Privacy
1 GENERAL INFORMATION
Users (hereinafter referred to as "data subjects", ex. Art.4, c.1 of the GDPR) are informed of the following general profiles, valid for all areas of processing
all data are processed lawfully, correctly and transparently towards the data subject, in compliance with the general principles set out in Art.5 of the GDPR;
specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access;
the Data Controller is the undersigned company, in the person of its legal representative
Grand Hotel Europa - Hotels Decò srl
info@grandhoteleuropa.com
+39 081 267511
the Data Controller has appointed a Data Protection Manager/Data Protection Officer Tel. +39 081 267511 Email info@grandhoteleuropa.com who can be contacted to exercise all the rights provided for by art.15-21 of the GDPR (right of access, rectification, cancellation, limitation, portability, objection), as well as to revoke previously granted consent; in the event of failure to respond to their requests, data subjects may lodge a complaint with the Data Protection Authority (GDPR - Art.13, paragraph 2, letter d).
2 SPECIFIC INFORMATION
2.1 Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could - through processing and association with data held by third parties - allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment.
to consult this policy periodically.
Purpose and legal basis of processing
(GDPR-Art.13, para.1, lett.c)
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation. The data could also be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site (legitimate interests of the data controller).
Scope of communication
(GDPR-Art.13, paragraph 1, lett.e,f)
The data are processed exclusively by internal staff, duly authorised and trained to process them (GDPR-Art.29) and will not be disclosed to external parties, disseminated or transferred to non-EU countries. Only in the event of an investigation may it be made available to the competent authorities.
Data retention period
(GDPR-Art.13, para.2, lett.a)
The data are normally kept for short periods of time, with the exception of any extensions connected with investigation activities.
Conferment
(GDPR-Article 13(2)(f))
The data are not conferred by the data subject but acquired automatically by the site's technological systems.
2.2 Newsletter subscription
The Grand Hotel Europa - Hotels Decò srl newsletter allows for a constant and wide-ranging study of useful information, events and initiatives, products/services offered by Grand Hotel Europa - Hotels Decò srl, as well as any promotional offers.
Purpose and legal basis of data processing
(GDPR-Art.13, paragraph 1, lett.c)
Only the email address is requested, for the sole purpose of sending the newsletter. Subscription is subject to acceptance of specific, free and informed consent (GDPR-Art.6, para.1, lett.a)
Scope of communication
(GDPR-Art.13, para.1, lett.e,f)
Data are processed exclusively by duly authorised and trained personnel (GDPR-Art.29). The data may be accessed, for maintenance purposes only, by the company providing the technological platform and its appointees. The data will not be disseminated or transferred to non-EU countries.
Data retention period
(GDPR-Art.13, paragraph 2, lett.a)
The data are retained until the eventual "unsubscription", which can be freely carried out at any time through the link contained at the bottom of each message sent.
Conferment
(GDPR-Art. 13, para. 2, lett.f)
Failure to provide the email address and consent will result in the impossibility of obtaining the newsletter service.
2.3 Request assistance
This page allows the interested party to request IT assistance from Grand Hotel Europa - Hotels Decò srl. Identification and contact details are requested in order to provide the service.
Purpose and legal basis of processing
(GDPR-Art.13, para.1, lett.c)
Identification and contact data are requested in order to be able to respond promptly to requests made by the data subject. Sending the request is subject to specific, free and informed consent (GDPR-Art.6, para.1, lett.a) documented by means of a specific check-box (GDPR-Art.7, para.1)
Scope of communication
(GDPR-Art.13, para.1, lett.e,f)
Data are processed exclusively by duly authorised and trained personnel (GDPR-Art.29). The data will not be disclosed or transferred to non-EU countries.
Data retention period
(GDPR-Art.13, para.2, lett.a)
Data shall be retained for a period of time compatible with the purpose of collection.
Conferment
(GDPR-Art. 13, para. 2, letter f)
The conferment of data referring to compulsory fields is necessary in order to obtain a reply, while the optional fields are aimed at providing the staff with further useful elements to interpret the request.
2.4 Become a reseller
This page allows the interested party to apply to become a reseller of Grand Hotel Europa - Hotels Decò srl products/services. Identification and contact details are requested in order to assess the request.
Purpose and legal basis of data processing
(GDPR-Art.13, paragraph 1, lett.c)
Identification and contact data are requested in order to be able to start the procedure for accreditation as a reseller. Sending the request is subject to specific, free and informed consent (GDPR-Art.6, para.1, lett.a) documented by means of a check-box (GDPR-Art.7, para.1).
Scope of communication
(GDPR-Art.13, para.1, lett.e,f)
Data are processed exclusively by duly authorised and trained personnel (GDPR-Art.29). The data will not be disclosed or transferred to non-EU countries.
Data retention period
(GDPR-Art.13, para.2, lett.a)
Data shall be retained for a period of time compatible with the purpose of collection.
Conferment
(GDPR-Art. 13, para. 2, letter f)
The conferment of data referring to the mandatory fields is necessary in order to obtain a reply, while the optional fields are aimed at providing the staff with further useful elements to evaluate the request.
3 FACTS TO BE RECALLED
The page allows the interested party to request a contact from the Grand Hotel Europa - Hotels Decò srl staff. Identification and contact details are requested.
Purpose and legal basis of processing
(GDPR-Art.13, para.1, lett.c)
Identification and contact data are requested in order to be able to respond to contact requests from data subjects. Sending the request is subject to specific, free and informed consent (GDPR-Art.6, para.1, lett.a) documented by means of a specific check-box (GDPR-Art.7, para.1)
Scope of communication
(GDPR-Art.13, para.1, lett.e,f)
Data are processed exclusively by duly authorised and trained personnel (GDPR-Art.29). The data will not be disclosed or transferred to non-EU countries.
Data retention period
(GDPR-Art.13, para.2, lett.a)
Data shall be retained for a period of time compatible with the purpose of collection.
Conferment
(GDPR-Art. 13, para. 2, letter f)
The conferment of data referring to the mandatory fields is necessary in order to obtain a reply, while the optional fields are aimed at providing the staff with further useful elements to facilitate contact.
4 CUSTOMER AREA and WEBMAIL
Access to the CUSTOMERS AREA and WEBMAIL is reserved for customers who have been assigned special access credentials (user and password) for the administration of Internet services and access via browser to their e-mail accounts.
5 DATA PROVIDED VOLUNTARILY BY THE USER
The optional, explicit and voluntary sending of electronic and/or ordinary mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address, which is necessary to reply to requests, as well as any other personal data included in the message. Should the sender send his/her curriculum vitae to submit a professional application, he/she remains solely responsible for the relevance and accuracy of the data sent. Please note that any CVs without authorisation to process data will be immediately deleted.
6 POLICY UPDATE
Please note that this policy may be subject to periodic revision, also in relation to the reference legislation and jurisprudence. In the event of significant variations, appropriate notice will be given on the home page of the site for an appropriate period of time. In any case, the interested party is invited to periodically consult this policy.