(pursuant to Article 13 of Regulation (EU) 2016/679)
Dear Guest,
Please be informed that this electronic device is used to carry out check-in procedures, apply your digital signature to the Check-In Registration Form (Welcome Card), record guests' personal details, and comply with the formalities required under national and European legislation on the protection of personal data.
The use of this device is carried out in accordance with Article 109 of Royal Decree No. 773/1931 (Consolidated Public Security Act – Testo Unico delle Leggi di Pubblica Sicurezza, "TULPS"), as subsequently amended, and Article 13 of Regulation (EU) 2016/679 (hereinafter also referred to as the "GDPR").
Pursuant to Article 13 of the GDPR and Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018, we wish to inform you that Grand Hotel Principe di Piemonte S.p.A. (hereinafter the "Hotel" or the "Data Controller"), acting as the Data Controller, is committed to protecting your personal data and processing it in accordance with the principles of lawfulness, fairness, and transparency.
This Privacy Notice explains which personal data we collect, the purposes for which they are processed, and your rights as a data subject.
This Privacy Notice is also available at the Reception Desk and on our website at the following links:
https://www.principedipiemonte.com/it/f2/informativa-check-in.html
https://www.principedipiemonte.com/en/f2/check-in-privacy-policy.html
- Data Controller
Grand Hotel Principe di Piemonte S.p.A.
Registered office: Piazza Giacomo Puccini, 1 – 55049 Viareggio (LU), Italy
Email: privacy@principedipiemonte.com
- Purposes of Processing, Legal Basis and Data Retention Periods
Your personal data are processed for the following purposes:
|
Purposes of Processing |
Legal Basis |
Data retention periods |
|
A) Management of reservations and provision of hotel services (check-in, check-out, stay management, ancillary services). |
Performance of the contract to which you are a party (Art. 6(1)(b) GDPR). |
For the entire duration of the stay, up to 7 days after check-out (for credit card and identity document data), and for 10 years from the termination of the contract for legal protection purposes. |
|
B) Compliance with legal obligations, in particular the transmission of your personal details to the Public Security Authority (Art. 109 TULPS). |
Legal obligation (Art. 6(1)(c) GDPR). |
Data are retained for the time strictly necessary to carry out the communication and in accordance with the provisions of the competent Authority. |
|
C) Compliance with administrative, accounting, and tax obligations. (Issuance of invoices, accounting records). |
Legal obligation (Art. 6(1)(c) GDPR). |
10 years, as required by tax and civil law provisions. |
|
D) Sending of commercial communications, newsletters regarding offers and events (direct marketing). |
Your specific consent (Art. 6(1)(a) GDPR). |
Until withdrawal of consent, and in any case no longer than 2 years from the last interaction with the Hotel. |
|
E) Personalisation of services and improvement of the hospitality experience (e.g. recording your preferences for future stays, including your photograph if provided). |
Your specific consent (Art. 6(1)(a) GDPR). |
Until withdrawal of consent, and in any case no longer than 3 years from the last stay. |
|
F) Management of external communications (enabling you to receive messages and telephone calls during your stay). |
Your specific consent (Art. 6(1)(a) GDPR). |
Exclusively for the duration of your stay. |
The provision of data for purposes A, B and C is mandatory. Any refusal on your part will make it impossible for us to accommodate you at our establishment. The provision of data for purposes D, E and F is optional and subject to your consent.
- Categories of Data Processed and Recipients
We process personal data such as identification data, contact details, and payment information and, only with your explicit consent, special categories of data (e.g. food allergies, specific needs).
Your data may be disclosed to:
- Authorised internal staff involved in data processing.
•Public Security Authorities, in compliance with a legal obligation.
• Companies and professionals responsible for administrative and accounting management (e.g. accountants, invoicing software providers).
• Technical service providers (e.g. property management system providers, cloud service providers, IT maintenance companies), appointed as Data Processors pursuant to Article 28 of the GDPR.
• Marketing service providers, appointed as Data Processors.
A detailed list of Data Processors is available upon request from the Data Controller.
- Data Transfers Outside the European Economic Area
Your personal data are stored on servers located within the European Union. Where, for technical or operational reasons, it becomes necessary to use providers located outside the European Economic Area, such transfers will be carried out in compliance with Chapter V of the GDPR, ensuring an adequate level of protection (e.g. through Standard Contractual Clauses approved by the European Commission).
- Your Rights (Articles 15–22 GDPR)
You have the right to:
- Access your personal data and receive a copy thereof (Art. 15).
• Request rectification of inaccurate data (Art. 16).
• Obtain erasure of your data (“right to be forgotten”) in the cases provided for by law (Art. 17).
• Obtain restriction of processing (Art. 18).
• Receive your data in a structured, commonly used and machine-readable format (data portability), and transmit them to another controller (Art. 20).
• Object to processing on legitimate grounds (Art. 21).
• Withdraw your consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal (Art. 7).
• Lodge a complaint with the Italian Data Protection Authority (www.gpdp.it).
• Seek judicial remedies where the customer believes that personal data have been processed unlawfully.
To exercise your rights, you may send a request to the Data Controller at the following email address: privacy@principedipiemonte.com
ROOM ACCESSORIES
Dear Guests, please be informed that:
Responsibility arising from the use of accessories (including but not limited to hairdryers, kettles, irons, etc.), as well as any other tools or devices made available to guests in rooms or common areas, lies exclusively with the guest-user.
Guests are required to check the proper functioning of the accessories, to comply with the instructions for use, and to immediately report any defects or malfunctions to the reception, which will arrange for replacement.
Guests are also responsible in the event of damage or theft of the accessories.
In any case, any form of compensation and/or indemnity towards the guest is excluded, as well as any contractual or non-contractual liability for injuries, direct or indirect damages to persons and/or property caused by improper, imprudent, or negligent use of the accessories by the guest.
The undersigned declares that they have received and read the privacy notice on the processing of personal data pursuant to Article 13 of the GDPR and accepts the terms relating to the stay and the use of in-room accessories.
This signature does not constitute consent for the optional purposes listed above.
Guest Signature: _________________________________________
Date and Time: _________________________________________
OPTIONAL CONSENT FOR THE PROCESSING OF PERSONAL DATA
The provision of the following consents is optional, and any refusal will not in any way affect the provision of accommodation services. You may withdraw any consent given at any time, with the same ease with which it was granted.
Having read the full privacy notice, I hereby give my free, specific and informed consent for the following purposes:
- a) Health data ☐ I consent to the processing of my health-related data for purposes strictly necessary to manage my specific needs (e.g. preparation of special meals, room preparation) for the sole duration of the present stay. Such data will be deleted upon check-out.
- b) Direct Marketing ☐ I consent to the processing of my contact details in order to receive promotional communications, offers, newsletters and updates on events from the hotel via email or other contact channels provided by me.
- c) Profiling and Personalisation of Services ☐ I consent to the storage of my personal data and stay preferences in the hotel’s customer database, in order to receive personalised services and a better hospitality experience during future stays.
- d) Communication to Third Parties for Courtesy Purposes ☐ I consent to the disclosure to third parties, upon request, of my presence at the hotel, in order to allow me to receive messages and telephone calls addressed to me during my stay.
Guest Signature: _________________________________________
Date and Time: _________________________________________
