Privacy Policy
Data Controller
Business Name: Gruppo Stay s.r.l.
Address: Cortina d’Ampezzo (BL), Largo Delle Poste 37, CAP 32043
VAT Number: 01164350256
Contact Person: PAOLO SANTESSO
Email Address: info@hotelauronzo.com
Website: https://hotelauronzo.com
Definitions and Legal References
Personal Data (or Data)
Personal Data are pieces of information that – directly or indirectly – also in connection with any other information, including a personal identification number, make a natural person identified or identifiable.
Usage Data
This is the information collected automatically through this website (also from third-party applications integrated into this website), including: the IP addresses or domain names of the computers used by the User who connects with this website, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the Country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (for example, the time spent on each page) and the details relating to the itinerary followed within the application, with particular reference to the sequence of the pages consulted, and the parameters relating to the operating system and the IT environment of the User.
User
The individual who uses this website who, unless otherwise specified, coincides with the Data Subject.
Interested Party
The natural person to whom the Personal Data refers.
Data Processor (or Manager)
The natural person, legal person, public administration, and any other body that processes personal data on behalf of the Data Controller, as set out in this privacy policy.
Data Controller (or Owner)
The natural or legal person, public authority, service, or other body which, individually or together with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures relating to the operation and use of this website. The Data Controller, unless otherwise specified, is the owner of this website.
This Website (or This Application)
The hardware or software tool through which the Personal Data of Users are collected and processed.
Service
The Service provided by this website as defined in the relative terms (if any) on this site/application.
European Union (or EU)
Unless otherwise specified, any reference to the European Union contained in this document is intended to be extended to all current member states of the European Union and the European Economic Area.
Legal References
This privacy statement is drawn up on the basis of multiple legislative systems, including articles 13 and 14 of Regulation (EU) 2016/679. Unless otherwise specified, this privacy policy applies exclusively to this website.
Type of Data Collected
Among the Personal Data collected by this website, either independently or through third parties, there are: name, surname, email, telephone number, Data communicated during the use of the service, first name, last name, date of birth, various types of data, city, Tracking Tool, Usage data, unique identifiers of devices for advertising (Google Advertiser ID or IDFA identifier, for example).
Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data is collected.
Method and Place of Processing
Processing Methods
The owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data. The processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.
Legal Basis of the Processing
The Data Controller processes Personal Data relating to the User if one of the following conditions exists:
- The User has given consent for one or more specific purposes.
- The processing is necessary for the execution of a contract with the User and/or for pre-contractual measures.
- The processing is necessary to fulfill a legal obligation to which the Data Controller is subject.
- The processing is necessary for the execution of a task of public interest or for the exercise of public authority vested in the Data Controller.
- The processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.
User Rights
Users can exercise certain rights with reference to the Data processed by the Data Controller. In particular, the User has the right to:
- Withdraw consent at any time.
- Oppose the processing of their data.
- Access their data and obtain a copy.
- Verify and request rectification.
- Obtain the limitation of the processing.
- Request the deletion of their Personal Data.
- Receive their data or have it transferred to another owner.
- Propose a complaint to the competent authority.