PRIVACY POLICY – EXPA DI SIMONA SCIORTINO
Pursuant to Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended, Expa di Simona Sciortino, VAT no. [insert VAT number], with registered office in Via Pignatelli Aragona 82 – Palermo, as Data Controller, informs you that personal data provided by data subjects (customers, suppliers, employees) will be processed by paper and digital means, lawfully, fairly and transparently, for legitimate purposes and in a manner that safeguards the fundamental rights and freedoms of the individual.
Purpose of Processing:
a) Execution of accommodation contract at the “Expa” guesthouse.
Personal data are processed to manage and confirm bookings and to provide the requested services. Processing is necessary for contract performance (Article 6 GDPR) and does not require consent. Data will be retained until check-out, although some information may be kept longer to comply with legal obligations.
b) Compliance with public security obligations.
Under Article 109 of the Royal Decree 773/1931, all guests (including minors) must be identified, and their data transmitted to the State Police. This is mandatory and does not require consent.
c) Administrative, accounting, tax and statistical obligations.
Data are processed to comply with legal requirements (e.g., ISTAT reporting, invoicing). Processing is carried out by Expa di Simona Sciortino and authorized external parties (banks, accountants, insurers, consultants). Data are retained as required by current Italian laws (at least 10 years).
d) Protection of people and property through video surveillance.
A video surveillance system operates in common areas of the facility and is properly signposted. Footage is typically deleted within 24 hours (never stored for more than one week) and is not disclosed, except in response to lawful requests by judicial or security authorities. Processing is based on the legitimate interest of the Data Controller.
e) Marketing and commercial communication.
With the subject’s consent, data may be used for sending promotional communications about services offered by Expa di Simona Sciortino or its business partners. Consent is optional and data will be retained for a maximum of 10 years.
Data Subject Rights
Data subjects may exercise their rights under Articles 15-22 of the GDPR (access, rectification, erasure, restriction, objection, portability) by contacting:
Expa di Simona Sciortino
Via Pignatelli Aragona 82 – Palermo
PEC: [insert PEC address]
You may also file a complaint with the Italian Data Protection Authority pursuant to Article 77 GDPR.
Mandatory nature of data provision
Providing data for purposes a), b), and c) is mandatory. Refusal will prevent us from providing the requested services. Providing data for purpose e) is optional and requires consent.
Third-party service providers
Expa di Simona Sciortino may use third-party service providers to process personal data on its behalf (e.g., sending emails to request feedback about your stay).
Browsing data
During normal operation, the IT systems and software used on this website collect certain personal data (e.g., IP addresses, URI, access times), which are used for anonymous statistical purposes and to ensure proper site functioning. Such data could be used to investigate suspected cybercrimes and may be disclosed to judicial authorities upon request.
Data provided voluntarily
Sending voluntary emails to addresses listed on this website implies the acquisition of the sender’s address and any other personal data included. Such data will only be used to respond to requests, in accordance with this privacy notice.