Privacy

In accordance with Articles 13-14 of EU Regulation 2016/679 (General Data Protection Regulation – GDPR)

The company Ancillotti Alcide Srl, with its legal headquarters at Via G. Marconi, 67/A, Poggibonsi (SI), VAT and Tax Code 00377680525 (hereinafter, the “Data Controller”), as the data controller, informs you that the processing of personal data is governed by EU Regulation 2016/679 (hereinafter, the “GDPR”), which ensures the protection of personal data and the rights of the data subjects.

1. Purpose and legal basis of processing

The processing of personal data provided is intended exclusively to:

• Fulfill contractual obligations and respond to specific requests from the data subject.
• Comply with legal obligations, particularly in relation to accounting and tax matters.

If the processing involves the processing of “sensitive” data (e.g., racial or ethnic origin, religious beliefs, health status, sexual orientation), this will only be carried out upon explicit written consent.

2. Processing methods

Personal data will be processed using electronic and/or paper methods, adopting appropriate technical and organizational security measures to ensure confidentiality, integrity, and availability.

3. Types of data processed

The data processed includes:

• Common personal data.
• Any sensitive and judicial data necessary for the provision of the requested service, upon obtaining specific consent.

4. Obligation to provide data

Providing personal data is optional. However, failure to provide data may prevent or make it extremely difficult to provide the requested services.

5. Data retention period

Personal data will be kept for the time strictly necessary to fulfill the above purposes, and in any case, no longer than 15 years from the cessation of the relationship for service purposes.

6. Data controller, processors, and persons authorized for processing

The data controller is:

Ancillotti Alcide Srl
Legal Headquarters: Via G. Marconi, 67/A, Poggibonsi (SI)
Email: info@ristorantealcide.com

The updated list of data processors and persons authorized for processing is available at the data controller’s legal office.

7. Data communication and dissemination

Personal data may be used for the following purposes:

• Sending communications regarding initiatives and promotional offers.
• Information on events or offers via email or phone.
• Conducting market research and statistical analysis.

Data may be communicated to:

• Entities authorized by law to access personal data.
• Collaborators and employees of the Data Controller within the scope of their duties.
• Third parties, both public and private, involved in the activities of the Data Controller.

8. Data subject rights

The data subject may exercise the following rights, recognized by the GDPR:

8.1. Access and rectification of data (Articles 15 and 16 GDPR)

The data subject has the right to:

• Obtain confirmation of the existence of processing of their personal data.
• Access the purposes, categories of data, recipients, and duration of processing.
• Request the rectification of inaccurate or incomplete data.

8.2. Data deletion (Article 17 GDPR – Right to be Forgotten)

The data subject may request the deletion of their personal data in the following cases:

• The data is no longer necessary for the purposes of processing.
• The data subject withdraws consent, and no other legal basis for processing exists.
• The data has been processed unlawfully or must be deleted due to legal obligations.

8.3. Limitation of processing (Article 18 GDPR)

The data subject may request the limitation of processing of their personal data under certain conditions, such as:

• Disputing the accuracy of the data.
• Unlawful processing, but opposing deletion.

8.4. Data portability (Article 20 GDPR)

The data subject may obtain a copy of their personal data in a structured, commonly used, and machine-readable format to transfer it to another data controller.

To exercise their rights, the data subject may send a request to:

Address: Via G. Marconi, 67/A – 53036 Poggibonsi (SI)
PEC: hotelalcide@pec.it

9. Transfer of personal data to third countries

Data is stored on servers located within the European Union. In the case of transfer to non-EU countries, the Data Controller will ensure compliance with applicable regulations, adopting standard contractual clauses approved by the European Commission.

10. Withdrawal of consent

The data subject may withdraw consent for the processing of personal data by sending:

• A registered letter to: Via G. Marconi, 67/A – 53036 Poggibonsi (SI)
• A PEC (Certified Email) to: hotelalcide@pec.it

The request must include a photocopy of the identity document and the following text:
“Withdrawal of consent for the processing of all my personal data.”

Once the request is received, the data will be deleted as soon as possible.

For further information regarding the processing of personal data or to exercise the rights described above, you can contact the Data Controller at the addresses provided.