Information regarding the processing of personal data user of the Bouwlocker application

Data Controller and Data Processor.
According to the art. 13 of EU Regulation 2016/679 we inform that the structure (company, hotel, hostel, B&B, restaurant, etc.) in which it you are located and / or in which you will go in the future has installed an access control system within the premises through Smart Locks , i.e. special smart locks that, through a cloud platform, allow you to open the access gates to the environments of the structure itself using Credentials that are created by means of this application.
The aforementioned structure will then proceed to the processing of personal data consisting, in particular, of the Credentials as well as the individual accesses, the latter with reference to the environments for which the Credentials are enabled as well as to the date and time in which they had access to the same environments.
The Data Controller of the acquired data and used is the individual structure. In this regard, the name and contact details of the data controller will be communicated to you by the structure itself, so that this information is intended solely to inform you of the fundamental characteristics of the processing of your data.

Processing methods and logic.
The personal data identified above will be processed, as a result of the installation and use of this application, in an automated form, exclusively for the purposes strictly connected to the fulfillment of the contract and, therefore, for the creation of Credentials for access to the environments and for its subsequent management.
The processing of such data will be based on the principles of lawfulness, purpose, transparency, correctness, quality, relevance and not excess, in respect of your rights and your fundamental freedoms as well as your dignity, with particular reference to the protection of privacy and personal identity, as well as the right to data protection and will in no case be processed for purposes of profiling your habits and behaviours.

Legal basis and nature of the provision.
The data will be processed, without the need for your consent, for the fulfillment of the contract concluded by you and, therefore, to allow the creation and management of the Credentials necessary to access the environments inside the structure.
The provision of the data that is requested to you through the installation and use of this application, as well as those acquired at the time of creation and use of the Credentials is in no way mandatory, but your refusal to supply them may prevent the facility from allowing you access to their spaces.
In any case, we inform you that you will be able to prevent the acquisition of data by refusing to install the application or, in any case, proceeding with its uninstallation, even afterwards, using the appropriate functions of your smart device but, in this case, the owner of the processing will not be held liable if you cannot access the rooms.

Communication and dissemination of data.
Without prejudice to the provisions in the context of the processing carried out for the fulfillment of the main contract that you may have concluded with the host structure, the data processed in the context of the application and for its specific purposes will be neither disseminated nor communicated, but will be placed available to the Data Processors for the management of the access control service to the individual environments.
Your data will also be made available to employees and collaborators of the Data Controller and of the Data Processors specifically authorized for processing, trained on the obligations arising from the legislation on the protection of personal data.

Rights of the interested party.
You have the right to access your personal data as well as, in the cases provided for by the current legislation, the right to request the rectification, deletion or portability of the data to another Data Controller, as well as request the limitation of the processing or oppose it.

Complaint to the Data Protection Authority.
The current legislation also grants you the right to file a complaint with the supervisory authority of the EU State where the interested party habitually resides, where he works or where the violation occurred. For Italy, the supervisory authority is the Italian Data Protection Authority (Garante della Privacy). In order to file a complaint with the Italian Data Protection Authority please check its website, www.garanteprivacy.it.