This privacy policy (“Privacy Policy”) is provided pursuant to EU Regulation 2016/679 (GDPR), Legislative Decree no. 196/2003 (as amended), and other applicable provisions and measures concerning the protection of personal data, in order to inform you about the processing of personal data provided by filling out the booking form on the website [liviavaleriapalace.com] (“Website”), through the Spiagge.it widget. This privacy policy is provided exclusively for bookings made through the Website and does not apply to any other websites that may be consulted via links.
DATA CONTROLLER The Data Controller is [Livia Valeria Palace], [VAT no. 10115011008], [Via Giacomo Folchi, 8 00149 Rome], [info@liviavaleriapalace.com].
CATEGORIES OF DATA PROCESSED The personal data collected through the online booking form are the following:
-
personal identification data (such as name and surname);
-
contact details (such as email address and phone number).
PURPOSES OF PROCESSING The personal data provided through the online booking form are acquired and processed for the following purposes: a) to provide the requested service, namely to allow bookings at our facility and to send you service communications related to the confirmation, modification, reminder, and cancellation of the booking (“Service Provision”); b) to request reviews and collect feedback on the booked services (“Customer Satisfaction”); c) to comply with obligations provided for by laws, regulations, and EU legislation (“Compliance with Legal Obligations”); d) to prevent or detect any abuse or fraudulent activities detrimental to our facility, thereby allowing us to defend ourselves, including in judicial proceedings (“Defense”). e) to send you marketing communications via email regarding products and services similar to those you have purchased (“Soft Spam”).
LEGAL BASIS AND NATURE OF PROCESSING The legal basis for the Service Provision purpose is the performance of pre-contractual or contractual measures requested by you. Providing personal data for this purpose is not mandatory, but failure to do so will make it impossible to carry out the requested service. Processing for the purpose of Compliance with Legal Obligations is necessary to fulfill any legal obligations. The legal basis for the Customer Satisfaction purpose is the legitimate interest of our facility to request and collect reviews and the level of appreciation regarding the booked services. Similarly, the legal basis for the Soft Spam purpose is the legitimate interest of our facility to send you marketing communications via email relating to products and services similar to those you have already purchased. You can stop receiving these communications at any time, without any consequence, by using the link at the bottom of each of these emails. Processing for the purpose of Defense is also based on the legitimate interest of our facility to detect and prevent any fraudulent activity or abuse in the use of the booking form or the Website, and therefore to protect itself, including in judicial proceedings.
COMMUNICATION OF PERSONAL DATA In order to provide its services, our facility will share the personal data provided for the online booking with the company Spiagge S.r.l (VAT no./Fiscal Code 0453664040; with registered office in Via Marecchiese 48, 47923 Rimini), owner of the SaaS platform that allows users to make bookings through the Website. Your Personal Data may also be shared with: i) third parties whose services our facility utilizes to perform activities on its behalf; ii) persons authorized by our facility to process the personal data necessary to carry out activities strictly connected to the provision of the service (such as our employees); iii) public, judicial, or police authorities.
DATA PROCESSING METHODS AND TRANSFER OF PERSONAL DATA The processing of personal data is carried out – in compliance with the provisions of applicable legislation – also with the aid of IT tools. The Data Controller has adopted technical solutions and security measures that guarantee the security of personal data and prevent their alteration, loss, incorrect processing, or unauthorized access.
PROCESSING DURATION AND DATA RETENTION The data provided will be processed and stored for the period strictly necessary to achieve the purposes stated above. Retention for a longer period remains unaffected if required by public authorities or in connection with needs related to the exercise of the right of defense in the event of disputes. Personal data processed for Soft Spam will be kept until you object to such processing through the link present at the bottom of each Soft Spam email.
RIGHTS OF THE DATA SUBJECT Pursuant to Articles 15 et seq. of the GDPR, you may exercise the following rights:
-
to obtain from the data controller confirmation as to whether or not personal data concerning you are being processed, and to know the source, purpose, categories of data processed, recipients to whom the personal data have been or will be disclosed (including those abroad), and the retention period;
-
to obtain, without undue delay, the rectification of inaccurate data or the integration of incomplete data;
-
to obtain, without undue delay, the erasure of data pursuant to Art. 17 of the GDPR;
-
to obtain the restriction of processing where the accuracy of the data is contested or the processing is unlawful, pursuant to Art. 18 of the GDPR;
-
to obtain data portability by receiving the data in a structured format;
-
to object to the processing pursuant to Art. 21 of the GDPR.
You may exercise the aforementioned rights by writing to the email address [info@liviavaleriapalace.com]. In any case, you always have the right to lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali), pursuant to Art. 77 of the GDPR, if you believe that the processing of your personal data breaches the current regulation.