Privacy statement pursuant to EU regulation 679/2016

Dear Sir/Madam,
We wish to inform you that Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and the free movement of such data, provides for the protection of persons and other subjects regarding the processing of personal data.

According to the law, this processing will be based on the principles of clarity, correctness, lawfulness, easy accessibility, and transparency, as well as the protection of your privacy and your rights.

LA BETTOLA DEL BUTTERO srl, VAT No. 00092790559, with registered offices at Lungotevere delle Navi No. 19 flat No. 5, 00196 Rome and administrative offices at Via dei Pini No. 2 Fabro TR, e-mail: info@labettoladelbuttero.com, Certified e-mail labettoladelbuttero@cert.postecert.it, in its Hotel and Restaurant facilities in Via dei Pini No. 2 Fabro TR carries out its receptive activities and on the basis of Regulation (EU) 2016/679 of the European Parliament and Council dated 27 April 2016, “General Data Protection Regulation” – GDPR on the protection of individuals with regard to the processing of personal data, as well as on the free movement of such data and repealing Directive 95/46/EC, provides that:

1. THE LAWFULNESS OF THE PROCESSING (ARTICLE 6).

Contractual obligations – Legal obligations

 1a. Processing is required so that the data controller can fulfil its legal obligations;

Legitimate interests of the data controller

 1b. Processing is required so that the data controller can pursue its legitimate interests.

2. INFORMATION COLLECTED FROM THE DATA SUBJECT (ARTICLE 13)

“LA BETTOLA DEL BUTTERO srl” collects personal data from the data subject (clients/suppliers) and processes the personal data provided during subscription to the website www.labettoladelbuttero.com for the purposes described below,

2a  –   The data controller: “LA BETTOLA DEL BUTTERO srl”, VAT No. 00092790559 with registered offices at Via Lungotevere delle Navi No.19 flat No. 5, 00196 Rome and administrative offices at Via dei Pini No. 2 Fabro TR, e-mail: info@labettoladelbuttero.com, Certified E-mail: labettoladelbuttero@cert.postecert.it, telephone number 0763 832063

2b  –   Data Protection Officer’s Contact: the obligation to nominate the data protection does not pertain in this case;

2c  –   Purpose of the processing and legal basis:

2ci –  Processing of data needed to fulfil the administrative, contractual, and legal obligations:
“LA BETTOLA DEL BUTTERO srl” processes data if needed for the correct management of subscriptions and to manage availability requests as well as the purchase of services if the client has purchased or requested these services. In this case, the data will be processed for the execution of the request and, therefore, to provide the requested services and all the related activities (information, invoicing, etc.), including all processing required by law in relation to these services.

2d  –   Legitimate interests:
Personal data concerning browsing is processed for the legitimate interest of the proper functioning of the website mentioned above and to provide the user with a better browsing experience. Please read the specific “Extended Cookies Information Policy” for more information on browsing data.

2e  –  Recipients and Categories of the processed data:
With regard to the purposes expressed in the section 2ci, the recipient of the data of clients or suppliers is “LA BETTOLA DEL BUTTERO Srl” that, through its Data Protection Officer, manages the bookings, company accounts, and contractual and administrative obligations. The categories of data processed are those necessary for administrative, legal, and accounting processing especially name, surname, address, tax code, VAT number, e-mail, telephone number, and cell phone number;

2f  –   The intention of the data controller to transfer personal data to a third country or an international organisation: the data controller does not have any intention to transfer personal data to a third country or an international organisation.

Further information provided to the data subject required to ensure correct and transparent processing:

2g  –   Data retention period:

2gi  –    With reference to the purpose expressed in point 2ci (processing required to fulfil legal, administrative, and contractual obligations), the retention period for personal data is 10 years or 20 years if there are any appeals in progress.

2h  –   The data subject’s right to ask the data controller to access the personal data and correct or cancel the same or limit the processing thereof: The data subject has the right to ask the data controller for access to his or her data, to correct or cancel the same, or limit or oppose to their processing as well as the right to the portability of the data;

2i – The data subject’s right to revoke the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation:

2j – The data subject’s right to lodge a complaint with a supervisory authority: a complaint is an instrument that allows the data subject to address the Authority for the protection of personal data and may be made by sending a: a) registered letter with acknowledgement of receipt addressed to the Authority for the protection of personal data, Piazza di Monte Citorio, 121 00186 Rome; b) certified e-mail addressed to protocollo@pec.gpdp.it

2k  –   Legal or contractual obligations:
The processing of data in relation to the purposes set out in points 2ci refer to legal, administrative, or contractual obligations, and their exclusion would result in termination of the contract or non-activation of the service provided by the company;

2l – The existence of an automated decision-making process:
The company, data controller, and data officers appointed by the controller use information systems for the processing of data.

If the data controller intends to further process the personal data for a purpose other than that for which it was collected, it will provide the data subject with information on this different purpose before such further processing.

3. RIGHTS OF THE DATA SUBJECT

3a –   The Right of Access (Article 15)
The data subject is informed of the right to obtain from the data controller confirmation that his or her data is being processed and, in that case, send a written communication to the data controller using the following communication tool: if the interested party is in a position to use a certified e-mail using the certified e-mail address: labettoladelbuttero@cert.postecert.it or paper-format registered letter to obtain access to personal data and the following information:

3ai   –   The purpose of the processing;

3aii   –  The categories of personal data in question;

3aiii  –  The recipients or categories of recipients to whom the personal data has been or will be disseminated, in particular, if these recipients are third countries or international organizations;

3aiv  –  The data retention period provided or, if not possible, the criteria used to calculate this period;

3av  –   The existence of the data subject’s right to ask the data controller to rectify or cancel his or her data or limit or object to the processing of his or her data;

3avi  –  The right to lodge a complaint with a supervisory authority;

3avii  – The existence of an automated decision-making process given that the data officer works with automated electronic media.

3b  – The Right of rectification (Article 16): The data subject has the right to obtain from the data controller the correction of inaccurate personal data without unjustified delay.

3c  – Right to cancellation (right to be forgotten) (Article 17): The data subject has the right to ask for the immediate cancellation of his or her data by sending a notice to the data controller; however, the data subject must take into consideration that this indication will make it impossible to continue with signed contractual practices;

 

FABRO, 21/05/2018

The Data Controller
“LA BETTOLA DEL BUTTERO Srl”