Name

Email

Object

Message

PRIVACY POLICY Tulli Ospitalità S.r.l., hereby represented by its legal representative, with registered office in Loc. Sant’Angelo 3/4 - 06030 Sellano (Pg) – Italy and acting as the Data Controller (hereafter "Controller"), has developed this Privacy Policy to explain how we shall process any personal information about you using the following lawful bases, pursuant to art. 13 Legislative Decree 30.6.2003 n. 196 (hereinafter, "Data Protection Law") and art. 13 EU Regulation n. 2016/679 (hereinafter, "GDPR"). 1. Processing of your data We process your personally identifiable, non-sensitive information, in particular contact information that you provide us by filling in the "Contact Us" form on our website. This applies also to any additional information you may provide (e.g. health data, religious beliefs or political opinions, trade union memberships) that is referred to as “Special categories personal data or Sensitive data" by current privacy regulations. We do not require you to provide this information to us and, when you choose to provide it to us, we inform you that before we handle sensitive data about you, we require your consent to do so; should you fail to provide your consent, we will be forced to delete the information you provided to us, without making use of it. 2. The purpose(s) of processing your personal data Your personal data are processed: A) Without your express consent, only to reply your single contact request. B) Only after you gave your consent, which you may choose not to give, we will use your personal data to contact you as to ask you, for example, to allow us to keep your data inour records or to send you emails with the latest info about our activities. We therefore require you to give us your consent to process your personal data and guarantee that we will protect it protect against any misuse. We will not transfer the datayou choose to provide to us to anyone who could make use of it and we are committed totake all appropriate steps to protect it. Mandatory or voluntary provision of data. You can choose whether to give your consent to allow us to process your personal data. However, in case you fail to provide your data to us, we may not be able to process it for the purposes as stated in letter B) in the previous clause. 4. Use of your personal information - Retention of your personal information We commit ensuring that your Personal Data is properly and securely managed, stored and kept confidential. We may handle your personal data via automated information systems, internet and physical devicessuitable to store, transfer and share your data. We keep your personal data as long as necessary to achieve the purposes described above, but no more than 10 years from the date you gave your consent to the processing of your personal data for the purposes as described above at Clause 2, Letter B. . 5. Access to your personal data Your information could be disclosed to: employees and collaborators of the Controller, in their capacity as internal data processorsand/or system administrators; employees and collaborators of Sys-Thema srl, Via Luigi Pirandello, 14, 63827, Pedaso (FM), P.IVA 01047800444, following your request for us to contact you to do business with us, as Sys-Thema srl shallact as an external Data Processor appointed for the purposes of assistance and maintenance of our accounting software; 6. Data communication Without your express consent, for the purposes as described at Clause 2 letter A)your data may be disclosedto: supervisory bodies, judicial authorities as well as all the other subjects to whom data has to be disclosedas required by law to fulfil the purposes stated above. With your consent, your data may be disclosed to our business partners for the purposes of contract fulfilment with our company. Your data shall not be disclosed or transferredto third parties other than those stated above. 7. Your Rights You have the following rights regarding your personal data we store, under Article 7 of the Italian Data Protection Law and Article 15 of the GDPR: to obtain confirmation as to whether or not personal data concerning youis being processed, even though not recorded yet, and, where that is the case, to have access to itin a commonly used, machine readable, format; to obtain any available information as to a) its source; b) the purposes and methods the processing; c) the logic involved in automated decision-making; d) the identity of the Data Controller, Data Processorsand the Data Protection Officer appointed under Art. 3, paragraph 1, of GDPR; e) the recipients or categories of recipient to whom your personal data has been or will be disclosed or to whom may be disclosed as they act as Data Protection Officers in the country, or act as Data Processors; to obtain: a) any inaccuracies in your Personal Data to be corrected, or, when you have interest, the completion of incomplete personal data;b) the erasure of your personal data, the restriction of the Processing of all or part of your Personal Data, where we may have processed your information unlawfully, including those where there is no good reason for us continuing to process it for the purposes for which it was collected and processed; c) proof that the requests as detailed in (a) and (b) were communicated, with regard to their content, to those to whom the data was disclosed or transferred, unless it involves a disproportionate effort compared to the right safeguarded; objectthe Processing of all or part of your Personal Data: a) based on legitimate interests, even whenit still relevant to the purposes of data collection; b) for direct marketing purposes or for carrying out market research or commercial communication, through the use of automated contact systems such as automated telephone call and/or by traditional marketing methods by paper mail and/or calls from an operator. Please note thatany right to object to the processing of your personal data, as set out in point b) above, for direct marketing purposes through automated methodsshall also extend to traditional methods, and that the Data Subject is able to exercise his right to object to the processing, even partially. However, as Data Subject, you have to right to decide to be sent communications exclusively using traditional methods or only automated contact systems or neither of the above. Where applicable, you have also the rights as set out in Articles 16-21 of the GDPR (Right to rectification, right to erasure, right to restrict processing, right to data portability, right to object to the processing), as well as the right to lodge a complaint to the Supervisory Authority. 8. How to exercise your rights If you want to exercise any of yourrights,you may send us: a registered mail to Tulli Ospitalità S.r.l., Loc. Sant’Angelo 3/4 - 06030 Sellano (Pg) - Italy an e-mail to info@conventoacquapremula.com 9. Data controller. The data controller is Tulli Ospitalità S.r.l., hereby represented by its legal representative, with registered office in Loc. Sant’Angelo 3/4 - 06030 Sellano (Pg) - Italy. Kind regards, Tulli Ospitalità S.r.l. *************** CONSENT TO DATA PROCESSING I have been given and read the Privacy Policy provided above, which I found clearly explained and easy to understand, and I consent to processing and disclosure of my personal datawithin the limits, for the purposes and for the duration specified in the Privacy Policy.

5+5=?