Privacy

Dear Customer,Under the current rules on the protection of personal data (EU Regulation 679 of 2016), we would like to
inform you that the processing of your personal data is carried out with fairness and transparency, for lawful purposes, and
protecting its confidentiality and rights.

(A) Purpose of Processing and Consent (B)

1. In order to comply with the obligation under the "Single Text of Public Safety Laws" (Article 109 R.D. 18.6.1931 n. 773), which
requires us to notify the Police, for public safety purposes, of the generalities of customers housed in the manner established
by the Ministry of the Interior (Decreto 7 January 2013) and to comply with the municipal obligation relating to the residence
tax. The provision of data is mandatory and does not require your consent. If you refuse to provide it, we will not be able to
host you in our facility. The data acquired for this purpose is not stored by us unless you give us consent to store it as provided
in paragraph 4.
2. To meet current administrative, accounting, and tax obligations. For these purposes, the processing is carried out without the
need to acquire your consent. The data is processed by us and our appointed staff and is communicated outside only in
accordance with legal obligations. If you refuse to provide the necessary data for the above requirements, we will not be able
to provide you with the required services. The data acquired for these purposes is stored by us for the time required by the
respective regulations (10 years, and even beyond in the case of tax assessments).
3. Fulfillment of obligations arising from a contract of which you are a part or to fulfill, prior to the execution of the contract, your
specific requirements. As these are necessary treatments for the definition of the contractual agreement and for its subsequent
implementation, your consent is not required, except if particular, so-called sensitive data is provided. If you refuse to provide
your personal information, we will not be able to confirm the booking or provide you with the required services. The processing
will cease at your departure, but some of your personal data may continue to be processed for the purposes and in the manner
indicated in the following points.
4. To personalize your stay (personalized menus, personalized room, personalized hotel services), to speed up "check-in" even in
the case of subsequent stays at our facility and to carry out a more efficient customer care service, we will process your data in
the following ways: • If you provide us with data regarding your health status, such as celiac disease, diabetes, allergies,
vegetarianism, or disability, we will process it by communicating it to the relevant departments solely to provide the requested
personalized service and to safeguard your safety. The processing will cease in any case upon your departure. • Sending
emails, text messages, or WhatsApp messages during your stay to meet your needs by offering the best tourist experience.
The processing will cease in any case upon your departure. • Use of the "passport scan" system by acquiring the data and
images relating to the identity document in electronic form. The facsimile of the document, in low resolution, will be sent to the
management system in the cloud on servers located in ITALY and will be deleted immediately after the data is sent to the
management system. • Storing your graphic signature to demonstrate that you have acquired your consent. The signature will
be stored according to the terms of the law. • Storing your data in the computerized management system for 5 years in case of
future stays.For this processing, your consent is required and can be revoked at any time. Refusal to provide consent for this
point could result in delays and may prevent the provision of some services.
5. To receive messages and phone calls addressed to you during your stay. For this purpose, your consent is required. You can
withdraw your consent at any time. The processing will cease at your departure.
6. To send you promotional messages and updates on rates and offers. For this purpose, after acquiring your consent, your data
will be retained for up to 5 years and will not be disclosed to third parties. You can withdraw your consent at any time.
7. For the purpose of protecting people, property, and company assets through a video surveillance system in certain areas of the
facility, identifiable by the presence of special signs. For such treatment, your consent is not required, as it pursues our
legitimate interest in protecting people and property against possible assaults, thefts, robberies, damage, vandalism, and for
fire prevention and job security. Recorded images are deleted after 24 hours, except on holidays or other cases of facility
closure, and in any case, no later than a week. They are not communicated to third parties, except if required by a specific
investigative request from the judicial authority or judicial police.
(C) Processing Methods

In relation to the above purposes, processing may be carried out through paper, computer, or telematic tools, in accordance with
all necessary precautions to ensure the security and confidentiality of the information, as identified in our Privacy Policy Document.
The data may be processed by persons inside and/or external to the Company in their capacity as appointed persons and/or Data
Processing Managers.

(D) Scope of Communication and Disclosure

The data, if this is instrumental in pursuing the objectives set out in point A, may be communicated to:
 Professional studies and consultancy in the fields of accounting, tax, employment, and legal;
 External companies responsible for processing data, for the provision of the products/services requested by the customer. Data
will not be disclosed in any way.

(E) Rights of the Data Subject, Owner, Data Processor

We would also like to inform you that the European Regulation recognizes certain rights, including the right to access, rectify,
delete, limit or oppose processing, as well as the right to data portability, if and as applicable (articles 15 to 22 of EU Regulation
679 of 2016). You can also file a complaint with the supervisory authority according to the procedures required by applicable
law.For any further information, and to exercise the rights granted to you by the European Regulation, you can contact:
La MARIA IMMACOLATA FORTINI S.r.l., GRAND HOTEL RIVIERA, con gli Uffici Amministrativi in Via Califano,22/A – Sorrento(NA),
sede Legale: Via Toledo,156 – Napoli, P.IVA IT. 00290480631 Tel. + 39 081 807 20 11, Fax +39 081 877 21 00.
Il Responsabile del Trattamento è ad ogni effetto di legge Paola Matera e Bruno Matera Sanseverino - info@hotelriviera.com