(pursuant to Article 13 of Law no.196 of June, the 30th 2003; “Law 196/03”)
 
Pursuant to article 13 of Law 196/03 (regarding protection of people and other entities in connection with personal data processing), the Company, in its capacity as data holder, is under the obligation to provide for certain information concerning the use of  personal data collected, inter alia, from its customers.
 
For the purpose of this information sheet and the related statement of consent that you signed on a separate form, “Company” Quattro G. s.a.s. di Galvani Luigi e Galvani Alberto & C. - P.IVA: 01764820237., a company organized pursuant to the laws of Italy, with its registered office in Verona.
 
Preliminarily, we wish to specify that certain personal data (such as your full name, place and date of birth, residence and citizenship, which are registered in public records, as well as the details of the identity document which you produced at check-in) must anyway be gathered by the Company and communicated to the local police station in order to fulfil specific law requirements.
 
1 .   Source of gathering of personal data
Personal data shall be, as a rule, collected by the company directly from its customers. Any data shall be anyway processed in compliance with the rules from time to time in force.
 
2 .   Sensitive data
As a rule, the Company does not request their customers to indicate so-called “sensitive data”[1]. However it may become necessary for the Company to obtain, infer or process some sensitive data relating to you, in relation with either specific activities and/or services or in order to take particular care of your needs or preferences. In this respect, you will be requested to give your written consent to collection and processing of such data in the context of the statement of consent printed on the registration form that you will execute at the hotel. Anyway, any processing of your sensitive data shall be made in compliance with the Authorization n.5/1997 issued by the Guarantor for the protection of Personal data on December 15, 1997.
 
3 .   Purposes of personal data processing
Personal data shall be processed within the normal activity of the Company for the following purposes:
a)       purposes connected with and functional to the management of relations with customers (such as reservations, gathering of information preliminary to the execution of the agreement , optimisation of the supply of services offered by the hotel, activities aimed at preventing frauds and collecting debts);
b)       purposes connected with obligations deriving from laws, regulations and EC rules, as well as provisions set forth by the competent authorities or regulatory agencies (e.g., rules preventing money laundering, preventing terrorism, rules applicable to the course of the hotel business, etc.);
c)       purposes functional to the development of activities carried out by Quattro G. s.a.s. di Galvani Luigi e Galvani Alberto & C., for which it is your opinion whether or not to give your consent. The following activities shall be included therein:
-          mailing to customers of advertising or promotional material concerning the Company
-          mailing to customers, also through companies external to the Company or associations relating to the hotel sector, of information or promotional material concerning hotels which are not owned or managed by the Society or to services of any nature rendered by third parties, with which the Company have entered into commercial agreement to submit to its own customers;
-          control of the level of satisfaction of customers in relation with any service to rendered by the Hotel, also through companies carrying out market researches or, anyway, specialized companies which may send to customers questionnaires to be filled up or other material aimed at the same purpose.
 
4 .   Methods of data processing
Personal data processing shall be performed through manual, computer and telematic means, according to criteria which are closely connected to the above mentioned purposes and anyway so as to guarantee security and confidentiality of same data.
 
5 .   Categories of entities to which data can be communicated
In the course of its business, the Company shall have contacts with, and communicate your personal data to:
1)       companies or other individuals/entities external from Quattro G. s.a.s. di Galvani Luigi e Galvani Alberto & C. which carry out, also outside Italy and/or the European union, activities that are connected with and functional to the management of relations between the Company and its customers. Any data processing performed by such companies or individuals/entities shall have the following purposes:
-          to perform any processing which is necessary to obtain any possible facilitation reserved to customers in the supply of services or in the course of the activities performed by such companies or individuals /entities not belonging to Quattro G. s.a.s. di Galvani Luigi e Galvani Alberto & C.
-          to print, put in an envelope and deliver communications to customers.
 
2)       companies or other individuals/entities not belonging to Quattro G. s.a.s. di Galvani Luigi e Galvani Alberto & C. which carry out, also outside Italy and/or the European Union, activities that are functional to the Company’s activities. Any data processing performed by such companies or individuals/entities shall have the following purposes:
-          to carry out market researches on representative samples of customers on behalf of the Company, using their data exclusively in case the relevant customer has given his/her consent following specific request for cooperation (such as interviews, mailing of questionnaires, etc.);
-          to distribute to the customers of the company communications or promotional or information material concerning services rendered by the Hotel or external companies with which the Company has commercial agreements in place.
 
3)       third parties in general, also based outside Italy and/or the European union, in case they request to the hotel staff confirmation or information about the presence of a customer at the same hotel, or to communicate, by telephone or through written or vocal messages, with a customer.
 
Customers may choose to deny their consent to the above mentioned types of communication of personal data and to any related processing operations by ticking the appropriate box in the statement of consent. We also wish to underline that the companies or individuals/entities external to Quattro G. s.a.s. di Galvani Luigi e Galvani Alberto & C. which carry out the activities listed under 1) or 2) above do independently perform, in their capacity of data holders pursuant to Law 196/03 the processing of data communicated to them by the Company.
 
In light of the foregoing, please remember that denying your consent to collection, processing and communication of your personal data for the purposes under points 3. a) and b) hereof and to the categories of individuals/entities under point 5 . 1) hereof – such processing operations and communications being essential to the performance of the Company’s activities – shall trigger the impossibility for the company to keep a room available to you and to provide you with any hotel service.
 
6 .   Rights provided for under Article 7  of Law 196/03
Finally, we wish to inform you that the Article 13 of Law 196/03 grants any individuals/identity whose personal data are being processed certain specific rights. In particular, the data subject may obtain from the data holder the confirmation of the existence of any of its personal data undergoing a processing operation, and the communication of such data in an intelligible form. The data subject shall be also entitled to request  information about the source of data, as well as the criteria and purposes upon which the processing is based; the deletion, transformation into anonymous data or blocking of those data processed in breach of the law, as well as an updating, rectification and, in case there is an interest , integration of data, and to object, based on legitimate grounds, to the same processing.
                                                                                                                                                                                           
Pursuant to Law 196/03:
-The data holder shall be Quattro G. s.a.s. di Galvani Luigi e Galvani Alberto & C., with its registered office at Verona
-The responsible for any personal data processing performed at the hotel is the society Quattro G. s.a.s. di Galvani Luigi e Galvani Alberto & C.
 
 
[1]Porsuant to article 4, part d, of Law 196/03, such data shall be meant to include “any personal data revealing race and ethnic origin, religious, philosophical or trade-union character, as well as personal data revealing health conditions and sexual life”.