In accordance with Article 13 of European Regulation 2016/679, La Favorita S.r.l. – Management Gran Hotel La Favorita / Grand Hotel Europa Palace informs its customers of the following:

1. DATA CONTROLLER

The data controller is La Favorita S.r.l., with registered office in Via Tasso, 61 – Sorrento.

2. PURPOSE OF PROCESSING AND LEGAL BASIS

The data provided by all those who contact the hotel and by all hotel guests will be processed for the following purposes

1. a) to respond to customer requests and provide detailed information about the hotel’s services
2. b) to make reservations and obtain information on the availability of our facilities
   c) to be able to offer all the services recognised by the Hotel to its guests.

The data of customers who have stayed at the hotel may also be processed in order to monitor customer satisfaction and to be able to express their opinions about their stay through specialised social channels (e.g. Tripadvisor).

The provision of data by those who contact Gran Hotel La Favorita / Grand Hotel Europa Palace is optional, but it is necessary in order to be able to provide the information requested, to make reservations at the facility, upon presentation of the customer at the hotel, for the completion of reception operations, the provision of data is mandatory, and any refusal by the customer to respond will result in the inability of the facility to accommodate him/her.

For the purposes referred to in letters a), b) and c), the legal basis for the processing is the need to carry out pre-contractual measures at the request of the interested party or to fulfil the hotel services requested by the customer and ongoing administrative and accounting obligations. In particular, if the customer intends to enter with his car in the ZTL of Sorrento, some personal data and data of the number plate will be requested in order to transmit them to the competent authorities. In the event that, in order to provide the hotel service, it is necessary to acquire sensitive data and specific needs related to the stay, the legal basis is the express consent of the customer, given during the completion of the reception operations.

In order to carry out the purposes of customer satisfaction and evaluation of the stay, we need to obtain the specific consent of the customer, which we request by filling in specific forms.

3. PROCESSING METHODS AND CONSERVATION PERIODS.

The data will be processed using electronic and paper means, in accordance with procedures that are strictly necessary for the purposes indicated.

The information obtained may be used by the staff of La Favorita S.r.l. to carry out the operations related to the pre-contractual and contractual purposes described above and will be kept for the entire duration of the stay and until the relevant accounting, fiscal and legal requirements are fulfilled and, if necessary, to see that the rights of the company are protected, including in court. With the customer’s consent, the data may be kept for up to 3/5 years after the last visit in order to provide better hospitality for future visits.

4. SCOPE OF DATA COMMUNICATION

The personal data used for the above-mentioned purposes may be communicated to the following categories of subjects and subjects involved in our business processes in various capacities: banking institutions and external consultants for the fulfilment of legal obligations and/or for accounting purposes, companies and channels specialising in the commercial sector and customer satisfaction surveys for commercial initiatives, public administrations and public security bodies for the performance of institutional functions, within the limits established by law and regulations.

Some entities act as data processors, while other entities act as separate “holders” of processing operations due to the institutional and regulatory functions they perform.

5. RIGHTS OF THE DATA SUBJECT

With regard to the processing of personal data, you may exercise the following rights by contacting La Favorita S.r.l. at the addresses indicated above

– withdraw consent at any time. The data subject may revoke the consent given to the processing of his/her personal data for the various operations that require it.

– Object to the processing of the data. The data subject may object, on grounds relating to his or her particular situation, to the processing of his or her data where it is carried out on a legal basis other than consent or performance of a contract.

– Access to one’s own data. The data subject has the right to obtain information about the data processed by the data controller, about certain aspects of the processing and to obtain a copy of the data processed.

– Verification and rectification. The data subject may verify the accuracy of his/her data and request that it be updated or corrected.

– Obtaining a Restriction on Processing. If certain conditions are met, the data subject may request that the processing of his/her data be restricted. In this case, the data controller will not process the data for any purpose other than its retention.

– Obtaining the erasure or removal of personal data. If certain conditions are met, the data subject may request the data controller to delete his/her data.

– Receive their data or have it transferred to another data controller. The data subject has the right to receive his or her data in a structured, commonly used and machine-readable format and, where technically feasible, to have it freely transferred to another controller.

This provision applies when the data is processed by automated means and the processing is based on your consent, a contract to which you are a party or related contractual measures.

– Lodging a complaint. The data subject may lodge a complaint with the competent data protection authority or take legal action.