With reference to Legislative Decree no. 196/2003 (Personal Data Protection Code), CSH srl, based in Via Alessandro Manzoni

n°12, 20121 Milan (MI), intends to carry out the processing of the personal data you have provided us, exclusively for the execution of contractual or legal obligations arising from the commercial relationships between us in existence.

Pursuant to Article 13 of the aforementioned Code, we are required to inform you of the following:

Purpose of treatment.

The data you provide to us is processed within the scope of our company’s normal operations, specifically for the performance of obligations arising from concluded contracts or the law (e.g., administrative, tax, accounting, etc.) and for market research and direct marketing.

Modes of treatment.

As regards the methods of data processing, we would like to point out that your data will be included in a special registry, both paper and computer. Without prejudice to the application of adequate security measures for the protection and confidentiality of data, pursuant to the Personal Data Protection Code, the processing of your personal data will take place through specific data processing and storage programs.

Mandatory or optional nature of the data contribution.

For the sake of completeness, we would like to inform you that the provision of personal data is necessary (and, therefore, your consent is not required, pursuant to art. 23 et seq. of the Code) to the extent that they are used for the performance by our company of contractual or legal obligations, or concern data coming from public registers, lists, documents or documents knowable by anyone and, in any case, excluding dissemination, where the processing is carried out to enforce or defend a right in court.

Consequences of a possible refusal to reply.

Refusal to provide data deemed essential by us (e.g., name, surname, company name, registered office, place of business, any secondary offices, share capital, telephone numbers, fax numbers, legal representative, tax code and VAT number, company name, bank details, etc.) may make it impossible to establish or continue contractual relationships.

Categories of subjects to whom data may be communicated.

Your personal data may be communicated to the following categories of entities:

– subjects to whom the right to access the data itself is granted by legal provisions or regulations;

– credit institutions for managing collections and payments, financial, insurance and auditing institutions;

– credit recovery company;

– data processing and IT services companies;

– companies that provide correspondence sending services;

– related, controlled or controlling companies.

Categories of subjects who can learn about the data.

Your personal data will be processed by the following categories of persons

– management of the company, as managers and/or data controllers;

– employees of the operational headquarters, as data controllers;

– hotel management, as managers and/or data controllers;

– those responsible for the reception, administration, and appraisal of the facilities managed by Mantova Gestioni Alberghiere srl as data controllers.

The data will never be disseminated, except with your explicit consent.

Rights referred to in Article 7 of Legislative Decree. 196/2003.

Finally, in relation to all of the above, we draw your attention to the rights you are entitled to by virtue of Article 7 of the Personal Data Protection Code, to which we refer and among which we mention the right to obtain, by our company:

a) an indication of the origin of the data, the purposes and methods of processing, the identifying details of the data controller and processors, and the individuals or categories of individuals to whom the data may be communicated or who may become aware of it as processors or processors;

b) confirmation of the existence of personal data concerning you and of the logic applied in the event of processing carried out with the aid of electronic tools;

c) the deletion and transformation into anonymous form or the blocking of data processed in violation of the law;

d) the updating, rectification or – if there is interest – the integration of such personal data;

e) the attestation that the operations referred to in letters c) and d) have been brought to the attention of those to whom the data have been communicated or disseminated, with the exception of cases provided for by law;

f) the right to object on legitimate grounds to the processing of your personal data, even if it is relevant to the purpose of collection;

g) the right to object, in any case, to the processing of your personal data for the purpose of sending advertising or direct sales materials or carrying out market research or commercial communication.

Subjects performing the treatment.

The controller is CSH srl, with headquarters in Via Alessandro Manzoni n°12, 20121 Milan (MI).

To get to know those responsible easily, simply send an email to the following address: booking@cshre.it.