Privacy
CODE ON THE SUBJECT OF THE PROTECTION OF PERSONAL DATA LEGISLATIVE DECREE No. 196 dated 30/06/2003 OFFICIAL GAZETTE No. 174 - - ORDINARY SUPPLEMENT No. 123/L published 29/07/2003
In accordance with Legislative Decree No. 196 dated 30 June 2003 ("Code on the subject of the protection of personal data") we inform you that all data subjects have the right to the protection
of their own personal data. This consolidation document, hereinafter referred to as 'code', guarantees that the processing of personal data will take place with the full respect of a data
subject's fundamental rights and freedoms as well as dignity and with particular reference to privacy, personal identity and the right to the protection of personal data. The principle
regulations of the code, introduced to guarantee the maximum transparency of information as well as the utmost safeguarding of personal data, are listed below.
Pursuant to Article 7 of the code we hereby list all of a data subject's rights:
1. A data subject has the right to obtain a confirmation of the existence or otherwise of personal data concerning that same data subject - even if they have not yet been recorded - and their communication in an intelligible format.
2. A data subject has the right to obtain information about:
a) the origins of the personal data;
b) the purposes and methods for processing the data;
c) the logic applied in the case of processing with the use of electronic equipment;
d) the identity of the person in charge, managers and representative appointed in accordance with Article 5, Paragraph 2;
e) the subjects and categories of subjects to whom personal data may be communicated or who may receive such information in their capacity as appointed representatives in the territory of the State, and managers or officials.
3. A data subject has the right to obtain:
a) the updating, rectification or even, when required, integration of the data;
b) the cancellation, transformation into an anonymous format or the blocking of the data processed in violation of the law, including those for which the storage - in relation to the aims for which the data was gathered or subsequently handled - is unnecessary;
c) confirmation that the procedures detailed in a) and b) have been brought to the attention - also with regard to their content - of those bodies or persons to whom said data has been
communicated or transmitted, except in the case where such communication proves impossible or involves means that are manifestly disproportionate with respect to the right protected.
4. A data subject has the right to object either totally or in part:
a) for legitimate reasons, to the processing of personal data concerning that same data subject, even if it is relevant for the purposes of data collection;
b) to the processing of personal data that concern that same data subject for the purposes of sending publicity or direct sales materials or for the conducting of market research or commercial communications.
Pursuant to Article 9 of the code, we hereby list all the methods for exercising said rights:
1. The request, addressed to the owner or manager, can also be transmitted by registered letter, fax or electronic mail. The Watchdog can identify other suitable systems with reference to new technologies. When it comes to exercising the rights referred to in Article 7, Paragraphs 1 and 2, the request can also be submitted orally and in this case it is noted down by the official or manager.
2. In the exercising of rights referred to in Article 7, a data subject can grant powers of attorney or appoint as proxy an individual person, body, association or organisation. The party concerned can also seek the assistance of a trusted person.
3. The rights referred to in Article 7 referring to personal data concerning deceased persons can be exercised by whosoever has an interest or is acting to protect the data subject or for family reasons worthy of protection.
4. A data subject's identity is verified on the basis of suitable elements of evaluation, even by means of available papers or documents or the exhibition or production of a copy of an identity document. A person acting on behalf of the interested party will exhibit or produce a copy of the proxy document or the power of attorney signed in the presence of an official or signed and presented with an unauthenticated photostatted copy of the data subject's document of identification. If the data subject is a body corporate, a body or an association, the request is submitted by the individual person authorised on the basis of their respective articles of association or regulations.
5. The request referred to in Article 7, Paragraphs 1 and 2, worded freely and without constraint and can be renewed, barring the existence of justifiable reasons, at an interval of not less than ninety days.
Pursuant to Article 11 of the code we hereby list all of the general rules for the processing of data.
1. Personal data being processed shall be:
a) processed lawfully and fairly;
b) collected and recorded for specific, explicit and legitimate purposes and used in further processing operations in a way that is compatible with said purposes;
c) accurate and, if necessary, updated;
d) relevant complete and not excessive in relation to the purposes for which they are collected or subsequently processed; e) kept in a form which permits identification of the data subject for a period that is no longer than that required for the purpose for which the data were collected or subsequently processed.
2. Personal data processed in violation of the relevant discipline in matters of processing of personal data cannot be used. On the basis of all current regulations and with reference to what is provided for by Article 13 of the Code, we provide the following information:
a) The data supplied will be used for the purposes of completing the information services and/or tourist booking on this internet website. In the case of the specific approval by marking the appropriate box, the data can also be used for sending information or commercial messages (e.g. Newsletters).This choice can be changed at any moment following the first registration by a communication from the data subject. The data will be processed using computerised systems.
b) The providing of data is compulsory, given that failure to do so would render it impossible to make a reservation.
c) Data will be communicated exclusively to those subjects that are necessary for the fulfilling of the contract of reservation (for example the chosen hotel or restaurant). No other transmission of
this Data will take place to any other areas. The updated list of those responsible for personal data is always indicated on this website at point 'd' as shown below.
The owner of the processing is the company B&B HOTELS ITALIA S.p.A.
Legally represented by Mr Jean Claude Ghiotti
Head Office Address: Via Domenichino, 19 - 20149 Milan
The manager responsible for processing is Mr Jean Claude Ghiotti
It is possible to exercise at any time, against the owner and manager of the processing of personal data, all the rights provided for under Article 7 of the code in accordance with the methods indicated in Article 9 of the code itself.