Privacy Policy

PRIVACY POLICY
pursuant to and for the purposes of art. 13 of the EU Regulation 27 April 2016 n. 679 “General Regulation on Data Protection”

A. H. Srl announces that in order to provide the service and services requested, it is the owner of your data qualified as personal data in accordance with EU Reg. 2016/679 regarding the protection of personal data.

Purpose of the treatment
The collection and processing of personal data are carried out:
to register your personal details (pursuant to Article 109 of the Royal Decree No. 773 of 18/6/1931);
to comply with current administrative, accounting and tax obligations;
to carry out the function of receiving messages and telephone calls addressed to you;
to speed up registration procedures in case of subsequent stays at our hotel;
to offer personalized service during your present and future stay;
to send our promotional messages and updates on the rates and offers made;
and will be subject to treatment based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights. Your personal data will be processed for the entire duration of the stay and also subsequently for the fulfillment of all legal obligations and / or to provide additional services.
The personal data that the Data Controller may collect are as follows:
general data (surname, name, residential address, place and date of birth, identity document / passport, telephone number, email address);
payment data (billing data, payment card data).

The lawfulness of the treatment is based on:
fulfillment of legal obligations to which the Data Controller is subject (pursuant to Article 6.1, letter c) of the GDPR), for purposes 1 and 2;
consent of the interested party (ex article 6.1, letter a) of the GDPR), for the purposes 3, 4, 5, 6.

Method of treatment
The processing of data for the purposes set out takes place using either automated, electronic or magnetic, or non-automated means, on paper, in compliance with the rules of confidentiality and security required by law, the resulting regulations and internal provisions.
The data are always treated in full compliance with the principle of proportionality of the treatment on the basis of which all personal data and the various methods of their processing must be relevant and not excessive in relation to the objectives pursued.
The stored data are protected by appropriate security measures, so as to reduce the risk of accidental loss or unauthorized access or treatment not allowed or not in accordance with the purposes indicated.

Place of treatment
The data are processed and stored at the company’s headquarters in Biella, via Italia 54, 13900 BIELLA and / or at the management system’s servers adopted by A.H. S.r.l ..

Mandatory nature of the provision of data and consequences of a refusal to provide
The provision of data is mandatory for all that is required by legal obligations (purposes 1 and 2) and therefore any refusal to supply them in whole or in part may give rise to the impossibility for A.H. Srl to host you at our facility.
The provision of personal data for purposes 3, 4, 5 and 6 is optional.

Data communication
Without prejudice to communications made in compliance with legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above:
Police headquarters in Biella.

Furthermore, in the management of your data, the following categories of persons authorized to the processing and / or external managers identified in writing and to whom specific written instructions have been given may be made aware of them:
A.H. Employees Srl (operating at reception and hotel services);
NICE Informatica SrL, via Circonvallazione 114, 47838 RICCIONE;

Data transfer abroad
Your personal data will not be transferred to non-EU countries.

Data retention timelines
The mandatory data provided will be stored in our archives in relation to the regulatory provisions to which the Data Controller is subject, as well as the optional data for a period of 10 years.

Rights of the interested party
With regard to the personal data themselves, you can exercise the rights provided for in Chapter III of EU Regulation 2016/679 within the limits and under the conditions set forth in the articles art. 15 – 23 of the aforementioned Regulation. In particular A.H. Srl guarantees and recognizes to the interested parties the exercise of the following rights:
the right to access personal data in their paper and / or electronic archives;
the right to request rectification, updating and cancellation, if incomplete or erroneous, and to oppose their processing for legitimate and specific reasons;
the right to obtain the correction of inaccurate personal data without undue delay.

Taking into account the purposes of the processing, the data subject has the right to obtain incomplete personal data, also by providing a supplementary declaration, the right to obtain the deletion of personal data concerning him without undue delay if there is one of the reasons for in art. 17, paragraph 1 of the Regulations: The right to obtain the limitation of processing when one of the hypotheses referred to in art. 18, paragraph 1 of the Regulations, the right to propose a complaint to the Supervisory Authorities, as well as to exercise the other rights recognized by the applicable regulations. In case of signing of any form of consent to the treatment requested by A.H. Srl please note that the interested party may revoke it at any time, subject to any mandatory obligations provided for by the current legislation at the time of the request for revocation, by contacting the Data Controller at the addresses indicated below.

 Data Controller

The rights in question may be exercised, also through a designated person, by submitting a request to the Data Controller available at the company’s headquarters in via Italia 54, 13900 BIELLA, tel. 015 8407324 or to the following e-mail address: info@agorapalace.com .The data controller is A.H. S.r.l., via Italia 54, 13900 BIELLA – Tel. 015 8407324 represented by the Legal Representative, Mauro Tosetti. E-mail: info@agorapalace.com. The complete text of the EU regulation 2016/679 (GDPR, General Data Protection Regulation) is available on the website of the Supervisory Authority www.garanteprivacy.it.