Information pursuant to Art. 13 GDPR n. 679/16

In implementation of EU Regulation no. 679/16 provides customers, suppliers and users with the following information:

– identity and contact details of the data controller:
Gattarella Lt., legally represented by p.t., currently in 71019 Vieste (FG), Località Lama Le Canne, tel. 0884 703111; pec: gattarella@pec.it; e-mail: info@www.gattarella.it; n. REA: FG-86657, VAT number: 01952630711

– Contact details of the data protection officer (D.P.O.):
Lawyer. Marco Pagliara, Via Casotti n.5, 71036 Lucera (FG), cell. 338 9521190; p.e.c .: avv.pagliara@pec.it; e-mail: avv.pagliara@tiscali.it; e-mail: privacydpo@www.gattarella.it-

– Purposes of the processing of personal data:
for the conduct of the activity of Hotel, Tourist Village, camping, for the promotion and management of direct services for the development of tourism initiatives, the sale of tourist services, the rental and use of vehicles and boats for customers.

– Legal bases of the processing:
customer consent; execution of specific contracts or services, pre-contractual negotiations; fulfillment of legal obligations of the data controller, legitimate interest

– Recipients or categories of recipients of personal data:
labour consultant, competent doctor, occupational safety manager, external managers (suppliers and maintainers of software and hardware), outsourcing services (general maintenance of the structure, room, kitchen, laundry, managerial and tourist entertainment services), public administrations (PS Authority, Regional Authority, Inland Revenue), Sole Sud S.A.S. parent company

– Intention of the data controller to transfer personal data to another country:
if necessary, adequacy decisions to protect the rights of data subjects will be verified.

– Period of retention of personal data and criterion used to determine it:
the data retention period is 20 years from the termination of the relationship, depending on the commercial needs of the company, or 10 years, depending on the legal requirements relating to the ordinary statute of limitations of rights, or for longer periods, for the purposes of legitimate interest or following interruptive events of the prescription terms for the assessment of rights.

The interested parties are informed of the right to ask the data controller for access to personal data, the correction or deletion of said personal data, the limitation of processing, to oppose their processing, as well as the right to data portability, regulated by articles 15 and following of EU Regulation 679/16

The interested parties are informed of the existence of the right to revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation, and of the right to lodge a complaint with a supervisory authority.

The communication of personal data is necessary for the implementation of the corporate activity, for the purposes of possible contracts and to access the tourist services provided.

For the existence of automated decision-making processes, including profiling, the logic of the interest of the company will be used, aimed at offering the most adequate tourist services with reference to the users’ expectations; the users are however necessary for the execution of the activities and the performance of contractual and pre-contractual services. However, the interested party can communicate in writing to oppose the aforementioned treatment.