Data protection information letter in accordance with EU Regulation 679/2016 (General Data Protection Regulation) Dear guest, Herewith we would like to inform you in terms of Art. 13 of the GDPR about how your personal data is processed. Data controller: Villa Rina – Merano - Giuseppina Martelli Via Alfieri 14 – 39012 Merano (BZ) - Italy Villa.rina.meran.o@gmail.com Purpose of data processing: We process your personal data and possibly those of your family members in compliance with the applicable data protection regulations in order to provide our services and/or to accommodate you. Among others, the following data may be subject to processing: • Anagraphic data, e.g., name, address, contact data, birth data, nationality. • Identity card and travel document • Payment data • Duration of stay If you do not provide us with the necessary data, it will not be possible for us to fulfil our contractual obligations and as a result we will not be able to accommodate you. Recipients of personal data: To the extent necessary and/or if required by law in the course of providing our services, your personal data may be disclosed to third parties (e.g., public authorities, external IT service providers). Your data will not be transferred to non-EU countries. Automated decision-making including profiling is not used. Legal basis of the data processing operations: • Fulfilment of pre-contractual/contractual measures (Art. 6b GDPR) • Fulfilment of legal obligations (Art. 6c GDPR) • Obtaining your voluntarily given consent e.g., newsletter (Art. 6a GDPR) • Legitimate interests (Art. 6f GDPR) Storage period of personal data: The duration for the storage of your personal data is measured according to legal obligations. If you have agreed to receive the newsletter, this data will be stored until revoked. Your rights: You can exercise your rights free of charge at any time: right to access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR), right to object (Art. 21 GDPR). Please contact the above data controller. You also have the right to lodge a complaint with the Italian supervisory authority for data protection "Garante per la protezioni dei dati personali".