In compliance with the obligations deriving from national legislation (Legislative Decree 30 June 2003 No. 196, Code for the protection of personal data) and Community, (European Regulation for the protection of personal data No. 679/2016, GDPR) and subsequent changes, this site respects and protects the privacy of visitors and users, putting in place every effort possible and proportionate to not infringe the rights of users. This privacy policy applies only to the online activities of this site and is valid for visitors / users of the site. It does not apply to information collected through channels other than this website. The purpose of the privacy statement is to provide maximum transparency regarding the information that the site collects and how it is used.

Legal basis of the processing

This site processes data based on consent. With the use or consultation of this site visitors and users explicitly approve this privacy statement and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service. The provision of data and therefore the consent to the collection and processing of data is optional, the User can refuse consent, and may revoke at any time a consent already provided (tramite mail all’indirizzo info@villapatriarca.net). However, denying consent may make it impossible to provide certain services and the browsing experience on the site may be compromised. Starting from 25 May 2018 (date of entry into force of the GDPR), this site will process some of the data based on the legitimate interests of the data controller.

Data collected and purposes

Like all websites, this site also makes use of log files in which information collected in an automated manner is kept during user visits. The information collected could be the following:

  • internet protocol (IP) address;
  • type of browser and device parameters used to connect to the site;
  • name of the Internet service provider (ISP);
  • date and time of visit;
  • web page of origin of the visitor (referral) and exit;
  • possibly the number of clicks.

The above information is processed in an automated form and collected in an exclusively aggregated form in order to verify the correct functioning of the site, and for security reasons (from 25 May 2018 such information will be treated according to the legitimate interests of the owner). For security purposes (spam filters, firewalls, virus detection), the automatically recorded data may possibly also include personal data such as IP address, which could be used, in accordance with applicable laws, in order to block attempts at damage to the site itself or to cause damage to other users, or in any case harmful activities or constituting a crime. Such data are never used for the identification or profiling of the user, but only for the purposes of protection of the site and its users (from 25 May 2018 such information will be treated according to the legitimate interests of the owner).

If the site allows the inclusion of comments, or in the case of specific services requested by the user, the site automatically detects and records some identification data of the user, including the email address. These data are voluntarily provided by the user at the time of requesting service delivery. By inserting a comment or other information, the user expressly accepts the privacy policy, and in particular agrees that the contents included are freely disseminated to third parties.

The data received will be used exclusively for the provision of the requested service and only for the time needed to provide the service. The information that users of the site deem to make public through the services and tools made available to them, are provided by the user knowingly and voluntarily, exempting this site from any liability regarding any violation of laws. It is up to the user to verify that they have permission to enter personal data of third parties or contents protected by national and international standards.

The data collected by the site during its operation are used exclusively for the purposes indicated above and kept for the time strictly necessary to carry out the activities specified. In any case, the data collected from the site will never be provided to third parties, for any reason, unless it is a legitimate request by the judicial authority and only in the cases provided by law. The data used for security purposes (block attempts to damage the site) are kept for 24 months.

The treatments are also carried out with the aid of IT tools for the following purposes:

    1. to acquire and confirm your booking of accommodation services and ancillary services. Since these are necessary treatments for the definition of a contract and for its subsequent implementation, its consent is not required, except in the case in which special, so-called sensitive data are given. In case of refusal to provide personal data, I could not confirm the booking or provide the requested services. The treatment will end eventually, but some of your data
    2. to fulfill the obligation provided for by the “Consolidated Law on Public Security Laws” (article 109 RD 18.6.1931 n.773) which requires to communicate to the Police Headquarters, for purposes of public security, the personalities of the clients accommodated according to the procedures established from the Ministry of the Interior (Decree of 7 January 2013). The provision of data is mandatory and not mandatory, in case of refusal to provide it we will not be able to host it in our structure. The acquired data to tell the reasons are not preserved, unless there is consent to conservation as foreseen in point 4;
    3. to comply with current administrative, accounting and tax obligations. For these purposes, the processing is carried out without the need to acquire his consent. The data are processed by us and by our representatives, and are communicated outside only in compliance with legal obligations. In case of refusal to provide the data necessary for the above-mentioned obligations, we will not be able to provide the requested services. The data acquired for these purposes are stored by us for the time provided for by the respective regulations (10 years, and even more in the case of tax assessments);
    4. to speed up registration procedures in case of subsequent stays at our facility. For this purpose, after obtaining your revocable consent at any time, your data will be kept for a maximum period of 5 years, and will be used when you will be our guest again for the purposes referred to in the previous points;
    5. to perform the function of receiving messages and telephone calls addressed to her during her stay. For this purpose, your consent is required. You can withdraw your consent at any time. The treatment will cease at its departure anyway;
    6. to send you our promotional messages and updates on rates and offers. For this purpose, after obtaining your consent, your data will be kept for a maximum period of 5 years and will not be disclosed to third parties. You can withdraw your consent at any time;
    7. for the protection of people, property and corporate assets through a video surveillance system of some areas of the structure, identified by the presence of appropriate signs. For this treatment, your consent is not required, as it pursues our legitimate interest in protecting people and property with respect to possible aggressions, thefts, robberies, damage, acts of vandalism and for purposes of fire prevention and job security. The recorded images are deleted after 24 hours, except holidays or other cases of closure of the exercise, and in any case not more than a week. They are not the object of communication to third parties, except in cases where it is necessary to adhere to a specific investigation request by the judicial or judicial police authorities.

We also wish to inform you that the European Regulation recognizes certain rights, including the right of access and rectification, or cancellation or limitation or opposition to processing, as well as the right to data portability, if and as applicable (articles from 15 to 22 of EU Regulation No. 679 of 2016). It can also lodge a complaint with the supervisory authority, in accordance with the procedures established by current legislation.

PROCESSING OF PERSONAL DATA FOR CONTACT FORM

Processing of personal data

(Privacy policy pursuant to Article 13 of Legislative Decree No. 196/2003 and of EU Regulation No. 2016/679)

We inform you that the data that will provide to the operator of this site at the time of filling in the “contact form” (also called form mail) of the site itself, will be processed in compliance with the provisions of Legislative Decree No. 196/2003, Code in personal data protection and EU Regulation no. 2016/679.

The contact form made available on the site has the sole purpose of allowing site visitors to contact, if they so wish, the operator of the site, by sending an email to the operator via the above form. This information concerns the personal data sent by the visitor during the compilation of the contact form.

We inform you of the fact that the data that will voluntarily give through the form will be turned into an email that may be stored in the system of receiving emails used by the owner of the site. These data will not be recorded on other media or devices, nor will other data deriving from its navigation on the site be recorded.

  1. Purpose of the processing of personal data
    The purposes of processing your data are as follows: The data you send will be used for the sole purpose of being able to contact you again through the references you left through the contact form to fulfill any requests contained in the message you sent via the contact form made available on the site.
  2. Nature of data processed and modalities of treatment
    1. The personal data processed will be exclusively the common data strictly necessary and relevant to the purposes referred to in paragraph 1 above.
    2. The processing of the personal data provided is carried out by means of the operations or the set of operations indicated in art. 4 paragraph 1 lett. a) Legislative Decree 196/2003 and of EU Regulation no. 2016/679.
    3. The treatment is carried out directly by the owner’s organization.
  3. Nature of the conference and consequences of refusal
    There is no obligation to give the operator of this site the personal data requested in the contact form. The provision of data via contact form is optional. However, the refusal to provide for the purposes referred to in art. 1 will make it impossible to contact the operator of the website through the contact form made available on the site.

INFORMATION SUBSCRIPTION TO THE NEWSLETTER

1. Object of the Treatment

The processing we intend to carry out relates to your personal data, as defined by the Privacy Code and the GDPR, of which we are or of which we will be aware by virtue of the subscription to the free newsletter service.

2. Purpose of the Treatment

The personal identification data and information collected are used to fulfill the request to send the newsletter and its registration in the mailing list, concerning information messages and commercial and promotional communications relating to the activity carried out by the owner. The treatment will be carried out on the basis of the consent freely given by you. The provision of data is optional. The refusal to provide data makes it impossible to obtain the newsletter service.

3. Processing methods

The collected data will be processed with IT tools and in any case by means of instruments and procedures suitable to guarantee maximum security and confidentiality.

4. Data retention

We inform you that your data will be stored, starting from their receipt / update, for a period of time consistent with the purposes indicated in point 2.

5. Rights of the interested parties

As data subjects, you are entitled to exercise the right of access, rectification, deletion, restriction and opposition to the processing and data portability, ie to receive the data provided in a structured format in common use such data to another data controller without hindrance by the holder to whom it has provided them, in the presence of the legal requirements. For a more detailed examination of the rights mentioned, please refer to the privacy legislation pursuant to art. 7 of the Privacy Code and articles 15, 16, 17, 18, 20 and 21 of the GDPR.

6. Withdrawal of consent

Consent may always be revoked, without prejudice to the processing carried out in the period prior to the revocation. In case of violation, you have the right to lodge a complaint with the competent Supervisory Authority.

For further information on this information or on any privacy topic, or in case you wish to exercise your rights or withdraw your consent, you can contact us at info@villapatriarca.net.

Place of treatment

The data collected by the site are processed at the headquarters of the Data Controller, and at the Web Hosting datacenter. Web hosting is located in the European Economic Area and acts in accordance with European standards.

COOKIE

This website makes use of necessary and monitoring cookies.
You can deny or consent to use all or some cookies.
Cookies are small text files that can be used by websites to make the experience more efficient for the user.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third-party services that appear on our pages. At any time you can change or withdraw your consent from the Cookie Statement on our website.
Find out more about who we are, how you can contact us and how we process personal data in this Privacy Statement.
Your consent applies to the following websites: www.hotelglamour.it

Disabling cookies

Cookies are connected to the browser used and CAN BE DISABLED DIRECTLY FROM THE BROWSER, thus refusing / withdrawing consent to the use of cookies. It should be noted that disabling cookies may prevent the correct use of some features of the site itself. Instructions for disabling cookies can be found on the following web pages:

Mozilla Firefox – Microsoft Internet Explorer – Microsoft Edge – Google Chrome – Opera – Apple Safari

Third-party cookies

This site also acts as an intermediary for third-party cookies, used to provide additional services and features to visitors and to improve the use of the site, such as buttons for social media, or video. This site has no control over the cookies of third parties, entirely managed by third parties. As a consequence, the information on the use of these cookies and their purposes, as well as on how to disable them, are provided directly by the third parties on the pages indicated below.

In particular, this site uses cookies of the following third parties:

  • Google Analytics: : a Google analysis tool that through the use of cookies (performance cookies), collects anonymous browsing data (IP truncated to the last octet) and exclusively aggregates for the purpose of examining the use of the site by users, compiling reports on activities on the site and providing other information, including the number of visitors and pages visited. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google’s behalf. Google will not associate the IP address with any other data held by Google. Data transmitted to Google are stored on Google’s servers in the United States. On the basis of a specific agreement with Google, which is designated as the data controller, the latter undertakes to process the data according to the requests of the Data Controller (see at the end of the information), given through the software settings. Based on these settings, the advertising and data sharing options are disabled.
    Further information on Google Analytics cookies can be found on the Google Analytics Cookie Usage on Websites page.
    The user can selectively disable the collection of data by Google Analytics by installing the appropriate component provided by Google on their browser (opt out).
  • – Pixel di Facebook:
    • third parties, including Facebook, may use cookies, web beacons and other storage technologies in order to collect or receive information from websites or the Internet and use that information to provide measurement services and to define the recipients of the listings.
    • users can disable the collection and use of information for the targeting of adverts at the following link: http://www.youronlinechoices.eu/.
  • Youtube: a platform owned by Google, for sharing videos, which uses cookies to collect information from users and navigation devices. The videos on the site do not convey cookies when the page is accessed, since the “advanced privacy (no cookie)” option has been set, according to which YouTube does not store visitor information unless they voluntarily reproduce the video. For more information on the use of data and their processing by Google, it is recommended to view the information on the page provided by Google, and on the page on how to use the data by Google when using sites or apps of partners.

This site also incorporates plugins and / or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plugins are programmed so as not to set any cookies when accessing the page, to safeguard the privacy of users. Possibly cookies are set, if so provided by social networks, only when the user makes effective and voluntary use of the plugin. Please note that if the user browses being logged into the social network then he has already consented to the use of cookies conveyed through this site at the time of registration to the social network. The collection and use of the information obtained by means of the plugin are governed by the respective privacy policies of the social networks, to which reference is made.

Transfers of data to non-EU countries

This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook and Microsoft (LinkedIn) through social plugins and the Google Analytics service. The transfer is authorized on the basis of specific decisions of the European Union and the Guarantor for the protection of personal data, in particular Decision 1250/2016 (Privacy Shield – here the information page of the Italian Data Protection Authority), for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.

Security measures

This site processes the data of users in a lawful and correct manner, adopting the appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data. Processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the owner, in some cases, may have access to the data categories of employees involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (as suppliers of third-party technical services, postal couriers, hosting providers, IT companies, communication agencies).

User rights

Pursuant to European Regulation 679/2016 (GDPR) and national regulations, the User can, in accordance with the procedures and within the limits established by current legislation, exercise the following rights:

  1. request confirmation of the existence of personal data concerning him / her (right of access);
  2. know its origin;
  3. receive intelligible communication;
  4. have information about the logic, methods and purposes of the processing;
  5. request the updating, correction, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected;
  6. in cases of consent-based processing, receive only the cost of any support, its data provided to the holder, in a structured and readable form by a data processor and in a format commonly used by an electronic device;
  7. the right to lodge a complaint with the Supervisory Authority (Privacy Guarantor – link to the Guarantor page);
  8. as well as, more generally, exercise all the rights that are recognized by the current provisions of the law.

Requests should be addressed to the Data Controller. In the event that the data are processed on the basis of legitimate interests, the rights of data subjects are guaranteed (with the exception of the right to portability that is not provided for by the regulations), in particular the right to oppose the treatment that can be exercised by sending a request to the data controller.

Data controller

The data controller is the administrator of the site, GHH srl, can be contacted via email at info@villapatriarca.net.

Responsible for processing

The data controller is identified as the Data Controller, together with the web hosting appointed co-responsible for data processing, limited to the services provided of which it is supplier, processing the data on behalf of the owner. The web hosting co-responsible for data processing is located in the European Economic Area and acts in accordance with European standards.

Technical Information and Location of Servers Provided:

The servers are located in the Italian territory.

Updates

This privacy policy is updated as of 16/04/2019.