Personal data
Information on the processing of personal data
pursuant to art. 13 of Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.
Data controller
The Data Controller is Casa della Misericordia, with registered office in Via Arco dei Priori, 4, 06081 Assisi, Italy, telephone +39 331 842 4636, e-mail info@casadellamisericordia.it, tax code GRCLGD61L60Z131R.
Type of data processed
Through this website and the contact/accommodation request form, we may collect and process the following personal data: first and last name, email address, telephone number, arrival and departure dates, number of guests, content of the request, as well as any other data provided voluntarily by the user.
Purpose of the processing
Personal data are processed for the following purposes:
a) manage contact and information requests sent by the user;
b) check availability and manage booking or accommodation requests;
c) carry out pre-contractual and contractual activities related to hospitality;
d) fulfill legal, administrative, fiscal, and public safety obligations related to the accommodation business;
e) protect the rights of the Data Controller in or out of court.
Legal basis for processing
Data processing is based on:
the execution of pre-contractual measures adopted at the request of the interested party;
the possible execution of the contract, if the booking is confirmed;
the fulfillment of legal obligations to which the Data Controller is subject;
the legitimate interest of the Data Controller in the organizational management and protection of its rights, within the limits permitted by applicable legislation.
Treatment methods
Data is processed using paper and/or electronic means, in compliance with the principles of lawfulness, fairness, transparency, data minimization, and confidentiality, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of data.
Nature of data provision
Providing the data requested in the contact or accommodation request form is necessary to process your request. Failure to provide it may make it impossible to respond to or process your booking request.
Retention period
Personal data will be retained for the time strictly necessary to manage the user's request and, subsequently, for the time required by applicable law or necessary to fulfill legal obligations and to potentially protect the Data Controller's rights.
Data recipients
The data may be disclosed to third parties who provide services functional to the purposes indicated above, such as IT service providers, hosting providers, administrative, tax, or legal consultants, as well as entities or authorities required by law to disclose the data. These entities will process the data, as appropriate, as data processors or independent controllers.
Transfer of data to third countries
If, for technical or organizational reasons, data is processed through services that involve transfer to countries outside the European Economic Area, such transfer will take place in compliance with the guarantees set forth in Articles 44 et seq. of the GDPR.
Rights of the interested party
The data subject may exercise the rights provided for in Articles 15–22 of the GDPR at any time, including the right to access, rectification, erasure, restriction of processing, objection, and data portability, where applicable.
The interested party also has the right to lodge a complaint with the Italian Data Protection Authority pursuant to Article 77 of the GDPR.
Contacts for exercising your rights
To exercise your rights or to request information on the processing of your personal data, you may contact the Data Controller at the following addresses:
info@casadellamisericordia.it
+39 331 842 4636
Updates
This policy may be subject to changes or updates. Users are therefore encouraged to review it periodically.