Privacy
GENERAL INFORMATIONS
The following are the methods for managing the site in relation to the processing of personal data of users who consult it. This is an information notice pursuant to art. 13 EU Reg. 2016/679 (hereinafter, "GDPR").
Bri-Ge Brianza Gestioni S.r.l. is the data controller. with registered office in via Monte Bianco 4, 20900 Monza, CF and VAT number 05006880966 (hereinafter, "Holder").
Data collection
The website www.eurohotelresidence.it (hereinafter, "Site") may collect anonymous information about the software used, for example IP address, type of browser, operating system, domain name, date and time in which the user accesses the site and addresses of the websites from which he has accessed. The information collected is used to improve the quality of the service and to provide general statistics on the use of the Site. Under no circumstances will it be possible to trace the identity of the person who has navigated the Website.
In particular, the Site may be consulted without communicating any personal data to the Data Controller; under no circumstances is it necessary to provide personal data in order to access the information on the site. The only personal data requested is the e-mail address, with the sole purpose of contacting the user, if you wish to enter into a relationship with the Data Controller for information on the activities of the same. The optional, explicit and voluntary sending of e-mails to the addresses listed on this Website entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data voluntarily and spontaneously included in the message.
The processing connected to the web services of this Site takes place at the headquarters of the Owner. Managed only by the technical staff of the office in charge of processing, or by any persons in charge of maintenance operations. The personal data provided by users who submit a request for the sending of IT materials are used only to perform the service or provision requested and are communicated to third parties only if this is necessary for this purpose, however, prior to your assen-so.
Disclosure of personal information
Except in the cases described in this statement, personal information will not be disclosed.
1) Data Controller
This privacy notice is provided by BRI-GE BRIANZA GESTIONI S.R.L., VAT no. 05006880966, in its capacity as Data Controller (hereinafter the “Controller”). For any request, the Controller may be contacted at the following email address: direzione@eurohotelresidence.it.
2) Purposes of data processing and legal basis
The personal data collected are processed for the following purposes:
• Management of reservations and stays
Legal basis: performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR);
• Compliance with tax, accounting and public security obligations
Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR);
• Management of complaints or disputes
Legal basis: legitimate interest of the Controller (Article 6(1)(f) GDPR);
• Video surveillance in the common areas of the premises
Legal basis: legitimate interest and compliance with legal obligations (Article 6(1)(f) and (c) GDPR).
3) Categories of personal data processed
The data processed include, by way of example and not limited to:
• Identification data (first name, last name, date of birth);
• Contact details (telephone number, email address, postal address);
• Stay-related data (dates, requests, preferences);
• Payment data (bank details, transactions);
• Video surveillance images.
4) Processing methods
Processing is carried out using manual, electronic and telematic tools, adopting appropriate technical and organisational measures to ensure the security, integrity and confidentiality of personal data, in accordance with the GDPR.
5) Disclosure of data to third parties
Personal data may be disclosed to the following categories of recipients:
• Tax and legal consultants
• IT service providers
• Competent public authorities
• Booking and payment platforms
Such parties will act, as applicable, as Data Processors or independent Data Controllers. The complete and updated list of Data Processors is available upon request.
6) Transfer of data to third countries
Should personal data be transferred outside the European Economic Area (EEA), the Controller shall ensure that such transfers are carried out in compliance with Articles 44–49 of the GDPR, by adopting appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
7) Data retention period
Personal data shall be retained for the time strictly necessary to fulfil the purposes for which it was collected and, in any case, as follows:
• Tax and accounting data: up to 10 years;
• Data relating to the stay: for the period necessary to manage the service;
• Video surveillance images: up to 72 hours, unless further retention is required for investigative purposes.
8) Rights of data subjects
Data subjects have the right to:
• Access their personal data (Article 15 GDPR);
• Request the rectification of inaccurate personal data or the completion of incomplete data (Article 16 GDPR);
• Obtain the erasure of personal data in the cases provided for by law (Article 17 GDPR);
• Request the restriction of the processing of personal data (Article 18 GDPR);
• Object to processing based on the Controller’s legitimate interest (Article 21 GDPR);
• Receive their personal data in a structured, commonly used and machine-readable format and request data portability (Article 20 GDPR);
• Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Requests may be submitted by email to [contact email] or by post to the Controller’s registered office.
9) Mandatory or optional nature of data provision
The provision of personal data is mandatory for the management of debt recovery activities. Failure to provide such data may prevent the Controller from fulfilling its contractual or legal obligations.
10) Updates to this privacy notice
This privacy notice may be subject to changes or updates. Data subjects will be informed through the appropriate channels. The updated version is always available at the EuroHotel Residence premises – Via Monza 27, corner of Via Brodolini, 20863 Concorezzo (MB), Italy – and may also be requested by email at direzione@eurohotelresidence.it.
1) Data Controller
This privacy notice is provided by BRI-GE BRIANZA GESTIONI S.R.L., VAT no. 05006880966, in its capacity as Data Controller (hereinafter the “Controller”). For any requests, the Controller may be contacted at the following email address: direzione@eurohotelresidence.it.
2) Purposes of data processing and legal basis
The personal data collected are processed for the following purposes:
a) Management of contractual relationships with suppliers:
• Purpose: To manage pre-contractual and contractual relationships with suppliers, including orders, payments, operational communications and contractual obligations.
• Legal basis: Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR).
b) Compliance with legal obligations:
• Purpose: To comply with applicable national and European regulations, including tax and accounting obligations.
• Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR).
c) Management of disputes and protection of rights:
• Purpose: To protect the rights and legitimate interests of the Controller in the event of legal disputes with suppliers.
• Legal basis: Legitimate interest of the Controller (Article 6(1)(f) GDPR).
3) Categories of personal data processed
The personal data processed include, by way of example and not limited to:
• Identification data (first name, last name, company name, tax identification number, VAT number);
• Contact details (address, telephone number, email address);
• Banking and payment data (IBAN, bank details);
• Data relating to the contractual relationship (orders, invoices, deliveries, communications).
4) Methods of processing
Processing is carried out using manual, electronic and telematic tools, adopting appropriate technical and organisational measures to ensure the security, integrity and confidentiality of personal data, in accordance with the GDPR.
5) Disclosure of data to third parties
Personal data may be disclosed to:
• Consultants and professionals for the performance of contractual and legal obligations;
• Competent public authorities in compliance with legal obligations;
• IT and hosting service providers;
• Banking institutions for payment processing.
Such parties will act, as applicable, as Data Processors or independent Data Controllers. The complete and updated list of Data Processors is available upon request.
6) Transfer of data to third countries
Should personal data be transferred outside the European Economic Area (EEA), the Controller shall ensure that such transfers are carried out in compliance with Articles 44–49 of the GDPR, by adopting appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
7) Data retention period
Personal data shall be retained for the time strictly necessary to fulfil the purposes for which it was collected and, in any case:
• For a maximum period of 10 years from the termination of the contractual relationship, in compliance with applicable legal obligations.
8) Rights of data subjects
Data subjects have the right to:
• Access their personal data (Article 15 GDPR);
• Request the rectification of inaccurate personal data or the completion of incomplete data (Article 16 GDPR);
• Obtain the erasure of personal data in the cases provided for by law (Article 17 GDPR);
• Request the restriction of the processing of personal data (Article 18 GDPR);
• Object to processing based on the Controller’s legitimate interest (Article 21 GDPR);
• Receive their personal data in a structured, commonly used and machine-readable format and request data portability (Article 20 GDPR); • Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Requests may be submitted by email to [contact email] or by post to the Controller’s registered office.
9) Mandatory or optional nature of data provision
The provision of personal data is mandatory for the management of contractual and administrative obligations.
Failure to provide such data may prevent the Controller from fulfilling its contractual or legal obligations.
10) Updates to this privacy notice
This privacy notice may be subject to amendments or updates. Data subjects will be informed through the appropriate communication channels. The updated version is always available at the EuroHotel Residence premises – Via Monza 27, corner of Via Brodolini, 20863 Concorezzo (MB), Italy – and may also be requested by email at direzione@eurohotelresidence.it.