Privacy Policy Customer information pursuant to the GDPR (General Data Protection Regulation) 679/2016. Dear Customer, we have always been attentive to the protection of the personal data of all our Customers and, for this reason, we are implementing a privacy management system in compliance with the principles dictated by the new Regulation relating to the protection of personal data, applicable starting from from 25 May 2018. Data Controller The Data Controller is Lakes and Mountains Magic Holiday House di Spadacini Pietro - VAT no. 01503200030- via Via F.lli di Dio 74- Omegna (VB) - Italy Below is the Company. Pursuant to article 13 of EU Regulation 679/2016, the Company, as Data Controller, informs you that the processing of personal data, and possibly special categories of personal data (art. 9 EU Regulation), i you and your minor children, provided by you will be treated in a relevant and transparent manner and in compliance with the principles of lawfulness and necessity in compliance with the current provisions on the matter. Purpose of the Processing The processing of personal data will take place for institutional purposes, connected or instrumental to the activity of our Company, and, therefore, to: a) carry out the hotel reception service; b) fulfill legal obligations of a fiscal, accounting and administrative nature; c) fulfill operational and management needs within the Company and inherent to the service provided; d) provide, by e-mail, paper mail or telephone contact, information relating to the products or services provided by the Company; e) send commercial, advertising and promotional initiatives reserved for the Company's customers; f) carry out profiling activities by processing data in an automated or online manner in order to be able to provide personalized promotions based on the user's choices and habits; g) process the data of your minor child/children over whom you exercise parental authority in order to be able to carry out the booking and registration service at the facility. Legal basis of the processing The legal basis of the data processing is given by the specific contractual relationship established and the specific and informed consent of the interested party. Obligatory and optional nature of the provision of data. It being understood that as regards the processing of data aimed at the execution of the contract and the fulfillment of legal obligations referred to in letter a), b), c) of the paragraph "Purpose of the processing" no consent to the processing is necessary, it is specified that: - the provision of data for the purposes referred to above under letters a), b), c) is optional, but necessary for the purposes of carrying out the expected customer services and the lack of consent could have the consequence of not allowing the provision of such services; - the consent to the processing under letters d), e), f) is free and optional and in any case the interested party may object at any time to the processing in question, easily and free of charge, by contacting the Data Controller also through the use of the e-mail, obtaining a rapid response confirming the interruption of such processing; without prejudice to the foregoing, however, any refusal to provide the requested personal data may make it impossible to be promptly updated on the services offered by our company, to take advantage of some advantages reserved for the Company's customers and to obtain personalized promotions on the choices and user habits; - process the data of your minor child/children over whom you exercise parental authority in order to be able to carry out the booking and registration service at the facility. The provision of data and consent to processing for the purposes referred to in letter g) above is mandatory and is necessary for the purposes of providing services to minors. Data processing methods The processing of personal data will take place using paper, IT or telematic tools and with adequate security measures to guarantee the protection and confidentiality of your personal data in compliance with EU Regulation 679/2016. The transfer, storage and processing of user data collected through this site are ensured through appropriate technical measures. All user information is protected with AES 256 Bit encryption. Furthermore, the site is provided over an HTTPS encrypted connection.