Information pursuant to Articles 13 and 14 of the EU Regulation 2016/679 (GDPR)

Pursuant to Articles 13 and 14 of the EU Regulation 2016/679 (hereinafter, the "Regulation"), and in relation to the personal data that IBC Forte Srl (hereinafter, the "Company" or "Data Controller") will possess during the course of the contractual relationship with you, we wish to inform you of the following.

1. Purpose of data processing.
The legal basis for the processing of your data is execution of the contract (letter a.), and the legitimate interest of the Data Controller (letters b. and c.)

a. for the management of the contract and pre-contractual communications between you and the Controller;
b. to fulfill the obligations required by law, regulation, EU legislation or an order of the Authority;
c. to exercise the rights of the Controller, such as the right of defense in court.

2. Methods of data processing.
The processing will be carried out in automated and/or manual form, in compliance with the provisions of art. 32 of the Regulations, by specially appointed persons and in compliance with the provisions of art. 29 of the Regulations et seq.

We point out that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to Article 5 of the Regulation, subject to your free and explicit consent expressed at the foot of this information notice, your personal data will be kept for the period of time necessary for the achievement of the purposes indicated in point 1, and in particular with regard to tax and accounting data for 10 (ten) years from the issuance of the relevant documents.

3. Disclosure of data.
Your personal data may be transferred to the data processors appointed by the Data Controller. We also inform you that the data collected will not be communicated without your explicit consent, except for necessary communications that may involve the transfer of data to public bodies, consultants or other parties for the fulfillment of legal obligations.

4. Disclosure of data. Refusal to disclose data.
The provision of your personal data is strictly necessary for the fulfillment of the purposes indicated in point 1.a, 1.b and 1.c. The user's refusal to provide personal data will result in the impossibility of fulfilling the activities mentioned in point 1.a.

5. Data dissemination. Data profiling.
Your personal data are not subject to dissemination.

Your personal data is not subject to profiling.

6. Transfer of data abroad.
Your personal data may be transferred to countries within the European Union within the scope of the purposes mentioned in point 1. Within the scope of the purposes mentioned in point 1, your personal data may be transferred to Third Countries, in the wake of the provisions of Articles 45 and 46 of the Regulation.

7. Rights of the data subject.
The Regulations give the individuals whose personal data are processed specific rights, including:

a) to obtain confirmation as to whether or not personal data concerning them are being processed and to obtain access to them (Art. 15 of the Regulations);
b) to obtain rectification of inaccurate personal data (Art. 16 of the Regulations);
c) to obtain the deletion of any personal data concerning him/her, in observance of the right to oblivion (Art. 17 of the Regulations);
d) to obtain the restriction of processing by the Data Controller (art. 18 of the Regulations);
e) to obtain their personal data in a structured, readable, and understandable manner, as well as obtain that such data be transmitted to another data controller without hindrance (Art. 20 of the Regulations);
f) to object to the processing of your personal data (Art. 21 of the Regulations).

You may revoke the consent given to the Data Controller at any time, without such revocation affecting the processing carried out up to that point by the Data Controller.

You may exercise your rights by written request sent to the Company, to the postal address of the registered office or to the email address info@laserenahotel.it.

8. Right to appeal to a supervisory authority.
You have the right to appeal to the supervisory authority (Garante Privacy) at any time if you believe that your data is being processed in an unorthodox manner.

9. Data controller.
The Data Controller is IBC Forte Srl, based at Via dell'Orso 8, Milan, in the person of its legal representative pro tempore.