This information on the processing of personal data ("Privacy Policy‘) is made pursuant to EU Regulation 679/2016, Legislative Decree 196/2003 (and subsequent amendments) and other applicable provisions and regulations on the protection of personal data, to inform you of the processing of personal data provided by filling in the booking form on the daferdinandobeachclub.com website (’Site Web”).

The information is provided exclusively for bookings made via the Website and not for other websites that may be consulted via links.

DATA CONTROLLER

The data controller is BAR BAGNI FERDINANDO S.R.L., 05561030650, Via Fornillo Spiaggia SNC, daferdinando1953@gmail.com.

CATEGORY OF DATA PROCESSED

The personal data collected via the online booking form are as follows:

- personal data (such as name and surname);

- contact details (such as e-mail and telephone number).

‍

PURPOSE OF PROCESSING

Personal data provided via the online booking form are collected and processed for the following purposes:

(a) to provide the requested service, i.e. to enable the reservation at our establishment ("Service Provision”);

(b) fulfilment of obligations under laws, regulations and EU legislation ("Fulfilment of legal obligations”);

c) prevent or identify any abuse or possible fraudulent activities to the detriment of our establishment and thus enable us to defend ourselves, including in court ("Difesa").

d) send you marketing communications by e-mail regarding products and services similar to those you have purchased ('Soft Spam").

e) send you marketing communications and promotions via e-mail or SMS of products and/or services related to our establishment ("Marketing");

LEGAL BASIS AND NATURE OF PROCESSING

The legal basis for the purpose of Service Provision is the execution of pre-contractual or contractual measures requested by you. It is not compulsory to provide us with personal data for this purpose, but otherwise it will not be possible to perform the requested service.

Processing for the purpose of fulfilling legal obligations is necessary to fulfil any legal obligations.

Processing for marketing purposes is based on your consent. The provision of such personal data for this purpose is not obligatory and you are free to withdraw it at any time without any consequences.

The legal basis for the purpose of Soft Spam is the legitimate interest of our establishment in sending you marketing communications by e-mail regarding products and services similar to those you have already purchased. You can stop receiving these communications without any consequences to you by using the link at the bottom of each such e-mail.

Processing for the purpose of defence is based on the legitimate interest of our establishment in identifying and preventing any fraudulent activity or abuse in the use of the booking form or the Website and thus to protect itself also in court.

COMMUNICATION OF PERSONAL DATA

In order to be able to provide its services, our establishment will share the personal data provided for online bookings with the company Spiagge S.r.l (P.IVA/C.F. 0453664040; based in Via Marecchiese 48, 47923 Rimini), owner of the Saas platform that enables users to make bookings via the Website.

Your personal data may also be shared with i) third parties our establishment uses to provide services on its behalf; ii) persons authorised by our establishment to process personal data necessary to carry out activities strictly related to the provision of the service (such as our employees); iii) public, judicial or police authorities.

DATA PROCESSING METHODS AND TRANSFER OF PERSONAL DATA

The processing of personal data is carried out - in compliance with the provisions of the applicable legislation - also with the help of IT tools.

The controller has adopted technical solutions and security measures that guarantee the security of personal data and prevent their alteration, loss, incorrect processing or unauthorised access.

DURATION OF PROCESSING AND STORAGE

The data provided will be processed and stored for the period strictly necessary to pursue the purposes stated above. This is without prejudice to storage for a longer period in connection with requests by public authorities or in connection with requirements related to the exercise of the right of defence in the event of disputes.

Personal data processed for marketing will be kept until you revoke your consent, and personal data processed for Soft Spam will be kept until you object to such processing via the link at the bottom of each Soft Spam e-mail.

RIGHTS OF THE DATA SUBJECT

Pursuant to Articles 15 et seq. of the GDPR, you may exercise the following rights:

- obtain from the data controller confirmation as to whether or not personal data concerning you are being processed and to know the source, the purpose, the categories of data processed, the recipients to whom the personal data are or will be communicated, even if abroad, and the storage period;

- obtain, without justified delay, rectification of inaccurate data or supplementation;

- obtain, without justified delay, the deletion of data pursuant to Article 17 GDPR;

- obtain the restriction of processing where the accuracy of the data is disputed or processing is unlawful, pursuant to Article 18 GDPR;

- obtain portability of data by receiving them in a structured format;

- oppose the processing pursuant to Article 21 GDPR.

You may exercise these rights by writing to daferdinando1953@gmail.com.

In any case, you always have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali, pursuant to Article 77 of the GDPR, if you consider that the processing of your personal data is contrary to the legislation in force.