INFORMATION PURSUANT TO THE CODE REGARDING THE PROTECTION OF PERSONAL DATA
This document can be printed using the features present in any updated Web Browser.
Data Controller:
Albergo Gallo snc of Orio Fulvia and Nova Renato
Via Roma, 30 – 25080 Tignale (Brescia)
Personal data are processed with automated tools and for the time strictly necessary to achieve the purposes for which they were collected.
Reference email address: [email protected]
Personal data may be freely provided by users of the site (Customers or Guests), technically referred to below as “Users” or collected automatically when using this application.
All mandatory data required by this Application are clearly identified. If the User refuses to communicate them, it may be impossible for this Application to provide the Service. The omission of Optional Data does not in any way preclude the execution of the service by the user or the occurrence of limitations.
Any use of Cookies and other tracking systems is intended to ensure the normal performance of the Service, in addition to the additional purposes described in this document and in the Cookie Policy.
The User assumes full responsibility for the Personal Data entered, whether personal or belonging to third parties, published or shared with this Application. The user also guarantees that he has the right to communicate or disseminate them, relieving the Owner of the Application from any liability.
Methods of data processing:
The Data Controller uses all the security measures in its possession and in its knowledge aimed at preventing unauthorized access, disclosure, modification or destruction of the User’s personal data.
Consultation and use of the Application involves only the processing of personal data in anonymous form, in ways that do not allow their identification. Sending a message through a special form involves the voluntary communication of your personal data to the Data Controller. The processing can be carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, third parties such as administrative, commercial, marketing or legal staff may have access to the data.
The Data Controller processes the User’s personal data in one of the following conditions:
- the User has given consent for one or more specific purposes or until he expressly opposes such processing;
- the processing is necessary for the execution of the Service, to terminate a specific contract with the User and / or for the execution of pre-contractual measures;
- the processing is necessary to fulfill a legal obligation, for purposes of public interest or for the exercise of public authority vested in the Data Controller;
- the processing is necessary for the pursuit of the legitimate interest of the Data Controller or of third parties legitimately connected to him.
The User has the right to ask the Owner to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a Service.
Place of data processing:
The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the place of processing, the User can refer to the section relating to the details on the processing of Personal Data.
The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed by public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.
The User can check if one of the transfers described above takes place by examining the section of this document relating to the details on the processing of Personal Data or request information from the Data Controller by contacting him at the opening details.
Data retention period:
Personal data are processed and stored only for the time necessary required by the purposes for which they were collected. The Data Controller may keep personal data until such consent is expressly revoked. The Data Controller may also be obliged to keep the data for a longer period in compliance with a legal obligation or by order of a public official.
At the end of the aforementioned period, personal data will be deleted. Upon expiry of the defined term, the rights of:
access;
cancellation;
modification;
Portability;
they can no longer be exercised.
Purpose of data processing:
The User Data is collected to allow the Owner to provide the Service, comply with legal obligations, respond to requests or executive actions, protect their rights and interests (or those of Users or third parties), identify any malicious activities. or fraudulent, as well as for the following purposes: Remarketing and behavioral targeting, Statistics, Interaction with external social networks and platforms, Content and functionality performance tests (A / B testing), Display of content from external platforms, Heat mapping and session recording , Interaction with platforms for online surveys and Contact management and sending messages.
Details on data processing:
Content caching, performance and optimization – Cloudflare INC
Traffic and content optimization and distribution service through servers located internationally.
Cloudflare filters all the traffic of this Application (the communication between Client and Server) also allowing the collection of data for statistical purposes.
Personal data collected and processed: Cookies and other data as specified in Cloudflare’s privacy policy.
Place of processing: United States – Privacy Policy.
Google Tag Manager (Google LLC)
Tags are small portions of code that allow you to analyze traffic and User behavior, to verify the effectiveness of online advertising and social channels, to use remarketing and targeting for audiences or to experiment with the Application and optimize it. .
The service is provided by Google LLC.
Personal data collected and processed: Cookies.
Place of processing: United States – Privacy Policy. Google LLC adheres to the Privacy Shield.
Google Analytics (Google LLC)
Google Analytics is a web analytics service provided by Google LLC that allows you to analyze detailed visitor statistics for a web application. The service is used for internet marketing, to track and examine the use of this Application, create reports and share them with other Google services.
Personal data collected and processed: Cookies.
Place of processing: United States – Privacy Policy. Google LLC adheres to the Privacy Shield.
Google reCAPTCHA
Google reCAPTCHA is a SPAM protection service provided by Google LLC or by Google Ireland Limited.
Personal data collected and processed: Cookies and usage data.
Place of processing: United States and Ireland – Privacy Policy. Google LLC adheres to the Privacy Shield.
Mailing List or Newsletter
By registering for the Newsletter or completing a contact form, the User’s email address is automatically added to a list of contacts. This list can be used to send informative, commercial and promotional emails. These emails refer to this Application, to future applications of the Data Controller or Partner Applications / Services of the Data Controller.
Personal data collected and processed: Name, Surname, Email, Telephone, Personal Message.
Google Maps widget
Map visualization service managed by Google LLC or by Google Ireland Limited.
Personal data collected and processed: Cookies and usage data.
Place of processing: United States and Ireland – Privacy Policy. Google LLC adheres to the Privacy Shield.
Google Fonts
Fonts display service (font styles) managed by Google LLC or by Google Ireland Limited.
Personal data collected and processed: usage data.
Place of processing: United States and Ireland – Privacy Policy. Google LLC adheres to the Privacy Shield.
Font Awesome – Fonticons INC
Fonts visualization service (font styles) managed by Fonticons INC.
Personal data collected and processed: usage data.
Place of processing: United States – Privacy Policy.
Hotjar Poll & Survey widgets (Hotjar Ltd.)
Interaction service with platforms for online surveys.
Personal data collected and processed: cookies, usage data.
Place of processing: Malta – Privacy Policy.
Hotjar Heat Maps & Recordings (Hotjar Ltd.)
Service to identify which areas of a page are subject to the passage of the cursor or mouse click in order to detect which of them attract the most interest.
Personal data collected and processed: cookies, usage data.
Place of processing: Malta – Privacy Policy.
Like button and Facebook social widgets (Facebook, Inc.)
Service that allows interaction with social networks or other external platforms directly from the pages of this Application.
Personal data collected and processed: cookies, usage data.
Place of processing: United States – Privacy Policy.
+1 button and Google+ social widgets (Google Inc.)
Service that allows interaction with social networks or other external platforms directly from the pages of this Application.
Personal data collected and processed: cookies, usage data.
Place of processing: United States – Privacy Policy.
Tweet button and Twitter social widgets (Twitter)
Service that allows interaction with social networks or other external platforms directly from the pages of this Application.
Personal data collected and processed: cookies, usage data.
Place of processing: United States – Privacy Policy.
Google Ads Remarketing (Google Inc.)
Google Ad Manager Audience Extension (Google Inc.)
Remarketing and behavioral targeting service provided by Google LLC or by Google Ireland Limited.
Personal data collected and processed: cookies, usage data.
Place of processing: United States – Privacy Policy.
Facebook Remarketing (Facebook, Inc.)
Remarketing and Behavioral Targeting service provided by Facebook, Inc. which connects the activity of this Application with the Facebook advertising network.
Personal data collected and processed: cookies, usage data.
Place of processing: United States – Privacy Policy.
Google Optimize (Google Inc.)
A / B testing service provided by Google LLC or by Google Ireland Limited.
Personal data collected and processed: cookies, usage data.
Place of processing: United States – Privacy Policy.
Rights of the Data Controller of Personal Data:
The Data Controller has the right to use all or part of the User’s personal data in court if he or she finds an incorrect use of the Application, or of the Services connected to it, by the User himself.
The User is also informed of the fact that the Data Controller may be obliged to disclose the personal data of the same, in whole or in part, by order of the judicial authorities.
In these specific cases, the User’s rights to object to the processing, modification and removal of personal data may be limited in whole or in part.
Rights of the Guest User and User of the Application:
- Withdraw consent at any time: the User can withdraw consent to the processing of their data.
- Oppose the processing of data: the User can oppose the processing of their data when it occurs in a legal context other than that previously granted.
- Access the data: the User has the right to obtain information on the personal data that the Owner of the Application has in his possession. The User has the right to request a copy of the data.
- Change the data: the User can verify the correctness of their personal data and ask the Data Controller to update them.
- Limit the processing of data: the User can request the limitation of the processing of their personal data and the Data Controller can only proceed with their storage, but not processing or use.
- Data removal: the User can request the cancellation of their personal data to the Data Controller.
- Data portability: the User has the right to request and receive their personal data in a readable, structured and commonly used format.
- Make a complaint: the User can file a complaint with the competent supervisory authority and in court.
Exercise of User rights:
The user has the right to send a request to the emai reference address: [email protected]. Requests will be processed by the Data Controller or by his legitimate collaborators as soon as possible and within the deadline of 30 days from receipt of the request.
Changes to the privacy policy:
The Data Controller reserves the right to make changes to this Privacy Policy. The User agrees to be bound by any such future revisions and therefore undertakes to periodically visit this page to be informed of any changes.
If the changes made to this document involve processing of personal data that require express consent, the Data Controller will collect the User’s consent again, if necessary.
This new collection, where possible, will be made by notification or by email to the User’s contact details held by the Data Controller.
