiopaciecsrl.it and telephone: 0541 - 1795431.

EU Reg. 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22, 23 - Rights of the interested party
1. The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in an intelligible form.
2. The interested party has the right to obtain the indication:
a. the origin of the personal data;
b. of the purposes and methods of processing;
c. of the logic applied in case of processing carried out with the aid of electronic instruments;
d. the identification details of the owner, managers and representative designated pursuant to article 5, paragraph 2;
e. the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as designated representatives in the territory of the State, managers or agents.
3. The interested party has the right to obtain:
a. updating, rectification or, when interested, integration of data;
b. the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
c. the certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means that are manifestly disproportionate to the protected right;
d. data portability.
4. The interested party has the right to object, in whole or in part:
a. for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b. to the processing of personal data concerning him for the purposes of sending advertising material or direct sales or for carrying out market research or commercial communication.

Complaint: The interested parties, if the conditions are met, also have the right to lodge a complaint with the Guarantor as supervisory authority according to the established procedures. For any further information, and to assert the rights recognized to you by the European Regulation, you can contact the data controller at the references above.

Consent
Formula for acquiring the interested party's consent

Your consent for marketing purposes will be recorded (IP address, e-mail, date and time) by ticking the box below the insertion of the email, or following the inclusion/clicking in the appropriate box, and together with the pressing of the “send” / “ok” button. This consent will be archived to prove its provision and allow you to revoke it at any time, in addition to all the other rights set out above.