Privacy

1. DATA CONTROLLER
Your data will be processed, as data controller, by: Mapi Srl
Località Nido d’Aquila snc – 07024 La Maddalena (SS) - Italia
P.I. 02821720907
Mapialberghisrl@pec.it – T. +39 0789 722408

2. PURPOSE OF DATA TREATMENT
Personal data, openly communicated by you and acquired by the owner, will be processed in a lawful and correct manner for the purposes related to the use of the Grand Hotel Resort Ma&Ma website, for the compilation by you of the form on the page “Request quote” of the site, for the use of the tourist booking service and through the use of cookies.
The data processed by the owner will be updated, relevant, complete and not in excess of the aforementioned purposes.
This personal data (name, surname, personal data, IP addresses, etc.) may be processed electronically and automatically as well as manually or on paper.
Browsing also collects data (e.g. time of requests, IP addresses, etc.), through the statistical service for purposes related to the use of the site and its correct functioning. The statistical service uses cookies to collect information.

3. LEGAL BASIS FOR THE PROCESSING OF DATA
The legal basis for the processing of your personal data is based on your consent, through the voluntary entry of the same data into the electronic forms on the “Request a quote” page of the Grand Hotel Resort Ma&Ma website to allow you to request information, to be contacted by our company, etc.
The personal data that is collected will be used only in order to provide the service you requested and / or to contact you.

4. COMMUNICATION OF DATA TO THIRD PARTIES
Your personal data will be processed by the owner and (possibly) by appointed personnel. The collected data could be used by the competent authority to ascertain responsibility, in the event of computer crimes against this site.
Your personal data may be disclosed to subjects external to the owner such as companies/companies that provide software assistance to the owner, companies/companies that provide hardware assistance to the owner.
For your personal data, there is no provision for dissemination or transfer to foreign countries or international organizations.

5. STORAGE TIMES
Your personal data will be kept by the owner for a period not exceeding the duration of the requested services and in any case for a period not exceeding 10 years.
Your personal data will be kept for a further period, however within the terms established by current legislation, if this is necessary to protect the rights of the owner, if disputes should arise or controls related to the use of the requested services become necessary.

6. DATA SUBJECT’S RIGHTS
At any time, you can exercise, to the data controller, the rights of access to your personal data; you may obtain the correction or cancellation of the same or the limitation of the processing of data concerning you; you may object to their treatment; you may request the portability of your data; you may withdraw consent if put at the basis of the treatment, without prejudicing the lawfulness, based on the consent given before the revocation; may lodge a complaint with the supervisory authority (privacy guarantor).

7. MANDATORY OR OPTIONAL NATURE OF DATA PROVIDING
The nature of the provision of data by you is mandatory for the fields to be filled in the forms. The insertion of contact data may be necessary for the establishment of a relationship of a communicative nature with the owner, however, it requires invited users to indicate their name and surname in the request emails and / or contact.

8. EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS
The owner does not make use of any automated decision-making process.