INFORMATION FOR THE PROCESSING OF PERSONAL DATA
According to the provisions of Regulation (EU) 2016/679 (so-called GDPR) and Legislative Decree 196/03 and subsequent amendments, Ai Vicerè di Luca Lepre piva 06237120826, data controller, based in Palermo in via pignatelli aragona 82, informs that processing of the personal data of the interested party (customers, suppliers, employees), both by automated and paper means, in an ethical and transparent way, only for lawful purposes and in order to safeguard the privacy and rights of the interested party. The processing takes place for the following purposes:
a) for the execution of the accommodation contract at the “Ai VIcerè” landlord. In particular, to obtain and confirm the booking of accommodation and other services and in order to be able to provide these services as requested by the interested party. This processing is necessary for the definition and execution of the Contract which constitutes the legal basis of the processing and therefore pursuant to art. 6 of the GDPR, the consent of the interested party is not required. Processing will cease once you have checked out, although some of your personal information may (or in some cases must) continue to be processed for the purposes and in the manner described below;
b) for the purpose of complying with the “Law on public safety” (article 109 Royal Decree 773, 18/6/1931). This rule requires that all interested parties (including minors) residing at our “Ai Vicerè” facility be identified and that the identification data of our guests be transmitted to the State Police, for reasons of public security, in the manner established by the Ministry of ‘Interior (decree of 7 January 2013). The sending of data is mandatory and does not require the consent of the interested party.
c) for the management of administrative (including statistic ISTAT attendance), legal, accounting and tax obligations, in accordance with the provisions of the law or regulations in force on the matter; For these purposes, consent is not required. Personal data are processed by Ai Vicerè di Luca Lepre and its data processors and are disclosed outside the company, exclusively, for the obligations required by law to credit institutions (for making or receiving payments), to insurance companies (for any liability for damages), to professionals (accountants, labor consultants, tax consultants, accounting consultants, legal consultants). The data acquired for these purposes are processed for the period of time required by current Italian legislation (10 years – or more, in the case of tax audits);
d) for the purposes of protecting people, property and company assets, using a video surveillance system installed in the common areas of the “Ai Vicerè” structure, which are duly identified by the signs. Consent is not required for this processing because it is conducted in accordance with Ai Vicerè di Luca Lepre’s legitimate interest in safeguarding people and property against potential violence, theft, robbery, damage and vandalism. Recorded images are normally deleted after 24 hours, with the exception of holidays or other days when the business is closed; images are never kept for more than a week. These images are not subject to disclosure to third parties, with the exception of what is required to satisfy a specific investigative request by the state security bodies or the Italian judiciary.
e) commercial information and direct marketing initiatives by Ai Vicerè di Luca Lepre, as well as for the purpose of sending commercial proposals relating to services provided by it or services provided by the same through commercial partners. Personal data will be processed by Neomedia srl for a maximum period of 10 years.
As an interested party in the processing of data, the interested party can, at any time contact the company Ai Vicerè di Luca lepre (VAT number 06237120826), the data controller, at the address of its headquarters, in via Pignatelli aragona 82 – Palermo or to the pec address: firstname.lastname@example.org, in order to exercise, among others, the rights of access and request for a copy, rectification, cancellation, limitation or opposition to the processing of data, as well as the right to portability, in case of automated processing of the same when and to the extent that this is applicable (Articles 15-22 of EU Regulation no. 679, 2016). It is also possible to lodge a complaint with the supervisory authority for the protection of personal data, according to the procedures established pursuant to art. 77 of the GDPR.
The processing of the data requested in points a), b), and c) is strictly connected to the execution of the accommodation contract, any opposition to the processing will make it impossible to fulfill the related services and in particular we will not be able to confirm booking or providing the requested services.
The processing of the data requested in point e) is entirely optional and subject to the consent of the interested party.
We may use third party service providers to process personal data on our behalf, for the purposes indicated above. For example, we may share some information with these third parties so that they can contact you directly via email (for example: to ask you to post a review about your stay and your travel experience).
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site and may be exhibited to the Judicial Authority, if this explicitly requests it.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message, as well as for the data collected through the data collection forms dedicated to online services.
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.