PRIVACY NOTICE PURSUANT TO ART. 7 OF LEGISLATIVE DECREE 70/2003 AND EUROPEAN REGULATION 679/16 (GDPR).

We attach great importance to the protection of your personal data. Processing your personal data is exclusively based on the legal regulations (GDPR 679/2016, TKG 2003) and on your informed consent. This section on data protection provides information about the most important aspects of data processing in connection with our website.
The following applies only to this website; The Data Controller is not responsible for the data entered and cookies installed by other sites that may be consulted via links.

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA – ART. 13 REG. 679/16

In compliance with the provisions of the European Privacy Regulation (General Data Protection Regulation) No. 679 of 2016, we intend to provide you with some information on the collection and use of your personal data by the Data Controller. The processing of information concerning you will be based on principles of fairness, lawfulness, transparency and the protection of your confidentiality and rights.

The personal data you provide in the registration forms, newsletter boxes, contact forms or data collected automatically when browsing the site, are collected and managed with the help of electronic tools, or automated, for the following purposes divided according to the Services offered by the Data Controller:

Communication, circulation and transfer of data to third countries or international organizations

We inform you that your data will not be transferred to countries outside the EU unless  an adequacy decision exists of the EU Commission to ensure, in such countries, the respect and protection of personal data as provided by Regulation 679/16.

Processing methods, automated decision-making processes and data retention times.

The legal basis for the processing of data for the purposes indicated above is Article 6 of Reg. 679/16, that is it is an operation necessary for performing a contract to which you are party, or is necessary to pursue the legitimate interests of the Data Controller or third parties, provided that the interests or fundamental rights and freedoms of you, the Data Subject, which require the protection of personal data, do not prevail.
Your data may be known by subjects specifically appointed to process them by the Data Controller, its technological partners or by Insurance and/or Professional Offices.
Your personal data will be kept until you formally request the cancellation of your account and its related data, except for storage obligations of the Data Controller as per the Laws and Regulations.

Rights of the interested party and complaint to the Privacy Guarantor.

You have, in principle, the right to information and access, rights for disclosure, rectification and erasure, restriction of processing, data portability, objection to and revocation of the consent. For claiming your rights or if you think that the processing of your data is in breach of the data protection law or that your data protection rights have otherwise been violated, you can at any time contact the data holder or lodge a complaint with the supervisory authority.

Information on the Data Controller.

The Data Controller is:

San Lorenzo Mountain Lodge s.s di Stefano Barbini & c.
Località Elle 23
39030 San Lorenzo di Sebato (BZ)
P.IVA 02929440218
info@sanlorenzolodges.com
Legal representative: Stefano Barbini (administrator).

in the person of its legal representative, to whom you may apply to assert the rights provided for by Articles 13, 15, 16, 17, 18, 20, 21 and 77 of Reg. 679/16

We remind you that the exercise of the rights is subject to the limits, rules and procedures provided by the aforementioned Regulation and that the Data Subject must know and act accordingly. Furthermore, in accordance with the provisions of Article 12, paragraph 3, the Data Controller shall provide the Data Subject with information relating to the action taken without undue delay and, in any case, no later than one month from receipt of the request itself. This period may be extended by two months where necessary in view of the complexity and number of the requests. The Data Controller informs the interested party of such extension, and of the reasons for the delay, within one month from receipt of the request.

By continuing to navigate the site in any way, you consent to the use of third-party cookies on this site, for the purposes indicated in this Privacy Notice.