Dear Guest,

We hereby inform you that Legislative Decree No. 196 of June 30, 2003 (“Code regarding the protection of personal data”) safeguards individual rights concerning the processing of personal data.

Your data will be processed in compliance with the aforementioned legislation, correctly and transparently, protecting your privacy and your rights.

Therefore, pursuant to Article 13 of Legislative Decree No. 196/2003, we provide you with the following information:

1. The data you provide will be used to make a reservation on the website https://www.sangiovanniinpoggio.com/
2. The data will be stored in an electronic database.
3. The provision of your data is mandatory, as without it, a reservation cannot be made. Failure to provide this information prevents the completion of the contract.
4. Data will be communicated exclusively to the recipients necessary for the completion of the reservation contract, such as the accommodation facility. We may use third-party service providers to process your personal data on our behalf for the purposes indicated above.
5. The data controller is:
   San Giovanni in Poggio info@sangiovanniinpoggio.com
6. The data processor is:
   Opera Laboratori Fiorentini info@operalaboratori.com<
7. You may exercise your rights at any time against the data controller, pursuant to Regulation (EU) 2016/679 (GDPR) and Legislative Decree No. 196/2003 (as amended and supplemented by Legislative Decree No. 101/2018)
   
   1. The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and their communication in an intelligible form.
   2. The data subject has the right to obtain information regarding:
      a) the origin of the personal data;
      b) the purposes and methods of processing;
      c) the logic applied in case of processing carried out with the aid of electronic instruments;
      d) the identification details of the controller, processors, and the designated representative pursuant to Article 5, paragraph 2;
      e) the entities or categories of entities to whom the personal data may be communicated or who may become aware of them.
   3. The data subject has the right to obtain:
      a) the updating, rectification, or, where interested, the integration of the data;
      b) the erasure, anonymization, or blocking of data processed in violation of the law. This also includes data whose retention is not necessary in relation to the purposes for which they were collected or subsequently processed;
      c) certification that the operations referred to in letters a) and b), also as regards their content, have been communicated to those to whom the data have been disseminated, except where this fulfillment proves impossible or involves a manifestly disproportionate use of means compared to the protected right.
   4. The data subject has the right to object, in whole or in part:
      a) for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection;
      b) to the processing of personal data concerning them for the purpose of sending advertising or direct sales material, or for carrying out market research or commercial communication.