Privacy Policy of the website www.hotelallegria.it
Information notice on the processing of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)
This Privacy Policy describes how personal data of users who visit the website www.hotelallegria.it and interact with the digital services provided through the website are processed.
The Data Controller is:
TRATTORIA “ALL’ALLEGRIA” DI INNOCENTE A. & C. SNC
Registered office: Via Grazzano n. 8 – 33100 Udine (UD), Italy
VAT number: 01271140301
E-mail: info@hotelallegria.it
Telephone: +39 0432 25508
acting as Data Controller pursuant to Regulation (EU) 2016/679.
This Privacy Policy applies exclusively to the website www.hotelallegria.it and does not apply to any external websites accessible through links available on this website, for which users should refer to the relevant privacy policies.
1. Types of personal data processed
Data voluntarily provided by users
Through this website, personal data voluntarily provided by users may be collected, including:
- first and last name;
- e-mail address;
- telephone number;
- information entered in contact forms;
- information necessary to request availability or book the services offered.
Providing such data is optional; however, failure to provide the required information may prevent us from responding to requests or providing the requested services.
Data related to bookings
When users request information or make a reservation, personal data necessary to manage the contractual relationship may be processed, including identification and contact details of the guest.
Browsing data
During normal operation, the IT systems and software procedures used to operate this website may collect certain personal data whose transmission is implicit in the use of Internet communication protocols.
Such information may include, for example:
- IP addresses;
- domain names of devices used by users;
- time of the request;
- parameters related to the operating system and browser used.
These data are processed exclusively for technical purposes, website security and proper service delivery.
2. Purposes and legal basis of processing
Personal data collected through this website are processed for the following purposes.
A) Management of requests and services requested
Personal data are processed to:
- respond to requests for information;
- provide quotations;
- manage availability requests;
- manage bookings and requested services;
- fulfil contractual and pre-contractual obligations.
The legal basis for processing is:
- Article 6(1)(b) GDPR (processing necessary for the performance of a contract or for pre-contractual measures requested by the data subject).
B) Administrative, accounting and tax obligations
Personal data may be processed to comply with legal obligations applicable to the Data Controller.
The legal basis for processing is:
- Article 6(1)(c) GDPR (compliance with a legal obligation).
C) Public security obligations
In the event of a stay at the property, guests’ personal data may be processed in order to comply with the obligations provided for by Article 109 of the Italian Royal Decree no. 773/1931 and applicable regulations concerning the communication of guest information to the competent authorities.
The legal basis for processing is:
- Article 6(1)(c) GDPR (compliance with a legal obligation).
D) Commercial communications to existing customers (soft spam)
If a user has already used the services of Hotel Allegria, the Data Controller may use the contact details provided during the contractual relationship to send communications relating to services, initiatives, events, offers and activities similar to those already purchased.
Such communications may include, for example:
- accommodation offers;
- seasonal initiatives;
- events organised by the property;
- restaurant activities;
- experiences and proposals related to the local area.
This processing is carried out pursuant to Article 130(4) of Italian Legislative Decree 196/2003 (Italian Privacy Code), without prejudice to the right of the data subject to object at any time and free of charge.
Every commercial communication will include a simple method to unsubscribe from future communications.
E) Newsletter and promotional communications based on consent
With the prior, free, specific and voluntary consent of the data subject, contact details may be used for sending:
- newsletters;
- commercial communications;
- updates regarding Hotel Allegria activities;
- offers and promotions.
The legal basis for processing is:
- Article 6(1)(a) GDPR (consent of the data subject).
Consent may be withdrawn at any time.
3. Processing methods
Personal data are processed using both paper and electronic tools, in compliance with the principles of:
- lawfulness;
- fairness;
- transparency;
- data minimisation;
- security.
The Data Controller adopts appropriate technical and organisational measures to protect personal data against loss, unauthorised access, disclosure or improper use.
4. Communication of personal data
Personal data may be communicated exclusively to parties necessary for the purposes described above, including:
- authorised internal personnel;
- IT and technical service providers;
- companies providing services necessary for website operation;
- accounting, tax and legal consultants;
- hotel management and service providers;
- public authorities where required by law.
External parties processing personal data on behalf of the Data Controller are appointed, where required, as Data Processors pursuant to Article 28 GDPR.
Personal data will not be publicly disclosed.
5. Transfer of data outside the European Union
Any transfer of personal data to countries belonging to the European Economic Area or to third countries will take place only in compliance with the conditions set out in Articles 44 et seq. of the GDPR.
6. Data retention period
Personal data will be stored for the period necessary to achieve the purposes for which they were collected.
In particular:
- information requests: for the time necessary to manage the request and in any case no longer than 24 months, unless a contractual relationship is established;
- booking and contractual data: according to applicable administrative, tax and civil law obligations;
- data used for commercial communications: until the user objects or withdraws consent, with periodic checks on the validity of contact details.
7. Cookies
This website may use technical cookies necessary for the correct functioning of the website.
Any analytics, marketing or profiling cookies will only be used after obtaining the user’s consent through the appropriate cookie preference management system, where required by applicable regulations.
For further information, please refer to the Cookie Policy.
8. Nature of data provision
Providing personal data for information requests or bookings is optional but necessary to allow the Data Controller to provide the requested service.
Failure to provide such data may prevent the Data Controller from responding to the user’s requests.
Providing data for marketing and newsletter purposes is always optional.
9. Rights of the data subject
The data subject may exercise the rights provided by Articles 15-22 GDPR at any time, including:
- access to personal data;
- rectification;
- erasure;
- restriction of processing;
- objection to processing;
- data portability;
- withdrawal of previously given consent.
The data subject also has the right to lodge a complaint with the competent Data Protection Authority.
10. Exercise of rights
To exercise their rights, users may contact:
TRATTORIA “ALL’ALLEGRIA” DI INNOCENTE A. & C. SNC
E-mail: info@hotelallegria.it
11. Data Controller
The Data Controller is:
TRATTORIA “ALL’ALLEGRIA” DI INNOCENTE A. & C. SNC
Via Grazzano n. 8
33100 Udine (UD), Italy
E-mail: info@hotelallegria.it
This Privacy Policy may be updated from time to time. Any substantial changes will be published on the website www.hotelallegria.it.