In application of the European Regulation n. 679 of 2016 of Legislative Decree no. 196 of 2003 relating to the protection of personal data, we inform you that the Data Controller is Bellitalia snc di Cappelli Francesco & D'amato Andrea Personal data is processed in full compliance with EU Regulation 679/2016 and Legislative Decree 196/2003 and subsequent amendments. The data provided by you (hereinafter referred to as "the interested party") will be used for the sole purpose of following up on your requests and may be disclosed to third parties only if this is necessary for this purpose, or with your explicit consent. The data processing will take place, by personnel appointed by the Data Controller with procedures, technical and IT tools suitable for protecting the confidentiality and security of the interested party's data and consists in their collection, registration, organization, conservation, consultation, processing, modification , selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation, destruction of the same including the combination of two or more of the aforementioned activities. The data will be kept for the time strictly necessary to provide the interested party with the services requested and will in any case be eliminated following a request from the interested party, subject to further conservation obligations established by law. The data of the interested party will not be disclosed. As part of its activity and for the purposes indicated above, the Data Controller may make use of services rendered by third parties who operate on behalf of the Data Controller and according to its instructions, as data processors. These are suppliers, commercial and production partners, intermediaries, technical consultants and other similar subjects who collaborate with our organization to fulfill the contractual commitments undertaken with you; subjects that provide a service strictly and necessarily connected to the activity of the Data Controller such as tax consultants, banks, shippers, insurance companies, public and private bodies, also in relation to inspections or checks; subjects who can access the data under the provisions of the law. The data may also be communicated to all those subjects authorized by law to collect them (e.g. provincial companies for health services, financial administration, etc.). The interested party may request a complete and updated list of the subjects appointed as data processors by contacting the contact indicated below. Rights of the interested party Right of access (art. 15 GDPR). Right of the interested party to obtain access to their data and to lodge a complaint with the supervisory authority. Right of rectification (art. 16 GDPR). Right of the interested party to obtain from the Data Controller the rectification of inaccurate personal data concerning him. Right to cancellation (right to be forgotten) (art. 17 GDPR). The interested party has the right to obtain from the Data Controller the cancellation of personal data concerning him without unjustified delay. Right to limitation of treatment (art. 18 GDPR). Right of the interested party to obtain a limitation of the data processing. Notification obligation (art. 19 GDPR). The Data Controller informs each of the recipients to whom the personal data have been transmitted of any corrections or cancellations or limitations of the processing carried out in accordance with articles 16; 17; 18. Right to data portability (art. 20 GDPR). The interested party has the right to receive the personal data concerning him provided to the Data Controller and has the right to transmit such data to another data controller without impediments by the Data Controller. Right to object (art. 21 GDPR). Right of the interested party to object to the processing of his personal data. Profiling (art. 22 GDPR). The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling or which significantly affects his person. The Data Controller is Bellitalia snc di Cappelli Francesco & D'amato Andrea Art. 7 - Right of access to personal data and other rights 1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form. 2. The interested party has the right to obtain the indication: a) the origin of the personal data; b) the purposes and methods of processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the owner, of the managers and of the designated representative pursuant to article 5, paragraph 2; e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representative in the territory of the State, managers or agents

3. The interested party has the right to obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is proves impossible or involves the use of means manifestly disproportionate to the protected right. 4. The interested party has the right to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication. The person responsible for the protection of personal data is: Bellitalia snc di Cappelli Francesco & D'amato Andrea Holder and Responsible for the processing of personal data Pursuant to art. 28 of Legislative Decree 196/2003: The Data Controller is Bellitalia snc di Cappelli Francesco & D'amato Andrea The person responsible for the processing of personal data Bellitalia snc di Cappelli Francesco & D'amato Andrea Via Crescenzio n° 2 00193 Rome VAT number: 02600590745 Email: bellitaliasnc@libero.it Domain: http://www.bellitaliavacanze.it Links to other sites The sites we redirect to, including (but not limited to) subsites and third party service providers, may have a different privacy policy than the one set out here. We assume no responsibility for the privacy policies of linked sites and therefore encourage you to familiarize yourself with them. Children We do not intend to collect personal information from anyone under the age of 16. If you are under 16, you should not make an online reservation or any inquiries, but ask a parent to do it for you. Questions or concerns At any time you believe that the Data Controller has not followed the aforementioned policy, please let us know by sending an email to bellitaliasnc@libero.it and we will try our best to identify and resolve any problems. Variations of this online privacy policy We may vary this Privacy Statement from time to time to accommodate regulatory changes, business needs, or to meet the requirements of our visitors, guests, market partners, and service providers. Updated versions will be posted on our site, along with update dates, to notify you of the latest privacy policy update.