PRIVACY POLICY
[Hotel Name], located at [Hotel Address], with VAT number [Partita IVA/Codice Fiscale], as Data Controller (hereinafter "Controller"), informs you, pursuant to art. 13 of EU Regulation 2016/679 (General Data Protection Regulation - GDPR), regarding the processing of your personal data (hereinafter "data") collected during your stay at our hotel.
1. Type of data processed
We may collect and process the following categories of your personal data:
Personal details: name, surname, nationality, date of birth, tax code (if required by Italian law)Contact details: email address, phone number
Payment details: bank details or credit card information (collected securely by third-party providers)Stay details: arrival and departure dates, room type, dietary preferences, services requested
Loyalty program enrollment data (if applicable)Images: We may use Closed-Circuit Television (CCTV) for security purposes in public areas of the hotel. We may also take photos or videos during events organized by the hotel, upon your consent.
2. Purposes of processing and legal basis
Your personal data is processed for the following purposes:
Booking and stay management: to fulfill contractual obligations towards you, including managing the reservation, registration upon arrival, providing requested services, and invoicing. (Legal basis: execution of the accommodation contract)Tax and accounting purposes: to comply with legal, tax, and accounting obligations. (Legal basis: compliance with a legal obligation)
Security: to ensure the safety of people and property within the hotel. (Legal basis: legitimate interest of the Controller)Direct marketing: with your explicit consent, we may use your data to send you promotional communications about our offers and services. (Legal basis: consent)
Service improvement: to analyze data related to your stay to improve the quality of our services and personalize your experience. (Legal basis: legitimate interest of the Controller)3. Data processing methods
Your personal data is processed lawfully, correctly, and transparently and is stored in a manner that allows identification of data subjects only for the time necessary for the purposes for which the data was collected and subsequently processed. We adopt appropriate technical and organizational security measures to ensure the security of your personal data and to prevent unauthorized access, disclosure, modification, or destruction.
4. Data communication
Your personal data may be communicated to third parties for the purposes indicated in point 2, such as:
Service providers for managing reservations and paymentsPublic authorities, law enforcement, or supervisory bodies, if required by law
Credit institutions for payment management5. Transfer of personal data
Your personal data will not be transferred outside the European Economic Area.
6. Data retention period
Your personal data will be kept for the time necessary to fulfill the purposes for which it was collected and, subsequently, for the period required by applicable data retention regulations.
7. Your rights
As a data subject, you have the right to:
Access your personal dataObtain rectification of your inaccurate personal data
Request the erasure of your personal data (right to be forgotten)Object to the processing of your personal data
Request restriction of processing of your personal dataReceive your personal data in a structured, commonly used and machine-readable format (data portability)
8. Data Controller and Data Protection Officer
The Data Controller is [Hotel Name], located at [Hotel Address], with VAT number [Partita IVA/Codice Fiscale]. You can contact the Data Protection Officer at [Email address] for any questions regarding your privacy rights
