Privacy policy
POLICY ON THE PROCESSING OF PERSONAL DATA
(ART. 13 and 14 EU REG. 2016/679)
Dear Mr./Ms, for the purposes provided under EU Regulation no. 2016/679 on the protection of natural persons with regard to the processing of personal data, we hereby inform you that the processing of the personal data provided by you and acquired by the undersigned Brera Management srl shall be the subject matter of processing in observance of the normative provided under the aforementioned Regulation in observance of the consequent rights and obligations and that
a) DATA CONTROLLER AND DATA PROTECTION OFFICER
The Data Controller is Brera Management srl having its seat in Milano (MI) at Via dell ‘Annunciata 23/1, tax code, VAT number and registration number at the Milan Companies Registry 09261870969. The Data Controller can be contacted at the PEC [certified email] address [email protected]
The Data Controller has not appointed a data protection officer.
b) PURPOSE OF THE PROCESSING
Processing is aimed at:
1. the correct and complete execution of the contract;
2. the fulfilment of obligations provided by law associated to the contractual relationship, such as, by way of non-limiting example, the obligation of public safety related to the communication to the Police Headquarters regarding the details of accommodated clients, obligations of communication to Administrative Entities for the purposes of paying duties and taxes, and so on and so forth;
3. the fulfilment of administrative, accounting and fiscal obligations;
4. the performance of marketing activities through sending promotional and advertising material, including therein any discount codes for future bookings with regard to products and services that are the same as those subject matter of the existing relationship;
5. offering attentive and personalised services, organized by third parties, during the stay, including food services at the Etesian partners spa.
c) METHOD FOR PROCESSING PERSONAL DATA
Processing shall take place on paper and/or computerised and/or electronic means, it is realised through operations, carried out with or without the aid of electronic instruments and consists in the collection, registrations, organisation, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, diffusion, cancellation and destruction of the data. Processing is performed by the data controller or processors expressly authorised by the data controller.
d) CONFERRAL OF THE DATA AND REFUSAL
The conferral of common and sensitive personal data is essential for the purposes of performing the activities pursuant to point “b)”, numbers 1, 2 and 3, and in the event that the data subject refuses to confer their personal data, such activities could not be completed; therefore consent from the data subject is not necessary for the processing of data for such activities.
e) COMMUNICATION OF THE DATA
Solely the data processors may become aware of the personal data and these may be communicated for the purposes pursuant to point “b)” to external collaborators, to partner of Brera Management srl carrying out food and catering services, third parties supplying specific services or consultancy, public safety authority and public bodies, as well as, in general, all subjects to whom such communication is necessary for the correct fulfilment of the obligations and duties deriving from the contract and for the purposes pursuant, once again, to point “b)”. Personal data are not subject to circulation.
f) TRANSFER OF THE DATA OVERSEAS
Personal data may be transferred to member countries of the European Union or to third countries respect to those of the European Union or to an international organisation, within the context of the purposes pursuant to point “b)”. The data subject shall be notified whether or not a decision of adequacy exists by the EU Commission.
g) RETENTION OF DATA
The data are kept for a period of ten years.
h) THE DATA SUBJECT’S RIGHTS
The data subject has the right:
- to access, correct, delete, limit and object to the processing of data;
- to obtain the data in a structured format of common use and legible from an automatic device, without impediment from the data controller, to send them to another data controller;
- to revoke consent to processing, without prejudice to the lawfulness of the processing based on the consent acquired prior to revocation;
- to raise a complaint to the Data Protection Authority.
The exercise of the aforementioned rights can be exercised by written communication to be sent via pec to the PEC address pursuant to letter “a” or by recorded delivery to the domicile elected by the Data Controller.
The undersigned hereby declares the receipt of the foregoing disclosure document, also on behalf of the other occupants of the apartment, to whom they shall undertake to consign it
CONSENT TO THE PROCESSING OF PERSONAL DATA
The undersigned having been informed regarding:
The identity of the data controller and processing of the data;
The absence of the Data Protection Officer;
The extent of and method by which the processing takes place;
The purposes of the processing to which the personal data are intended;
The right to revoke consent,
as set out under letters a, b, c, d, e, f, h of the disclosure document subscribed pursuant to art. 13 of Regulation (EU) 2016/679 with the subscription of this form
CONSENTS
Pursuant to and by effect of art. 7 et seq. of EU Regulation 2016/679, to the processing of personal data, also special, including as far as necessary, my mobile phone number and my e-mail address, according to the methods and for the purposes set out under letter “b”, numbers 4 and 5, of the informatory document.
(ART. 13 and 14 EU REG. 2016/679)
Dear Mr./Ms, for the purposes provided under EU Regulation no. 2016/679 on the protection of natural persons with regard to the processing of personal data, we hereby inform you that the processing of the personal data provided by you and acquired by the undersigned Brera Management srl shall be the subject matter of processing in observance of the normative provided under the aforementioned Regulation in observance of the consequent rights and obligations and that
a) DATA CONTROLLER AND DATA PROTECTION OFFICER
The Data Controller is Brera Management srl having its seat in Milano (MI) at Via dell ‘Annunciata 23/1, tax code, VAT number and registration number at the Milan Companies Registry 09261870969. The Data Controller can be contacted at the PEC [certified email] address [email protected]
The Data Controller has not appointed a data protection officer.
b) PURPOSE OF THE PROCESSING
Processing is aimed at:
1. the correct and complete execution of the contract;
2. the fulfilment of obligations provided by law associated to the contractual relationship, such as, by way of non-limiting example, the obligation of public safety related to the communication to the Police Headquarters regarding the details of accommodated clients, obligations of communication to Administrative Entities for the purposes of paying duties and taxes, and so on and so forth;
3. the fulfilment of administrative, accounting and fiscal obligations;
4. the performance of marketing activities through sending promotional and advertising material, including therein any discount codes for future bookings with regard to products and services that are the same as those subject matter of the existing relationship;
5. offering attentive and personalised services, organized by third parties, during the stay, including food services at the Etesian partners spa.
c) METHOD FOR PROCESSING PERSONAL DATA
Processing shall take place on paper and/or computerised and/or electronic means, it is realised through operations, carried out with or without the aid of electronic instruments and consists in the collection, registrations, organisation, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, diffusion, cancellation and destruction of the data. Processing is performed by the data controller or processors expressly authorised by the data controller.
d) CONFERRAL OF THE DATA AND REFUSAL
The conferral of common and sensitive personal data is essential for the purposes of performing the activities pursuant to point “b)”, numbers 1, 2 and 3, and in the event that the data subject refuses to confer their personal data, such activities could not be completed; therefore consent from the data subject is not necessary for the processing of data for such activities.
e) COMMUNICATION OF THE DATA
Solely the data processors may become aware of the personal data and these may be communicated for the purposes pursuant to point “b)” to external collaborators, to partner of Brera Management srl carrying out food and catering services, third parties supplying specific services or consultancy, public safety authority and public bodies, as well as, in general, all subjects to whom such communication is necessary for the correct fulfilment of the obligations and duties deriving from the contract and for the purposes pursuant, once again, to point “b)”. Personal data are not subject to circulation.
f) TRANSFER OF THE DATA OVERSEAS
Personal data may be transferred to member countries of the European Union or to third countries respect to those of the European Union or to an international organisation, within the context of the purposes pursuant to point “b)”. The data subject shall be notified whether or not a decision of adequacy exists by the EU Commission.
g) RETENTION OF DATA
The data are kept for a period of ten years.
h) THE DATA SUBJECT’S RIGHTS
The data subject has the right:
- to access, correct, delete, limit and object to the processing of data;
- to obtain the data in a structured format of common use and legible from an automatic device, without impediment from the data controller, to send them to another data controller;
- to revoke consent to processing, without prejudice to the lawfulness of the processing based on the consent acquired prior to revocation;
- to raise a complaint to the Data Protection Authority.
The exercise of the aforementioned rights can be exercised by written communication to be sent via pec to the PEC address pursuant to letter “a” or by recorded delivery to the domicile elected by the Data Controller.
The undersigned hereby declares the receipt of the foregoing disclosure document, also on behalf of the other occupants of the apartment, to whom they shall undertake to consign it
CONSENT TO THE PROCESSING OF PERSONAL DATA
The undersigned having been informed regarding:
The identity of the data controller and processing of the data;
The absence of the Data Protection Officer;
The extent of and method by which the processing takes place;
The purposes of the processing to which the personal data are intended;
The right to revoke consent,
as set out under letters a, b, c, d, e, f, h of the disclosure document subscribed pursuant to art. 13 of Regulation (EU) 2016/679 with the subscription of this form
CONSENTS
Pursuant to and by effect of art. 7 et seq. of EU Regulation 2016/679, to the processing of personal data, also special, including as far as necessary, my mobile phone number and my e-mail address, according to the methods and for the purposes set out under letter “b”, numbers 4 and 5, of the informatory document.