Personal Data Policy

CA.PRI SRL, as personal data controller in accordance with articles 13 and 14 of EU Regulation 679/2016 – General Regulation on Data Protection (“GDPR”), in compliance with obligations as articulated by the legislation for the protection of privacy, hereby wishes to inform you in advance, the use of your personal data and your rights as follows:

A) OWNER AND OTHER RESPONSIBLE PARTIES

Data controller is CA.PRI S.R.L., fiscal code 01938520036, located in VIA GIUSEPPE FAVA, 18, 28016 Orta San Giulio (Novara) – Italy. The updated list of data processors with relative areas of competence is:

  • Data controller – CA.PRI S.R.L.
  • Data processor – ANTONINO CANNAVACCIUOLO

 

B) PERSONAL DATA SUBJECT TO TREATMENT

  • Unspecific personal data – Your data will be processed as means to confirm hotel reservations, restaurant reservations and/or any additional requested services (Art. 109 R.D. no. 18.6.1931 n.773). Upon departure, your data will no longer be used.
  • Unspecific personal data (identification, banking, financial, commercial, promotional, etc.) has a validity of 10 years.

 

C) PURPOSE, LEGAL OR MANDATORY NATURE AND/OR OPTIONAL TREATMENT OF DATA

Primary function: customer/guest information is processed for the following purposes: restaurant service – room reservations – administrative/accounting services

Legal function: the processing is necessary for the execution of a contract, in which the interested party has a position or for the execution of pre-contractual measures established at the request of the same

The person in question must provide personal data

If the interested party does not comply, the completion of the contract or the provision of the service requested by the interested party may be hindered or incomplete.

Secondary function: customer/guest information will be processed for commercial and promotional purposes only after receiving your consent.

Legal function: the process may occur, only once written consent of the interested party has been received. The same individual has the right to grant or not his/her own consent.

 

D) RECEIVER

For the exclusive purposes as indicated above, personal data will be disclosed, in addition to specific competent staff members, to only appointed external collaborators who may access the data made available to them and managed by the controller.

 

  1. DATA TRANSFER

Personal Data will not be granted or transferred to Recipients outside the European Union

 

  1. DATA PRESERVATION

All personal data provided will be processed in compliance with the principles of lawfulness, correctness, pertinence and proportionality, including that data retrieved via email and/or online, in such a way deemed strictly necessary to carry out the functions described above. In any case, personal data will only be kept for a period of time deemed necessary to carry out the functions described above. Personal data which is not needed or does not need to kept as requested by law, in respects to the previously mentioned purposes, will be deleted or transformed into an anonymous form. It should be noted that the information systems used to manage the collected information are configured, from the outset to minimize the use of data.

 

  1. RIGHTS OF INTERESTED PARTIES

Remember, interested parties have the right to access their data at any time. All requests should be addressed to our responding treatment manager. Use the contact information following:

  • Data Processor – ANTONINO CANNAVACCIUOLO – Corso Roma, 2A, 20028 Pettenasco (Novara), Italia

The aforesaid registered letter can be anticipated away mail to privacy@villacrespi.it

Similar action made be taken with regard to the processing in question: Personal information, access to such data, data correction, cancellation of data, processing restrictions, data portability, raise a complaint to supervisory authorities, withdrawal consent (any withdrawals will not affect the lawfulness of the treatment based on the consent given prior to such withdrawal).