The processing of personal data
Massi Hotels adopts the utmost care in the protection of personal data, adopting adequate and necessary measures for the protection and preservation of data in compliance with the national and European guidelines in question, and considering all risks connected to the activities set out above.
Access to some sections of the site and/or eventual information or service requests by users of the site can be subject to the insertion of personal data, whose processing by Massi Hotels, in the person of the data processor, will take place in compliance with the General Regulation on the Protection of Data (EU Regulation 2016/679) and the applicable national legislation.
This disclosure aims to allow users to understand how Massi Hotels processes the personal data of users before accessing the various sections of the site and providing personal data, and it is therefore necessary for the user to view it before providing his/her own personal data through compilation of the designated spaces in the various sections of the site.
Aims of processing
Depending on the needs manifested by the user as he/her accesses the various sections of the site, the aims of the processing of personal data conferred directly by the user through compilation of online forms can be the following:
- Enabling registration on the site, which is necessary to access particular sections of the site and to deliver and manage the various services offered;
- Carrying out of marketing activities (including but not limited to the sending of promotional and advertising materials, the execution of connected analyses on registered users who allow Massi Hotels to improve the services and products offered to its clients) subject to the consent of the user and until the revocation of this consent; and this can be done via email, fax, mms and sms, subject to specific consent and until the revocation of this consent.
- Sending newsletters to communicate updates and news regarding the site, Massi Hotels and current promotions (site section entitled “Subscribe to the newsletter”);
- Responding to user requests regarding the products/services of Massi Hotels, advertising or the website
The registration of users on the website is not requested for the provision of services offered by Massi Hotels. Nevertheless, with the aim of fulfilling any requests made by users regarding such services, these will be invited to provide personal details, which will be processed only for the purposes and times strictly necessary.
Means of processing
Personal data will mainly be processed in an automated way, with rationales that are strictly linked to the abovementioned purposes.
The nature of the provision of personal details of users
The provision of personal details is optional, but this is partly necessary (i.e. in the case of details whose cell is marked with an asterisk) so that Massi Hotels can satisfy the needs of the user with regards to the functioning of the site. The failure to provide details marked by an asterisk, or the partial or inaccurate provision of these details, being necessary for the provision of the services requested, will render this provision impossible; the failure to provide optional personal details that are not necessary, or the partial or inaccurate provision of these details, will have no consequences.
Categories of personal details that are subject to processing
As well as personal details provided directly by users (such as name, surname, postal address, email address, e.t.c.), during interaction with the site, information systems and software procedures employed by the site indirectly acquire some personal data, the transmission of which is implicit in use of Internet communication protocols.
Such details are processed only to carry out anonymous statistical investigations.
Categories of parties who may come to know the personal details of users
Personal details can become known to employees or collaborators of the Marketing Office of the Data Controller, who, operating under the direct authority of the Data Controller, are named as responsible or charged with processing in accordance with articles 28 and 29 of the European Regulation and who will receive adequate operational instructions in this regard; the same will take place – under the attention of the named Data Processor – with regards to employees or collaborators of the Data Processor.
Scope of communication or diffusion of the personal details of users
Personal details provided directly by users via completion of online forms will not be communicated to third parties or publicised, except in the case of the publication of the names of the winners of any prize competitions promoted by Massi Hotels via their site.
Data Controller and Data Processor
Massi Hotels, located at the address: – Milano Marittima – Lido di Savio
info@massihotels.com
THE RIGHTS OF USERS
European Regulation recognises the right of interested individuals (those who provide their own details) to request access to and receive a copy of their own personal details from the data controller (Massi Hotels).
In particular, in accordance with article 15 of the Regulation, every interested individual has the right to obtain, from the data controller, confirmation of whether or not personal details relating to him/her are being processed and, in such cases, to obtain access to their personal details and to a series of other information, including:
- The purposes of processing;
- The categories of personal data in question;
- The recipients or categories of recipient to whom personal details have been/will be communicated, especially if these recipients are third parties or international organisations;
- Where possible, the period for which personal details will be stored, or, if this is not possible, the criteria used to determine this period;
The interested individual also has the right to ask the data controller to rectify or delete their personal details, in accordance with articles 16 and 17 of the Regulation, or limitation of the processing of personal details concerning him/her or to oppose their processing in accordance with articles 18 and 21.
As stipulated in article 20, the Regulation also guarantees the right to the portability of personal details.
Furthermore, all rights accorded by national regulations are also expressly recognised.
All interested individuals can revoke their consent regarding the processing of their details and lodge a complaint with the Privacy Guarantor, as stipulated in the regulation in force.
The procedure for exercising the rights specified in articles 15 and 22 of the Regulation and for obtaining a list of the Data Processors
At any time, the user can exercise the rights specified in articles 15-22 of the Regulation as well as obtaining a complete list of the Data Processors by sending an email to the address of the Data Controller (info@massihotels.com) or by sending a letter via post to the address: Massi Hotels – Milano Marittima – Lido di Savio
Furthermore, the user, if consent has been given, can oppose the processing of their personal details for the aims detailed in point b) (marketing activities), carried out via the email address of the user in question, by clicking on the relevant “link” present in every email message.
The procedure for modifying the user’s “profile”
At any time, the user can modify the data provided or delete their own profile by using the “Modify details” function present on the website, or by sending an email message to the Data Controller (info@massihotels.com) or by sending a letter via post to the address: Massi Hotels – Milano Marittima – Lido di Savio