​

INFORMATION PURSUANT TO ART. 13 OF EU REGULATION 679/2016 AND CONSENT

Dear Customer,
we wish to inform you, pursuant to Article 13 of EU Regulation no. 679/2016, that your personal data will be processed correctly and transparently, for lawful purposes and protecting your privacy and your rights.

DATA CONTROLLER AND DATA PROTECTION OFFICER The data controller is Borgo di Gallano in the person of Mr. ALDO BECCA born in Foligno on 01.09.1934 (C.F. BCCLDA34P01D653R) with domicile in loc. Gallano – Valtopina (PG). The Data Controller can be contacted via certified e-mail at gallanoimmobiliaresrl@pecstudio.it or email at info@borgodigallano.com or by registered mail c/o Gallano Resort Umbria at Loc. Gallano Valtopina (PG).

PURPOSE OF DATA PROCESSING
The processing will also be carried out with the aid of IT tools for the following purposes:
1. to fulfill the obligation set forth in Article 109 of R.D. 18.6.1931 n. 773, which requires us to register and communicate to the Police Headquarters the personal details of the guests staying;
2. to fulfill the current administrative, accounting and tax obligations;
3. to carry out the function of receiving messages and telephone calls addressed to you;
4. to speed up the registration procedures in the event of your subsequent stays at our facility.
5. to send you our promotional messages and updates on the rates and offers practiced. We would also like to inform you that the provision of your data for the processing referred to in points 1 and 2 is mandatory, and in case of refusal to provide them we will not be able to host you in our facility. If you wish for the processing referred to in points 3, 4 and 5 to be carried out, you will instead have to provide us with your consent. However, consent may subsequently be revoked by objecting to the processing. For any further information, and to assert the rights recognized to you by Article 13 of the GDPR (EU Regulation 679/2016), you may contact the Data Controller.

DATA STORAGE
Your personal data, subject to processing for the purposes indicated above, will be retained for the duration of the stay and, subsequently, for the time in which the Facility is subject to retention obligations for tax purposes or for other purposes provided for by law or regulation.

DATA COMMUNICATION
Your personal data may be communicated, in addition to the competent Police Headquarters, to: 1. consultants and accountants or lawyers who provide services functional to the purposes indicated above;
2. banks and insurance institutions who provide services functional to the purposes indicated above; 3. subjects who process the data in compliance with specific legal obligations;
4. judicial or administrative authorities, for the fulfillment of legal obligations.

CUSTOMER RIGHTS
The rights recognized to you by the GDPR include those of:
requesting the Facility access to your personal data and information relating to them; the rectification of inaccurate data or the integration of incomplete data; the deletion of personal data concerning you (if one of the conditions indicated in art. 17, paragraph 1 of the GDPR occurs and in compliance with the exceptions provided for in paragraph 3 of the same article);
the limitation of the processing of your personal data (if one of the hypotheses indicated in art. 18, paragraph 1 of the GDPR occurs);

A) request and obtain from the Facility - in the cases in which the legal basis of the processing is the contract or consent, and the same is carried out by automated means - your personal data in a structured and machine-readable format, also for the purpose of communicating such data to another data controller (so-called right to portability of personal data);

B) object at any time to the processing of your personal data in the event of particular situations that concern you;
C) withdraw your consent at any time, limited to the cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example, date and place of birth or place of residence), or particular categories of data (for example, data that reveal your racial origin, your political opinions, your religious beliefs, your state of health or sexual life). The processing based on consent and carried out prior to its revocation, however, retains its lawfulness;
D) lodge a complaint with a supervisory authority (Data Protection Authority – www.garanteprivacy.it).

I, the undersigned

Name: ______________________________________________________

Surname: ______________________________________________________

Mail: ______________________________________________________

pursuant to the GDPR (EU Regulation no. 679/2016), having received the information on the processing of my personal data:

□ I authorize / □ I do not authorize the Borgo di Gallano  to communicate externally data relating to my stay for the exclusive purpose of allowing the function of receiving messages and phone calls addressed to me;
□ I authorize / □ I do not authorize the Borgo di Gallano  to store my personal details in order to speed up the registration procedures in the event of my subsequent stays; □ I authorize / □ I do not authorize the Borgo di Gallano to send its promotional messages and updates on the rates and offers practiced to my home.

Date _______

Signature______________________________________________________