Information for clients of the “Live Chat” service, pursuant to EU Regulation no. 679/2016 and the Italian Data Protection Act (Legislative Decree no. 196/2003), as amended by Legislative Decree no. 101/2018 et seq. regarding the processing and protection of personal data
Pursuant to article 13 of EU Regulation no. 679/2016 (the Regulation) and the Italian Data Protection Act (Legislative Decree no. 196/2003) as amended by Legislative Decree no. 101/2018 et seq. (for the sake of brevity, the Privacy law), Starhotels S.p.A. (hereinafter “Starhotels”), in its capacity as the Data Controller, would like to inform you that the personal data you provide will be processed in a way that is pertinent, transparent and compliant with the principles of lawfulness and necessity, in accordance with the relevant measures in force.
Purpose of Processing
In this regard, please note that your personal data (name, surname, e-mail, tel. no.) and the content of the chat will be processed for the following purposes:
- To respond to requests for information regarding products, services, commercial, advertising and promotional activities provided by Starhotels or its subsidiaries, affiliates or companies connected therewith.
Legal basis for processing
The legal basis for processing refers to the specific contractual relationship established, to which the data subject is party, or to the carrying out of pre-contractual measures adopted at the request of the data subject (art. 6, para. 1, lett. b) of the Regulation)
Means of data processing
Personal data will be processed using IT or electronic tools and with adequate security measures designed to guarantee the security and confidentiality of your personal data.
Data retention period
In observance of the principles of proportionality and necessity, data will not be stored for any longer than the time strictly necessary to achieve the purposes indicated above
Recipients of the personal data
The data collected will be processed exclusively by physical persons authorised by the Data Controller for the performance of work tasks, and may be transmitted to subsidiaries, affiliates or companies connected with Starhotels Group, both in Italy and abroad. In observance of the adequate safety measures implemented by the Data Controller, personal data may also be transmitted to public security bodies and other public or private subjects for the purpose of compliance with obligations established by law. Personal data may also be shared with third parties acting, on a contractual basis, in the capacity of data managers, pursuant to art. 28 of the Regulation.
Mandatory and non-mandatory provision of data
Without prejudice to the fact that, with regard to the processing of data necessary for the execution of the contract or for the precontractual measures referred to in the paragraph “Purpose of processing”, it is not necessary to provide consent, please note that it is not mandatory to provide such data, because they are not required to complete the request for information.
Rights of the data subject
Subjects to whom the personal data refer may exercise their rights vis-à-vis the Data Controller, pursuant to article 15 et seq. of the Regulation, i.e. they may obtain confirmation of the existence of their personal data and request the communication thereof in an intelligible form. They are also entitled to obtain access to, updating, rectification, integration and deletion of data or restrictions on their processing. They also have the right to oppose the processing of their personal data, in full or in part, for legitimate reasons, even if said processing is pertinent to the purpose for which they were collected. They have the right to data portability, to file a complaint with the supervisory authority, and to oppose the sending of advertising or direct sales material, or material for market research or commercial communications, by contacting the Data Controller, who can also provide, on request, a complete, updated list of the Data Managers.
Requests must be made to the Data Controller.
Protection of data subjects
If the data subject considers that his or her rights based on the privacy regulations have been infringed, s/he may alternatively file a complaint with the Data Protection Authority or present an appeal to the legal authority.
The Data Controller is Starhotels S.p.A., with administrative headquarters in Viale Belfiore, 27, 50144 Florence. Tel. (+39) 055.36921 - fax (+39) 055.36924. e-mail: email@example.com