Privacy policy
PRIVACY INFORMATION PURSUANT TO ART. 13 OF THE 2016/679 EU REGULATION
The company HEART APARTMENTS with registered office in Milan Via Mazzini 20, in the capacity of Data Controller, informs the subjects who use the booking or accommodation service, the following information relating to the processing of their data:
1) PURPOSE OF THE TREATMENT
HEART APARTMENTS S..R.L. manages on its own account and / or on behalf of third parties the "short-term rental of accommodation" and various CAV accommodation facilities, particularly in the cities of Milan and Genoa.
The data provided by the customer interested in a stay at one of the accommodation facilities of Heart Apartments S.r.l. named: Heart Milan Apartments, will be processed for the following purposes:
signing of a short lease and / or stay contract.
validation of the reservation through the payment of an amount defined by the commercial policies presented on the site.
Remote payments are managed by external entities (Nexi, Airbnb, Booking.com, Expedia), through their own systems, which act as independent data controllers that they require for their execution.
Sending commercial communications related to accommodation services, as well as direct sales and carrying out surveys or market research (including surveys on the quality of services). HEART APARTMENTS will employ automated methods of contact (such as, for example, e-mail, SMS, instant messaging, social networks, apps, automated call systems without the intervention of an operator, etc.) and / or traditional methods (such as, for example, telephone calls with operator and paper mail).
Verification of the identity of the guests in the accommodation facilities
Access verification and security checks also through video surveillance cameras
HEART APARTMENTS will not perform treatments on data other than those provided for by the booking form and / or the registration form. In particular, the booking form does not require that sensitive data of the customer or of the people who will stay with him be indicated. In the event that the customer decides to indicate personal data classified as sensitive in the "notes" field, these will be stored by HEART APARTMENTS and communicated to its staff in charge of preparing the accommodation and welcoming the customer. The registration data of personal identity documents are used exclusively for communication to the portal lodged by the state police, as required by law or for any legal claims against registered guests if the need arises and for the necessary activities. of recognition.
2) COLLECTION OF DATA
The collection of personal data necessary to formalize the booking of an accommodation takes place through the spontaneous provision of data by the customer, when he decides to finalize his reservation by filling in the appropriate form and confirming his choice also through third-party portals. such as but not limited to: booking.com - Airbnb - Expedia
The collection of data relating to personal identity documents takes place through the mandatory compilation of the paper or electronic receipt form by the customer or at their choice, by sending them digitally to the reception of Herat Milan Apartments which cancels them immediately after the necessary use. of law.
Video recording for access control and for security reasons takes place exclusively outside the accommodation facilities at the entrance door by recording on a fixed support inside the cameras themselves (SD cards)
3) Optional provision of data and consent to their treatment - consequences of refusal
Without prejudice to the freedom of the provision of data by customers, it should be noted that failure to communicate identification data (name, surname) and contact data (email address and mobile phone) will make it impossible to complete the booking procedure, as well as the non-delivery and subsequent registration of a valid identification document upon arrival, prevents the customer from being accepted into the accommodation facility due to the impossibility of fulfilling the provisions of public safety regulations.
4) Communication and dissemination of data
For the pursuit of the aforementioned purposes, the data provided by customers will be communicated to the staff responsible for preparing the accommodation and welcoming the customer. An exception is made for any communications to the Judicial or Police Authorities at the request of the same, to which HEART APARTMENTS is obliged to respond or to which Heart Apartments is obliged to contact to report fraudulent or illegal behavior of a guest. The HEART APARTMENTS customer service staff will be able to access the data only at the request of the customer to resolve any problems in the use of the "booking" service that may arise.
HEART APARTMENTS will not disclose the data it collects and stores in any other way.
5) Methods of conservation, duration and processing of data
The data of the identity documents received from the guests on any support and by any means are deleted within 7 days after registration at the portal of the state police and together with all the data relating to each booking will remain archived in electronic format on the servers hosted at the provider of the Krossbooking.com management system or in the datacenters used for this purpose by Solutions Plus Srl, based in Bari, Sp156 Bitonto - Palese Aeroporto, 28 - VAT number 07375150724
Data sent via email is stored on the email servers of the GMAIL corporate mail system operated by Google Ireland Limited, established in Ireland (headquarters: Gordon House, Barrow Street, Dublin 4, Ireland).
The archived data will never be exported outside the EU and can be kept for a period of up to 10 years for the uses also provided for by tax regulations, after which they will be deleted.
The video recordings can only be viewed by the reception staff on duty and by the legal representative of Heart Apartments s.r.l. in case of necessary verification of accesses and / or events that have involved security problems. The video recordings are kept for 30 days on memory cards inside the cameras, after which, except for any use that may be required by the public safety authorities, they are permanently deleted.
The data will not be processed through automated decision-making processes nor transferred to third parties.
6) Rights of the interested party
Customers have the right to ask HEART MILAN APARTMENTS S.R.L. at any time, access to their personal data, rectification or cancellation of the same or to oppose their treatment; have the right to request the limitation of processing in the cases provided for by art. 18 of the Regulation, as well as to obtain the data concerning them in a structured format, commonly used and readable by an automatic device, in the cases provided for by art. 20 of the Regulation.
Requests can be addressed to HEART APARTMENTS at the address indicated in point 7 below.
In any case, customers always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the Regulation, if they believe that the processing of their data is contrary to the legislation in force.
7) Owner and manager of the treatment
The Data Controller is HEART APARTMENTS with registered office in Milan, Via Mazzini 20, and operational headquarters in Milan, Piazza Santa Maria Beltrade 8. E-mail [email protected]
The company HEART APARTMENTS with registered office in Milan Via Mazzini 20, in the capacity of Data Controller, informs the subjects who use the booking or accommodation service, the following information relating to the processing of their data:
1) PURPOSE OF THE TREATMENT
HEART APARTMENTS S..R.L. manages on its own account and / or on behalf of third parties the "short-term rental of accommodation" and various CAV accommodation facilities, particularly in the cities of Milan and Genoa.
The data provided by the customer interested in a stay at one of the accommodation facilities of Heart Apartments S.r.l. named: Heart Milan Apartments, will be processed for the following purposes:
signing of a short lease and / or stay contract.
validation of the reservation through the payment of an amount defined by the commercial policies presented on the site.
Remote payments are managed by external entities (Nexi, Airbnb, Booking.com, Expedia), through their own systems, which act as independent data controllers that they require for their execution.
Sending commercial communications related to accommodation services, as well as direct sales and carrying out surveys or market research (including surveys on the quality of services). HEART APARTMENTS will employ automated methods of contact (such as, for example, e-mail, SMS, instant messaging, social networks, apps, automated call systems without the intervention of an operator, etc.) and / or traditional methods (such as, for example, telephone calls with operator and paper mail).
Verification of the identity of the guests in the accommodation facilities
Access verification and security checks also through video surveillance cameras
HEART APARTMENTS will not perform treatments on data other than those provided for by the booking form and / or the registration form. In particular, the booking form does not require that sensitive data of the customer or of the people who will stay with him be indicated. In the event that the customer decides to indicate personal data classified as sensitive in the "notes" field, these will be stored by HEART APARTMENTS and communicated to its staff in charge of preparing the accommodation and welcoming the customer. The registration data of personal identity documents are used exclusively for communication to the portal lodged by the state police, as required by law or for any legal claims against registered guests if the need arises and for the necessary activities. of recognition.
2) COLLECTION OF DATA
The collection of personal data necessary to formalize the booking of an accommodation takes place through the spontaneous provision of data by the customer, when he decides to finalize his reservation by filling in the appropriate form and confirming his choice also through third-party portals. such as but not limited to: booking.com - Airbnb - Expedia
The collection of data relating to personal identity documents takes place through the mandatory compilation of the paper or electronic receipt form by the customer or at their choice, by sending them digitally to the reception of Herat Milan Apartments which cancels them immediately after the necessary use. of law.
Video recording for access control and for security reasons takes place exclusively outside the accommodation facilities at the entrance door by recording on a fixed support inside the cameras themselves (SD cards)
3) Optional provision of data and consent to their treatment - consequences of refusal
Without prejudice to the freedom of the provision of data by customers, it should be noted that failure to communicate identification data (name, surname) and contact data (email address and mobile phone) will make it impossible to complete the booking procedure, as well as the non-delivery and subsequent registration of a valid identification document upon arrival, prevents the customer from being accepted into the accommodation facility due to the impossibility of fulfilling the provisions of public safety regulations.
4) Communication and dissemination of data
For the pursuit of the aforementioned purposes, the data provided by customers will be communicated to the staff responsible for preparing the accommodation and welcoming the customer. An exception is made for any communications to the Judicial or Police Authorities at the request of the same, to which HEART APARTMENTS is obliged to respond or to which Heart Apartments is obliged to contact to report fraudulent or illegal behavior of a guest. The HEART APARTMENTS customer service staff will be able to access the data only at the request of the customer to resolve any problems in the use of the "booking" service that may arise.
HEART APARTMENTS will not disclose the data it collects and stores in any other way.
5) Methods of conservation, duration and processing of data
The data of the identity documents received from the guests on any support and by any means are deleted within 7 days after registration at the portal of the state police and together with all the data relating to each booking will remain archived in electronic format on the servers hosted at the provider of the Krossbooking.com management system or in the datacenters used for this purpose by Solutions Plus Srl, based in Bari, Sp156 Bitonto - Palese Aeroporto, 28 - VAT number 07375150724
Data sent via email is stored on the email servers of the GMAIL corporate mail system operated by Google Ireland Limited, established in Ireland (headquarters: Gordon House, Barrow Street, Dublin 4, Ireland).
The archived data will never be exported outside the EU and can be kept for a period of up to 10 years for the uses also provided for by tax regulations, after which they will be deleted.
The video recordings can only be viewed by the reception staff on duty and by the legal representative of Heart Apartments s.r.l. in case of necessary verification of accesses and / or events that have involved security problems. The video recordings are kept for 30 days on memory cards inside the cameras, after which, except for any use that may be required by the public safety authorities, they are permanently deleted.
The data will not be processed through automated decision-making processes nor transferred to third parties.
6) Rights of the interested party
Customers have the right to ask HEART MILAN APARTMENTS S.R.L. at any time, access to their personal data, rectification or cancellation of the same or to oppose their treatment; have the right to request the limitation of processing in the cases provided for by art. 18 of the Regulation, as well as to obtain the data concerning them in a structured format, commonly used and readable by an automatic device, in the cases provided for by art. 20 of the Regulation.
Requests can be addressed to HEART APARTMENTS at the address indicated in point 7 below.
In any case, customers always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the Regulation, if they believe that the processing of their data is contrary to the legislation in force.
7) Owner and manager of the treatment
The Data Controller is HEART APARTMENTS with registered office in Milan, Via Mazzini 20, and operational headquarters in Milan, Piazza Santa Maria Beltrade 8. E-mail [email protected]