PRIVACY POLICY
pursuant to art. 13 of EU Regulation 2016/679 of 27/04/2016
DATA Controller
The data controller is A.C.I.S.J.F. Casa della Studente "Domus Civica" con sede Legale in SAN POLO 3082 - 30125 VENEZIA VE, P.I. 00845990274 C.F. 80010680272.
Purpose of the treatment
The personal data you provide will be used exclusively for the following purposes:
A. stipulation and execution of the contract and all the activities telated to it, such as, for example, reservations management, tax documentsissue, credit protection, administrative, management, organizational and functional services for the execution of the contract;
B. fulfillment of the obligations established by law.
The processing of personal data for the aforementioned purposes does not require your express consent (Article 6 letter b) and e) of the GDPR.
C. Outward communication of information about my stay, with the only aim of permitting the receiving of messages and calls addressed to me.
D. Retention of data for speeding up registration procedures in case of subsequent stays at our facility. For this purpose the data will be retained for a maximum period of 2 years.
E. carrying out marketing and promotional activities for the products and services of the Controller, commercial communications, either by automated means without intervention of any operator (eg SMS, fax, MMS, e-mail, etc.) or traditional (by telephone, mail).
The processing of personal data for the abovementioned purposes requires your express consent (Article 6 par. a., Art 9 of the GDPR). You will always have the right to freely and easily oppose, in whole or in part, to the processing of your data for the mentioned purposes.
Compulsory or optional nature of the provision of data and consequences of a refusal to provide personal data
The data required for the purposes referred to in the preceding paragraphs a) and b) must be provided for the fulfillment of the legal obligations and / or for the conclusion and execution of the contractual relationship and the provision of the requested services. Therefore your eventual refusal, even partial, to provide such data would make it impossible for the Supplier to establish and manage the relationship itself and to provide the requested service.
The provision of personal data necessary for the purposes referred to in paragraphs c) and d) above is optional, therefore your refusal to provide such data would make it impossible to carry out the activities described therein.
Data processing methods
The processing of personal data is carried out by means of the operations indicated in art. 4 n. 2) GDPR, for the aforementioned purposes, both on paper and computerized media, by means of electronic or automated instruments, in compliance with the regulations in force in particular in terms of confidentiality and security and in compliance with the principles of correctness, lawfulness and transparency and protection of customer rights.
The processing is carried out directly by the owner's organization, by its managers and/or agents.
Communication and Dissemination
Your personal data may be communicated, within the limits strictly relevant to the obligations, the tasks and the purposes set out above and in compliance with current legislation on the subject, to the following categories of subjects:
1. subjects to whom such communication must be carried out in order to fulfill or to demand the fulfillment of specific obligations provided for by laws, regulations and/or Community legislation;
2. companies belonging to the Holder's Group so controlling, controlled or connected companies;
3. external natural and/or juridical persons who provide services that are instrumental to the activities of the Data Controller for the purposes abovementioned (societies providing services for the management of the information system, suppliers, consultants, companies, bodies, professional offices). These subjects will operate as data controllers.
4.
Personal data will not be in any way the subject of dissemination.
Data Transfer
Personal data shall be stored on servers located within the EU. In any case it is intended that the holder, where it is necessary, will be able to move the servers even extra UE. In this case, the holder shall ensure that the transfer of the extra - UE data will be in accordance with the applicable legal provisions, after the standard contractual clauses provided for by the European Commission.
Rights of the person concerned
The person concerned has the right to ask the Data Controler for access to the personal data concerning him, as well as the rectification, cancellation, limitation, opposition to their treatment, if carried out in an automated manner on the basis of consent or for the execution of the contract.
The person concerned has the right to withdraw the consent at any time without prejudice to the lawfulness of the treatment based on consent prior to revocation.
The person concerned has the right to submit a complaint to the authority responsible for the processing of personal data, pursuant to art. 77 of the EU regulation 679/2016.
For the exercise of the rights referred to in art. 15 of the GDPR or for questions or information concerning the processing of its data and the safety measures adopted, it may in any case contact the Data Controller at the address above.
