Purpose of Processing
Personal data collected from users through the website, email, telephone or on-site are processed for the following purposes:
- Management of bookings and hotel services offered.
- Compliance with legal obligations (e.g. communications to Public Security authorities).
- Administrative, accounting and tax management.
- Sending informative and promotional communications relating to our services, subject to the consent of the data subject.
- Response to information requests from users.
Legal Basis for Processing
The processing of personal data is based on:
- the performance of a contract to which the data subject is party (art. 6, par. 1, lett. b GDPR);
- compliance with legal obligations to which the controller is subject (art. 6, par. 1, lett. c GDPR);
- express consent for marketing activities and commercial communications (art. 6, par. 1, lett. a GDPR).
Type of Data Processed
The following data may be collected and processed:
- personal and contact details (name, surname, telephone, email, address, identity document);
- payment and billing data;
- data relating to the stay (arrival/departure dates, preferences, special requests);
- navigation data automatically collected from the site (IP address, cookies, system logs).
Processing Methods
Data processing takes place electronically and on paper, in compliance with the principles of fairness, lawfulness, transparency and protection of confidentiality. Adequate technical and organizational measures are adopted to protect personal data.
Communication and Disclosure of Data
Personal data may be communicated to:
- public authorities and competent bodies, in compliance with legal obligations;
- tax, legal and administrative consultants;
- providers of technological and management services (hosting, management software, booking engine, payment systems).
Data will not be disclosed to unauthorized third parties.
Data Retention
Personal data will be kept for the time necessary for the purposes indicated above and, in particular:
- administrative and tax data: 10 years as required by law;
- data collected for marketing purposes: until consent is revoked by the data subject.
Rights of the Data Subject
Pursuant to articles 15-22 of the GDPR, the data subject has the right to:
- access their personal data;
- obtain rectification or erasure of data;
- limit or object to processing;
- request data portability;
- withdraw consent at any time, without prejudice to the lawfulness of processing based on consent before withdrawal;
- lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Contact
To exercise your rights or for any request relating to the processing of personal data, you can write to:
Progetto Neapolis Srl
Via Francesco del Giudice, 13 – 80138 Naples (NA)
PEC: progettoneapolis@pec.it