PRIVACY NOTICE FOR THE PROCESSING OF PERSONAL DATA OF TOURIST RENTAL TENANTS (GUESTS)
Pursuant to Article 13 of Regulation (EU) 679/2016
Data Controller, Processors, and Authorized Personnel
The data controller of your personal data is BeAtHome S.r.l., represented by its legal representative, with its registered office in Oristano, Via XX Settembre n. 31, VAT no. 01269110951. The updated list of Data Processors, authorized persons for processing, and their contact details are stored and available at the registered office of the Data Controller.
Purpose of the Processing
Your personal data will be processed by the Data Controller and authorized personnel, in full compliance with principles of fairness and legality, and legal provisions, for purposes instrumental and functional to the performance of the contractual or pre-contractual tourist rental relationship. This includes fulfilling related accounting, tax, technical obligations, and for general business activities such as archiving, invoicing, processing, and registration.
In accordance with Article 6, paragraph 1, letter c), your personal data will also be processed to comply with legal obligations regarding tourist rentals and, consequently, securely communicated to the Police Headquarters for security purposes, to the Sardinia Region for statistical purposes, and to the Municipality for the payment of the tourist tax.
Types of Personal Data Processed
For the performance of the above activities, common personal data not falling under the special categories referred to in Article 9 of Regulation (EU) 2016/679 will be processed, such as:
Personal data (name, surname, date and place of birth, residence address, tax code);
Domicile data and bank account details;
Contact data (telephone number and email address);
Accounting, commercial, tax, and administrative data pertaining to individuals.
Methods and Duration of the Processing
Your personal data may be processed automatically and/or manually, through IT and/or telematic tools, with organizational and logical methods strictly related to the indicated purposes. Security measures will be adopted to prevent unauthorized access, disclosure, modification, or destruction of personal data, in compliance with Article 32 of GDPR 2016/679.
Please note that, in compliance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Article 5 of GDPR 2016/679, your personal data will be stored for the time necessary to achieve the purposes for which they are collected and processed, in any case no longer than 10 years from the termination of the contractual relationship.
Access to Data
Your personal data will be accessible for the above-mentioned purposes only to:
Employees and collaborators of the Data Controller, as authorized persons who need access due to their tasks or roles. These individuals, whose number will be as limited as possible, will be properly instructed to avoid loss, destruction, unauthorized access, or unlawful processing of the data;
Consultants or external companies that perform outsourcing activities on behalf of the Data Controller, as external data processors pursuant to Article 28 of GDPR 2016/679, or as professionals bound by the professional secrecy obligation. The list of such entities is available and consultable at the company's registered office.
Legal Basis for Processing and Consequences of Refusal to Provide Data
The legal basis for processing is found in the performance of a contract to which the data subject is a party and in compliance with related legal obligations, pursuant to Article 6, paragraph 1, letters b) and c). The provision of data is optional. However, refusal to provide data will make it impossible to conclude contracts and establish relationships with BeAtHome S.r.l. and with the owners of the rented properties, on whose behalf the Data Controller operates.
Data Communication
The Data Controller may communicate your data for the purposes referred to in point 2 to parties to whom the communication is required by law to fulfill the aforementioned purposes. These parties will process the data as independent Data Controllers, and your data will not be disseminated.
Data Transfer
The management and storage of personal data will take place on servers located within the European Union, belonging to the Data Controller and/or third-party companies duly appointed as Data Processors. Currently, the servers are located in Italy, and the data will not be transferred outside the European Union. In any case, if necessary, the Data Controller may move the servers outside the European Union, ensuring that the transfer of data will comply with applicable legal provisions, including the signing of the standard contractual clauses provided by the European Commission.
Existence of Automated Decision-Making, Including Profiling
BeAtHome S.r.l. does not adopt any automated decision-making processes, including profiling, as referred to in Article 22, paragraphs 1 and 4, of GDPR 679/2016.
Rights of Data Subjects and Exercise of Rights
You have the right to obtain, from the Data Controller, access to your personal data, rectification or deletion of your data, restriction of processing concerning you, or to object to the processing, in accordance with Articles 15 and following of the Regulation. You also have the right to lodge a complaint with the Privacy Authority (https://www.garanteprivacy.it), as provided for in Article 77 of the Regulation, or to seek judicial remedy (Article 79 of the Regulation). You may exercise your rights at any time by contacting BeAtHome S.r.l. via email at: [email protected]
Oristano
The Data Controller
BeAtHome S.r.l.