Dear Guest,

in compliance with Regulation (EU) 2016/679 "relating to the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data" (hereinafter Regulation), we wish to inform you in relation to the processing of your personal data.

DATA CONTROLLER
The data controller is Hosteda Hotels Srl - Via Tempio del Cielo,1 - 00144 Rome – VAT number 03268410929

PURPOSE OF THE TREATMENT
Your data will be processed in a lawful, correct and transparent manner, ensuring that they are accurate and adequate, relevant and limited to what is necessary with respect to the purposes pursued which, in this case, consist of:
 booking of catering services;

 promotion carried out by sending newsletters to communicate information and/or commercial offers;

LEGAL BASIS
The legal basis of the processing will consist of:
 fulfillment of contractual obligations;

 explicit consent

PROVISION OF PERSONAL DATA
We inform you that the provision of personal data is necessary for the purposes referred to in letter a), as the processing is foreseen for the execution of contractual obligations. It is therefore not necessary to provide your consent, except in the case in which you provide particular data (e.g. data relating to health); in this case, in fact, your refusal could lead to the failure or partial provision of the service. Otherwise, with regard to the purposes referred to in points b), explicit consent is required; therefore, your refusal will not allow the relevant service to be provided. Indeed, in the event that you request services that involve the processing of particular categories of personal data as required by art. 9 of EU regulation 2016/679 (e.g. "personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic, biometric data and/or, related data to the person's health or sexual life or sexual orientation") it will be necessary to obtain your specific consent.

We inform you that the personal data inherent, connected and/or instrumental to the service may also be processed for the legitimate interests of the Data Controller (such as, for example, fraud prevention, intragroup communications for internal administrative purposes, network security and of information systems and related services offered or made available through the networks and systems themselves, etc.), in compliance with legislation and confidentiality obligations.

PERSONAL DATA COLLECTED:

The personal data collected are: Name and Surname, email address and telephone number, possible reason for the booking and any special requests and will be processed exclusively to achieve the purposes specified above.

SCOPE OF CIRCULATION AND LOCALIZATION OF DATA - Communication to third parties
We inform you that your personal data may be communicated to:
 personnel employed by the Data Controller duly authorized and trained in accordance with the provisions of the Regulation;

 suppliers of the Data Controller, duly appointed as Data Processors;

 subjects whose access to the data is recognized by provisions of law, regulation or community legislation.

DATA RETENTION
Your personal data will be stored for the purposes referred to in letter a) for the duration of the booking, subsequently, for the time in which we are subject to conservation obligations for tax purposes and/or for other purposes established by law or by Regulations. For the purposes referred to in letter b), the data will be stored for 5 years from the date of consent from collection, at the end of which you will be asked to renew your explicit consent. We specify that consent for the aforementioned purposes may be revoked at any time without prejudice to the lawfulness of the processing carried out before the revocation itself.

RIGHTS OF THE INTERESTED PARTY
You will have the right to ask the Data Controller at any time to revoke any consent (art. 7) given, and access to your personal data (art. 15), rectification (art. 16) or cancellation (art. 17) of the same, the limitation of the processing that concerns him (art.18) or to oppose their processing (art. 21), in addition to the right to data portability (art. 20).

We also inform you that you can exercise the rights referred to in the previous paragraph by sending the appropriate form (downloadable on the website of the Guarantor for the protection of personal data), duly completed, to the Data Controller using the following methods:
 by e-mail to the following address: privacy@hostedahotels.it

 by postal service to: Hosteda Hotels Srl - Via Tempio del Cielo,1 - 00144 Rome;

Always pursuant to EU Regulation 2016/6