Notice pursuant to and for the purposes of Articles 13–14 of EU Reg. 2016/679
(European Regulation on the protection of personal data)

Gentle Sir/Madam

We wish to inform you that EU Reg. 2016/679 (“European Regulation on the protection of personal data”) provides for the protection of individuals and other subjects and the respect of the processing of personal data.

Pursuant to Articles 13 and 14, we therefore provide you with the following information:

Data Controller Identification

The data controller is PETRONILLA SRL, IN THE PERSON OF ITS LEGAL REPRESENTATIVE – Via San Lazzaro, 4 – 24122 Bergamo, Tel: 035/271376

1. Purposes and Legal Basis of the Processing

The processing of the personal data you provide is carried out for the following purposes:

1. 1. To perform contractual obligations and comply with your specific requests, as well as to fulfil legal obligations, in particular accounting and tax obligations and all requirements under the regulations governing employment relationships:
      • the booking of stays at our facility;
      • the communication of information regarding reservations and services provided;
      • economic transactions, including by electronic means;
      • legal communications to Public Security Offices concerning identity data and stay durations;
      • the fulfilment of mandatory administrative, accounting, corporate and tax obligations relating to you and/or your company;
      • the fulfilment of mandatory administrative, accounting, corporate and tax obligations relating to our facility;
      • the administrative and commercial management of our relationship;
      • the drafting, management, and execution of mandates and contracts between us;
      • the preparation of internal statistics, market analyses, and the management of correspondence related to circulars, surveys, promotions, and advertising;
      • information and updates regarding the services we provide.
   2. To send newsletters promoting products and/or events organised by our company as part of our customer loyalty policy (direct marketing), for which no explicit consent is required pursuant to Recital 47 of EU Reg. 2016/679. The right to object remains unaffected.

2. Processing Methods

For the purposes indicated, your data are processed both electronically and in paper form. Processing operations are carried out so as to ensure logical and physical security and the confidentiality of your personal data.

3. Legitimate Interests Pursued by the Data Controller or Third Parties

The data controller will process your data in the legitimate and mutual interest of fulfilling contractual obligations and to avoid non‑compliance with tax law requirements.

4. Nature of Personal Data

Your personal data are subject to processing. For the purposes indicated, the controller may become aware of “special categories of personal data” under EU Reg. 2016/679, such as health status (e.g., food intolerances, physical disabilities, etc.). In such cases, where required, you will be asked to provide your explicit consent.

5. Mandatory or Optional Nature of Data Provision

Providing your personal and special data is mandatory to the extent necessary for contractual fulfilment, and refusal may make it impossible or extremely difficult to provide the requested services.

Provision of data for the purpose referred to in point b) of Article 1 is optional.

6. Recipients and Disclosure of Data

Your data may be disclosed for the purposes referred to in point 1a:

• to any parties entitled to access such data under statutory provisions;
• to our collaborators and employees, within the scope of their duties;
• to any natural or legal persons, public or private, when disclosure is necessary or functional to our business activities and for the purposes described above;

7. Retention Period

Your data will be retained for the time necessary to comply with legal obligations, which can reasonably be identified as 10 years.

8. Data Subject Rights

Pursuant to the Regulation (Articles 15–22), data subjects may exercise the following rights against the data controller/co‑controllers:

• Right of Access: the right to obtain confirmation of whether personal data concerning you are being processed and to access those data;
• Right to Rectification: the right to have inaccurate or incomplete data corrected;
• Right to Erasure: the right to request deletion of your personal data and cessation of processing;
• Right to Restriction of Processing: the right to request limitation of data processing;
• Right to Data Portability: the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit those data to another controller;
• Right to Object: the right to object to processing in the cases provided by the GDPR, at any time and without justification;
• Right not to be Subject to Automated Decision‑making: the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.

You also have the right to lodge a complaint with the supervisory authority.

9. Revocation of consent to processing

If processing is based on consent pursuant to Article 7 of EU Reg. 2016/679, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal, by sending a registered letter with return receipt to: PETRONILLA SRL, Via San Lazzaro, 4 – 24122 Bergamo, Tel: 035/271376, accompanied by a copy of your identity document, with the following text: <>. After this operation, your personal data will be removed from our archives as soon as possible.

For more information on the processing of your personal data or to exercise the rights referred to in Section 8, you may send a registered letter with return receipt to: PETRONILLA SRL, Via San Lazzaro, 4 – 24122 Bergamo, Tel: 035/271376. Before providing or amending any information, we may need to verify your identity and ask you some questions. A response will be provided as soon as possible.“`