Customer Privacy Notice (Informativa Privacy Clienti)

CUSTOMER PRIVACY NOTICE (INFORMATIVA PRIVACY CLIENTI)

✓Business name (titolare del trattamento) (P.IVA Business P.IVA), ✓Business address Effective date: Effective date

This notice explains how ✓Business name (titolare del trattamento) (the "titolare del trattamento" / data controller) collects, uses and protects the personal data of its customers, in accordance with Article 13 of the GDPR (Regolamento (UE) 2016/679) and the Codice Privacy (D.lgs 196/2003, as amended by D.lgs 101/2018), under the supervision of the Garante per la Protezione dei Dati Personali.

1. DATA CONTROLLER 1.1. ✓Business name (titolare del trattamento) is the data controller (titolare del trattamento). 1.2. Privacy contact: Privacy contact

2. PURPOSES AND LEGAL BASIS 2.1. Purposes (finalità): Purposes of processing (finalità) 2.2. Legal basis (base giuridica): Legal basis (base giuridica)

3. DATA COLLECTED 3.1. Data collected (dati raccolti)

4. RECIPIENTS 4.1. Recipients (destinatari) 4.2. ⚠️ For hotels/B&Bs: guest data transferred to the Questura via Alloggiati Web is a SEPARATE legal obligation (see the dedicated Alloggiati Web checklist template) — it does not require the guest's consent, but it should be mentioned explicitly here for transparency: Alloggiati Web transfer note (for hotels)

5. RETENTION 5.1. Retention period (conservazione)

6. YOUR RIGHTS 6.1. Data subject rights (diritti dell'interessato) 6.2. Right to lodge a complaint with the Garante

7. PUBLICATION 7.1. This notice must be made available to customers where their data is collected — at the entrance/till (QR code or printed copy) and on the business website.

— — — ⚠️ This is a boilerplate template, not legal advice. Italian employment, food-safety, privacy and consumer-protection law (the applicable CCNL — e.g. CCNL Turismo-Pubblici Esercizi/Ristorazione e Turismo, FIPE-Confcommercio, renewed 05.06.2024, in force until 31.12.2027 — the Statuto dei Lavoratori L. 300/1970, D.lgs 81/2015, the "Decreto Trasparenza" D.lgs 104/2022 as softened by DL 48/2023, D.lgs 81/2008, Regulation (EC) No 852/2004, Regulation (EU) No 1169/2011, the GDPR/Codice Privacy D.lgs 196/2003, the TULPS R.D. 773/1931 and the Codice del Consumo D.lgs 206/2005) is highly procedural, tied to fixed statutory calendars (comunicazione preventiva before every call-up, contestazione disciplinare timing, UNILAV deadlines, Alloggiati Web transmission windows) and changes frequently, with CCNL pay tables and sanction thresholds re-indexed periodically, and with some institutions (e.g. affitto di poltrona/cabina) still governed only by circolari and regional/ municipal rules rather than a single national law. Have this document reviewed and adapted by an Italian employment/legal advisor (avvocato giuslavorista / consulente del lavoro) and verified against the applicable CCNL, regional rules and current thresholds before use.