Privacy Policy

Information and Consent Form for the Processing of Personal Data

NOTICE - Art. 13 of EU Regulation 2016/679 - Legislative Decree 196/03 (Privacy Code) and subsequent amendments

In compliance with European Regulation No. 679 of 2016 and Legislative Decree No. 196 of 2003 concerning the protection of personal data, we inform you that the Data Controller is Hotel Belvedere Srl - Via Valassina, 31 - 22021 Bellagio - Como - Italy - VAT No. 01782150138 (hereinafter referred to as "the Data Controller").

Personal data is processed in full compliance with EU Regulation 679/2016 and Legislative Decree 196/2003.

The data provided by you (hereinafter referred to as "the Data Subject") will be used solely to fulfill your requests and may be disclosed to third parties only if necessary for this purpose.

NEWSLETTER SUBSCRIPTION - By completing the Newsletter subscription form, personal data may be shared with the Data Controller. The data provided through the form is processed solely to enable the receipt of newsletters related to the services selected by the Data Subject, based on their expressed consent.

CONTACT PAGE - Data collected through the "Contact" page of the website, with the explicit consent of the Data Subject, will be used exclusively to address your requests and will not be used for other purposes, even after your request has been addressed. Users are advised not to provide irrelevant personal data; any such data will be deleted or disregarded.

CAREER / WORK WITH US PAGE - Data processed includes information necessary for identification, contact details, educational background, previous professional experience, and aptitude demonstration, essential for candidate selection and legal compliance. Refusal to provide such data will prevent us from considering your application. If required by law, specific data (e.g., health-related information) may be requested.

Personal data will be processed by authorized personnel and external collaborators following the Data Controller's instructions. All resumes are stored in paper format for three years from receipt and then permanently deleted.

BOOKING PAGE - When visiting the "Book" page, users are redirected to the booking engine to complete their reservations. For further information, please refer to the privacy policy on that website.

DATA PROCESSING METHODS - Data will be processed by personnel authorized by the Data Controller using technical and IT tools designed to ensure confidentiality and security. Processing includes activities such as collection, recording, organization, storage, consultation, modification, selection, extraction, use, interconnection, communication, deletion, and destruction.

DATA RETENTION - Data will be retained only as long as necessary to provide the requested services and will be deleted upon the Data Subject's request, subject to any legal retention obligations. Data will not be disclosed.

DATA SHARING - For the purposes described above, the Data Controller may rely on third parties acting on its behalf and according to its instructions as data processors. These include suppliers, commercial and production partners, intermediaries, technical consultants, and others collaborating to fulfill contractual obligations. Data may also be disclosed to entities authorized by law to collect such data (e.g., provincial health agencies, tax authorities).

A complete and updated list of data processors is available upon request.

DATA TRANSFER - Data may be transferred within the European Union where the Data Controller or its suppliers and collaborators are located or have servers. Data will not be transferred outside the European Union.

Rights of the Data Subject:

• Right of Access (Art. 15 GDPR): The right to access personal data and lodge a complaint with the supervisory authority.
• Right to Rectification (Art. 16 GDPR): The right to correct inaccurate personal data.
• Right to Erasure (Right to Be Forgotten) (Art. 17 GDPR): The right to request the deletion of personal data without undue delay.
• Right to Restrict Processing (Art. 18 GDPR): The right to limit data processing.
  
• Notification Obligation (Art. 19 GDPR): The Data Controller must notify recipients of any rectification, deletion, or restriction of processing under Articles 16, 17, and 18.
  
• Right to Data Portability (Art. 20 GDPR): The right to receive personal data in a structured format and transmit it to another controller.
• Right to Object (Art. 21 GDPR): The right to object to data processing.
  
• Profiling (Art. 22 GDPR): The right not to be subject to automated decision-making, including profiling, that significantly affects the Data Subject.
  
• Right to Lodge a Complaint: The right to file a complaint with the Italian Data Protection Authority at www.garanteprivacy.it.

Contact Details of the Data Controller:
Hotel Belvedere Srl - Via Valassina, 31 - 22021 Bellagio - Como - Italy
VAT No. 01782150138
Phone: +39 031 950 410
Email: [email protected]