Privacy policy

HOTEL VERDEMILIA
Registered office: Via Emilia, 65 – 40011 Anzola dell’Emilia (BO), Italy
Phone: +39 051 0493496
Email: info@hotelverdemilia.it

(hereinafter referred to as the “Data Controller”), in its capacity as controller of personal data processing, informs you pursuant to Art. 13 of Legislative Decree 30 June 2003 No. 196 (Italian Privacy Code) and Art. 13 of EU Regulation 2016/679 (GDPR) that your data will be processed through the website www.hotelverdemilia.it in the manner and for the purposes described below.

1. Subject of the processing

The subject of the processing includes identifying and contact personal data (including but not limited to: name, surname, address, telephone number, email address, tax data) – hereinafter referred to as “personal data” or “data” – voluntarily provided by the user when:

filling in contact forms on the website
requesting information or quotations
making bookings or availability requests
subscribing to newsletters
participating in events or initiatives promoted by the Data Controller
requesting assistance or sending general communications

2. Purposes of processing

Personal data are processed for the following purposes:

A) Without the explicit consent of the data subject

(Art. 6 b), c) and f) GDPR), for:

management and maintenance of the website
responding to requests for information, quotations and contacts
management of bookings and hotel services
fulfilment of contractual and pre-contractual obligations
compliance with legal, fiscal and administrative obligations
prevention of fraud or misuse of the website
protection and enforcement of the Data Controller’s rights in legal proceedings

B) Only with the explicit consent of the data subject

(Art. 6 a) and Art. 7 GDPR), for:

sending informational and promotional newsletters
commercial communications and direct marketing
invitations to events or initiatives promoted by the Data Controller
satisfaction surveys and opinion polls

3. Processing methods

Personal data are processed using paper, electronic and telematic tools, according to principles strictly related to the purposes described above and in compliance with the security measures required by the GDPR.

Data are stored on servers located within the European Union and/or at providers duly appointed as Data Processors.

Data will be retained:

for 10 years after termination of the contractual relationship for service-related purposes
for 2 years from collection for marketing purposes, unless consent is withdrawn

4. Data security

The Data Controller adopts appropriate technical and organizational measures to ensure the security, integrity and confidentiality of personal data, including:

HTTPS protocols
systems to prevent unauthorized access
backup and monitoring procedures

5. Access to data

Data may be accessible to:

employees and collaborators of the Data Controller authorized to process data
IT service providers, hosting providers and email/newsletter management services
companies providing technical support, tax or legal consultancy
banking institutions and payment service providers

These parties operate as Data Processors or Independent Data Controllers, in accordance with applicable regulations.

6. Communication and disclosure of data

Personal data will not be publicly disclosed.

The Data Controller may communicate data to judicial authorities or public bodies only where required by law.

The website may use anonymous tracking tools for statistical and marketing purposes (e.g. remarketing), without direct identification of the user.

7. Data transfers

Personal data are mainly processed and stored within the European Union.

Any transfers outside the EU will take place in compliance with Articles 44 et seq. of the GDPR.

8. Nature of data provision

Providing data for the purposes indicated in section 2.A is necessary.

Failure to provide such data will make it impossible to provide the requested services.

Providing data for the purposes indicated in section 2.B is optional and may be withdrawn at any time.

9. Rights of the data subject

The data subject may exercise the rights provided for in Articles 15–22 GDPR, including:

access to personal data
rectification or updating of data
erasure (right to be forgotten)
restriction of processing
data portability
objection to processing
lodging a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)

10. How to exercise your rights

Your rights may be exercised at any time by sending:

A registered letter with return receipt to:
HOTEL VERDEMILIA
Via Emilia, 65 – 40011 Anzola dell’Emilia (BO), Italy

or an email to:
info@hotelverdemilia.it

11. Minors

The website is not intended for persons under the age of 18.

The Data Controller does not knowingly collect personal data relating to minors.

12. Data Controller

HOTEL VERDEMILIA
Via Emilia, 65
40011 Anzola dell’Emilia (BO), Italy
Phone: +39 051 0493496
Email: info@hotelverdemilia.it

Company subject to management and coordination pursuant to Art. 2497-bis of the Italian Civil Code by Rolima S.r.l., based in Bologna.

13. Changes to this privacy notice

This privacy notice may be subject to updates and modifications.

Users are invited to consult it periodically.