Privacy policy
ANNEX B) 9
PRIVACY NOTICE – ACCESS TO PREMISES
Pursuant to Regulation (EU) 2016/679 (GDPR), AZIENDA DI PROMOZIONE E SVILUPPO TURISTICO DI LIVIGNO S.R.L. hereby informs data subjects about the processing of personal data, ensuring that such processing is carried out in compliance with the fundamental rights and freedoms of individuals.
DATA CONTROLLER
The Data Controller is AZIENDA DI PROMOZIONE E SVILUPPO TURISTICO DI LIVIGNO S.R.L., with registered office at Via Rasia No. 999, 23030 Livigno (SO), Italy.
The Data Controller may be contacted through its President, Mr. LUCA MORETTI, at the following contact details:
- Telephone: +39 0342 977810
- Mobile: +39 346 7371877
- Email: [email protected]
- PEC (Certified Email): [email protected]
DATA PROTECTION OFFICER
AZIENDA DI PROMOZIONE E SVILUPPO TURISTICO DI LIVIGNO S.R.L. has appointed a Data Protection Officer (DPO), Attorney STEFANO ASCIONI, who can be contacted at:
- Mobile: +39 348 5113441
- Email: [email protected]
- PEC: [email protected]
PURPOSES OF PROCESSING
The personal data processed by the Data Controller are used exclusively for purposes related to the security of human resources, the protection of the assets of AZIENDA DI PROMOZIONE E SVILUPPO TURISTICO DI LIVIGNO S.R.L., and the prevention of fraud, including information necessary for the performance of its institutional activities.
The data processed are limited to those strictly necessary to identify external individuals accessing the premises and offices, through the presentation of a valid identification document requested by authorized staff and provided by the visitor. Such data are processed in compliance with the provisions of the GDPR.
During the processing of personal data, the Data Controller may also become aware of data classified as “special categories of personal data” pursuant to Article 9 of the GDPR. With regard to such data, it is specified that they are processed in full compliance with applicable legal provisions, with the utmost confidentiality and using security systems appropriate to the higher risk associated with this type of personal data.
Customer Satisfaction and Post-Service Communications
The personal data provided by users may also be processed by the Data Controller, on the basis of its legitimate interest pursuant to Article 6(1)(f) of the GDPR, for purposes related to assessing the quality of the services provided, measuring customer satisfaction, and improving the overall experience offered, including through the sending of post-service communications strictly related to the service used.
Where the data subject provides specific, free and optional consent, personal data may also be processed for the purpose of sending informational and promotional communications by the Data Controller regarding initiatives, events, services and news. Such consent may be provided, for example, through a specific selection within questionnaires or digital forms and may be withdrawn at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
AUTHORIZED PERSONS AND DATA PROCESSORS
Personal data are processed by duly authorized employees who have been appropriately instructed and trained, using manual, paper-based, IT and telematic methods, in accordance with principles of fairness and lawfulness. Data are stored in both electronic and paper archives, adopting specific security measures to prevent data loss, unlawful or improper use, and unauthorized access.
Personal data may be disclosed to other internal offices involved in access management, as they are competent to pursue the purposes outlined in this privacy notice.
Data may also be processed by external entities formally appointed as Data Processors, belonging to the following categories:
- Companies providing maintenance and application management services for reporting and access management systems;
- Companies providing management and maintenance services for the organization’s information systems, with particular reference to document archiving services.
Such entities may appoint additional sub-processors operating in the same fields.
Personal data may also be disclosed to other external entities acting as independent Data Controllers, including public authorities or other natural or legal persons who are legally entitled to request such data in accordance with applicable laws.
Any data transfer is carried out in compliance with the GDPR.
Personal data will not be transferred to non-EU countries or international organizations, nor will they be stored on servers located outside the European Union.
DATA RETENTION PERIOD
Personal data will be processed for the time strictly necessary to achieve the purposes for which they were collected. Thereafter, they will be retained in accordance with applicable administrative retention regulations and the document management and retention policies adopted by AZIENDA DI PROMOZIONE E SVILUPPO TURISTICO DI LIVIGNO S.R.L..
NATURE OF DATA PROVISION AND CONSEQUENCES OF FAILURE TO PROVIDE DATA
The provision of personal data is voluntary; however, refusal to present a valid identification document, where required, will result in the impossibility of accessing the premises and offices of AZIENDA DI PROMOZIONE E SVILUPPO TURISTICO DI LIVIGNO S.R.L..
DATA SUBJECT RIGHTS
Pursuant to Regulation (EU) 2016/679, data subjects are granted several rights, which may be exercised by contacting the Data Controller or the Data Protection Officer using the contact details provided in this notice.
These rights include, where applicable (in particular pursuant to Articles 15 et seq. of the Regulation):
- the right to know whether the Data Controller is processing personal data relating to the data subject and, if so, to access such data and all related information;
- the right to rectify inaccurate personal data and/or complete incomplete data;
- the right to erasure of personal data;
- the right to restriction of processing;
- the right to object to processing;
- the right to data portability;
- the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
In any case, data subjects also have the right to lodge a formal complaint with the Italian Data Protection Authority, in accordance with the procedures available on the Authority’s official website.
ACKNOWLEDGEMENT OF THE PRIVACY NOTICE
I, the undersigned (FULL NAME IN BLOCK LETTERS),
declare that I have received, read and understood the Privacy Notice regarding the processing of my personal data for access to the premises.
☐ I CONSENT ☐ I DO NOT CONSENT
Date ____________________
Signature ______________________________
A valid identification document must be attached.