Privacy

Privacy policy statement data processing

Information document article 13 EU Reg. 2016/679- GDPR
Subject: Information for processing of personal data collected from the data subject through the website


In compliance with the provisions of EU Reg. 2016/679 (European Data Protection Regulation), we provide you with due information regarding the processing of personal data provided.
The information refers to the website www.chicstay.it and is not to be considered valid for other websites that may be consulted through links on the domain websites of the owner, who is not to be considered in any way responsible for the websites of third parties.
This information is provided pursuant to Art. 13 of EU Reg. 2016/679 (European Regulation for the Protection of Personal Data) and is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, on Cookies as well as the provisions of the Order of the Guarantor Authority for the Protection of Personal Data of 08.05.2014 on cookies.


1 - SUBJECTS OF THE PROCESSING

DATA CONTROLLER, pursuant to Articles 4 and 24 of EU Reg. 2016/679 is Messidoro srl with registered office in Via Dei Banchi, 6 - 50123 - Florence (FI) hereinafter, ("Controller")


2 - PURPOSE AND LAWFULNESS OF PROCESSING
The data of a personal nature provided, will be processed in compliance with the conditions of lawfulness ex art. 6 EU Reg. 2016/679 for the following purposes:
Data processing management inherent (art. 6 lett. b):
- navigation on this website;
- Possible completion of data collection forms for sending an information request to the data controller;
- Fulfilment of current administrative, accounting and tax obligations, as well as to comply with laws and regulations. For the purposes of the application of the provisions on the protection of personal data, processing carried out for administrative-accounting purposes are those related to the performance of activities of an organizational, administrative, financial and accounting nature, regardless of the nature of the data processed.

Personal data provided voluntarily and optionally by users who submit requests to receive information about the hotel's services (prices, availability of rooms and conference rooms, etc.), register for the newsletter, make online reservations, or simply submit requests for employment by sending curricula in electronic format, are used only for the purpose of performing the service or provision requested and are not disclosed to third parties unless the communication is required by law or is strictly relevant and necessary for the fulfillment of requests.


3 - NAVIGATION DATA

Like all websites, this site also makes use of log files in which information collected in an automated manner during user visits is stored. The information collected could be as follows:

- internet protocol (IP) address;
- browser type and parameters of the device used to connect to the site;
- name of the internet service provider (ISP);
- date and time of visit;
- visitor's origin (referral) and exit web page;
- possibly the number of clicks.

This is information that is not collected in order to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.


4 - DATA PROVIDED VOLUNTARILY BY THE USER

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.


5 - RECIPIENTS OR CATEGORIES OF RECIPIENTS OF DATA

The data of a personal nature provided through email contacts or through any resume spontaneously sent to the Holder may be communicated to recipients, who will process the data in their capacity as managers and/or as individuals acting under the authority of the Holder, in order to comply with contracts or related purposes.

Precisely, the data may be communicated to recipients belonging to the following categories:
- Subjects that provide services for the management of the information system and communication networks of Messidoro srl (including e-mail);
- Studies or Companies within the scope of assistance and consulting relationships;
- Competent authorities for fulfillment of legal obligations and/or provisions of public bodies, upon request;
- In the case of administrative-accounting purposes, the data may possibly be transmitted to commercial information companies for the evaluation of solvency and payment habits and/or to subjects for debt collection purposes.
- In the case of spontaneous application Your data will be kept at our office and will be communicated exclusively to the competent subjects for the performance of the necessary services, with guaranteed protection of the data subject's rights. Your data will be processed only by personnel expressly authorized by the Data Controller and, in particular, by the following categories of persons in charge: Management and Administration of Messidoro srl with functions of System Administrator and Personnel Management and Administration.

The subjects belonging to the above categories perform the function of Data Processor, or operate in total autonomy as separate Data Controllers


6 - DATA CONTROLLER

The data collected by the site are processed at the premises of the Data Controller, and at the web hosting datacenter. Web Hosting, which is responsible for data processing, processing data on behalf of the Data Controller, is located in the European Economic Area and acts in accordance with European standards.

The list of designated data processors is constantly updated and available at the headquarters of Messidoro srl.


7. DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANIZATION

Data of a personal nature provided, will not be transferred abroad within or outside the European Union.


8 - STORAGE PERIOD AND CRITERIA

The processing will be carried out in automated and/or manual form, with methods and tools designed to ensure maximum security and confidentiality, by persons specifically appointed for this purpose.

In compliance with the provisions of Article 5 paragraph 1 letter e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. To know the criteria behind the data retention period, write to info@chicstay.it


9 - NATURE OF PROVISION AND REFUSAL

Apart from what is specified for navigation data, the user is free to provide personal data in dedicated areas on the site.

The provision of personal data for the purposes set out in this information document is necessary to perfect the specific functionalities and benefit from the services offered to the Data Controller, for example to receive feedback to the submitted request for information. Failure to provide personal data may make it impossible to obtain the requested service or to take advantage of the services offered by the site.


10 - RIGHTS OF THE INTERESTED PARTIES

You may assert your rights as expressed in Articles 15 - right of access, 16 - right to rectification, 17 - right to erasure, 18 - right to restriction of processing, 20 - right to portability, 21 - right to object, 22 right to object to automated decision making of the GDPR 679/16 of the EU Regulation 2016/679, by contacting the Data Controller, writing to info@chicstay.it

You have the right, at any time, to ask the Data Controller for access to your personal data, rectification, deletion of the same, restriction of processing.

You also have the right to object, at any time, to the processing of your data (including automated processing, e.g. profiling) as well as to the portability of your data.

Without prejudice to any other administrative and judicial remedy, if you believe that the processing of your data violates the provisions of EU Reg. 2016/679, pursuant to Article 15 letter f) of the aforementioned EU Reg. 2016/679.

You have the right to lodge a complaint with the Garante per la protezione dei dati personali and, with reference to Art. 6(1)(a) and Art. 9(2)(a), you have the right to revoke your consent at any time. Link to the Privacy Guarantor's website: http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524.

In the case of a request for data portability, the Data Controller will provide you with the personal data concerning you in a structured, commonly used and machine-readable format, subject to paragraphs 3 and 4 of Article 20 of EU Reg. 2016/679.