Dear customer,
Find below our Privacy Policy (under art. 13 of Regulation (EU) 679/2016) on the processing of your personal data by Grand Hotel Srl, with registered offices at Via Gonzaga 2, Milan, VAT ID No. 09900920159 (hereinafter referred to simply as the Company), and in connection with the accommodation services the company offers (hereinafter referred to as the “Accommodation Services”).
- Data Controllers:
The controller of the processing of the personal data you disclose at the hotel and during your stay at the hotel is:
- The Company; the processing of personal data is governed by this Privacy Policy;
- Categories of Personal Data
The personal data that the Company collects are: name, surname, residence/address, copy of ID card, e-mail, Tax ID and/or VAT ID No., type of room, any third person you are sharing your stay with, any data related to special problems requiring special care on the part of the staff (hereinafter referred to as the “Data”).
The processing of the data specified herein above by the Company may also include personal data concerning your health (for instance, a physical handicap for which you should ask for a special type of room upon booking) provided that you give your prior consent. Should this be the case, you are guaranteed that the processing shall include only the data and the operations that are essential to fulfil the obligations, even if precontractual, related to providing the Accommodation Services, within the limits of the services and benefits you request upon booking or during your stay at our hotel.
- Purpose and legal basis for processing
Data are process to properly fulfil the contract and/or legal obligations in order to execute the Accommodation Services.
Besides, your Data shall be processed to fulfil the obligations set forth in the ‘Consolidated Law on Public Safety’ (Testo unico delle leggi di pubblica sicurezza) (article 109, Italian R. D. No. 773 of 18.6.1931) requiring that the Police Headquarters should be informed, for the purpose of public safety, of the personal details of visitors following the methods specified by the Ministry of the Interior. The data collected to that purpose shall not be kept at the hotel unless the visitor so authorizes.
Submitting the Data for the purposes specified herein above is necessary (i) to provide Accommodation Services and (ii) to fulfil public safety purposes. To this end, there is an obligation to submit such Data to achieve the abovementioned purpose; failure to submit this data, as well as providing partial or inaccurate data, will prevent the provision of the Accommodation Services you request and therefore, we will not be able to accommodate you at our hotel.
Marketing: Only if your consent has been previously given shall your Data collected be used to send information and/or commercial communications regarding the Company and the hotel at which you have decided to stay. Giving your consent is optional; however, this is necessary to complete the registration and to make use of the communication reception services described herein above. You can cancel your registration to the above service at any time by following the procedure shown in any communication you receive or by sending a specific message to the Company to the addresses specified in Section H – (Contact Details).
- Processing method
Data shall be processed by means of manual and computer systems and by personnel and partners of the Company and/or external individuals duly appointed via an agreement as processors and persons in charge of the processing.
Data shall also be available- for the same purposes for which they were collected- to the processors belonging to the following categories:
- Individuals providing services to manage the IT system and the telecommunications networks belonging to the Company;
- All individuals that supply consulting services to the company about the way it operates;
- Advisors to the Company and any other individuals providing services associated to the Accommodation Service.
The full list of personal data processors is available upon request; send your request to the addresses at the end of this document, in section H (Contact Details).
- Recipients of your Data
In no event shall the data submitted be disclosed.
- Period for which the personal data will be stored
Data collected and processed by the Controller to execute the Accommodation Services can be kept for the limitation period set forth by applicable legislation and tax regulations.
As regards data processing for marketing purposes, as described in Section C herein above, Data are processed no longer than 24 months after they are collected.
- Your Rights?
You have the right to: (I) obtain confirmation as to whether or not personal data concerning you are held; (II) know the purposes and methods of data processing, the recipients of such data, and the period for which personal data will be stored; (III) obtain the rectification or erasure of personal data, or where applicable, the restriction of processing; (IV) object to the processing; (V) where applicable, to receive the personal data concerning you which you have provided to the Company, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the Company; (VI) lodge a complaint with the competent supervisory authority.
- Contact Details
To exercise the abovementioned rights, send an e-mail to the Company to: privacy@grandhotelgardone.it and/or send a letter to Grand Hotel s.r.l. Viale dei Mille, 20, - 20121 Milano (MI).