Privacy policy

Privacy policy, Cookies and Newsletter

 

We are committed to protecting the privacy of our users in accordance with Article 13 of Legislative Decree 196/2003, “Code on the protection of personal data” (Privacy Code) and Article 13(1) of EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data (GDPR).
Under the regulatory framework indicated, this processing is based on the principles of fairness, lawfulness, and transparency, and on the protection of your privacy and your rights.

1. EXENDED PRIVACY POLICY ON THE USE OF COOKIES

What are cookies

Cookies are small text files used to improve website navigation. Thanks to cookies, browsing preferences such as language, display options, etc., can be stored by the browser in use.
Cookies are saved on the device used to facilitate content use and are readable only by the site that generated them.
No personal user data is acquired by the site during simple navigation of web pages. Cookies are not used to transmit personal information.

The [privacy view=”site_name”] website uses the following cookies:

Technical cookies
These cookies are essential to allow you to browse the site and use its features. Strictly necessary technical cookies are used for the site's functionality and navigability, as well as cookies relating to saving preferences for the purpose of optimising their use (e.g., language preferences). Without cookies, some features may not be accessible or may not function correctly.

Performance cookies (third-party)
This website uses Google Analytics, a web analytics service provided by Google Inc., to gather statistical information about site usage with the clear intention of improving its performance and usability.
All information collected by these cookies is aggregated anonymously and is used only to improve the functionality of the site.

Below you can find the privacy information for Google Inc. http://www.google.it/policies/privacy/

Profiling cookies (third-party)
Some cookies may also be used to display special offers consistent with the preferences shown during browsing, with the aim of improving the user experience and purchasing conditions.
The cookies we use for profiling do not collect information that could personally identify the user browsing the site pages.
The website uses profiling cookies related to the Google Adwords “remarketing” feature, allowing personalised ads to be published on Google's content network based on the pages users have visited on the site. Third-party providers, including Google, use cookies to publish ads based on users' previous visits to your website.
The information obtained only allows the browser to be identified and it is not possible to identify the user in any way.
How it works: some pages on the site include remarketing code that allows us to read and configure browser cookies to determine the type of advert the user will see, based on data from their visit to the site.
Remarketing lists created are stored on Google's servers where all cookie IDs associated with interests are kept.
Further information about the remarketing tool can be found at this link: https://support.google.com/adwordspolicy/answer/143465?hl=it&ref_topic=3123080&rd=1

Social Network Cookies (third-party)
The site integrates the main Social Networks through scripts made available by them. These scripts may use Cookies in order to facilitate the sharing of content on social networks or interaction with other registered users.
These types of cookies are managed by the various companies belonging to the individual Social Networks, each of which is responsible for its own cookies.

You can find out more about the published privacy policies via the links below:

Expression of consent
To give your consent to the processing of your data and the use of all cookies, it is sufficient to exit this information notice by closing the page, continue browsing the site, or click on any element of it. To refuse consent or configure cookie management differently, follow the instructions in the following paragraph.

Configure cookie management in the browser
The main browsers allow you to modify settings for managing cookies. It is possible to decide to: allow websites to save cookies, completely deny the saving of cookies, or decide on a case-by-case basis which cookies to accept.

These settings vary depending on the browser used for browsing; below are links to the information pages for the most popular ones:

For more information on the use of cookies by third-party services and further instructions on managing cookies in your browser, please consult the following address: http://youronlinechoices.eu.

Should you decide to set your browser to reject cookies from this site, please remember that some features may not be available and access to certain sections may be limited.

2. COMMERCIAL MAILING SERVICE INFORMATION

The website owner ([privacy view=”site_url”]) may process some of your personal data (such as your email address, etc.) to inform you about website news and promotions. Each user may of course cancel their subscription to these newsletter services at any time by simply clicking on the appropriate link present in every communication sent.

3. TYPE OF DATA PROCESSED

The data you provide via the methods planned on the website, namely: the contact form, the newsletter, the booking engine, and the official email indicated on the website, will be processed for the purpose of carrying out the tourist booking services and for requesting information or availability on the site:
[privacy view=”uk_site_url”]
Apart from what is specified for navigation data, the user is free to provide the personal data requested from time to time, but failure to do so may make it impossible to provide the requested services.

4. DATA PROCESSING METHODS

Content and services are provided only to those who authorise the processing of their personal data; data processing is carried out with the aid of automated tools, including those of third parties, and manual methods, in ways that guarantee maximum security and confidentiality. The rights to use the data collected are not transferred to third parties, nor is it disseminated or transferred abroad.

The treatment may be carried out using computerised or paper methods.
Specific security measures are observed to prevent illicit or incorrect uses and unauthorised access to data. We do, however, inform you that communications via the internet with email may pass through several countries before being delivered to the recipients. [privacy view=”site_name”] cannot accept responsibility for any unauthorised access or loss of personal information beyond its control.

5. DATA USAGE

The data will be communicated exclusively to the parties necessary for the execution of the booking contract or your requests. The data will not be disseminated outside this scope.

6. DATA CONTROLLER AND DATA PROCESSOR

[privacy view=”company_name”], [privacy view=”company_address”], e-mail [privacy view=”referral_email”].

7. DATA SUBJECT RIGHTS

At any time, you may exercise your rights with respect to the data controller, pursuant to Article 7 of Legislative Decree 196/2003 and Article 15 of the GDPR, which for your convenience we reproduce in full at the bottom of the page.

a) Minor (Article 8 GDPR)
The Controller's website and services are not intended for persons under the age of 16, and the Controller does not intentionally collect personal data relating to minors. The processing of a minor's personal data is lawful where the minor is at least 16 years old. Where the minor is under the age of 16, such processing is lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility.
In the event that information about minors is unintentionally recorded, the Data Controller shall erase it in a timely manner.

8. DATA PROTECTION ON OTHER WEBSITES LINKED TO THE SITE

MyGuestCare
The website uses an essential booking system to check availability and allow for self-service quoting of services of interest. Use of the booking system is done by accessing the domain booking.myguestcare.com. This domain is connected to the website's [privacy view=”site_url”] Google Analytics account and uses the same cookies already approved by the user for browsing the website [privacy view=”site_url”].

LEGISLATIVE DECREE No. 196/2003
Art. 7 - Right of access to personal data and other rights
The data subject has the right to obtain confirmation as to whether or not personal data concerning him/her exist, even if not yet recorded, and their communication in an intelligible form.
2. The data subject has the right to obtain an indication:
a) of the origin of personal data;
b) the purposes and methods of processing;
c) of the logic applied in the case of processing carried out with the aid of electronic tools;
d) of the identification data of the data controller, the data processors and the designated representative pursuant to Article 5, paragraph 2;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them as designated representative in the territory of the State, data processors or persons in charge.
3. The data subject has the right to obtain:
a) the updating, rectification or, where relevant, completion of the data;
b) the erasure, anonymisation or blocking of data processed unlawfully, including data which need not be kept for the purposes for which they were collected or subsequently processed;
c) a declaration that the operations referred to in points a) and b) have been brought to the attention of those to whom the data were communicated or disseminated, including their content, except in cases where such fulfilment proves impossible or involves disproportionate efforts in relation to the protected right.
4. The data subject has the right to object, in whole or in part:
a) for legitimate reasons concerning the processing of personal data relating to them, even if relevant to the purpose of collection;
b) the processing of personal data relating to him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.

EU Regulation 2016/679 (GDPR)
Article 15 – the data subject's right of access
1. The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her is being processed and, if so, to obtain access to the personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
d) when possible, the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period;
e) the existence of the data subject's right to request from the controller rectification or erasure of personal data concerning him or her or restriction of processing of personal data concerning him or her or to object to processing of personal data concerning him or her;
f) the right to lodge a complaint with a supervisory authority;
g) where the data are not collected from the data subject, all available information as to their source;
h) the existence of an automated decision-making process, including profiling as referred to in Article 22(1) and (4), and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject
The data subject also has the rights referred to in Articles 16 to 21 of the GDPR (right to rectification, right to erasure/deletion, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

EXERCISE OF RIGHTS
The request may be sent by registered letter, fax or email to [privacy view=”company_address”] – tel. [privacy view=”company_tel”], fax [privacy view=”company_fax”], e-mail: [privacy view=”referral_email”].

[privacy view=”site_name”] reserves the right to modify or amend this privacy policy at any time, particularly in light of new sector regulations coming into force. In such cases, the changes will take effect 15 days after the date of publication on the website.