Dear Guest,

We would inform you that accordingly to the current legislation on the protection of personal data (EU Regulation No. 679 of 2016), the processing of personal data, including sensitive information provided by you, or otherwise acquired; it will be carried out in full compliance with the provisions of current legislation and in any case the principles of correctness, lawfulness and transparency, and with the maximum protection of your privacy and your rights.

PURPOSE AND METHOD OF DATA PROCESSING

We inform you that the processing of data will be carried out through the use of both electronic and paper support and for the following purposes:

A) acquire and confirm your booking of accommodation services and ancillary services and to provide the requested services. These data are necessary for the definition of the contractual agreement and for diligent and complete execution of the contract for the supply of hotel services. For their treatment it is not required its consent and in case of refusal to give personal data we cannot confirm the reservation or provide the requested services. The processing of data will cease at its departure, except for some data that will or may continue to be processed for the purposes indicated in the following points.

B) comply with the obligations established by Italian law and regulations and / or Community and international legislation, on Public Security in particular to fulfill the obligation under art. 109 R.D. n. 773 of 18.06.1931 (Consolidation Act of the laws of Public Security) that requires us to communicate to the police for public safety purposes, the details of all customers housed, according to the procedures established by the Ministry of Interior (decree January 7, 2013). Also in this case the provision of data is mandatory and does not require its consent, the refusal to provide data will not allow us to welcome you at the hotel. The data acquired for this purpose once communicated are not stored.

C) comply with current administrative, accounting, tax and tax obligations, even for these purposes the processing of your personal data does not require consent, the data are processed by us and our representatives, are disclosed outside only for fulfillment of legal obligations the refusal to provide data for these purposes will not allow us to provide the services requested. The data acquired and processed for this purpose will be kept for as long as required by the respective regulations (ten years or more in the case of tax assessments).

D) to make registration procedures quicker and simpler in case of subsequent stays with us. For this purpose, with your written consent, we will retain your data for a maximum of 1 year, they will be processed only when you will be our guest again and for the purposes already indicated. We remind you that at any time you can revoke your consent to data retention.

E) One of the services provided by our structure is also the telephone service and availability, therefore, upon your express written request and consent to the treatment, will be accepted telephone communications or postal communications also electronic direct to you that may involve the communication of your data personal, including your presence at our hotel, to third parties. Also for such purposes the treatment will end at your departure.

F) send you informative and promotional advertising material. The provision of data for sending informational and promotional advertising material is optional and requires your consent to the processing of data. For this purpose and after obtaining your consent your data will be processed for 2 years, they will not be disclosed to third parties. You can revoke your consent at any time.

G) for the person protection of persons, of the property and for the security of the structure, your data will be processed through a video surveillance system in some areas of the structure, these areas will be identifiable by the presence of appropriate signs. For this treatment consensus is not required as it pursues our legitimate interest in protecting people and property to avoid the commission of crimes (aggression, theft, robbery, acts of vandalism) and for purposes of workplace safety and fire prevention. The recorded images will be deleted within a week, they are not communicated to third parties except for specific requests of the judicial authority or of the judicial police in the context of investigative activities.

SENSITIVE DATA

We also inform you that - in order to provide you with a complete and diligent service in the execution of the contract - it may be necessary to process sensitive data, for example those concerning your health (the existence of food intolerances or the presence of diseases that require a particular diet, allergies of various kinds, etc.). The provision of such data in addition to being in your exclusive interest will allow us to provide you with a complete and diligent service and therefore to fully execute the contract. The collection and processing of your sensitive data and in particular those relating to your state of health will only take place where necessary for the purpose of a more correct fulfillment of the contract and prior written consent. They will be communicated only to the employees of the structure and, where possible, if it were impossible to supply them directly, to the external health personnel for the protection of your right to health. In any case, you will be required only data, whether personal or sensitive, strictly necessary for the execution of the hotel contract and in any case their treatment will cease at the end of your stay at our hotel.

RIGHTS

According to the EU Regulation you have the right to access to data, to their correction, to the deletion, to the limitation of processing, to the portability of data and to the opposition to processing (articles 15 to 22 of European regulation No. 679 of 2016) you may exercise these rights, if applicable, in the manner provided for in the European regulation. Finally, you can lodge a complaint with the Privacy Guarantor, according to the procedures established by current legislation.

PERSONS HOLDING AND CHARGING DATA PROCESSING

We inform you that the data controller is L'Agave s.r.l., based in Capri in via Listrieri n. 25 / a CAP 80073 phone +39 0818370122 e-mail booking@villabrunella.it whose operating office is located in via Tragara 24 / a in Capri where the data will be kept and processed for the times prescribed by law. The person in charge of data processing is Massimo Ruggiero, who can be contacted at booking@villabrunella.it and at +39 081 8370122