Privacy Policy

DEFINITIONS AND LEGAL REFERENCES

Data Controller: The Data Controller is IMM. ALEMAGNA di Calzolari Deanna & C., with registered office in via Porto Palos, n. 27, 47922 Viserbella (RN), Italy, VAT No. 01713350401.

GDPR: General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

Personal Data (or Data): Personal data constitutes any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable. By way of example but not limited to: name, surname, address, telephone, e-mail, IP address.

User: The individual using this Website who, unless otherwise specified, coincides with the Data Subject (the person to whom the Data refers).

Data Processor (or Processor): The natural person, legal entity, public administration, and any other body that processes personal data on behalf of the Controller, as set out in this privacy policy.

Website or Site: the site www.hotelatlanticrimini.it.

Service or Services: the Services provided by this Website.

European Union: Unless otherwise specified, any reference to the European Union contained in this document is intended to extend to all current member states of the European Union and the European Economic Area.

Cookie: Small piece of data stored within the User’s device and collected during navigation.

IMM. ALEMAGNA di Calzolari Deanna & C., with registered office in via Porto Palos, n. 27, 47922 Viserbella (RN), VAT No. 01713350401, as Data Controller, informs Users pursuant to articles 13 and 14 of EU Regulation no. 2016/679 regarding the methods of processing their Personal Data related to browsing activity on this Website.

1. Object of Processing

The Controller processes common Personal Data (Art. 6 GDPR) communicated by the User when filling out forms (contact or booking forms) or newsletter subscription forms, online requests for clarification, support requests, or during simple navigation on the Controller’s Site.

Full details on each type of data collected are provided in the dedicated sections of this privacy policy.

Special categories of personal data (Art. 9 GDPR), relating, for example, to motor disabilities, food intolerances (therefore health-related) and communicated by the User during booking (the “notes” field) or via email contact, are considered spontaneously provided by the User and will not be subject to a request for further consent. Such data will not be disseminated in any way but will be processed by the Controller for the sole purpose of ensuring a suitable service for the User.

2. Purposes of Processing and Legal Basis

Your common personal data are processed:

A) without the User’s express consent (Art. 6 GDPR), for the following Service purposes:

 
• To allow the User to benefit from the Services provided by the Controller (Art. 6 let. b);
 
• To process a contact request (Art. 6 let. b);
 
• To comply with obligations provided for by law, a regulation, community legislation, or an order from the Authority (Art. 6 let. c);
 
• To exercise the Controller’s rights, for example, the management of litigation arising during the Data retention period (Art. 6 let. f).

B) only with the User’s specific and separate consent (Art. 6 let. a, GDPR), for the following purposes:

 
• To send emails and newsletters, commercial communications and/or advertising material on products or services offered by the Controller;
 
• To manage commercial profiling activities in order to offer a service more in line with the User’s interests;

In the course of activities carried out by the Controller, the following Personal Data are processed for the following purposes and using the following services:

 
• Contact management and sending messages

This type of Service allows the management of a database of email contacts, telephone contacts, or contacts of any other type used to communicate with the User.

These services could also allow the collection of data regarding the date and time messages were viewed by the User, as well as the User’s interaction with them, such as information on clicks on links inserted in messages.

 
• Payment management for bookings

The User’s payment Data provided at the time of booking through the appropriate section are subject to strict precautions in order to protect their integrity. In particular, credit/debit card data (number, expiry, CVC, etc.) provided as a guarantee for the payment of the reservation are not visible to the Controller as they are subjected to encryption systems. Such data may be used by the Controller only in accordance with the Terms of Service accepted by the User at the time of booking.

 
• Interaction with social networks and external platforms

This type of service allows for interaction with social networks, or other external platforms, directly from the pages of this Website. Interactions and information acquired by this Website are in any case subject to the User’s privacy settings for each social network. This type of service might still collect traffic data for the pages where the service is installed, even when Users do not use it. It is recommended to log out of the respective services to ensure that the data processed on this Website are not linked back to the User’s profile.

 
• Facebook “Like” button and social widgets (Facebook, Inc.)

The Facebook “Like” button and social widgets are services for interacting with the Facebook social network, provided by Facebook, Inc.

 
• Analytics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.

 
• Google Analytics (Google LLC)

Google Analytics is a web analysis service provided by Google LLC or Google Ireland Limited, depending on the location from which this Website is used (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.

Google may use Personal Data to contextualize and personalize the advertisements of its own advertising network.

3. Consequences of failure to provide Data

If the User refuses to communicate the data referred to in Art. 2, A), it will be impossible for the Controller to provide the services offered. In the event that the User refuses to provide consent for the purposes referred to in Art. 2, B), their right to use the services offered by the Controller will not be prejudiced, but they will not be able to use the services indicated in point B).

The eventual use of Cookies – or other tracking tools – by this Website or by third-party owners of services used by this Website, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy (Go to Cookie Policy).

The User assumes responsibility for third-party Personal Data obtained, published, or shared through this Website and guarantees they have the right to communicate or disseminate them, freeing the Controller from any liability towards third parties.

4. Processing Methods and Access to Data

The Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Processing is carried out using computer and/or telematic tools, with organizational methods and logic strictly related to the indicated purposes. In addition to the Controller, in some cases, other subjects involved in the organization of this Website (administrative, commercial, marketing, legal staff, system administrators), internal or external collaborators of the Controller (appointed as Data Processors), or external professionals (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) duly appointed, if necessary, as Data Processors by the Controller, may have access to the Data. The updated list of Processors can always be requested from the Data Controller by emailing ht@hotelatlanticrimini.it

5. Retention Period

Data are processed and stored for the time required by the purposes for which they were collected; therefore:

 
• Personal Data collected for purposes related to the performance of a contract (Art. 6, let. b, GDPR) between the Controller and the User will be retained until the performance of such contract is completed and to fulfill legal obligations that require longer retention (Art. 2220 c.c.);
 
• Personal Data collected for purposes attributable to the Controller’s legitimate interest (Art. 6, let. f, GDPR) will be retained until such interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Controller by contacting the same using the methods in Art. 10 below.
 
• When processing is based on the User’s consent (Art. 6, let. a, GDPR), the Controller may store Personal Data longer until such consent is revoked (opt-out or via specific request using the methods in Art. 10 below). Furthermore, the Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an Authority.

At the end of each retention period, Personal Data will be deleted. Therefore, upon expiration of this term, the right of access, deletion, rectification, and the right to Data portability can no longer be exercised.

6. Data Security

The Controller has adopted a wide variety of security measures to protect User Data against the risk of loss, abuse, or alteration. In particular: it has adopted adequate technical-organizational measures pursuant to Art. 32 GDPR, and uses secure data transmission protocols known as SSL or HTTPS.

7. Transfer of data outside the European Union

The Controller generally does not transfer Personal Data outside the European Union. The servers used for managing and storing Personal Data are located in Europe. However, some activities carried out (e.g., periodic backup) may be managed by companies established outside the EU (point 2 of the table below), which are still able to offer guarantees in line with Privacy Shield agreements.

For sending newsletters, the Controller will ensure that User Data (name, surname, and email address) are entrusted to partners who are able to respect a high level of protection of Users’ Personal Data. Such subjects will be duly appointed as Data Processors; the updated list of Processors appointed by the Controller is available upon request at any time by writing to ht@hotelatlanticrimini.it

8. Analysis of User Data and predictions (“profiling”)

The Controller may process usage data collected through this Website to create or update user profiles. This type of processing allows the Controller to evaluate User choices, preferences, and behavior.

User profiles can also be created thanks to automated tools, such as algorithms, which can also be offered by third parties. To obtain further information on profiling activity, the User can contact the Controller at the email address indicated in Art. 4 of this Privacy Policy.

To discover which profiling processes are carried out by the Controller, the User may request it through the contact methods in Art. 10 below, also referring to the section of this document relating to User rights.

Users are however never subjected to automated decisions adopted on the basis of profiling activities as listed in this article; therefore, the collection of consent will not be necessary, as established by Art. 22 GDPR.

9. User Rights

Users may exercise certain rights with reference to Data processed by the Controller.

In particular, the User has the right to:

 
• Withdraw consent at any time. The User can withdraw previously expressed consent to the processing of their Personal Data.
 
• Object to processing of their Data. The User can object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right to object are indicated in the section below.
 
• Access their Data. The User has the right to obtain information on the Data processed by the Controller, on certain aspects of the processing, and to receive a copy of the processed Data.
 
• Verify and seek rectification. The User can verify the correctness of their Data and request its update or correction.
 
• Obtain restriction of processing. When certain conditions are met, the User can request the restriction of the processing of their Data. In this case, the Controller will not process the Data for any other purpose than their storage.
 
• Obtain deletion or removal of their Personal Data. When certain conditions are met, the User can request the deletion of their Data by the Controller.
 
• Receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to obtain its transfer without obstacles to another controller. This provision is applicable when Data are processed with automated tools and the processing is based on the User’s consent, on a contract to which the User is a party, or on contractual measures connected to it.
 
• Lodge a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority or take legal action in case of non-compliance with their rights by the Controller.

10. Methods for exercising rights

Users can exercise their rights at any time by sending a request according to the following contact methods:

 
• By registered mail with return receipt to IMM. ALEMAGNA di Calzolari Deanna & C., via Porto Palos, n. 27, 47922 Viserbella (RN), Italy;
 
• By e-mail to ht@hotelatlanticrimini.it

11. Minors

This Site and the Controller’s Services are not intended for minors under 18 years of age, and the Controller does not intentionally collect personal information referring to minors. In the event that information on minors is unintentionally recorded, the Controller will delete it in a timely manner at the request of users.

12. Changes to this privacy policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by informing Users on this page and, if possible, on this Website as well as, if technically and legally feasible, by sending a notification to Users through one of the contact details in the Controller’s possession. It is therefore requested to consult this page regularly, referring to the last modification date indicated at the bottom. 

Privacy Policy updated as of 11/28/2022