REG. UE 679/2016
MOD. INF REV. 0 OF 28.03.22

Pursuant to art. 13 of regulation (EU) no. 2016/679 of the European Parliament and of the Council of 27/04/2016, hereinafter GDPR, the Company HOTEL VILLAGGIO LE MANDRELLE SRL, as owner, informs you of the following:

A) Purpose of data processing and legal basis

Your personal data are processed by HOTEL VILLAGGIO LE MANDRELLE SRL as data owner, for the following purposes:
A1) Booking of the stay and provision of the booked services
The personal data communicated and collected during the booking phase during the stay or even subsequently, both online and interacting with our Booking Office, with our Customer Service or even at the accommodation facility - i.e. personal data, information contact details, data regarding the services booked, tax data, payment details, special requests, reports on the services used and any other data strictly necessary both for the provision of the booked services and for the management of the contractual relationship, even in the post-sale phase - will be used to comply with current regulatory, accounting and tax obligations and for purposes related to mutual obligations deriving from the contractual relationship (e.g. to assist you in bookings, including future ones, to offer you upgraded services, to provide the requested services, to meet your needs during your stay, to process the reports you have made, to prepare a detailed account, to send you useful information relating to your stay in the days preceding your arrival via instant messaging services or via sms, telephone or email);
A2) For the specific purposes for which the data was provided voluntarily
Your personal data provided or collected when you request a specific service (for example by requesting a quote, representing needs, asking for information, subscribing to the News, submitting complaints) - i.e. personal information, contact details and data strictly necessary to follow up on the request - will be used for:
to. provide the requested services (for example, respond to a question or request for contact, provide information, organize the requested service, assist you and manage any complaints, contact you via text message or telephone or instant messaging services if it was not possible to respond at a call from him);
b. send you a quote, provide you with clarifications and complete the sale;
c. allow the use of the wi-fi network;
d. allow the provision of the medical assistance service;
And. allow participation in initiatives reserved for customers;
f. allow the management of the Social pages of HOTEL VILLAGGIO LE MANDRELLE SRL and interaction with users;
g. place you on the waiting list for the facility you have identified. In cases of unavailability, the owner may, on the basis of legitimate interest, contact you again to propose an alternative structure;
A3) For marketing purposes
Your personal contact data such as name, surname, postal address, e-mail address, landline and mobile telephone number, date of birth, structure and year of stay, may be used to contact you by telephone or send, to your home or the e-mail address or via text message, including in an automated manner, information, offers, discounts, periodic documentation - including advertising and also published and sent by third parties (for example by means of periodical publications) - on products and services in one's own interest or other companies. This data will also be used to send you multimedia products and greetings for the holidays and birthday of the family members. Further,
A4) For profiling activities aimed at the formulation of personalized commercial offers
The personal data provided at the time of the quote, of the subscription to the news, of the navigation on the site of the booking and / or check-in, etc., such as personal data, residence and contact details, choices of stay (eg period, structure, booked holiday formula), those that we can acquire during the stay itself (eg. specific requests or needs, assessments on our services, notes on purchasing habits and use of services) or even subsequently (eg customer care questionnaires), information on activities and initiatives relating to the management of customer relationships (eg. date and categories of such activities carried out or to be carried out and related results) may be used for profiling activities aimed at the formulation of offers and customized commercial initiatives in line with your interests as well as the customization of the navigation of the site and / or our services in based on the preferences expressed by you.
A5) For customer care purposes
The processing of data relating to the booking together with the data collected in the context of customer care activities, including after sales (e.g. administration of questionnaires and surveys in the structure, sending the service satisfaction questionnaire by email, via telephone contact , sms, instant messaging, etc.), is carried out on the basis of legitimate interest to manage complaints, detect customer satisfaction, guarantee a fixed and constant information reference for the guest, identify solutions and areas for improvement.
A6) Fulfil the obligations established by law, by a regulation, by community legislation or by an order of the Authority (such as, for example, in the field of anti-money laundering);
A7) Exercise the rights of the owner, for example the right to defence in court;


B) Methods of data processing

The data concerning your person will be processed in accordance with the current legislation above. In particular, personal data will be processed using manual and IT and / or telematic tools, in order to guarantee their security and confidentiality, as well as full compliance with the law.

C) Categories of data and relative origin

The Company may collect and use different types of personal data according to the specific purposes pursued and described below:
to. personal information, such as name, surname, age / date of birth, place of birth, details of the identity document;
b. contact information, such as residential address, e-mail address, telephone number, mobile number;
c. payment information, such as payment instruments (credit or debit card, bank transfer, etc.) and related data;
d. information relating to the services purchased, such as structure and date of stay, details of the services booked and related amounts, evaluation of the services provided, complaints, refunds, travel companions or other information relating to the services requested and that the regulations in force allow us to collect;
And. habits and profiles, such as data regarding the services booked (booking history, including accommodation, services booked and related amounts), information on activities and initiatives relating to the management of customer relations (date and categories of such actions carried out or by achieve and their results), notes on purchasing habits or special needs, other information that current regulations allow to collect;
f. information relating to the family and the members of the same booking, such as number of children, dates of birth and other data that the regulations in force allow us to collect;
g. navigation data;
h. if you use the medical service: data relating to your state of health.

D) Nature of the provision of data

The processing of personal data will be carried out only by authorized personnel and by any external persons specifically appointed as data processors and will be based on principles of correctness, lawfulness and transparency. It will take place both on computer and paper support and in order to guarantee adequate security of your personal data from unauthorized or unlawful processing and from loss, destruction or accidental damage, through appropriate technical and organizational measures.
In the unlikely event that the Company deems that the security of your personal data in its possession or under its control has been or may have been compromised, it will inform you of the incident in the manner prescribed by law, using the methods it controls. prescribed.
With reference to the purposes referred to in points A1), A2), A5), A6) and A7), the processing of your personal data for these purposes does not require consent as it is necessary to fulfil legal obligations and the execution of the residence contract, any refusal could make it impossible to host it (for example with reference to the data shown on the identity document) or the impossibility of providing the requested services.
With reference to the purposes referred to in points A3) and A4), the processing of your personal data for these purposes requires consent.

E) Communication scope

The personal data provided will not be disseminated, unless required by law or expressly authorized, and may be disclosed to subjects who:
• operate as Authorized by the Data Controller for the purposes indicated above. To this end, HOTEL VILLAGGIO LE MANDRELLE SRL guarantees that its internal staff is duly trained on the importance of protecting personal data and that it uses secure tools that are necessary from time to time.
• operate as independent data controllers, if this complies with a legal obligation (for example, Public Administrations, for the performance of institutional functions; practicing the profession of lawyer, for legal assistance in any disputes, banking institutions, companies insurance)
• operate as external Data Processors, i.e. contractually authorized subjects who operate in the name and on behalf of HOTEL VILLAGGIO LE MANDRELLE SRL, engaged in the correct and regular pursuit of the purposes described (e.g. company that deals with accounting and administrative services, company of which HOTEL VILLAGGIO LE MANDRELLE SRL uses for the provision of its services).
These companies, bodies and organizations will only receive the personal data necessary to carry out the agreed services or to fulfil legal obligations and will not be authorized to use them for any other purpose.
La Società potrà inoltre comunicare i suoi dati personali a terzi laddove previsto dalla normativa vigente (ad es. autorità di pubblica sicurezza, enti locali), in caso di procedimenti legali, in risposta a una richiesta proveniente dalle forze dell'ordine che si fondi su basi legittime, per proteggere i diritti, la privacy, la sicurezza o le proprietà della Società o del pubblico. Inoltre, nella misura consentita dalla legge, la Società potrà comunicare i dati personali a terzi in caso di denunce relative all’utilizzo dei Siti Web o della rete wi-fi, laddove ritenuto necessario per indagare, prevenire o adottare misure riguardanti attività illecite e frodi sospette.
The complete list of designated data processors and third parties to whom the data is communicated can be obtained using the contacts indicated in this statement.

F) Protection of the privacy of minors

The website is aimed at a general audience, however its services are intended for individuals aged 18 and over. The Company does not request, collect, use and deliberately disclose personal data provided by persons under the age of 18 online or in tourist facilities, unless required by law.
If you are not of the required age, please do not make online reservations and ask an adult (i.e. your parents or guardian) to carry out the necessary procedures.

G) Social Media
You are free to share your data on a social network platform through the relevant plug-in integrated within the site, however, do not forget that social media are not subject to our privacy policy and when you access the site through a social media account or share information through a plug-in connected to a social network, your personal data is collected, used and shared directly by social media platforms based on their privacy policy; in this regard, we draw your attention to the fact that in accordance with these policies, your activities on our site could be shared and viewed by other users of the social network through which you have chosen to register / log in to our services.
We also inform you that HOTEL VILLAGGIO LE MANDRELLE SRL may use the images and videos you have published, posted and shared on its social wall or on its social media pages (Facebook and Instagram).

H) Retention period

In accordance with the principle of "conservation limitation" pursuant to art. 5, of Regulation (EU) no. 679/2016 (GDPR), taking into account the purposes for which they were collected, the fulfilment of legal obligations, or the protection of the rights of the Data Controller, these data will be kept for a period not exceeding that necessary (e.g. 10 years for accounting purposes, for the duration of the storage obligation for tax purposes, for the time necessary to respond to your requests and until the end of the stay requested in the case of a quote, or, in the case of processing for marketing and '' subscription to the News, until revoked and, in any case, no later than 10 years from the last request, and, at the expiry of this term, they will be permanently deleted or anonymised),
Finally, we inform you that the data collected for profiling purposes for commercial purposes in the terms indicated will be kept for a maximum period of two years, at the end of which they will be automatically deleted or made definitively anonymous, except for the requirements imposed by current legislation. The consent to the processing you have given will remain valid until revoked and will in any case allow processing with reference to data collected within two years.

I) Rights of the interested party

In your capacity as an interested party, you have the rights referred to in art. 15 GDPR and precisely the rights of:
1. to obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;         
2. to obtain the indication: a) of the origin of the personal data; b) the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) the identity of the owner, manager and the representative appointed pursuant to art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or authorized;  
3. to obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data which need not be kept for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfilment is proves impossible or involves the use of means that are manifestly disproportionate to the protected right;          
4. to object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail. It should be noted that the right of opposition of the interested party, set out in point b) above, for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the interested party to exercise the right of opposition also only partially.
5. Right to rectify your personal data in the event that they are modified and do not correspond to those previously acquired or communicated (Article 16)   
6. Right to delete data ("right to be forgotten" art. 17). HOTEL VILLAGGIO LE MANDRELLE SRL, if one of the following cases exists, deletes the data from all databases and archives where it is contained:          
a) the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;        
b) the interested party revokes the consent and if there is no other legal basis for the processing; 
c) the interested party opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21, paragraph 2;
d) the personal data have been unlawfully processed;         
e) personal data must be deleted to fulfil a legal obligation under Union law or the law of the Member State to which the data controller is subject;
f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1.      
7. Right to restriction of processing (Article 18). The interested party has the right to obtain from the data controller the limitation of the processing when one of the following hypotheses occurs:   
a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited;
c) although the data controller no longer needs them for processing purposes, the personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
d) the interested party opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
8. Right of opposition (art. 21-22): The interested party has the right to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1 , letters e) or f), including profiling on the basis of these provisions. HOTEL VILLAGGIO LE MANDRELLE SRL does not submit data to decisions based solely on automated treatments.    
Propose a complaint to a supervisory authority (Authority for the protection of personal data - based in Rome, Piazza Monte Citorio n.121;

J) Data controller and person in charge of the protection of personal data

The Data Controller is HOTEL VILLAGGIO LE MANDRELLE SRL, with registered office in Vico Santa Maria a Cappella Vecchia n. 11, 80121 Naples (Na) and operational headquarters in SS 18 - Marinella Olivo - 87032 Amantea (Cs), with VAT number 01228000780 and CF 00756010195.
The Data Controller can be contacted at the following e-mail address: