PRIVACY POLICY – St.Martin srl

PURSUANT TO ARTICLES 13 AND 14 OF THE GENERAL DATA PROTECTION REGULATION (EU) 2016/679 AND OF D. LGS. 196/2003 and SS.MM.II.

During the consultation of this website it is possible that information and personal data may be collected, as indicated in this notice. This privacy statement refers exclusively to this website.

The Data Controller
The Data Controller is St. Martin srl, VAT number 09338300156 with registered office in via Tonale 2, 20125 Milan, telephone 02.66985446, e-mail amministrazione@alberthotel.it

Object of the processing
The personal data held by the Data Controller are processed in compliance with the obligations of correctness, lawfulness and transparency imposed by the aforementioned legislation, protecting the confidentiality and rights of the interested parties. The site collects some user data to offer its services. For details, view the cookie policy presented on this website.

Purpose of the processing
The data of the User is collected to allow the Data Controller to provide its services, as well as for the following purposes: statistics and display of content from external platforms. To obtain further detailed information on the purposes of the processing and on the Personal Data tangibly relevant for each purpose, the User may refer to the relevant sections of this document.

Legal basis for the data processing
The legal basis of the processing is as follows:
the processing is necessary to fulfill a legal obligation to which the Data Controller is subject, pursuant to art. 6, paragraph 1, lett. c) of the 2016/679 EU Regulation; the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties, pursuant to art. 6, paragraph 1, lett. f) of the 2016/679 EU Regulation;

Processing methods
All data is processed by the company appointees and are not disclosed to unauthorised third parties. Processing is carried out using automated and/or manual form, in compliance with the provisions of art. 32 of the GDPR 2016/679 regarding security measures, by specifically appointed persons, and in compliance with the provisions of art. 29 GDPR 2016/679. The Data Controller takes appropriate security measures to prevent the unauthorised access, disclosure, modification or destruction of Personal Data. In addition to the Data Controller, in some cases, other parties involved in the provision of the services offered and in the organisation of this website may have access to the data (hosting provider, IT companies, filing, collection, printing and shipping and management of e-mails, communication agencies, postal couriers), or external parties and where necessary a Data Manager appointed by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

Transfer of personal data
The data is processed at the operating offices of the Data Controller and in any other place where the parties involved in the processing are located. For more information, contact the Data Controller. Personal data of the interested party is not transferred outside the European Union.

Conservation period
In compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to art. 5 of GDPR 2016/679, the User's personal data will be kept for the period of time necessary to achieve the purposes for which they were collected and processed or to defend/exercise a right. When the processing is based on the User's consent, the Data Controller may keep the Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the conservation period, the Personal Data will be deleted. Therefore, at the end of this period, the right of access, deletion, rectification and the right to data portability can no longer be exercised.

User rights
At any time, the user may exercise, pursuant to articles 15 to 22 of EU Regulation no. 2016/679, the right to:
a) request confirmation of the existence or otherwise of their personal data;
b) obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated to and, when possible, the conservation period;
c) obtain the correction and deletion of the data;
d) obtain the limitation of the processing;
e) obtain the portability of the data, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without hindrance;
f) oppose the processing at any time; users are reminded that, should their data be processed for direct marketing purposes, they can oppose the processing without providing any reasons.
g) ask the data controller to access personal data and to correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability;
h) withdraw consent in any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
i) submit a complaint with a regulating authority. The user has the right to submit a complaint with the Data Protection Authority, based in Rome via di Monte Citorio 121 (tel. +39 06696771), by following the procedures and indications published on the Authority's website www.garanteprivacy.it

Contacts of the Data Controller
You can contact the Data Controller using the following contacts:
- by e-mail: amministrazione@alberthotel.it
- by phone: 0266985446
- by fax: 0266985624
- by ordinary mail: via Tonale 2 20125 Milan