GDPR Privacy Policy – Pursuant to EU Regulation 2016/679

Pursuant to EU Regulation 2016/679 (hereinafter „GDPR“) and current national legislation on the protection of personal data, Terme di Relilax Boutique Hotel&Spa, as Data Controller, this information notice is required to be given to the natural persons, Data Subjects, who request to be informed about the services provided by Terme di Relilax Boutique Hotel&Spa.

1.Data controller –  The data controller is Terme di Relilax Boutique Hotel&Spa, with registered office in Piazza Roma 19 35036 Montegrotto Terme (PD), Tax Code and VAT no. 00209940287, tel +39 049 8911755, fax +39 049 8911678, e-mail info@relilax.com, website www.relilax.com.

2.Type of data processed – The personal data processed is collected directly from the data subjects through a specific registration function available on the site of Terme di Relilax Boutique Hotel&Spa.  This common information is personal data (surname and first name, etc) and contact details (telephone number, email address, etc). Terme di Relilax Boutique Hotel&Spa does not process any „sensitive“ or „private“ data (see article 9 of the GDPR), if need be, prior consent will be requested. The processing of data for each of the purposes indicated below may be carried out in paper, automated or electronic form and, in particular, by ordinary post or email, telephone (e.g. automated calls, SMS, MMS), fax and any other computer channel (e.g. websites, mobile apps).

3. Purposes, legal basis for processing and obligation for data provision – Terme di Relilax Boutique Hotel&Spa processes the personal data provided for the following purposes:

a) for purposes closely related and instrumental to the management and execution of customer relations, such as the management and execution of the contract, the assistance provided in relation to the services of Terme di Relilax Boutique Hotel&Spa (e.g. acquisition of information prior to the conclusion of a contract, provision of services, management of requests for development, etc). The provision of personal data for these purposes and its processing is necessary to the extent that customer employees and contractors deem it necessary to provide it to Terme di Relilax Boutique Hotel&Spa pto ensure the effectiveness of pre-contractual activities, supply and support carried out by Terme di Relilax Boutique Hotel&Spa itself. Such processing operations shall not require the consent of the data subject. The legal basis for processing is the need to perform the contract concluded with Terme di Relilax Boutique Hotel&Spa.
b) commercial information, offer of services from Terme di Relilax Boutique Hotel&Spa; the provision of personal data for such purposes is not obligatory and the relative processing requires the consent of the data subjects. Failure to provide consent will not affect the satisfaction of Your requests being met but will make it impossible for the Data Controller to send you marketing communications; the legal basis of the processing is identified in the consent provided by you;

The processing of data for each of the above purposes may be carried out in the manner provided for with the consent of the data subject.

4. Categories for recipients of personal data: personal data, within the limits and for the purposes indicated, may be communicated or come to the knowledge of and therefore be processed by:
A. employees of Terme di Relilax Boutique Hotel&Spa who are expressly appointed (marketing, technical, etc);
B. consultants of  Terme di Relilax Boutique Hotel&Spa,  companies that provide computer services (website management, internet services, etc) possibly in their capacity as external controllers,
C. subjects who can access the data by virtue of the law, or EU legislation, within the limits provided for by law;

The complete list of recipients is available at the registered office of the Data Controller.

5. Data retention period: the data processed to provide the Service will be kept by the Company for the period deemed strictly necessary to achieve these purposes. Furthermore, the Data processed to provide the Service may be stored for a longer period, in order to be able to manage any disputes related to the provision of the Service. The Data processed for Marketing and Profiling purposes will be kept by the Company from the moment in which the data subject has given his consent until such consent is revoked. In the event that the consent is revoked, the Data can no longer be processed for the aforementioned purposes of Marketing and Profiling but could still be kept in order to manage any disputes and / or disputes..

6. Transfer of data to abroad: the data is processed exclusively within the European Economic Area (EEA).

7. Automated decision-making: automated decision-making is excluded.

8. Rights of the data subjects: The Data Controller informs that, with reference to the data provided, the natural persons who operate in the name and on behalf of the Customers of Terme di Relilax Boutique Hotel&Spa have the following rights:
A. of rectification or cancellation of personal data (articles 16 and 17 of the Regulations);
B. of limitation of the processing (article 18 of the Regulations);
C. of opposition to the processing (article 21 of the Regulations);
D. of portability of electronic data subject to automated processing (article 20 of the Regulations);
E. of filing a complaint with the supervisory authority – Privacy Guarantor (article 77 of the Regulations);
F. of withdrawal of consent (pursuant to article 7 of the Regulations)

9. Contact information: for any clarification and to exercise their rights, data subjects may contact the Data Controller by writing to:
Terme di Relilax Boutique Hotel&Spa
Piazza Roma 19 35036 Montegrotto Terme (PD)
or by writing an email to: info@relilax.com