With the introduction of Legislative Decree no. 196 of 30 June 2003, containing legislation for the protection of natural persons and other subjects with regard to the use of their personal data, Hotel Galli, with registered office at Via delle Fornaci 87, 57034 Campo nell’Elba (LI) (Italy), Fiscal ID code 00161660493, VAT no. 00142610492, registered with the Register of Enterprises of Livorno under number 00161660493, in its capacity as “data controller”, is obliged to provide information concerning its use of personal data.
The Decree regulates the use of personal data, meaning any operation or complex of operations, performed even without the use of electronic aids, concerning the collection, recording, organisation, conservation, consultation, processing, modification, sorting, extraction, comparison, utilisation, interconnection, blocking, notification, disclosure, deletion and destruction of data, even if not entered in a database.
Under the provisions of Legislative Decree no. 196 of 30 June 2003, the “data subject” or the “person from whom the personal data are acquired” must first be informed, verbally or in writing, of the following.
Source of personal data
The personal data held by Hotel Galli are acquired directly from the data subject. Naturally, all the data acquired will be used with confidentiality and in accordance with the relevant legal requirements.
Hotel Galli undertakes to use personal data in a legal and ethical manner, to acquire and record them for specific, explicit, legally permitted purposes, and to use them in other procedures in a manner not incompatible with the aforesaid purposes.
It also undertakes to ensure that they are accurate, up to date, relevant, complete and not excessive in relation to the purposes for which they are acquired or subsequently used, and to store them in a form which allows the identification of the data subject for a period of time not exceeding that necessary for the purposes for which they were acquired or subsequently used.
During their normal operation, the IT systems and software procedures which operate this website acquire some personal data the transmission of which is implicit in the use of Internet communications protocols.
These data are not gathered for association with identified subjects, but by their very nature, when processed or associated with data held by third parties, they might allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who log onto the site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used when submitting the request to the server, the size of the file obtained in reply, the numerical code indicating the server’s response status (concluded successfully, error, etc.) and other parameters relating to the user’s operating system and IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information concerning use of the site and to check that it is operating correctly and they are deleted immediately after processing. The data might be used to identify those responsible in the event of IT crime against the site: except in this eventuality, at present data concerning web contacts are not retained for more than seven days.
Data supplied voluntarily by the user
The optional, explicit, voluntary dispatch of electronic mail to the addresses provided on this site leads to the subsequent acquisition of the sender’s address, necessary in order to reply to the enquiry, and any other personal data included in the message.
Specific summarised information will be progressively provided or displayed on the pages of the site relating to individual optional services.
Procedure for the Use of Data
For the stated purposes, your personal data are processed by means of manual or IT media by procedures in strict compliance with the stated purposes, and in all cases in such a manner as to guarantee the security and confidentiality of the data.
In all cases, the security of personal data is guaranteed by Hotel Galli. Please note that Hotel Galli will not dispose the data subjects’ personal data to third parties.
Rights under art. 7
Users are also informed that art. 7 of Legislative Decree no. 196 of 30 June 2003 awards members of the public specific rights.
1. The data subject is entitled to obtain confirmation as to whether or not data relating to him are held, even if they have not yet been recorded, and the communication of the same in an intelligible form.
2. The data subject is entitled to obtain information concerning:
a) the origin of the personal data;
b) the purposes for which they are used and the processing methods;
c) the logic applied if the data are used by electronic means;
d) the identity of the controller, the trustees and the designated representative under article 5, point 2;
e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity as representatives for the country, chief processors or designated officers;
3. The data subject is entitled to obtain:
a) the updating, rectification or, if this is in his interest, the supplementation of the data;
b) the erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is not necessary for the purpose for which they were collected or subsequently processed;
c) the certification that the operations referred to in points a) and b) have been reported, also with regard to their contents, to those to whom the data have been communicated or distributed, unless this proves impossible or involves a disproportionate effort.
4. The data subject is entitled to oppose, entirely or in part:
a) on legitimate grounds, the processing of data relating to him, even if such use is relevant to the purpose for which they were collected;
b) the use of personal data relating to him for the dispatch of advertising material or direct marketing, or for market research or commercial communications.
Additional information may be requested directly from Hotel Galli, with registered office in Campo nell’Elba, Via delle Fornaci 87, or by email to firstname.lastname@example.org.