Privacy notice on the processing of personal data
Pursuant to Regulation (EU) 2016/679 (GDPR), we inform you that the personal data provided through this form will be processed in compliance with the principles of lawfulness, fairness and transparency.
Data Controller
The Data Controller is the accommodation facility / agency managing the stay where the data is provided, whose details are communicated to the data subject at check-in or upon request.
Types of data processed
The following personal and identification data will be processed: name, surname, date and place of birth, nationality, residence, as well as identity document details (type, number and issuing authority).
Purpose of processing
Personal data is collected for the purpose of:
- fulfilling obligations established by current legislation regarding public security (guest registration);
- fulfilling administrative and tax obligations related to tourist tax, where applicable.
Legal basis of processing
The processing is necessary for compliance with legal obligations pursuant to Article 6(1)(c) GDPR.
Processing methods
Data will be processed using electronic and/or paper-based tools with appropriate security measures.
Data communication
Data may be communicated to:
- Public Security Authorities (e.g. Alloggiati Web portal);
- Municipal authorities or other bodies responsible for tourist tax management;
and will not be disclosed.
Retention period
Data will be retained for the period required by law.
Data subject rights
Rights under Articles 15 et seq. of GDPR may be exercised within legal limits.