Dear Customer,
We take this opportunity to inform you that the personal data disclosed to our Personnel shall be collected and processed by CLASSHOTEL GESTIONI s.r.l. in conformity with the principles of fairness and transparency, in compliance with the applicable laws of data protection, and in observance of your rights to confidentiality.

Please read carefully the following information concerning your rights with respect to the processing and use of your personal data. Upon your understanding and acceptance of the information provided herein, please sign the Consent Agreement.
Pursuant to Article 4, subparagraphs d) and e), of Legislative Decree n° 196/2003, "confidential and/or legally pertinent data" is defined as all personal data that may reveal an individual's racial and ethnic origin, his/her religious, philosophical or other beliefs; disclose his/her political views or reveal membership to political parties, labor unions, religious, philosophical, political or labor union associations/organizations."

The definition includes all personal data that may reveal an individual's health condition or sexuality as well as personal data regarding legal proceedings pursuant to Article 3 regarding the Criminal Records Office and the national listing of administrative sanctions resulting from criminal offences or related legal actions. The definition further includes all personal data that may disclose an individual having been charged with offences or having been subject to investigation pursuant to Articles 60 and 61 of the Criminal Proceedings Code.

In addition, the Customer could provide certain confidential or sensitive data for His/Her own health safeguard (food intolerance, etc.)

In conformity with the provisions of Legislative Decree n° 196/2003, and in observance of your rights as the data subject, please read carefully the following regarding the use of your personal and/or sensitive data in the processing related to CLASSHOTEL Hospitality services:

Purpose and Scope of Data Processing
Personal data shall be collected and processed by CLASSHOTEL, utilizing electronic and/or automated systems and other means. The personal data collected shall be used only for purposes of Hospitality services, i.e. booking, check-in, invoicing and other general hotel procedures. Personal data shall be archived in a data base for a period of time not exceeding 5 years, or for the relevant period according to Italian laws. After such time, all personal data shall be deleted from the data base.

Obligatory Nature of Data
Your providing personal data as described herein is not obligatory. However, in the absence of such data and your consent to the processing activities described herein, CLASSHOTEL won't be able to provide hotel services, according to Italian law obligations.

Scope of Data Communication, Diffusion or Dissemination
Personal data shall be stored in paper documents, in the Customer data base and in automated records and/or hard copy files. Such data base, records and/or hard copy files shall be kept on CLASSHOTEL premises and/or at group headquarters. More specifically, certain conditions could require that your personal data be processed, other than by Hotels personnel, by third parties, formally authorised by CLASSHOTEL GESTIONI s.r.l., such as Police Units, Banks, Companies belonging to CLASSHOTEL Group, Advisors, IT Companies or other suppliers of technological services. Your data shall be processed in full compliance with statutory data confidentiality and security provisions.

Data Controller
CLASSHOTEL GESTIONI s.r.l., Via P.Gaggia 1/a 20139 MILAN, Italy, is the acknowledged Data Controller with respect to your personal data for purposes of this agreement.

Data Processor
The list of authorised Data Processors of your personal data is available at the Corporate Headquarter through the e-mail address privacy@classhotel.com managed by the delegated Person responsible for the Privacy, whose address for this charge is the Company business address in Via P. Gaggia, 1/a 20139 Milan, Italy

Personal rights pursuant to Article 7 of Legislative Decree 30/06/03 n°196
Your rights, as set forth in Article 7 of Legislative Decree 196/2003 n°196, regarding the processing your personal data by the Data Controller and/or Data Processor identified above, may be exercised by you at any time.

Article 7 provides:

1. The data subject has the right to be duly informed as to the existence or otherwise of personal data relating to his/her person including instances where data has not as yet been recorded. Such data shall be delivered to the affected party in an intelligible manner.

2. The data subject shall be advised of the following:

- source(s) of personal data
- data processing purposes and procedures
- employed in case data be processed by electronic means
- name/surname of the Data Controller and Data Processors pursuant to the provisions of Article 5, paragraph 2
- the entities or groups of entities to whom the personal data may be communicated or who otherwise might have access to the personal data either as the designated representative of the Data Controller in Italy, as the duly nominated responsible Data Controller, or as the duly nominated data processor of the personal data

3. The data subject shall be entitled:

- to update, to correct when necessary and to integrate his/her personal data
- to delete, to transform into an anonymous format, to deny access to data processed in an illicit manner including data not requiring its storage for the purposes for which it was originally collected and subsequently processed
- to written certification that the activities requested and their completion, as described in a) and b) above have been reported to those entities to whom the data had been forwarded or disseminated, except in those instances when it would be impossible to do so or would entail the use of resources and other means manifestly disproportionate to the protection of the individual's personal right

4. The data subject shall be entitled to object in whole or in part

- to the processing of personal data, including the scope of the data collection, for legitimate motivations against
- to the processing of personal data for purposes of advertising/sales or the performance of market surveys or advertising campaigns