GBHotel S.r.l., (hereinafter also “Hotel” or “Company”) in its capacity as Data Controller, wishes to provide the following specific information regarding how this website is managed with reference to the processing of personal data of the users who consult it. This is also a notice provided pursuant to art. 13 of EU Regulation 2016/679 “GDPR” (hereinafter the “Privacy Legislation”), in consideration of the “Guidelines 5/2020 on consent under Regulation (EU) 2016/679”.
DATA CONTROLLER
GBHotel S.r.l., VAT No. 04425240985, with registered office in Polpenazze (BS), via Giovanni Battista Brunori no. 4, is the Controller of the data connected with the use of the website; email: info@bellerive.it.
TYPES OF DATA PROCESSED
The types of data and information collected and processed by the Company are:
BROWSING DATA
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected in order to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the website, as well as other parameters relating to the user’s operating system and IT environment.
This data is used solely to obtain anonymous statistical information on the use of the Site and to check that it is functioning correctly, and is kept only for the period strictly necessary for the statistical analysis.
The data could be used to ascertain liability in the event of hypothetical computer crimes against the Site.
DATA PROVIDED VOLUNTARILY BY THE USER
The optional, explicit and voluntary submission of personal data by the user, necessary for the provision of the requested service.
If you decide to send a message to the designated email addresses, please note that this action constitutes the unequivocal conduct by which you consent to the processing of your data, and in particular of your email address as well as any other personal data contained in the text message, for the time necessary to handle your request.
If you decide to call the telephone numbers, please note that this action constitutes the unequivocal conduct by which you consent to the processing of your data, and in particular of your telephone number, as well as any other personal data that you communicate verbally, for the time necessary to handle your request.
If you decide to submit a job application, please note that your data will be processed exclusively for personnel selection purposes; the website provides a specific privacy notice for this purpose, to which reference is made.
If you decide to book a stay or another experience at our facility, please note that your data will be processed exclusively for the management of the booking; the website provides a specific privacy notice for this purpose, to which reference is made.
PURPOSES OF PROCESSING
The personal data will be processed for the following purposes:
LEGAL BASIS FOR PROCESSING
The Controller processes your data:
In relation to purpose 4), we inform you that the Controller, in the context of balancing its own interests and those of the data subjects – in view of Recital 49 of the GDPR – has considered that the interests or rights and freedoms of the data subjects did not prevail.
NATURE OF THE PROVISION OF DATA
Apart from what is specified for browsing data, the user is free to provide their own personal data. However, failure to provide it may make it impossible to obtain what was requested.
METHODS OF PROCESSING
Personal data is processed, including with the aid of automated tools, for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access. The Company uses hosting providers that guarantee the highest security standards, having regard to the type of personal data processed.
TRANSFERS OUTSIDE THE EEA
The Data is processed at the Controller’s operational headquarters and in any other place where the parties involved in the processing are located. The data is not transferred to countries outside the EEA.
PERSONS AUTHORIZED TO PROCESS THE DATA
The data collected may be transferred or communicated to other companies for activities strictly connected and instrumental to the operation of the service, such as the management of the IT system. The personal data provided by users who submit requests for informational material (brochures, informational material, etc.) is used solely for the purpose of carrying out the requested service or performance, and is communicated to third parties only where this is necessary for that purpose (companies that provide enveloping, labelling, and shipping services). Outside of these cases, personal data will not be communicated to, nor granted to, anyone, except by contractual provision or authorization of the data subjects. In this sense, personal data could be transmitted to third parties, but only and exclusively in the event that: a) there is explicit consent to share the data with third parties; b) there is a need to share the information with third parties in order to provide the requested service; c) this is necessary to comply with requests from the Judicial Authority or Public Security. No data deriving from the web service is disseminated.
RIGHTS OF DATA SUBJECTS
The user has the right to exercise at any time the rights set out in articles 12 et seq. of EU Regulation 2016/679, namely:
To exercise the rights indicated above, make a report, or receive information on how personal data is processed, you can contact the Data Controller at the addresses indicated in this Privacy Policy. Please note that you also have the right to lodge a complaint with the supervisory authority (the Italian Data Protection Authority – Garante Privacy).
LINKS TO OTHER WEBSITES
This website may contain links or references providing access to other sites (e.g. the “I Prefer Hotel Rewards” service). We inform you that the Data Controller does not control the cookies or other tracking technologies of such websites, to which this Policy does not apply.
FURTHER INFORMATION ON PROCESSING
Information not contained in this policy
Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact details.
Changes to this Privacy Policy
The Controller periodically reviews its privacy and security policy and, where appropriate, revises it in relation to legislative, organizational, or technologically driven changes. In the event of a change to the policies, the new version will be published on this page of the website.
Should the changes affect processing for which the legal basis is consent, the Controller will collect the User’s consent, if necessary.
