Privacy Policy
The purpose of the privacy policy is to provide maximum transparency regarding the information the site collects and how it uses it.
In compliance with the obligations arising from national (Legislative Decree no. 196 of 30 June 2003, Personal Data Protection Code) and European legislation (European Data Protection Regulation no. 679/2016, GDPR), this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe the rights of users.
1. Data controller
The Data Controller is the company HOTEL STELLA MARIS S.R.L., in the person of its legal representative pro – tempore Giuseppe Crucitti (hereinafter the “Company”), which guarantees compliance with the regulations on the protection of personal data by providing the following information on the processing of data communicated or otherwise collected during navigation on this website.
You may contact the Company at the following telephone number: +39 0966 411005 or at the following e-mail address: info@grandhotelstellamaris.it
2. Data collected in an automated manner
Like all websites, this site also makes use of log files in which information collected automatically during user visits is stored, such as
1. internet domain and IP protocol;
2. type of browser and operating system of the computer used;
3. date, time and length of stay on the site;
4. pages visited and possibly the number of clicks;
5. the visitor’s source and exit web pages:
6. search engine, if any, from which the site was accessed.
This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. The information collected automatically may be used by the Company
1. in case of suspected use in violation of the law in force
2. for statistical purposes
3. to improve site navigation and content.
The legal basis legitimising the processing is the need to make the site’s functions usable following user access. Consent is not required for the provision of such data.
3. Personal data voluntarily communicated
Apart from what is indicated in art. 2) above, your personal data are processed for the following purposes: promotional communications, including personalised ones, market surveys, economic/statistical analyses, prize programmes, customer satisfaction surveys through the sending of advertising posters and printed promotional literature, e-mail, sms, mms and telemarketing.
4. Legal basis and obligatory or optional nature of providing data
Apart from the purposes indicated in Art. 2) above, the legal basis legitimising the processing of your personal data for the purposes indicated in Art. 3) above is your freely given consent.
The provision of personal data is always optional: failure to provide it will make it impossible for the Company to send you newsletters, advertising material or to carry out any other promotional initiative.
5. Data processing methods and storage time
The data collected will be processed by means of electronic or automated, computerised and telematic tools, or by means of manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to ensure the security of the same.
Personal data are kept for the time strictly necessary to manage the purposes for which the data are collected in compliance with current regulations and legal obligations.
6. Persons authorised to process, responsible for and communication of data
The recipients of the data provided are the Data Controller, as well as the latter’s employees and collaborators, in their capacity as persons in charge and/or internal processors and/or system administrators.
The data may also be processed by professionals and/or companies appointed to carry out technical, development, management and administrative-accounting activities.
The data may also be communicated to the following categories of recipients:
1. supervisory bodies, judicial and/or public authorities, as well as to those subjects to whom communication is obligatory by law for the fulfilment of the aforementioned purposes;
2. subjects that provide services for the management of the Company’s computer system and telecommunications networks (including e-mail)
3. firms or companies in the context of assistance and consultancy relationships;
4. subjects that carry out control, audit and certification of the activities carried out by the Company also in the interest of customers;
Furthermore, the data may be transferred to companies belonging to the e-commerce, mail-order, publishing, utilities, tourism, sports, communication, entertainment, financial, insurance, automotive, consumer goods sectors, for the sending of advertising material and other promotional and commercial purposes, by web, mail, e-mail, telephone (sms, mms, telemarketing).
The data collected may be transferred abroad, including outside the European Union, in the forms and ways provided for by current legislation, in all cases guaranteeing an adequate level of protection.
7. Rights of the data subject
At any time, you may exercise, pursuant to Article 7 of Legislative Decree no. 196/2003 and Articles 15 to 22 of EU Regulation no. 2016/679, the right to:
1. request confirmation of the existence or otherwise of your personal data;
2. to obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the storage period
3. obtain the rectification and erasure of data
4. obtain the restriction of processing
5. obtain portability of the data, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance
6. to object to the processing at any time and also in the case of processing for direct marketing purposes
7. object to automated decision-making relating to fixed persons, including profiling
8. to request from the data controller access to and rectification or erasure of personal data concerning him/her or to object to their processing, in addition to the right to data portability
9. withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal;
10. to lodge a complaint with a supervisory authority.
8. Modalities of exercising rights
You may at any time exercise the rights indicated in Section 7) above by sending an email to info@grandhotelstellamaris.it.
