Dear sir/madam,
we hereby inform you that Regulation UE 679/2016 (GDPR) covers a person's rights regarding the handling of personal details.
Your details will be treated in accordance with the above regulation, in a correct and open manner, which protects your privacy and rights.

Therefore, in compliance with the GDPR, we hereby provide you with the following information:
1. The data supplied by you will be used to fulfill the communication requirements of the guest data to the Police services (according to italian laws), to regional authorities for statistics, and for administrative operations regarding the stay.
2. The data will be handled with electronic means.
3. The provision of your data is mandatory, since the communication of the identification details of the guests to the Public Scurity Authorities and the collection of guest data by the Regional Statistical bodies are mandatory fulfillments of the host; in their absence it is not possible to allow a stay in the tourist facility.
4. The data will be passed on exclusively to the recipients necessary for such processing. We may use third-party service providers to collect and store temporary your personal information on our behalf for the purposes specified above.
5. The controller of the data is: Leonardo Da Vinci - Piazza Maggiore, 1- Bologna BO; the person responsible for the data is: Leonardo Da Vinci - Email: test@chiavistello.it
6. You can exercise your rights regarding the controller of the data at any point, as per GDPR, which for your convenience is reproduced in whole below:
7. The data provided will be kept for the minimum time necessary to carry out the purposes indicated and subsequently deleted. In particular, the data collected here through the "Chiavistello" service, managed by the company hyppoCom S.r.l., on behalf of the aforementioned "controller", are kept until the third day after the guest's check-in date for transmission to the controller and, on his mandate, to the Public Security Authorities, and subsequently kept in a reduced measure (name, surname, nationality, date of birth) until the fifteenth day of the month following the check-in date for sending to the regional Statistical bodies; later they will be definitively eliminated from all media.

- Right of access to personal information and other rights -

1. The person concerned has the right to obtain the confirmation of the existence or not of personal details which concern them, even if not yet registered, including their communication in an intelligible form.

2. The person concerned has the right to obtain information on:
a) the origin of the personal details;
b) how these details are used;
c) the working of the electronic system which manages the data;
d) the identity of the controller, the person in charge and the assigned representative as per article 5, comma 2;
e) the recipients or categories of recipients to whom the personal details can be communicated or those who can find out about them.

3. The person concerned has the right to obtain:
a) the updating, rectifying, and, as applicable, the integration of the data;
b) the cancellation, transformation into an anonymous form, or the blocking of data used in violation of the law. This also includes any details which have been passed on but which weren't necessary for the working of the system;
c) the declaration that the acts covered in letters a) and b), as well as their content, are communicated to the parties to whom the personal details are passed on, apart from in cases where such fulfillment proves to be impossible or would require the use of means overtly disporportionate to the protected right.

4. The person concerned has the right to object, in whole or in part:
a) to the use of the personal details which concern him, with legitimate reason which concerns the purpose of their initial collection;
b) to the use of personal details which concern him with the aim of sending publicity or direct sales material either for the fulfillment of market research or commercial communication.