Privacy

Privacy policy pursuant to art. 13 of Italian Legislative Decree 196-2003

Dear Sir/Madam,

We wish to inform you that Legislative Decree no. 196 dated 30 June 2003 (Privacy Policy) provides for the protection of persons and other subjects with respect to the processing of personal data. According to the indicated law, this processing will be based on the principles of correctness, lawfulness and transparency as well as the protection of your confidentiality and rights. Therefore, in accordance with article 13 of Italian Legislative Decree no. 196-2003, we provide you with the following information:
1. The data you provide will be processed for the following purposes: to make the administrative and technical requirements connected with the corporate activity and necessary to supply you with the services covered under the contract possible.
2. The processing will be carried out using manual and automated systems for storing, managing and transmitting the data, with logic closely related to the purposes, based on the data in our possession and with your commitment to promptly inform us of any corrections, additions and/or updates.
3. Provision of the data is obligatory in order for us to fulfil our obligation to the judiciary authority and refusal to provide such data might make it impossible to continue our relationship.
4. The data will be used directly by Boutique Hotel Villa Blu Cortina and may be communicated by them to third parties to allow the fulfillment of contractual or legal obligations:
• to all those whose right to access to such data is recognised under regulatory provisions;
• to our collaborators, employees, agents and suppliers, within the context of the related duties and/or of any contractual obligations with them, relevant to the commercial relationships with those concerned;
• to post offices, forwarding agents and couriers for sending documentation and/or material;
• to all those natural and/or legal persons, public and/or private, when the communication is necessary or functional for the carrying out of our activity and in the ways and for the purposes illustrated above;
• Banks for management of proceeds and payments deriving from the execution of contracts;
• Your sensitive data may be communicated to allow fulfilment of
• Contractual or legal obligations to public and private agencies, also following inspections or audits (such as Offices of the Ministry of Justice, tax police authorities, judicial authorities, Labour Inspectorate, Local Health Authorities, social-security agencies, ENASARCO (Italian National Assistance Board for Commercial Agents and Representatives), Chambers of Commerce, INAIL (Italian government agency for insurance against work-related injuries), Customs Offices, etc.) for the sole purpose of allowing us to carry out our task.
• To third parties for the sending of promotional messages and commercial and non-commercial information, including via e-mail.
• To the competent judicial authority in case of formal request.

5. The data controller is:
CORTINA ALBERGHI S.R.L.
VIA G. MARCONI, 26
32043 CORTINA D’AMPEZZO
P.IVA01160250252

Tel. +39 0436 867541 Fax +39 0436 868129
info@villablu.it

6. The data processor is:
CORTINA ALBERGHI S.R.L.
VIA G. MARCONI, 26
32043 CORTINA D’AMPEZZO
P.IVA01160250252

Tel. +39 0436 867541 Fax +39 0436 868129
info@villablu.it

7. You may exercise your rights with regard to the data controller, in accordance with art. 7 of Italian Legislative Decree 196/2003, which we provide below in its entirety for your convenience:

Legislative Decree no. 196/2003

Art. 7 – Right of access to personal data and other rights
1. The person concerned has the right to obtain confirmation of the existence or lack thereof of personal data concerning him/her, even if not yet recorded, and its communication in intelligible form.
2. The person concerned has the right to obtain indication:
a) of the origin of the personal data;
b) of the purposes and methods of the processing;
c) of the logic applied in case of processing carried out with the aid of electronic tools;
d) of the identification of the controller, of the processors and of the designated representative in accordance with article 5, paragraph 2;
e) of the persons or categories of persons to whom the personal data may be communicated or who may become aware of it as designated representative in the territory of the State or as persons in charge.
3. The person concerned has the right to obtain the:
a) updating, rectification or, when interested, supplementation of the data;
b) deletion, transformation into anonymous form or blocking of data processed in violation of the law, including data that does not have to be preserved for the purposes for which it was collected or subsequently processed;
c) confirmation that the operations referred to in letters a) and b) have been brought to the attention, even as regards their content, of those to whom the data have been communicated or disseminated, except when such requirement turns out to be impossible or involves the use of means that are manifestly disproportionate with respect to the protected right.
4. The person concerned has the right to oppose, in whole or in part:
a) the processing of his/her personal data for legitimate reasons, even if pertinent to the purpose of the collection;
b) the processing of his/her personal data for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication studies.
Legislative Decree no. 196/2003
Art. 24 – Cases in which processing may be carried out without consent
1. In addition to the cases provided for in Part II (Provisions related to specific sectors), consent is not required when the processing:
a) is necessary to fulfil an obligation required by law, by a regulation or by Community legislation;
b) is necessary to perform obligations deriving from a contract that the person concerned is a party to or to fulfil, before the conclusion of the contract, specific requests of the person concerned;
c) involves data coming from public registers, lists, acts or documents available to anyone, without prejudice to the limits and methods established by the laws, regulations or Community legislation for the knowledge and disclosure of data;
d) involves data relevant to the carrying out of economic activities, processed in compliance with current regulations on business and industrial secrecy;
e) is necessary to protect the life or physical safety of a third party. If the same purpose pertains to the person concerned and the latter cannot give his/her consent due to physical impossibility, inability to act or inability to understand and take action, consent is given by the legal guardian, or by a close relative, by a family member, by a cohabitant or, in their absence, by the person in charge of the facility where the person concerned lives. The provision referred to in article 82, paragraph 2 applies;
f) with the exclusion of dissemination, is necessary to carry out the defensive investigations referred to in Law no. 397 of 7 December 2000 or, in any case, to assert or defend a right in court, as long as the data is processed solely for such purposes and for the time strictly necessary to pursue them, in compliance with the regulations in force concerning business and trade secrets;
g) with the exclusion of dissemination, is necessary, in the cases identified by the Guarantor based on the principles sanctioned by law, to pursue a legitimate interest of the controller or of a third party recipient of the data, even in reference to the activity of banking groups and of subsidiaries or affiliates, if the basic rights and liberties, the dignity or a legitimate interest of the person concerned do not prevail;
h) with the exclusion of communication to the outside and dissemination, is carried out by non-profit associations, agencies or bodies , even unrecognised, in reference to persons who have regular contact with them or belong to them, for the pursuit of specific legitimate purposes identified by the article of incorporation, by the statute or by the collective agreement, and with modes of use expressly provided for with resolution made known to the persons concerned at the time of disclosure in accordance with article 13;
i) is necessary, in compliance with the respective codes of conduct referred to in Annex A), for exclusive scientific or statistical purposes, or for exclusive historical purposes at private archives declared to be of considerable historical interest in accordance with article 6, paragraph 2, of Italian Legislative Decree no. 490 of 29 October 1999, of approval of the consolidating act regarding cultural or environmental assets or, according to the provisions of the same codes, at other private archives.

By signing this document, the undersigned person confirms having been informed beforehand by the controller about:
a) The purposes and the methods of processing that the data will undergo;
b) The obligatory or optional nature of the data provision;
c) The consequences of a possible refusal to respond;
d) The persons or categories of persons to whom the personal data may be communicated or who may become aware of it as persons in charge, and the scope of dissemination of the data itself;
e) The rights referred to in art. 7 of Italian Legislative Decree no. 196/2003;
f) The identification of the controller and of the processor.
For receipt and acknowledgement, in accordance with art. 13 of Italian Legislative Decree no. 196 of 30 June 2003.