Information for EU Regulation 2016/679 G.D.P.R.

Updated as of 12.02.2021

The user's personal data are used by I.G.A.C. s.p.a., which is the data controller for processing, in compliance with the principles of protection of personal data established by the GDPR 2016/679 Regulation.

Method and purpose of the treatment We inform you that the data will be processed with the support of the following means: Paper (registration forms, order forms, etc.) Informatici (management software, accounting, etc.) with the following purposes: provision of services / products requested by the Customer and directly and indirectly related activities administrative and accounting purposes related to service / supply orders / contracts Processing, printing, enveloping and sending of invoices Management of movable and real estate assets Planning of activities (planning and monitoring of work) Internal control services (security, productivity, quality of services) Customer satisfaction surveys Acceptance service for electronic and non-electronic payments Transport operations (passengers and / or goods) Any insurance services related to the Customer's request (civil liability, life insurance, health and disaster) Any refusal to allow the processing of data implies the impossibility of using the service requested by the user.

Legal basis The provision of data is mandatory for all that is required by legal and contractual obligations and therefore any refusal to supply them in whole or in part may give rise to the impossibility of providing the services requested. The company processes the user's optional data on the basis of consent, ie through the explicit approval of this privacy policy and in relation to the methods and purposes described below.

Recipient category Without prejudice to communications made in compliance with legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of interested parties:

Without prejudice to communications made in compliance with legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of interested parties: Consultants and external collaborators, internal persons authorized to process data.

Conservation period The mandatory data for contractual and accounting purposes are kept for the time necessary to carry out the commercial and accounting relationship.

The data of those who do not buy or use products / services, even if they have had a previous contact with company representatives, will be immediately canceled or processed anonymously, where their conservation is not otherwise justified, unless it has been validly acquired the informed consent of the interested parties concerning a subsequent commercial promotion or market research activity.

Rights of the interested party Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the interested party may, in accordance with the procedures and within the limits established by current legislation, exercise the following rights: request confirmation of the existence of personal data concerning him / her (right of access); to know its origin; receive intelligible communication; to have information about the logic, the methods and the purposes of the processing; request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary to the pursuing the purposes for which they were collected; in cases of consent-based processing, to receive their data provided to the holder, in a structured and readable form by a data processor and in a format commonly used by an electronic device; the right to lodge a complaint with the Supervisory Authority. Requests should be addressed to the Data Controller.

Holder of the processing of your personal data is: I.G.A.C. S.p.A. - Hotel Costa Verde, district of San Nicola - 90015 Cefalù.