Information – Article 13 EU Regulation 2016/679 (“Regulation”)
Information on data processing pursuant to art. 13 EU Regulation 2016/679
We inform you that, pursuant to Regulation UE2016 / 679 (below: “Regulation”), your Personal Data will be processed by Voihotels S.p.A. based in Turin, Via Lugaro 15, as data controller (“Owner”).
The Data Controller will process your personal data (art.4.1 of the Regulation), for the following purposes:
- Management of information request through a contact form
The legal basis of the processing is the execution of a contract of which the interested party is a party or the execution of pre-contractual measures adopted at the request of the same (art. 6.1.b of the Regulation).
The provision of your personal data for the purpose indicated in letter a) is optional, but failing that it will not be possible to proceed with the management of the request for information.
Your Personal Data may be shared with:
• natural persons authorized by the Data Controller to process personal data (art. 29 of the Regulations) by reason of their job duties and after signing a confidentiality agreement (eg employees);
• contracted third parties involved in the management of the company’s information systems and web platforms, some of which act as Data Processors (art. 28 of the Regulation). The complete and updated list of managers is available on the website www.voihotels.com.
• subjects, entities or authorities to whom it is mandatory to communicate your Personal Data pursuant to legal provisions or orders from the authorities.
With regard to the possible transfer of data to third countries, the owner announces that the processing will take place according to one of the methods allowed by current law, such as the consent of the interested party, the execution of a contract concluded between the interested party and the data controller or the execution of pre-contractual measures taken at the request of the interested party; the conclusion or execution of a contract entered into between the data controller and another natural or legal person in favor of the interested party; the adoption of Standard Clauses approved by the European Commission, the selection of subjects adhering to international programs for the free movement of data (e.g. EU-USA Privacy Shield) or operating in countries considered safe by the European Commission. It is possible to have more information, on request, from the Data Controller at the contacts indicated above.
In relation to the indicated purposes, the processing of personal data takes place using manual, IT and telematic tools with logic strictly related to the purposes themselves and, in any case, in ways that guarantee the security and confidentiality of the data, in addition to compliance with the specific obligations enshrined in law.
Your Personal Data will be kept only for the time necessary for the purposes for which they are collected, respecting the minimization principle referred to in Article 5, paragraph 1, letter c) of the GDPR. In any case, your personal data will be kept for the time necessary for the execution of the services provided in the contract.
In any case, the further storage provided for by the applicable legislation, including that provided for by art. 2946 cod. civ. More information is available from the owner.
You have the right to ask the Data Controller, at any time, to access your Data, to correct or cancel them or to request the limitation of processing, to object now, or to obtain in a structured, commonly used format and the data concerning you can be read by an automatic device in the cases provided for by art. 20 of the Regulation.
Requests should be sent in writing to the Data Controller at the following address privacy.VOI@alpitourworld.it or to
DPO (Data Protection Officer) at the following address DPO@voihotels.com.
In any case, you always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force.