Skip to main content

Information pursuant to art. 13 and 14 EU Reg. 679/2016 (“GDPR”)

 

Parisii Luxury Relais Rome is a luxury relais located in the centre of Rome and managed by Pagui S.r.l.

In order to conduct a lawful, correct and transparent treatment, Pagui S.r.l. addresses the following information, drawn up pursuant to articles 13 and 14 of EU Regulation 679/2016 and of Legislative Decree 101/2018, intended for all those who visit and / or interact with the website and / or in any other way, with the Facility.

 

  1. PERSONAL DATA PROCESSING HOLDER

The personal data processing holder is Pagui S.r.l. Society.

  • Registered Office: Mirandola (MO), Via Fulvia 56 – I-41037
  • VAT Registration Number: IT03807410364
  • REA: MO-419365
  • Telephone Nr.: +39 06 0535658916
  • Fax Nr.: +39 06 1786087078

 

  1. Types of data we collect and where they come from

We collect the following personal data – independently or through third-party: general information and contact details, details of the identification documents, tax code and/or VAT number, bank details, credit and/or debit card details provided as a guarantee and/or on balance, list of services and products requested and purchased, date of arrival and departure, particular data related to health and/or religious/philosophical convictions.

For the establishment and execution of contractual relationships with the person concerned, the holder enters in possession of the personal data referred to above, acquiring them verbally or in writing, directly or through third parties (Travel Agencies, Tour Operators, Website, etc. ).

 

  1. PURPOSE AND LEGAL BASIS OF THE TREATMENT

The personal data of the interested party will be processed, also with the aid of IT tools, in order to:

a) Fulfil the obligation provided for by the “Consolidated Law on Public Security Laws” (article 109 RD 18.6.1931 No. 773) which requires to communicate to the Police Headquarters, for purposes of public security, the personalities of clients accommodated according to the procedures established by the Ministry of the Interior (Decree of 7 January 2013).
The provision of data is mandatory and does not require consent: in case of refusal to provide it, the Holder will not be able to host the data subject in his/her facility. The data acquired for this purpose won’t be kept by the Holder, unless the data subject provides the consent to the conservation as foreseen in the next paragraph.
The legal basis of this treatment is the fulfilment of a legal obligation (Article 6, paragraph 1, letter c) of the GDPR).

b) Fasten the registration procedures in case of subsequent stays of the interested party at the Holder’s Facility.

For this purpose, and after obtaining the consent of the interested party, revocable at any time (by contacting the Holder at the following address: info@parisii.it), the data will be stored for a maximum period of 24 months and will be used when the guest will again be a guest of the Facility.
The legal basis of this processing is the express consent of the interested party (Article 6, paragraph 1, letter a) of the GDPR). The consent of children under 16 must be collected by their parents or by their guardians.

c) Give feedback to requests for booking or sending material information.

The Holder will use this information only for the processing of the reservation as well as to send specific information regarding its confirmation, such as the receipt, the booking code and the general terms and conditions.

The legal basis for this processing is the performance of the contract or, as the case may be, the execution of pre-contractual measures taken at the request of the concerned party (Article 6 (1) (b) of the GDPR).
The provision of personal data for the purpose of fulfilling the contract is mandatory and, therefore, any refusal to supply them may determine the impossibility for the Owner to give effect to the contractual relationships.

The treatment will cease at the departure of the interested party, but some of his personal data may or must continue to be processed for the purposes and with the methods indicated in the following points.

d) Implement the contract and guarantee the services requested by the interested party.

The Holder may need to process particular data, as defined in art. 9 of the GDPR, to fulfil the contract and guarantee the services requested by the interested party. These data include: personal data revealing the religious or philosophical beliefs of the data subject and / or data relating to the health of the data subject.
These data will be processed for the exclusive purpose of providing the breakfast service and other services requested by the interested party as well as of ensuring that they are provided without risk to the health of the person concerned and / or respecting his / her religious / philosophical beliefs.
The legal basis for this processing is the express consent of the interested party (Article 6, paragraph 1, letter a) of the GDPR).
The Holder will process such data exclusively for the period of stay, after which it will be destroyed or deleted and in no case will it be stored for further processing.
The consent of children under 16 must be collected by their parents or by their guardians.

e) Carry out marketing activities, sending newsletters, advertising, informative and/or promotional material to the e-mail address provided by the interested party.

The data provision for the purpose of generic marketing is optional: there is no legal or contractual obligation on the data subject to provide such data for this purpose and / or to give consent to the processing of personal data for such purposes.
The interested party may revoke at any time the consent given and / or oppose, at any time, to the processing of his data for general marketing purposes:
1) Contacting the Holder at the following address:
2) Through the present link or through the appropriate link present in every promotional communication sent by the Holder.
The legal basis for this processing is the express consent of the interested party (Article 6, paragraph 1, letter a) of the GDPR).
For the marketing purpose, the Holder will process the data of the interested party until the consent is revoked (through a link to the “unsubscription”, present in every e-mail) or, in any case, no more than four years from the data collection, reserving the option, before the expiry of this term, to ask the interested party to renew consent and / or update the data.
The consent of children under 16 must be collected by their parents or by their guardians.

f) Offer personalized services on request, such as, for example, tourist guide, personal shopper, etc.

For this purpose it is necessary the consent of the interested party, revocable at any time either by contacting the Holder at the following address info@parisii.it or by communicating it personally. The treatment will cease at the departure of the interested party.
The consent of children under 16 must be collected by their parents or by their guardians.

g) Assist, respond to requests for information from the interested party or respond to complaints, reports and / or complaints.

The legal basis of this processing is the execution of pre-contractual measures taken at the request of the interested party (Article 6, paragraph 1, letter b) of the GDPR) or, depending on the case, the legitimate interest of the Holder (art. 6, paragraph 1, letter f) of the GDPR).
It is a legitimate interest of the Holder to respond to requests for information and / or reviews and / or to reports and / or complaints and / or complaints from interested parties (to which, moreover, the Holder is bound to respond, also according to the law referred to in the Consumer Code, given its role as manager of the Website). This legitimate interest of the Holder also coincides with the legitimate interest of the data subjects themselves who make the requests and / or reports and / or disputes and / or complaints in question and that, therefore, in the context of the relationship with the Holder, we may believe that they reasonably expect their personal data to be used by the Holder to provide feedback.
The legitimate interest of the Owner thus identified may therefore be considered prevalent on the fundamental rights and freedoms of the data subject, also because of such reasonable expectations and the relationship between the data subject and the Holder, and in consideration of the nature of the processed data and coincident interest of the same interested parties.
The interested party has, in any case, the right to oppose, at any time, for reasons connected to his personal situation, to the processing of personal data concerning him for the purpose in question. To exercise this right, the interested party can contact the Holder at the following address: info@parisii.it.

For this purpose, the Holder will process the data of the interested party until the unsubscription from the Portal or, however, no later than one year after the unsubscription.

h) Comply with current administrative, accounting and tax obligations.

For these purposes the treatment is carried out without the need to acquire the consent of the interested party. The data are processed by the Data Controller and his/her representatives, and are only disclosed outside in compliance with legal obligations. The provision of the necessary data is mandatory and in case of refusal the owner can’t provide the requested services. The data acquired for these purposes are kept for the time provided for by the respective regulations (10 years or more, in case of tax assessments).

i) Perform the function of receiving messages and phone calls addressed to the person during his stay.For this purpose it is necessary the consent of the interested party, revocable at any time either by contacting the Holder at the following address info@parisii.it or by communicating it personally. The treatment will cease at the departure of the interested party.
The consent of children under 16 must be collected by their parents or by their guardians.

j) Protect people, property and company assets through a video surveillance system of some areas of the Structure, identifiable by the presence of appropriate signs. This treatment does not require the consent of the interested party, as it pursues the legitimate interest of the Holder to protect people and property with respect to possible attacks, thefts, robberies, damage, acts of vandalism and for the purposes of fire prevention and safety of work. The recorded images are deleted after 24 hours, except holidays or other cases of closure of the exercise, and in any case not more than a week. They are not the object of communication to third parties, except in cases where it is necessary to adhere to a specific investigation request by judicial or judicial police authorities.
The legal basis of this processing is the legitimate interest (Article 6, paragraph 1, letter f) of the GDPR). In any case, the interested party has the right to oppose, at any time, for reasons related to his personal situation, to the processing of personal data concerning him / her for the purpose in question (i.e. defence of right/justice purposes).
To exercise this right, the interested party can contact the Holder at the following address: info@parisii.it.

k) Allow the interested party to exercise rights.

The Holder will process the data of the interested party in order to:

1) Respond to requests for the exercise of rights arising from the contract concluded with the Owner and / or required by law in relation to this contract;
2) Carry out the activities that prove necessary as a result of the exercise of these rights and to proceed, if necessary, to the according reimbursements;

3) Receive and respond to requests for the exercise of rights in the matter of protection of personal data provided for by the GDPR and carry out all consequent activities. The legal basis of this processing is the fulfilment of legal obligations to which the Holder is subject (Article 6, paragraph 1, letter c) of the GDPR). For this purpose, the Holder may retain the data until the prescription of the relative rights and, in any case, not beyond the maximum terms established by the GDPR and / or by law.

l) Ascertain, exercise or defend a right.

The Holder will process the data of the interested party for the assessment, exercise or defence of a right in all the competent offices.
The legal basis of this processing is the legitimate interest (Article 6, paragraph 1, letter f) of the GDPR).
It is a legitimate interest of the Owner to seek remedies to ensure compliance with his contractual rights or to prove that he has fulfilled the obligations arising from the contract with the person concerned or imposed on the Owner by law. This legitimate interest finds, in turn, a foundation in the constitutionally protected defence right. It can therefore be considered prevalent on the fundamental rights and freedoms of the interested party, also because of the reasonable expectations of the same.
In any case, the interested party has the right to oppose, at any time, for reasons related to his personal situation, to the processing of personal data concerning him / her for the purpose in question (i.e. defence of right / justice purposes) .
To exercise this right, the interested party can contact the Holder at the following address: info@parisii.it.
For this purpose, the Holder may retain the data until the prescription of the according rights and, in any case, not beyond the maximum terms established by the GDPR and / or by law.

 

  1. CATEGORIES OF SUBJECTS TO WHOM THE HOLDER COMMUNICATES THE PERSONAL DATA OF THE DATA SUBJECT

The personal data of the data subject will be processed exclusively by the Holder’s employees and collaborators, or by companies expressly appointed as data processors. If applicable, the personal data of the data subject may be communicated by the Holder exclusively to the following categories of recipients:

  1. a) The personal data processing Holder;
    b) Consultants and accountants or other professionals who provide functional services for the purposes indicated above;
    c) Travel agencies, Tour Operators, tour operators;
    d) Credit institutions, financial intermediaries and insurance companies that provide functional services for the purposes above indicated;
    e) Subjects who process data in execution of specific legal obligations;
    f) Judicial or administrative authorities, for the fulfilment of legal obligations.

The personal data of the interested party will in no case be disclosed.

 

  1. RIGHT OF ACCESS

Pursuant to art. 15 GDPR, the interested party has the right to obtain from the holder confirmation that it is or is not undergoing treatment of personal data concerning him and, in this case, to obtain access to them. The interested party can exercise the right of access by contacting the holder at the following address: info@parisii.it.

 

  1. RIGHT OF CANCELLATION AND/OR CORRECTION

Pursuant to articles 16 and 17 GDPR, the interested party has the right to obtain from the Data Controller the cancellation of personal data concerning him/her or their correction, without unjustified delay, and the Data Controller is obliged to delete or correct them without undue delay.

The interested party can exercise the right to cancel or rectify by contacting the Data Controller at the following address: info@parisii.it.

 

  1. RIGHT OF LIMITATION OF TREATMENT

Pursuant to art. 18 GDPR, the interested party has the right to obtain from the holder the limitation of processing when one of the following cases occurs:

a) The interested party disputes the accuracy of personal data for the period of time necessary for the holder to verify the accuracy of such personal data;

b) The processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;

c) Although the holder no longer needs them for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;

d) The interested party has opposed the processing in case of treatment based on the legitimate interest of the owner, for reasons related to his particular situation (and, therefore, in the event of opposition to the processing of data for the purposes referred to in Article 4, letters e), h) and j) of this information), pending verification of the possible prevalence of the legitimate reasons of the holder with respect to those of the interested party.

The interested party can exercise the right of limitation by contacting the holder at the following address: info@parisii.it.

 

  1. RIGHT TO DATA PORTABILITY

Pursuant to art. 20 GDPR, the interested party has the right to receive, in a structured format, commonly used and readable by automatic device, the personal data concerning him / her provided to the Owner and has the right to transmit this data to another holder without impediments by the holder who supplied them, if:
a) The treatment is based on the consent of the interested party or on a contract;
b) The treatment is carried out by automated means.
The interested party can, therefore, exercise the right to portability by contacting the holder at the following address: info@parisii.it.

 

  1. RIGHT OF OPPOSITION

Pursuant to art. 21 GDPR, the interested party has the right to oppose at any time, for reasons connected to his particular situation, to the processing of personal data concerning him / her for the purposes referred to in art. 4, lett. e), h) and j) of this information and having as its legal basis the legitimate interest of the Owner. The interested party may exercise the right to object to the holder by contacting him at the following address: info@parisii.it.

 

  1. TIMES AND METHODS OF RESPONSE IN CASE OF EXERCISE OF THE RIGHTS OF THE INTERESTED PARTY

Pursuant to art. 12 GDPR, the holder provides the data subject with regard to the actions taken in relation to a request to exercise the rights recognized by the GDPR (right of access, right of rectification, right of cancellation, right to limit the processing, right to the portability of data, right of opposition) without unjustified delay and, in any case, within one month from receipt of the request. This term can be extended up to 3 months in cases of particular complexity. In the latter case, the holder will inform the interested party of the extension and of the reasons for the delay within one month from receiving the request. If the interested party submits the request by electronic means, the information is provided, where possible, by electronic means, unless otherwise indicated by the interested party.

 

  1. RIGHT TO PROPOSE A COMPLAINT TO A CONTROL AUTHORITY

 Pursuant to art. 77 GDPR and without prejudice to any other administrative or judicial appeal, the interested party who considers that the treatment operated by the Controller violates the GDPR has the right to lodge a complaint with a supervisory authority, in particular in the Member State in which he normally resides, of the place where the alleged violation occurred. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status or outcome of the complaint, including the possibility of a judicial remedy.

Call Now Button