Information on personal data processing pursuant to article 13 of the General Data Protection Regulation for the Protection of Personal Data EU 2016/679

Pursuant to article 13 of the Regulation (EU) 2016/679 from the European Parliament and Council of  27 April 2016 relating to the protection of individuals with regard to processing personal data  and the free movement of such data  (“General Data Protection Regulation”, hereafter “GDPR” or “Regulation”), we hereby inform you that the data you provided during registration to this site, or connected to residencevillafirenze.it, will be subject, in compliance with the aforementioned regulation and in accordance with privacy obligations, to processing referred to in article  4 of the EU Regulation 2016/679. We would like to inform you in particular of the following.

1. Purpose of processing
   Your personal data will be processed for the following purposes:
   1. to manage requests for information received correctly and process the same requests; In any case your data will be stored for a duration of 2 years after the last contact unless longer storage is legally permitted for other reasons.
   2. if you complete the web form to subscribe to our Newsletter, we only use the data provided to send newsletters to the e-mail address provided.
2. Methods of processing 
   In relation to the purposes above your personal data will be processed using manual and computerised methods to ensure the security and confidentiality of the same.
3. Provision of data  
   In relation to the purposes specified in points 1.1 and 1.2., provision of personal data is optional however failure to supply it could mean that we would be unable to deal with your request for information and/or send you the newsletter.
4. Categories of subjects  to whom data can be communicated or that could come into contact with the data in their capacity as Data Processors or Persons in Charge of Processing  
   Employees, internal and external collaborators, the Data Controller and Data Processor and people that supply services in relation to the aforementioned purposes (such as technical services to manage the computer systems) can come into contact with your personal data. These subjects will act in their capacity as Data Processors or Persons in Charge of Processing. The data can be shared with third parties who perform duties related to the services requested
5. Period of storage of personal data
   The personal data collected for the purposes indicated will be processed and stored for the entire duration of any relationship established.
   From the date of termination of this relationship for whatever reason or cause, the data will be stored for the time limit allowed for under applicable law.
   The personal data collected for the purposes indicated will be processed and stored for the time required to meet these goals and however up to actual cancellation by the user.
6. Rights of data subjects  
   In compliance with article 15 to 22 of the GDPR, you can exercise the rights therein indicated and in particular:

• Right of access - Obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and receive information relating in particular to: the purposes of the processing, the categories of personal data concerned and the storage period, recipients to whom the personal data can be disclosed to (article 15, GDPR),
• Right to rectification - Obtain without undue delay the rectification of inaccurate personal data that concerns you and have incomplete personal data completed (article 16, GDPR),
• Right to erasure - Obtain the erasure of personal data concerning you without undue delay, where provided for in the GDPR (article 17, GDPR),
• Right to restriction of processing - Obtain from the controller restriction of processing where provided for in the GDPR (article 18, GDPR)
• Right to data portability - Receive the personal data concerning you in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance where provided for in the GDPR  (article 20, GDPR)
• Right to object – Object to the processing of personal data concerning you unless the Controller demonstrates compelling legitimate grounds for the processing (article 21, GDPR)
• Right to submit a complaint to the supervisory authority – Submit a complaint to the Guarantor Authority for the protection of personal data.

Data Controller
Residence Villa Firenze sas di Mantellassi Anna
info@residencevillafirenze.it