Privacy Policy Customer information pursuant to the GDPR (General Data Protection Regulation) 679/2016. Dear Customer, we have always been attentive to the protection of the personal data of all our Customers and, for this reason, we are implementing a privacy management system in compliance with the principles dictated by the new Regulation relating to the protection of personal data, applicable starting from from 25 May 2018. Data Controller The Data Controller is Lakes and Mountains Magic Holiday House di Spadacini Pietro - VAT no. 01503200030- via Via F.lli di Dio 74- Omegna (VB) - Italy Below is the Company. Pursuant to article 13 of EU Regulation 679/2016, the Company, as Data Controller, informs you that the processing of personal data, and possibly special categories of personal data (art. 9 EU Regulation), i you and your minor children, provided by you will be treated in a relevant and transparent manner and in compliance with the principles of lawfulness and necessity in compliance with the current provisions on the matter. Purpose of the Processing The processing of personal data will take place for institutional purposes, connected or instrumental to the activity of our Company, and, therefore, to: a) carry out the hotel reception service; b) fulfill legal obligations of a fiscal, accounting and administrative nature; c) fulfill operational and management needs within the Company and inherent to the service provided; d) provide, by e-mail, paper mail or telephone contact, information relating to the products or services provided by the Company; e) send commercial, advertising and promotional initiatives reserved for the Company's customers; f) carry out profiling activities by processing data in an automated or online manner in order to be able to provide personalized promotions based on the user's choices and habits; g) process the data of your minor child/children over whom you exercise parental authority in order to be able to carry out the booking and registration service at the facility. Legal basis of the processing The legal basis of the data processing is given by the specific contractual relationship established and the specific and informed consent of the interested party. Obligatory and optional nature of the provision of data. It being understood that as regards the processing of data aimed at the execution of the contract and the fulfillment of legal obligations referred to in letter a), b), c) of the paragraph "Purpose of the processing" no consent to the processing is necessary, it is specified that: - the provision of data for the purposes referred to above under letters a), b), c) is optional, but necessary for the purposes of carrying out the expected customer services and the lack of consent could have the consequence of not allowing the provision of such services; - the consent to the processing under letters d), e), f) is free and optional and in any case the interested party may object at any time to the processing in question, easily and free of charge, by contacting the Data Controller also through the use of the e-mail, obtaining a rapid response confirming the interruption of such processing; without prejudice to the foregoing, however, any refusal to provide the requested personal data may make it impossible to be promptly updated on the services offered by our company, to take advantage of some advantages reserved for the Company's customers and to obtain personalized promotions on the choices and user habits; - process the data of your minor child/children over whom you exercise parental authority in order to be able to carry out the booking and registration service at the facility. The provision of data and consent to processing for the purposes referred to in letter g) above is mandatory and is necessary for the purposes of providing services to minors. Data processing methods The processing of personal data will take place using paper, IT or telematic tools and with adequate security measures to guarantee the protection and confidentiality of your personal data in compliance with EU Regulation 679/2016. The transfer, storage and processing of user data collected through this site are ensured through appropriate technical measures. All user information is protected with AES 256 Bit encryption. Furthermore, the site is provided over an HTTPS encrypted connection. Data storage In compliance with the principles of proportionality and necessity, the data will not be stored for periods longer than those necessary for the achievement of the purposes indicated above, the service offered and/or specific legal provisions. The recipients of the personal data The data collected will be processed exclusively within the scope of the aforementioned purposes and may be communicated to companies controlled, affiliated or otherwise connected to the Group, both in Italy and abroad exclusively for the management of the services offered. In compliance with the appropriate security measures implemented by the Data Controller, your data and those of your child/children under 18 may also be communicated to public security bodies and other public and private entities for the fulfillment of the obligations required by law, including tax, administrative, financial and similar. Under no circumstances will the data be disclosed. For certain processes, strictly related to the purposes referred to in letter e), f) of the paragraph "Purpose of processing", the Data Controller may provide the user's data to third parties in a relevant and transparent manner in accordance with the current provisions on the matter. Rights of the interested party The person to whom the personal data have been communicated may exercise his/her rights towards the Data Controller, pursuant to Article 15 and following of EU Regulation 679/2016, i.e. he/she may obtain confirmation of the existence of his/her personal data and request their communication in an intelligible form. Furthermore, he/she will have the right to obtain access, updating, rectification, integration and deletion of the data or limitation of the processing. Finally, he/she will have the right to object, in whole or in part, for legitimate reasons, to the processing of his/her personal data, even if pertinent to the purpose of the collection, in addition to the right to data portability and to lodge a complaint with the supervisory authority, as well as to the sending of advertising or direct sales material or for carrying out market research or commercial communication, by contacting the Data Controller. Cookie Policy For information relating to the use of cookies through the site, the interested party is asked to read the relevant Cookie Policy. For any further information and to assert the rights granted to you by the European Regulation, you can contact: lakesmountainsmagic@gmail.com
