Notice accordingto art. 13 of the EU European Regulation 679/2016

According to art. 13 of the European Regulation (EU) 2016/679 (hereafter GDPR), and in relation to the personal data, the Casa dello Zio will become available with the insertion of your personal data for the booking,

I communicate the following:

Data controller and responsible for the protection of personal data

The Data Controller is Casa dello Zio (hereafter Guest House), with an address for service in Corso Buenos Aires 8/8 - 16129 Genoa (GE).

The Data Controller can be contacted by email at info@casadellozio.it.

The Data Controller has not appointed a person responsible for the protection of personal data (DPO).

Purposes of data processing

The treatment is aimed at the correct and complete execution of the management of your booking online. The data will also be processed in order to:

• ⎫fulfill the obligations set by your booking online;
• ⎫exercise the rights ofData Controller, for example the right to defense in court;
• ⎫fulfill the obligations established by law, by a regulation, by community legislation;

Personal data may be processed by means ofboth paper and computer files and processed in ways strictly necessary to meet the afore mentioned purposes.

Processing Legal basis

The Guest House processes personal data lawfully, where the treatment:

• ⎫is necessary for the execution of the contract concerning the online booking;

Consequences of failure to communicate personal data

With regard to personal data relating to the execution of the reservation contract of which you are a part, failure to communicate personal data prevents the completion of the booking and the attached service.

Data retention

Personal data, object of treatment for the above purposes, will be kept in the landlady, for the period in which the landladyis obliged to conservation for tax purposes or for other purposes, by law or regulation, after this period the data will be deleted / destroyed and no longer recoverable.

Transfer of data to foreign countries

Personal data are stored on server located in the following EU and non-EU countries:

Personal data may be communicated to:

1. consultants who provide functional services for the purposes indicated above;

2. banking and / or insurance institutions that provide functional services for the purposes indicated above;

3. subjects who process data in execution of specific legal obligations;

4. Judicial or administrative authorities, for the fulfillment of legal obligations.

Profiling and dissemination of data

Personal data are not subject to disclosure or to any fully automated decision making process, including profiling.

Rights of the interested party

The rights recognized by the GDPR include those of:

• •ask Guest House for access to personal data and information relating to them; the correction of inaccurate data or the integration of incomplete data; the deletion of personal data concerning any interested party (on the occurrence of one of the conditions indicated in Article 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of personal data (on the use of one of the hypotheses indicated in Article 18, paragraph 1 of the GDPR);
• •request and obtain by Guest House - in the cases in which the legal basis of the treatment is the contract or consent, and the same is done by automated means - your personal data in a structured format and readable by automatic device, also in order to communicate such data to another data controller (so-called right to the portability of personal data);
• •oppose at any time the processing of your personal data to the occurrence of special situations that affect the person concerned;
• •revoke the consent at any time, limited to the cases in which the processing is based on consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data ( eg data revealing racial origin, political opinions, religious beliefs, health status or sex life). The treatment based on consent and carried out prior to the revocation of the same preserves, however, its lawfulness;
• •propose a complaint to a supervisory authority (Authority for the protection of personal data - www.garanteprivacy.it).

Genova, 25/05/2018     Casa dello Zio