ViDEOSURVEILLANCE

PRIVACY POLICY pursuant to Art. 13 of the EU Regulation 2016/679

Dear Customer,

with this document the company PLATOR S.R.L., as Data Controller, informs you about the use that will be made of your data, always based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.

Origin and Type of Data Processed. The data we process are those, provided by you, that have enabled us to identify you in order to provide our services, such as first name, last name, date and place of birth, personal contact details.

Purpose Of Processing. Your personal data will be used to provide our hotel and restaurant services, as it relates to the reservation and billing stage, specifically for the following purposes:

for the reservation and stay at our facility

to fulfill the obligation under Article 109 of R.D. 18.06.1931 No. 773, which requires us to register and communicate to the local public security authority the personal details of the customers accommodated

to fulfill current accounting and tax obligations

to send informative, advertising, promotional and commercial material regarding initiatives organized or related directly (direct marketing) or through partnerships to our company (indirect marketing).

Your data may be transmitted to third parties, for the provision of additional services, in order to be able to offer you a complete service during your stay.

Method of processing. The processing of your data will be carried out using paper and electronic tools, with logics related to the purposes for which they were collected, in compliance with the provisions of Article 32 of EU Regulation 2016/679 on security measures.

These activities will be carried out exclusively by our in-house staff, duly trained on the importance of personal data protection, using secure tools as necessary from time to time.

The Data Controller guarantees the strictest confidentiality of your personal data, which will be processed in accordance with current data protection legislation and undertakes to provide for their deletion if you request it.

Your data will not be processed by automated decision-making processes, including profiling.

Legal basis for processing and revocation. The company PLATOR S.R.L. is authorized to process your data in order to fulfill the contract concluded with you. The provision of data is mandatory: any refusal to communicate your data will result in the 'impossibility of hosting you at our facility. As far as direct marketing is concerned, the same is based directly on the law (art. 130, paragraph 4 Privacy Code), but you can refuse such use at any time; while for the use of your personal data for indirect marketing purposes, your express consent will be required.

Period and place of data retention. Your personal data will be retained for the entire duration of your stay, and thereafter for an additional 10 years, unless there is another overriding reason including (i) further pending contractual relationship; (ii) legal obligation requiring a longer retention period; (iii) need for extension dependent on a judicial pendency.

Data recipients. Your collected data will not be disseminated, sold or exchanged with third parties for the purposes described above without your express consent. It may be disclosed to parties who:

Operate in the capacity of Authorized by the Data Controller for the above purposes;

Operate in the capacity of Autonomous Data Controller, if this is in response to a legal obligation (e.g. Judicial Authority);

Operate in the capacity of third party service providers;

Operate in the capacity of Data Processors, i.e., contractually authorized individuals operating in the name and on behalf of the Data Controller, committed to the correct and regular pursuit of the purposes described.

The updated list of data processors and data processors is kept at the company's headquarters.

In any case, the communication of data outside the territory of the European Union is not envisaged.

Data controller. The data controller is the company PLATOR S.R.L., in the person of the shareholder, Mr. Da Zanche Dario, with registered office in Bormio (SO), Via Milano n. 50, P. Iva 00529370140, contactable at the following addresses:

e-mail: info@miramontibormio.it

Rights of Data Subjects The Data Controller recognizes and guarantees you the rights set forth in Art. 15 ss GDPR Regulation and therefore rights of information and access, rectification, updating, integration, cancellation, opposition, limitation and portability. To exercise the above rights, including refusal of a service and withdrawal of consent, and to request any information, please forward an email to info@miramontibormio.it

Complaint to the Guarantor: Without prejudice to judicial protection, a data subject who believes that his or her rights have been violated has the right to file a complaint with the Guarantor for the Protection of Personal Data by accessing the following link http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524