Information pursuant to Articles 13 and 14 of EU Regulation 679/2016

This page represents the “Privacy Policy” of this website and aims to provide information on how the personal data of users who interact with this website, who benefit from the services rendered by the same to users, are processed, as well as to provide the information imposed by art. 13 and 14 of EU Regulation 2016/679.

This information is provided only for this website and not for other websites that may be consulted by the user through links on the web pages of this site.

Regulation (EU) 2016/679 on the protection of personal data (hereinafter, the “Regulation”) lays down rules relating to the protection of individuals with regard to the processing of personal data, as well as rules relating to the free movement of such data, and protects the fundamental rights and freedoms of natural persons, with particular reference to the right to the protection of personal data.

Article 4(1) of the Regulation provides that “Personal Data” shall mean any information relating to an identified or identifiable natural person (hereinafter, “Data Subject”).

Processing” shall mean any operation or set of operations which is performed upon Personal Data or sets of Personal Data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art. 4(2) of the Regulation).

Pursuant to Articles 12 et seq. of the Regulation, it is also provided that the Data Subject must be made aware of the appropriate information concerning the Processing activities carried out by the Data Controller and the rights of the Data Subjects.

Data Controller

Hotel Piccola Baita

Località Pradel 38018 Molveno – Dolomiti di Brenta – Trentino

Tel. +39 0461586110
Mail: info@hotelpiccolabaita.com

P.IVA IT00445630221

Purposes of the processing and legal bases of the processing
The user’s personal data will be processed for the pursuit of the following purposes and with the legal bases indicated below :

for the conclusion and proper execution of the contract to which the data subject is a party or the execution of pre-contractual measures taken at the request of the same, for the information and/or services/products requested, including subscription to informative newsletters; also in order to respond to requests sent by the data subject (information/products/services/information newsletter subscription) the legal basis for the processing listed is represented by Art. 6 par. 1 lett. b) of EU Regulation 2016/679;
send periodically, through the technologies of distance communication (mail, phone, sms, whatsapp), commercial communications about services, products and activities offered by the owner; the legal basis is represented by the consent as provided by art. 6 par. 1 lett. a) of EU Regulation 2016/679;
carry out retargeting activities and/or use email to intercept social profiles (facebook, instagram) for personalised marketing campaigns; the legal basis is represented by the consent as provided for by art. 6 par. 1 lett. a) of EU Regulation 2016/679;
send emails with the purpose of commercial and promotional information for the sale of our products/services, of the same type as the previous purchases of the interested party, unless the refusal to the treatment by the same, opposable at any time; the legal basis for this type of treatment is represented by the legitimate interest of the Owner as provided by art.6 par. 1 lett. f);
respond to requests sent by the user via email and/or form on the site; the legal basis for the processing listed is represented by Art. 6 par. 1 lett. b) of EU Regulation 2016/679;
to make possible and functional the navigation of the site, as well as to ensure an adequate level of security, integrity and availability; the legal basis for this type of processing is represented by the legitimate interest of the Owner as provided for by art.6 par. 1 lett. f);
analysis of statistical data on aggregate or anonymous data, with the purpose of monitoring the proper functioning of the Site, usability traffic and interest; the legal basis for this type of processing is represented by the legitimate interest of the Owner as provided for by art.6 par. 1 lett. f);
to ascertain, exercise or defend a right in court; the legal basis for this type of processing is represented by the legitimate interest of the Owner as provided for by art.6 par. 1 lett. f);
to fulfil the obligations provided for by the law, by a regulation, by Community legislation or by an order of the Authority to which the Data Controller is subject; the legal basis for this type of processing is the fulfilment of the legal obligation as provided for by art.6 par.1 lett. c);

Type of data
The Data necessary for the pursuit of the above purposes will be collected and processed:

  • identification data
  • contact data
  • data relating to the contractual relationship
  • data relating to the preferences and interests of the person concerned

Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or the domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and are deleted immediately after processing.

The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

Refusal to provide data
Apart from that specified for navigation data, users/visitors are free to provide their personal data. In some cases, the provision of Data is necessary because a refusal to provide such Data could lead to the failure to conclude or the incorrect fulfilment of the contract to which the Data Subject is a party and/or the failure to comply with the legal obligations to which the Data Controller is subject.

The provision of Data for processing that requires consent is optional, and failure to provide it will not make it impossible to take advantage of the products/services offered by the Owner. Even in the event of consent, the interested party shall in any case have the right to subsequently object, in whole or in part, to the processing of his/her personal Data for the purposes set out above, by making a simple request to the Data Controller at the addresses indicated above.

Data source
The Data shall be provided by the data subject or collected from third parties.

Treatment modalities
In compliance with the provisions of art. 5 of the Regulation, the Personal Data subject to Processing will be:

  • processed in a lawful, correct and transparent way towards the Data Subject;
  • collected and recorded for specified, explicit and legitimate purposes, and subsequently processed in terms compatible with those purposes; and
  • adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed
  • accurate and, where necessary, kept up to date
  • processed in a manner ensuring an adequate level of security;
  • kept in a form which permits identification of the data subject for a period of time not exceeding the achievement of the purposes for which they are processed.
  • The data will be processed using manual and/or computerised and telematic tools with organisational and processing logics that are strictly related to the purposes for which they are processed and in any case in such a way as to guarantee the security, integrity and confidentiality of the data in compliance with the organisational, physical and logical measures provided for by the provisions in force.

Communication of data
Personal data may be communicated to authorised data processors, as well as to external data processors appointed by the Data Controller (a complete list of external data processors is available from the Data Controller), responsible for managing the purposes set out above. Subject to your consent, the Data may also be communicated to third party sponsors and/or business partners of the Data Controller who may use them for the purposes set out in point 3) of the article “Purposes of the Processing” above. In the pursuit of the above-mentioned purposes, the data may be communicated to other subjects acting as autonomous data controllers.

Dissemination of data
Personal data will not be disseminated.

Transfer of data abroad
For the purposes indicated above, Personal Data will be processed within the European Economic Area (EEA). If transferred to Third Countries, in the absence of an adequacy decision by the European Commission, the requirements of the applicable legislation on the transfer of Personal Data to Third Countries, such as the Standard Contractual Clauses provided by the European Commission, will still be respected.

Data Retention
In general, Personal Data will be kept for the time strictly necessary to pursue the purposes for which they have been collected and processed, including the retention period required by the applicable legislation and, in any case, for a maximum period of 10 years from the termination of the relationship with the Controller and for a maximum period of 2 years for the purposes for which your consent is required, unless the Controller needs to defend its own rights in court.

Rights of the interested party
Pursuant to European Regulation 679/2016 art. 15 to 21 and the national legislation in force, the Data Subject may, in accordance with the procedures and within the limits provided for by the legislation in force, exercise the following rights:

  • request confirmation of the existence of personal data concerning him/her (right of access);
  • know its origin
  • receive intelligible communication of such data
  • obtain information on the logic, methods and purposes of the processing;
  • request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for
  • the pursuit of the purposes for which they were collected.
  • necessary for the pursuit of the purposes for which they were collected;
  • the right to lodge a complaint with the Supervisory Authority (Privacy Guarantor);
  • as well as, more generally, to exercise all the rights that are recognised by the laws in force.

The rights may be exercised by sending a request which must be addressed without any formality to the Data Controller at the addresses indicated above.