Adjustment of the GDPR EU 679/2016 Regulation

Information on the processing of personal data of customers

Dear Interested,

below we provide you with some information that you need to bring to your knowledge, not only to comply with legal obligations, but also because transparency and fairness towards the interested parties is a fundamental part of our business.

HOLDER OF THE TREATMENT

The Data Controller of your personal data is MDJ Costruzioni srl, responsible to you for the legitimate and correct use of your personal data and that you can contact for any information or request at the following addresses:

Headquarters: Loc. S’Arenarju – La Caletta – Siniscola (NU)

Telephone: 0784 1910106– e-mail: info@sarenabeach.it

PURPOSE OF THE TREATMENT

Your personal data are collected and processed for the purposes indicated below together with the legal basis of reference:

Purpose: Customer management

Data processed: Tax code and other personal identification numbers; Name, address or other personally identifiable elements; Contact details (telephone number, e-mail, etc.); List of services and products requested and purchased; Bank details, credit and debit card details

Legal basis: The processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same – European Union standard (GDPR 2016/679)

Purpose: Booking of accommodation and accessory services

Data processed: Name, address or other elements of personal identification; Contact details (telephone number, e-mail, etc.); List of services and products requested and purchased; Bank details, credit and debit card details; Date and time of arrival and departure

Legal basis: The processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same – European Union standard (GDPR 2016/679)

Purpose: Acceptance and registration

Data processed: Contact data (telephone number, e-mail, etc.); Tax code and other personal identification numbers; Bank details, credit and debit card details; List of services and products requested and purchased; Data relating to allergies, food intolerances, etc .; Data of the identification details; Date and time of arrival and departure; Data relating to the family relationship

Legal basis: The processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same – European Union standard (GDPR 2016/679)

Purpose: Information to customers of new services / products

Data processed: Name, address or other elements of personal identification; Contact details (telephone number, e-mail, etc.)

Legal basis: The processing is necessary for the pursuit of the legitimate interest of the data controller or of third parties – Member State standard (Legislative Decree 30 June 2003 Art. 130 paragraph 4 Agg. 30/12/2019)

The processing of your data is based on the legitimate interests of the data controller recognized by the law, in particular:

Purpose: Information to customers of new services / products

Legitimate Interest of the Owner: d. lgs. 30/06/2003 art. 4 revised on 12/30/2019: when the interested party is already a customer of the company and only for similar products or services, the request for consent can be waived as the interested party, being already a customer of the data controller, has provided personal contact data (for example, e-mail address) in the context of the sale. promotional messages must be sent directly by the owner and not by third parties, they must concern products and services similar to those already purchased and the customer must be offered the possibility to oppose the processing in question. similarly, in the event that the promotional activity is carried out through telephone calls with an operator or paper mail and the interested party has not objected.

Special categories of personal data

In relation to the processing of personal data, specifically sensitive, genetic, biometric, health-related data (Article 9 of EU Regulation 2016/679), the processing concerns, among others, the following types of data:

Data relating to allergies, food intolerances, etc. (Health related data).

The processing of personal data belonging to these particular categories is possible because it is based on the following conditions:

– It is possible because the interested party intends to give his explicit consent to the processing of such personal data for one or more specific purposes.

RECIPIENTS

Your data may be sent to the recipients or categories of recipients listed below:

Categories of recipients

Individual or associated consultants and freelancers; Banks and credit institutions; Companies and businesses (Companies operating in the field of logistics)

DURATION OF TREATMENT:

In addition to the above information, to ensure the most correct and transparent treatment of your data, you must be aware that:

– you have the right to ask the data controller to access your personal data and to correct or cancel them or limit their processing or to oppose their processing;

– if you have given your consent for one or more specific purposes, you have the right to withdraw this consent at any time;

– has the right to lodge a complaint with the following Supervisory Authority: Guarantor for the protection of personal data;

Moreover,

has the contractual obligation to provide your data, the absence of which is to be considered a violation of the clauses contained therein or the knowledge of your personal data is a necessary requirement for the conclusion of the contract and it will not be possible to proceed with its stipulation in the absence of them.

The interested party has the right to the portability of his personal data.

PROFILING

The treatment takes place through automated processes that do not determine the profiling of the interested parties

The owner of the treatment MDJ COSTRUZIONI SRL