Information pursuant to Article 13 of the EU Regulation 2016/679 “GDPR”
Dear Guest, (Paola, client doesn’t seem right to me in the context of hotels)
Please carefully read our Privacy Policy. The Privacy Policy is applied any time you access the site www.hotelssangiorgiosavoia.com (“Site”) and decide to browse it and make use of its services.
The goal of this document is to provide you with the information due to users of the Site as regards the handling of personal data (“Data”) provided by you; in particular regarding the purposes and methods of processing your personal data, as well as the scope of communication and dissemination of the same, the nature of the data in our possession, the retention period and the rights reserved to you.
This information is not to be considered valid for other websites which may be consulted via links on the owner’s website. The owner is not to be considered in any way responsible for third party websites.
Data Handler
The Data Handler of the data collected through this Site is Hotel San Giorgio Savoia di Giorgetti Maria Cristina and Paola & C. Snc, VAT number 01041860402, with headquarters in Viale Pinzon n. 190/192 – 47814 Bellaria – Igea Marina (RN), (hereinafter referred to as « The Controller »): the Handler independently decides on the final methods of data processing, as well as on the security procedures to guarantee confidentiality, integrity and availability.
Data Handling
The Data Handler processes personal, identifying and non-sensitive data (in particular, name, surname, e-mail, telephone number – hereinafter, « personal data » or also “data ») communicated by you when information is requested and / or in order to take advantage of the newsletter / marketing services offered by the Owner. The following my also be processed; browsing data, personal data whose transmission is implicit in the use of internet communication protocols (such as IP addresses, browser type, operating system, domain name and website addresses from which it was made, access or exit, information on the pages visited by users within the Site, access time, stay on a single page, analysis of internal path and other parameters relating to the operating system and the user’s IT environment) acquired from the IT systems and software procedures used to operate the owner’s website. In this regard, the Website uses cookies that collect your personal data. We invite you to read the Cookie Policy which describes the cookies used by the Site and the purposes of their use.
Method and storage of your data
The processing of your personal data is carried out by means of the operations indicated in art. 4 no. 2) of Regulation (EU) 2016/679 and in compliance with the principles of lawfulness, correctness and transparency and the other principles indicated in art. 5 of Regulation (EU) 2016/679. The Data Handler will process your data for service or pre-contractual purposes for the time necessary to fulfill processing purposes. The data for the purposes of newsletters / marketing, where your explicit consent has been released, will be kept for the time necessary to pursue the purposes of the processing or less if consent is revoked before the processing is finished.
Purpose of data handling and legal basis of such
Personal data voluntarily provided will be processed for the following purposes:
1. for browsing on this Website;
1.1) – for the use of the services offered and to receive answers to your requests;
1.2) – for the possible compilation of data collection fields in dedicated areas;
1.3) – to fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority;
1.4) – to prevent or discover fraudulent activities or abuses harmful to the website;
1.5) – to exercise the rights of the owner, for example the right to defense in court.
The legal basis of data processing for the purposes referred to in point 1 is: data processing is necessary to allow correct navigation on the Website and for the execution of pre-contractual measures adopted at the request of the interested party (e.g. responding to your requests by filling in specific forms), or to fulfill a legal obligation to which the Data Handler is subject and, finally, for the pursuit of the legitimate interest of the Data Handler (e.g. exercising the right of defense in court or preventing fraudulent activities).
2. subject to your explicit consent – for any subscription to the newsletter service, to receive promotional and business communication e-mails and / or for other direct marketing activities received by automated means (e-mail, traditional mail or other means of communication) promotional, commercial and / or advertising information on the proposed services, as well as business initiatives, which will be organized by the Owner.
The legal basis of data processing for the purposes referred to in point 2 is: the processing of data is lawful only when the interested party has expressed his/her consent.
Optional or mandatory nature of providing data; need for consent and consequences of refusing consent.
Except for data required for navigation, you are free to provide your personal data. The provision of personal data for purposes referred to in point 1 is optional but necessary to take advantage of the services requested from time to time of the Data Handler and to use the specific features of the Site. Failure to provide data may make it impossible to obtain what is being requested or use the services of the Data Handler. Consent to the processing of data for purposes 2 – i.e. for promotional, business communication and / or marketing purposes is – in general – always optional. If consent is lacking, the Data Handler will still be able to provide the services referred to in point 1 and you will still be able to optimize other requests and use services rendered by the Data Handler, as referenced in point 1 (e.g. send contact request, use other services, etc.). Therefore at any time you can decide not to provide any data or to revoke subsequently the possibility of processing data already provided, but the revocation will not affect the lawfulness of data handling based on consent before the revocation.
Parties or categories of parties to whom your data may be communicated
Your data will be communicated to third parties only with your express consent, except in cases where communication is mandatory by law or is necessary for purposes required by law for the pursuit of which the consent of the interested party is not required; in such cases, the data may be made available to third parties who will treat the data independently and only for the aforementioned purposes (for example, in the case of a request made by the police or the judiciary, or other competent bodies, or to perform obligations deriving from the contract executed with you). Your data will not be disclosed in any way.
Parties who can process your personal data
To carry out certain activities, the Data Handler may use third parties for processing your personal data. Third parties that carry out these operations have been adequately selected and have the necessary experience, capacity, and reliability and offer an adequate guarantee of full compliance with the current provisions on processing, including data security.
These third parties will be made « Data Processors » and will carry out their activities according to the instructions given by the Owner and under his/her direct control. The updated list of Data Processors can be requested from the Data Handler. Your data will also be processed by persons authorized by the Data Handler to carry out activities strictly related to the provision of the services or other purposes referred to above, who are properly trained and commit themselves to confidentiality (e.g. the employees of the Data Handler).
Security measures
The Data Handler adopts adequate security measures in order to minimize the risks of destruction or loss – even accidental – of data, unauthorized access or data processing that is not permitted or does not comply with the collection purposes indicated in this Privacy Policy.
The rights of interested parties
Regulation (EU) 2016/679 « GDPR » recognizes the possibility of the interested party exercising the following rights:
- Right of access to data collected and processed (art.15)
- Right to obtain rectification of data (art.16)
- Right to obtain deletion of data and right to be forgotten (art. 17)
- Right to obtain limitation of data handling (art.18)
- Right to data portability to another Data Handler (art.20)
- Right to object to data processing (art.21)
- Right not to be subjected to automated processing (art.22)
- Right to lodge a complaint with the Supervisory Authority (art. 77);
- Right to lodge a judicial appeal against the supervisory authority (art. 78) and against the Data Handler and / or the handler (art. 79);
- Right to withdraw consent at any time (art.7 paragraph 3), without prejudice to the lawfulness of the data handling based on the consent given before the revocation.
In case of violation of the personal data of the interested party, and per the provisions of art. 34 GDPR, the Data Handler will notify the interested party of the violation.
Contacts for exercising the rights of the interested party
You can exercise your rights at any time by sending a registered letter with return receipt to Hotel San Giorgio Savoia, Viale Pinzon n. 190/192 – 47814 Bellaria – Igea Marina (RN) or an e-mail to the address: info@hotelsangiorgiosavoia.com
This Site, and the Owner’s Services, are not intended for minors under 16 years of age and the Owner does not intentionally collect personal information relating to minors. In the event that information on minors were unintentionally registered, the Data Handler will delete them in a timely manner, at the request of the users.
Changes and updates to this Privacy Policy
The Data Handler may modify or simply update, in whole or in part, the site’s Privacy Policy, including when resulting from changes in laws or regulations that govern this matter and protect your rights. Changes and updates to the Privacy Policy will be binding as soon as they are adopted and published on the website.
