Information to the interested party pursuant to and for the purposes of EU Regulation no. 679/2016.

Pursuant to art. 13 and 14 of RE 679/2016 we provide information regarding the processing of your personal data that will be carried out by COMBO s.r.l. tel. +39 011 19211900 email: privacy@thisiscombo.com (“Data Controller”), as Data Controller.

This privacy policy is intended to inform you about how we collect, classify and use the personal data you provide us using, for your stay reservations, our websites linked to the booking engine of the Chain to which you belong, travel agencies, online sites or relying on our hospitality services, during your stay.

The company has appointed the DPO who can be contacted by email: dpo@thisiscombo.com.

CATEGORIES OF PERSONAL DATA

The personal data we collect are: name, surname, residence / domicile, copy of identity document, e-mail, telephone number, tax code and / or VAT number, type of room, any data of third parties with whom the stay will be shared. The processing of the aforementioned data may concern – subject to your express consent – also particular data, art. 9 GDPR, (physical handicap, food allergies etc). In these cases, we guarantee that the processing will be limited to the data and operations necessary to fulfill the obligations, relating to the provision of hotel services, within the limits of the services and services requested by you.

PURPOSE OF TREATMENT

hotel booking process, hotel check-in and check-out, hotel stay, additional services and facilities for hotel guests, marketing, meeting organization, events. The legal bases are: Art. 6 para. a) letter a) lett. b) letter c) and art. 9 par.2 letter a).

TREATMENT METHOD

The data will be processed using manual and computerized tools by staff and collaborators of the Data Controller and/or by external parties duly designated contractually as managers and persons in charge of processing. The data may be transferred to EU countries.

VIDEO SURVEILLANCE

For the purpose of protecting people, property and company assets through a video surveillance system of some areas of the structure, identifiable by the presence of appropriate signs. Your consent is not required for this processing, as it pursues our legitimate interest in protecting people and property against possible aggression, theft, robbery, damage, vandalism and for fire prevention and work safety purposes. Recorded images are deleted after 24/48 hours. They are not subject to communication to third parties, except in the case in which it is necessary to adhere to a specific investigative request of the judicial authority or judicial police.

STORAGE PERIOD

The data collected and processed by the Data Controller to execute the services to hoteliers may be kept for the limitation period provided for by the applicable regulations, including tax provisions. We will keep the data for as long as necessary in order to fulfill all the activities set out in this policy.

RIGHTS OF THE INTERESTED PARTY

In your capacity as an interested party you have the rights referred to in art. 15 GDPR precisely the rights to: access the Personal Data in our possession, request the correction of any incomplete or inaccurate Personal Data, request its cancellation, where the conditions are met, request the Limitation of Processing, where the conditions are met , propose a complaint to the Guarantor for the Protection of Personal Data (www.garanteprivacy.it). Where applicable, it also has the rights referred to in articles 16-21 GDPR.

CONTACT DETAILS

You can contact us to assert the rights listed above by sending a communication to the e-mail address of the hotel: privacy@thisiscombo.com.