INFORMATION ON THE PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH EUROPEAN REGULATION 2016/679 (art. 13) AND THE NATIONAL LAWS IN FORCE.

We would like to inform you that your personal data provided by you, will be processed by OKAY GROUP SrL Via Ignazio Silone s.n.

64013 Mosciano Sant’Angelo (TE) Tel: 347 2930945 mail info@hotellavilla.it which, as Data Controller, has put in place appropriate technical and organizational measures to ensure its protection . Personal data is information concerning an identified or identifiable natural person (“data subject“). “Processing” consists of operations performed with computer or paper-based tools to (by way of example but not limited to) collect, organize, and store personal data.

What personal data do we process?

We process non-particular personal data (first name, last name, address, date and place of birth, telephone numbers, email, IP, tax code, bank details) to enable you to take advantage of the services offered by the website https://hotellavilla.it/ (“site”) and fulfill the resulting legal obligations.

In addition, according to the purpose of offering you an optimal reception, we may also need to process special data, only following your specific request (in this case in the case of spontaneously communicated food intolerances).

Why (legal basis and purpose) and for how long do we process them?

1. 1. contact The owner:to receive responses to requests for information, suggestions, criticism, assistance on site services: the provision is optional and requests will reach the owner only in case of explicit consent.
   2. Send promotional communicationstobe updated on services rendered by the Holder and the organization of recurring activities and/or events: the provision is optional and communications will be sent only in case of explicit consent.
   3. Submitting applications for “works with Us” and/or registering in the restricted area to be updated on services rendered by the Owner and the organization of recurring recruitment activities and/or contractual or pre-contractual activities.
   4. To offer personalized service according to the specific need spontaneously expressed by the person concerned: to coordinate the organization of any needs that may arise during the period of stay at the facility. In this case, the data provided will be pseudonymized, that is, made not directly traceable to the data subject.

In case 1 and case 4, the data will be kept only for the purpose of handling the request for which they were given and therefore within the time strictly necessary to fulfill the communication/organization activities of the same, with subsequent definitive deletion.

In case 2, data will be retained until consent is revoked, with renewal of consent within five years of its provision.

In case 3, data will be kept for up to one year from the time of application submission.

Who will know your data?

Personal data may be disclosed to public authorities who make a justified request, if such disclosure is required by law. The data may be disclosed to Data Processors (appointed pursuant to Art. 28 EU Reg 2016/679) or authorized or designated internal staff (Art. 29 EU Reg – Art. 2 quaterdecies Legislative Decree 101/2018), adequately instructed and trained for this purpose by the Data Controller. An updated list of Data Processors can be obtained from the Controller.

Where are your data processed?

The processing will be carried out on the premises of the Owner or its Managers, on servers located in the territory of the European Union, using manual and computerized procedures, in compliance with all the necessary precautions to ensure the security and confidentiality of the information assumed.

What are your privacy rights and who should you contact?

In relation to the aforementioned processing, the data subject may exercise all the rights set forth in Articles 15-22 of the European Regulation 2016/679 (including: access, rectification, cancellation, restriction, opposition, portability where this does not conflict with legal norms or contractual obligations and is technically possible), by contacting the Data Controller by writing an email to direzione@okaygroup.eu or by calling 347 2930945 or by written communication addressed to the headquarters OKAY GROUP SrL Via Ignazio Silone s.n.c. 64013 Mosciano Sant’Angelo (TE), or to the Data Protection Officer (DPO) Avv Diego Perini diego@studiolegalediegoperini.it

It is, in addition, always possible to file a complaint with the supervisory authority www.garanteprivacy.it.

With regard to the processing of one’s own data based on consent, the data subject has the right to revoke that consent at any time without affecting the lawfulness of the processing based on the consent given before revocation.

The full texts of Reg. EU 2016/679 and applicable national data protection laws are available at www.garanteprivacy.it.