Dear Sir/Madam,
This is to inform you that your personal data will be processed in compliance with the European and national
laws on protection of personal data. Pursuant to the above mentioned legislation, your data will be processed
in a licit, fair, loyal and transparent way and will be adequate, relevant and limited to what is necessary, in
compliance with the principle of data minimisation.
Data Controller
The data controller is Mare Resort S.r.l., on behalf of its legal representative, with registered office in Via della
Libertà n. 129, Palermo, tel. 0766809151 mail despalmes@hoteldepalmes.it PEC (registered email)
mareresort.srl@pec.it
Purposes and legal basis of personal data processing
The processing of your personal data is necessary for the following purposes:
a) follow up on your order and/or requests. We will process the data to acquire the reservation and allow
the structure to welcome you. We will process your personal data and your contact data (for example:
name, surname, date of birth, tax code, address, telephone numbers, e-mail), as well as the identification
data of payment (for example: credit or debit card details), whose conferment is necessary for the above
mentioned purposes;
b) send communications containing offers, information and/or evaluation questionnaires regarding the
services offered by the structures of the company, to the addresses indicated and communicated by you;
c) fulfil with Public Administrations’ obligations, such as the compulsory notices to the competent Police
stations;
d) fulfil with tax and accounting obligations.
The legal basis for processing data is:
a. the need to execute a contract where you are party or execute your pre-contractual requests, pursuant
to art. 6, b), of the Regulation;
b. your free and explicit consent, for communications containing offers, information and/or evaluation
questionnaires regarding the services offered by the structures of the company. Anyway, at the end of
every message it will be explained how to exercise the right to oppose the sending of similar
communications (opt-out)
c. comply with a legal obligation, for data processing described sub letters c) and d).
Data processing modality
The processing of your personal data will be carried out with analogic and/or electronic means and consists of
a set of operations regarding the collection, recording and elaboration on paper/informatic/telematic supports,
the organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by
transmission, dissemination, comparison or interconnection, limitation, cancelation or destruction of the data.
The processing of your data will be carried out in a licit, fair, loyal and transparent way and will be adequate,
relevant and limited to what is necessary, in compliance with the principles of data minimisation.
Disclosure, publication and time of collection
Your personal data will be communicated to employees and assistants of the Data Controller in their capacity
of authorised subjects and will process the data according to the instructions of the Controller.
Your personal data may also be communicated to third parties, in all cases where it is necessary or for
management and accounting purposes or for tax and financial consultancy and/or for legal obligations, but
always in compliance with the principle of data minimization and limited to the pursued purposes.
If not acting as Controllers, these subjects will be appointed as Data Processor, pursuant to art. 28 of Regulation
EU 2016/679 and will act under Controller’s supervision, ensuring appropriate security measures.
Your personal data may also be communicated or otherwise made accessible, for the purpose mentioned above,
to:
• public bodies that have the right or obligation to know them by law, regulation or legislation;
• professionals who are collaborating with Controller;
external companies that act as Controller;
• external companies appointed as Data Processor.
Under no circumstances your personal will be disclosed, published or transferred to third parties for unlawful
reasons and without an adequate information and consent of the owner, where required by law, and without
prejudice of the data communication that must be given to the competent Police station, pursuant to T.U.L.P.S.
or required in any case by the Judiciary or Public Security authorities, in the cases and modalities provided by
law.
Personal data will be processed in Italy and stored on servers placed within the European Union or in countries
that, according to European commission, guarantee an adequate protection level.
Data retention period
Data retention will be made according to the principles of legitimacy, transparency, correctness, adequacy,
confidentiality, pertinence, and limitedness and will be carried out with appropriate measures to guarantee their
safety and confidentiality, with or without the support of automatic means for memorizing, managing and
transmitting them.
Processing data for legitimate marketing purposes will cease after 24 months from the last contact with
Controller (also intended as a periodic check of the correctness of the data and / or their correction).
In all other cases, data retention will end after ten years from the conclusion of the event, at the end of which
they will be deleted and/or destroyed, in accordance with the security measures aimed at ensuring
confidentiality.
Conservation may be extended beyond the above mentioned period if required by different conditions that make
the processing of personal data lawful without consent.
Rights of the interested party
According to articles 15-21 of the Regulation EU 2016/679, in relation to the personal data communicated, you
have the following rights:
• right of access to personal data;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability in a structured, commonly used and machine-readable format and right to freely
transmit those data to another controller, if technically possible.
All the above mentioned requests must be made by registered letter, attested by an acknowledgement of receipt
or certified e-mail to the above addresses and will be effective from the time of delivery.
You also have the right to file a complaint with the Italian Data Protection Authority.
CONSENT
I, the undersigned, ______________________________________________________________, having read
the information on personal data processing, confirm to have understood their content, and
in relation to processing of sending communications containing offers, information and/or evaluation
questionnaires regarding the services provided by the company’s structures, invitation to join other events
organized by the company Mare Resort S.r.l. to the addresses indicated during the booking and/or registration,
as per lett b) of the privacy policy
consent to data processing

do not consent to data processing
Name and Surname _____________________________________
Date __________________________________________
Signature________________________________________