Information concerning the processing
of personal data,
in accordance with article 13

EU Regulation 2016/679 (GDPR)

The provisions which regulate the confidentiality of personal data impose a series of obligations from all those who process information about other subjects.

Among the obligations to be complied with is that of informing the persons to whom the data refer about the use made of the relative data so that the consent to the processing of the same is freely expressed and unequivocal.

Personal data processing means any operation performed with or without the use of automated processes and applied to personal data, even if not recorded in a database, such as collection, registration, organization, structuring, storage, processing, selection, blocking, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination, comparison or interconnection, limitation, cancellation or destruction.

We hereby supply you all due information concerning the purposes and methods for your personal and sensitive data processing in our possession. This information is not valid for other web sites which might be visited through links contained in all the web sites of data controller’s domain name.

DATA CONTROLLER (pursuant to Article 28 of the Italian Data Protection Code) IS:
Gea Srl
Via S. Marco 24 – 20121 Milano (Italy)
phone: (39) 026575639
VAT: 12927040159
e-mail: info@lafrancescaresort.it

The data relating to you and requested to you during the stipulation of the booking contract concerning your stay at La Francesca Resort are processed in order to execute the task received (management of reservations) and to fulfill the obligations established by law, by the Community legislation or by an order of the Authority, and for all the accounting and tax obligations deriving. Such data are therefore indispensable for the correct execution of the operations deriving from the contractual relationship and therefore the relative conferment is obligatory as the eventual refusal to communicate such information would make it impossible to establish the relationship.

For particular processing purposes (i.e. e-mail communication to interested parties of promotions, events or special initiatives) an expressed consent will be required by checking an appropriate box: the refusal to provide consent to receive these communications could simply imply the impossibility of being adequately informed and/or updated on promotions or special initiatives. The consent to receive such communications may be revoked at any time by contacting the Data Controller.

Your personal data will be processed on magnetic and paper support by persons authorized to perform these tasks, constantly identified, appropriately educated and made aware of the constraints imposed by the relevant legislation, with the use of security measures to ensure the confidentiality of the interested party and to avoid undue access to third parties or unauthorized personnel;

The data processing will be carried out by Authorized Employees, Collaborators and/or External Resources (they may be shared with companies contractually involved with La Francesca Resort for purposes related to tax, accounting, contractual, IT assistance,): the updated list of these subjects can be consulted at La Francesca office. Your data will not be diffused;

The retention of personal data can only be done if the purposes of the processing are not reasonably achievable by other means and for a time not exceeding the purposes for which they were collected and subsequently processed. Therefore they are canceled as soon as the purpose of their use is exhausted or until the revocation of the specific consent by the interested party occurs;

Pursuant to the 15, 18, 19 and 21 of the EU Regulation, the interested parties are informed that they have the right to ask the Data Controller:

1. the access to their personal data
2. to update and/or integrate them
3. the correction of data when they are incorrectly transcribed
4. to transform them into an anonymous form or to block them
5. the cancellation or the oblivion according to the cases
6. the limitation of the treatment because, for ex. some data are in excess
7. the portability, t.i. transferring data to another owner without costs at their expense
8. to oppose the processing for legitimate reasons
9. to withdraw consent at any time without prejudicing the lawfulness of the treatment based on the consent given before
10. to present a formal complaint to the Privacy Guarantor following the procedures and indications published in the Authority's official website (www.garanteprivacy.it)
11. to present a judicial appeal against the decision of the Supervisory Authority
12. to present a judicial appeal against the Data Controller or the Data Processor in the event of infringement of the protected rights.

The exercise of rights is not subject to any form constraint and is free.
The parties may exercise the rights set out in points 1 to 9 at any time by sending a registered letter to

Gea Srl,
Via S. Marco 24,
20121 Milano (Italy)

or

an e-mail to:info@lafrancescaresort.it