1.Purposes and legal basis of personal data processing Your personal data are processed for the primary purpose of fulfilling the legal obligations provided for in the field of statistics, including:
1.a To respond to the statistical surveys "IST-00138 Movement of Guests in accommodation establishments" and "IST-00139 Capacity of accommodation establishments", which are compulsory for accommodation facilities and included in the National Statistical Programme (NSP) owned by ISTAT;
1.b Provide data on Guests and their stay to the competent Public Safety Authorities, in accordance with article 109 of the T.U.L.P.S. (Testo Unico Leggi di Pubblica Sicurezza).
2.Data controller The data controller, i.e. the body that determines how and why your data is processed is: Peter Heinrich Braselmann, as legal representative of: Abaye Charm Apartments, Via Aldo Moro 3A, 25080 Soiano del Lago (BS), Italy, who can be contacted by writing an email with the subject: "Privacy" to the email address: info@abaye.it telephone: 0365660033
3.Data subjects Guests of the accommodation facilities and/or tourist rentals.
4.Type of data processed: Common personal data: identification (name and surname, tax code, copy of valid identity document with photograph); personal data (citizenship and state of birth, place and date of birth, residence, etc.); contact data (telephone numbers, e-mail, etc.)
5.Methods of data processing Data processing is carried out with the aid of electronic or otherwise automated means and transmitted via telematic networks. The same are processed on paper. The Data Controller adopts appropriate technical and organisational measures to guarantee a level of security appropriate to the type of data processed.
6.We inform you that, in the absence of your consent for the purposes referred to in point 1 letter a.1, a2. above, it will not be possible to process your personal data, as well as those of your family/group, and this will make it impossible to accommodate you at our facility.
7.Communication and dissemination of personal data Your data may be communicated, for the primary purposes (point 1 letter a.1, a.2) and as fulfilment of legal obligations to autonomous public data controllers such as Provincial and Regional Offices and the Ministry of the Interior. These data will be processed with due and appropriate technical and organisational measures in order to guarantee their confidentiality and security. For the purposes referred to in point 1 letter a), your data will be anonymised and communicated to ISTAT in aggregate form. Such data may also be communicated to third parties (e.g. collaborators), in their capacity as Data Processors, appointed by the Data Controller. The list of said Third Parties is available from the Controller. The recipients of your personal data have been adequately trained to process your personal data and ensure the same level of security offered by the Controller.
8.Data retention periods: Data will be retained for the duration of 5 years.
9. Rights of the data subject You may exercise the rights set forth in Articles 15-22 of EU Regulation 679/2016, where applicable, including the right to rectification, integration or erasure (the so-called right to be forgotten) of your personal data, the right to obtain restriction of processing, the right to data portability, the right to object to the processing of personal data, including profiling. Your requests to exercise your rights should be sent to the e-mail address of the accommodation facility: info@abaye.it or by registered mail with return receipt to the address: via Aldo Moro 3A, 25080 Soiano del Lago (BS), Italy, to the attention of: Peter Heinrich Braselmann, data controller. You also have the right to lodge a complaint with a Supervisory Authority: if you believe that the processing of your data complies with the provisions in force, or if the response to a request with which you have exercised one or more of the rights provided for in Articles 15-2 GDPR is not received within the indicated timeframe or is unsatisfactory, you may refer the matter to a Supervisory Authority. Having read and understood the notice, you are requested to give your consent and authorise the processing of your personal data.
