This privacy policy on the processing of personal data (“Privacy Policy”) is provided pursuant to EU Regulation 679/2016, Legislative Decree 196/2003 (and subsequent amendments) and other applicable provisions and measures regarding the protection of personal data, to inform you about the processing of personal data provided by filling out the booking form on the Fratelli Grassi website (“Website”).www.fratelligrassi.it

This information is provided exclusively for bookings made through the Website and not for other websites that may be consulted via links.

DATA CONTROLLER

The data controller is FRATELLI GRASSI SOCIETA’ COOPERATIVA VAT number 07444801216 EMAIL grassibeachbar@hotmail.com

CATEGORY OF DATA PROCESSED

The personal data collected through the online booking form are as follows:

- personal details (such as first and last name);

- contact details (such as email address and phone number).

‍

PURPOSE OF PROCESSING

Personal data provided via the online booking form is collected and processed for the following purposes:

a) provide the requested service, i.e. allow booking at our establishment ("Provision of the Service”);

b) compliance with obligations under laws, regulations, and EU legislation ("Compliance with legal obligations”);

c) prevent or identify any abuse or fraudulent activity to the detriment of our establishment and thus enable us to defend ourselves in court ("Defense").

d) send you marketing communications via email regarding products and services similar to those you have purchased ("Soft Spam").

e) send you marketing communications and promotions via email or SMS for products and/or services related to our establishment ("Marketing");

LEGAL BASIS AND NATURE OF THE PROCESSING

The legal basis for the purpose of providing the Service is the execution of pre-contractual or contractual measures requested by you. It is not mandatory to provide us with personal data for this purpose, but if you do not, it will not be possible to provide the requested service.

Processing for the purpose of complying with legal obligations is necessary to fulfill any legal obligations.

Processing for marketing purposes is based on your consent. Providing such personal data for this purpose is not mandatory, and you are free to withdraw it at any time without any consequences.

The legal basis for Soft Spam is our legitimate interest in sending you marketing communications via email about products and services similar to those you have already purchased. You can stop receiving these communications, without any consequences for you, by using the link at the bottom of each of these emails.

The processing for the purpose of Defense is based on the legitimate interest of our establishment in identifying and preventing any fraudulent activities or abuse in the use of the booking form or the Website and therefore in protecting itself in court.

COMMUNICATION OF PERSONAL DATA

In order to provide its services, our establishment will share the personal data provided for online booking with Spiagge S.r.l (VAT number/Tax Code 0453664040; registered office at Via Marecchiese 48, 47923 Rimini), owner of the Saas platform that allows users to make reservations through the Website.

Your personal data may also be shared with i) third parties that our establishment uses to provide services on its behalf; ii) persons authorized by our establishment to process personal data necessary for the performance of activities strictly related to the provision of the service (such as our employees); iii) public, judicial, or police authorities.

DATA PROCESSING METHODS AND TRANSFER OF PERSONAL DATA

Personal data is processed – in compliance with applicable legislation – also with the aid of IT tools.

OUR

The owner has adopted technical solutions and security measures that guarantee the security of personal data and prevent its alteration, loss, incorrect processing, or unauthorized access.

TREATMENT DURATION AND STORAGE

The data provided will be processed and stored for the period strictly necessary to pursue the purposes stated above. This is without prejudice to storage for a longer period in relation to requests from public authorities or in relation to requirements connected with the exercise of the right of defense in the event of disputes.

Personal data processed for marketing purposes will be retained until you withdraw your consent, and personal data processed for Soft Spam will be retained until you object to such processing via the link at the bottom of each Soft Spam email.

RIGHTS OF THE DATA SUBJECT

Pursuant to Articles 15 et seq. of the GDPR, you may exercise the following rights:

- obtain confirmation from the data controller as to whether or not personal data concerning you are being processed and to know the origin, purpose, categories of data processed, recipients to whom the personal data have been or will be disclosed, including abroad, and the storage period;

- obtain, without undue delay, the rectification of inaccurate data or their completion;

- obtain, without undue delay, the erasure of data pursuant to Article 17 of the GDPR;

- obtain restriction of processing where the accuracy of the data is contested or the processing is unlawful, pursuant to Article 18 of the GDPR;

- obtain data portability by receiving the data in a structured format;

- object to the processing pursuant to Article 21 of the GDPR.

You may exercise the above rights by writing to the email address grassibeachbar@hotmail.com

In any case, you always have the right to lodge a complaint with the Data Protection Authority, pursuant to Article 77 of the GDPR, if you believe that the processing of your personal data is contrary to the legislation in force.