We would like to inform you that POLO INVESTMENTS S.R.L. will process your personal data as the Data Controller, in full compliance with the General Data Protection Regulation (GDPR) 679/2016 concerning the protection of personal data.

Data Controller and Data Processing Officer
Regarding your personal data, you can exercise all the rights provided by Articles 13 (data collected from the data subject) and 14 (data not collected from the data subject) of the GDPR 679/2016, such as modification, deletion, rectification, and any other rights as provided by the regulation by directly contacting the data controller: POLO INVESTMENTS S.R.L. POLO INVESTMENTS S.R.L. collects data both independently (at the time of online reservation from its website and upon guest arrival) and through External Data Processors (hotel reservation portals and travel agencies): the latter act as intermediaries that trigger our Data Processing as Data Controllers.

Legal basis for processing
The legal basis for data processing is the consent of the data subject, requested from time to time and separate from the information obtained during online reservation and registration at the hotel.

External Data Processors
Here below, we list the technical partners:
*** Blastness srl, VAT ID/Tax Code: 01195440118, REA registration number of Milan 2107189, Registered office: Galleria del Corso, 2 – 20122 Milan, Italy

Processing of personal data and related purposes.
Each section described below allows data collection for a specific purpose: failure to fill in the fields marked as mandatory (highlighted with an asterisk) will result in non-provision, preventing data processing, and therefore hindering the requested service.

Your personal data, provided for the various hospitality services at our facilities, will be collected by POLO INVESTMENTS S.R.L. and its technical partners, will be recorded and processed on paper and/or electronically, and may be stored in dedicated databases and will not be used for purposes other than those required by current Public Security regulations;
*** 'Booking' page - the profiles of users requesting information through the 'Booking' page will be used by POLO INVESTMENTS S.R.L. for exclusive hotel hospitality operations by POLO INVESTMENTS S.R.L.;
*** 'Contacts' page - the profiles of users requesting information through the 'Contacts' page will be used by POLO INVESTMENTS S.R.L. for communication purposes related to the individual request received by POLO INVESTMENTS S.R.L.;

Use of cookies: the collected data (country of origin, details of pages visited, and duration of stay within these pages) will be used for the processing of statistical and market research studies - please refer to the specific information.

Your data will not be subject to "disclosure," will not be published, nor will it be communicated to third parties, neither in Italy, within the European Union nor outside the EU, while they may be known to the personnel of POLO INVESTMENTS S.R.L. who have received appropriate training and its technical partners, sealed by compliance with the GDPR as appointed and listed under External Data Processors. POLO INVESTMENTS S.R.L. undertakes not to use personal data reported as inaccurate until the inaccuracy has been corrected.

All data are collected for the legitimate interest of the Data Controller, will not be subject to publication, sharing, and/or transfer to third parties, neither in Italy nor abroad.

Freedom to give consent, consequences of refusal, data retention period.
Booking - providing your data is optional. The received data will be kept for the minimum duration required by legal obligations.
'Contacts' - providing your data is optional. However, in case of refusal of consent for the indicated purposes, we will be unable to provide a response. The received data will be kept for 6 months.
Cookies - the collection of data in aggregated form is automatic and linked to browsing the pages of the site. If you do not wish this to happen, it is necessary to interrupt the navigation of the site or you can proceed to change the configuration and options available through indications on the internet page.

Rights under Articles 13 and 14 of the GDPR 679/2016.
The data subject may consciously control and manage the flow of their data and, in particular, may exercise the following rights:
(i) the right to access data,
(ii) the right to request rectification, erasure, or restriction of processing,
(iii) the right to object to processing,
(iv) the right to data portability,
(v) the right to withdraw consent to processing at any time, and
(vi) the right to lodge a complaint with the supervisory authority.

All rights provided by Articles 13 (data collected from the data subject) and 14 (data not collected from the data subject) of the GDPR 679/2016 can be exercised by contacting directly.