Privacy Notice

Dear User,
By this notice, Grand Hotel Miramare S.p.A. provides below the information referred to in Article 13 of Regulation (EU) 2016/679 (GDPR) relating to the processing of the personal data you provided when subscribing to our newsletter.

Data Controller
The Data Controller is Grand Hotel Miramare S.p.A., VAT No. 00165480997, with registered office in Santa Margherita Ligure (GE), postcode 16038, Via Milite Ignoto 30, represented by its pro tempore legal representative (hereinafter, for brevity, the “Hotel” or the “Controller”).

Contact details of the Data Protection Officer
The Data Protection Officer (DPO) can be contacted by email at [email protected] or by ordinary mail addressed to Grand Hotel Miramare S.p.A., Santa Margherita Ligure (GE), Via Milite Ignoto 30, postcode 16038, for the attention of the same.

Purpose of processing
Your personal data will be processed, including by means of IT and electronic tools, for the purpose of sending you information about the Hotel’s services by sending our newsletter to your email address.

Legal basis for processing
The legal basis making the processing lawful, with reference to the above purpose, is your consent.

Consequences of failure to provide personal data
Failure to provide your personal data will make it impossible for the Hotel to send you communications regarding its services by means of the newsletter.

Retention period for personal data
Your data will be kept for the above purpose for a period of 24 months from the date it is provided. 

Objection to the sending of commercial information
You may, at any time, ask not to receive any further communications relating to the Hotel’s services through the email address you provided when subscribing to the newsletter by clicking the “unsubscribe” button at the bottom of each communication or by writing to [email protected].

Recipients of the data
Your data may be disclosed to newsletter delivery service providers.
The company entrusted with assistance and maintenance of the Controller’s IT systems, appointed by the Controller as processor pursuant to Article 28 of EU Regulation 2016/679, may access your personal data solely for that purpose.
The full list of appointed processors, which by its nature is subject to change, is available in an always updated version upon request to the Data Controller by writing to [email protected] or by ordinary mail to Grand Hotel Miramare S.p.A., Santa Margherita Ligure (GE), Via Milite Ignoto 30, postcode 16038.
Your personal data may be disclosed to other third parties where necessary to protect the Controller’s rights (e.g. lawyers, consultants, judicial authorities).
Employees of the Hotel, identified as persons authorized to process data, may also access your personal data where required by their duties. Each authorized person is specifically identified, authorized and trained, and acts on the basis of specific instructions provided by the Controller regarding the purposes and methods of processing and the security measures to be adopted to protect personal data.

Rights of the Data Subject
The Controller informs you that, as a data subject, you are entitled, pursuant to Article 15 et seq. of EU Regulation 2016/679 and within the limits laid down therein, to:

• obtain data and information on the processing, in particular in relation to the type of personal data processed, the purposes for which the personal data are processed, the duration of the processing and the persons to whom the data are disclosed (so-called right of access);
• obtain the rectification or completion of inaccurate personal data concerning you (so-called right to rectification);
• obtain the erasure of personal data concerning you in the following cases: (i) the personal data are no longer necessary for the purposes for which they were collected; (ii) you have withdrawn your consent to the processing of personal data where they are processed on the basis of such consent; (iii) you have objected to the processing of personal data concerning you where they are not processed for a legitimate interest of the Controller; (iv) the processing of personal data is not compliant with the law. However, the retention of your personal data by the Controller is lawful where necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims (so-called right to erasure);
• obtain restriction of processing so that the personal data concerning you are only stored and no other use is made of them in the following cases: (i) you contest the accuracy of the personal data, for the period necessary to allow the Controller to verify their accuracy; (ii) the processing of personal data is unlawful and you nevertheless oppose the erasure of the personal data by the Controller; (iii) the personal data are necessary for the establishment, exercise or defence of legal claims; (iv) you have objected to the processing and are awaiting verification as to whether the Controller’s legitimate grounds override yours (so-called right to restriction);
• object at any time to the processing of personal data concerning you (so-called right to object);
• receive, in a commonly used, machine-readable and interoperable format, the personal data concerning you where they are processed on the basis of a contract or your consent, and/or request transmission of the data to another controller, where feasible (so-called right to data portability);
• not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, and also the right to obtain human intervention by the Controller in relation to any automated decision, including profiling, to express your point of view and to contest the decision.

The above rights may be exercised by sending a request to the dedicated email address [email protected] or by writing by post to Grand Hotel Miramare S.p.A., Santa Margherita Ligure (GE), Via Milite Ignoto 30, postcode 16038.

Right to lodge a complaint
If you believe that the processing of your personal data carried out by the Controller infringes the provisions of EU Regulation 2016/679, you have the right to lodge a complaint with the Italian Data Protection Authority, as provided for by Article 77 of EU Regulation 2016/679 (by email to: [email protected], or by post to the Garante per la protezione dei dati personali, with offices in Rome (Italy), Piazza Venezia 11 Scala B, postcode 00187), or to bring proceedings before the competent courts, as provided for by Article 79 of EU Regulation 2016/679.

The Data Controller
Grand Hotel Miramare S.p.A.