INFORMATION ON THE PROCESSING OF PERSONAL DATA
of the users visiting the websites of Hotel Ristorante Aurora
Pursuant to Article 13 of EU Regulation 2016/679
This page contains a description of the policies for managing the website in regard to processing the personal data of the users who visit the site and their privacy. This information is provided pursuant to article 13 of GDPR 679/2016 – Laws concerning the Protection of Personal Data and the individuals who interact with the web services of Hotel Ristorante Aurora, which is accessible by telematics means through the following web address:
https://www.hotelauroralezzeno.com,
which corresponds to the home page of the official website of Hotel Ristorante Aurora on Frazione Sossana, 2 - 22025 Lezzeno (CO).
The information provided does not concern other online websites, pages or services that can be accessed via hyperlinks on the above website but relate to resources outside the Hotel Ristorante Aurora Srl domain.
DATA CONTROLLER
Following access to this website, data pertaining to persons that are identified or identifiable may be processed. The “Data Controller” of the personal data collected following a visit to our website or any other data used for providing our services is Hotel Ristorante Aurora Srl, Frazione Sossana, 2 - 22025 Lezzeno (CO) who can be contacted at info@hotelauroralezzeno.com
PLACE WHERE DATA IS PROCESSED
Data processing pertaining to the web services of this website [(physically hosted by BEDZZLE ("https://www.bedzzle.com/it ")] is carried out at the headquarters and said data is processed only by the technical personnel in charge of processing on instructions from the controller, or by eventual persons in charge of processing who are entrusted to process occasional maintenance operations.
The personal data obtained from the users who submit hotel booking requests or through informative material (informative notes, newsletters, registration, etc) is used only to carry out the services or assistance requested and is not transmitted to third parties, except in the following possible cases:
• Business partners of Hotel Ristorante Aurora Srl to whom controller transmits the data exclusively in order to process on-line reservations.
• Persons, companies or professional offices who lend assistance and consulting services to Hotel Ristorante Aurora Srl concerning accounting, administrative, legal, financial and tax matters;
• Subjects who are authorized to have access to the data by law or through requests by the authorities;
The credit card data used for booking will be automatically unavailable at the end of the stay.
CATEGORIES OF PROCESSED DATA – LEGAL BASIS – NATURE OF DATA PROVISION
NAVIGATIONAL DATA
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. Such information is not collected in order to relate it to identified data subjects, however it might allow user identification per se after being processed and matched with data held by third parties.
This data category includes IP addresses and/or the domain names of the computers used by any user connecting with this web site, the URI/URL (Uniform Resource Identifier /Locator) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user's operating system and computer environment. The data necessary for the use of web services are also processed in order to:
The data will be used to ascertain responsibility in the event of hypothetical IT crimes against the site.
Legal Basis: The processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject who require the protection of personal data do not prevail, taking into account the reasonable expectations of the interested party and the activities strictly necessary for the functioning of the site and navigation itself. (Art. 6, par. 1, lett. f) and Recital 47 of the GDPR).
Nature of Data Provision: The provision of data is necessary for browsing the website.
DATA CARRIED OUT THROUGH SOCIAL MEDIA PLATFORMS
Regarding the processing of personal data carried out by the managers of the Social Media platforms used by the Data Controller, please refer to the information notice provided by them through their respective privacy policies. The Data Controller processes the personal data provided by users through the pages of the dedicated Social Media platforms, to manage interactions with users (comments, public posts, etc.) and in compliance with current legislation.
DATA VOLUNTARILY PROVIDED BY THE USER
Sending messages, on the basis of the user’s free, voluntary, explicit choice, to this website contact addresses, or sending private messages to the data controller social media pages and profiles (where this option is available), and filling in and sending the forms made available on the data controller websites entail the acquisition of the sender’s contact information – which is necessary to provide a reply – as well as of any and all the personal data communicated in that manner.
Data will be retained only for registration request to send the newsletters or special offers and will not be disclosed to anyone.
The personal information regarding the individual who visited the website is not collected or used. The visitors remain anonymous. The only exception to this rule concerns the information for personal identification needed to fulfill the booking contractual obligations on behalf of the user.
In the event of reservations made through the website, the user must provide his name, address, telephone number and information regarding the payment processings and credit card used. Hotel Ristorante Aurora Srl will use said information only to process reservations and to send specific information, which is relevant to the confirmation of said, such as a receipt, the booking code and the conditions.
In any event, the website administrator guarantees the use of scrupulous procedures in order to protect the navigational data and the use of particular
precautions to protect the credit card data provided for on-line reservations.
Legal Basis: The processing is necessary for the execution of a contract of which the interested party is a party (Recital 44 - art. 6 §. 1 lett. b of the GDPR)
Nature of Data Provision: The provision of personal data is mandatory, as it is essential to be able to execute legal obligations.
You can use the Hotel Ristorante Aurora contact form to send candidates' CVs in digital format. Providing spontaneous and voluntary of the Curriculum Vitae data will be considered as implicitly informed consent by the data subjects for personal data processing contained, only following the purposes related to the selection of potential candidates.
The data processed for the purpose of selection of candidates are personal useful to search for the particular profile. In general, the nature of the data is normal, except in some cases where you may indicate any sensitive data necessary to identify the specific requirements of the regulations, such as specifying a particular protected class, the suitability for certain jobs and / or start-ups required, within the limits set by the General Provision of June 5, 2019 which modified the General Authorisation of the Garante (Italian Supervisor Authority) no. 1 of December 15, 2016 on the processing of sensitive data in work relationships;
Legal Basis: the processing is based on the consent to the processing of personal data (Recitals 42 and 43 and art. 6, §. 1, lett. a) of the GDPR) and/or the processing is necessary for the execution of a contract of which the data subject is a party or for the execution of pre-contractual measures adopted at the request of the same. (Recital 44 and Art. 6, §. 1, lett. b of the GDPR).
Nature of Data Provision: The provision of personal data is mandatory, failure to provide the necessary data will make it impossible to apply.
General Rules for providing the CV
Any CV received spontaneously, replying to a job advertisement, will be stored directly by person in charge of the processing in accordance with the safety guidelines of personal data adopted in compliance with the security measures according to Chapter IV Section 2 of GDPR 679/2016. These will be printed only on the occasion of a meeting and a conversation with the data subject.
To send Curriculum Vitae use the following addresses: Human Resources Dpt, Hotel Ristorante Aurora Srl, Frazione Sossana, 2 - 22025 Lezzeno (CO), e-mail: info@hotelauroralezzeno.com
For organisational, administrative, financial nature and for accounting and customer/user data management, it is possible that the data controller may process the relevant personal data.
Legal Basis: The processing is necessary for the execution of a contract of which the data subject is a party (Recital 44) or for the fulfillment of legal obligations (Recital 45) - art. 6 §. 1 lett. b) and c) of the GDPR.
Nature of Data Provision: The provision of personal data is mandatory, as it is essential to be able to execute legal obligations.
COOKIES
None of the user’s personal data is purposely acquired by the website. Cookies are, in fact, not used for the transmission of information of a personal nature, nor are any kind of persisting cookies used, or rather systems for tracing the user. The use of session cookies (which are not memorized persistently on the user’s computer and vanish when the browser is closed) are strictly limited to the transmission of session identification data (made up of causal numbers generated by the server), which is necessary in order to allow safe and efficient exploration of the website. The session cookies used in this website avoid resorting to other informatics techniques that could be potentially un-safe for the user’s navigation and do not allow acquisition of the user’s personal identification data.
Legal Basis: For the non-technical cookies and similar technologies, the processing is based on the consent to the processing of personal data (Recitals 42 and 43 and art. 6, §. 1, lett. a of the GDPR). The consent is given through the banner and the cookie policy of the website.
Nature of Data Provision: See the cookie policy in the website footer.
PERIOD FOR DATA RETENTION - CRITERIA USED
According to the provisions set forth in art. 5 par. 1 lett. e) of the Regulation (EU) 2016/679, collected personal data shall be kept in a form which permits identification of data subjects for a period not exceeding the purposes for which the personal data were collected and subsequently processed.
Data retention periods depend on the purposes of the processing:
TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES
Personal data is not transferred to non-EU third countries, in compliance with the provisions of Chapter V of the GDPR 679/2016.
OPTIONAL DATA PROVISION
Subject to the specifications made with regard to navigation data, users are free to provide the personal data listed in the request forms of Hotel Ristorante Aurora Srl or referred to in contacting the hotel in order to provide CV, to make on-line reservations or to request delivery of information materials and other communications. Failure to provide such data may entail the failure to be provided with the items requested.
PROCESSING ARRANGEMENTS AND DATA PROTECTION MEASURES
Personal data is also processed with automated means for no longer than is necessary to achieve the purposes for which it has been collected indicated in this information. The Data Controller and the Data Processors ensures the adoption of appropriate technical and organisational measures to ensure a level of security appropriate to the risk and that personal data are processed adequately and in accordance with the purposes for which they are processed, in compliance with the provisions of the art. 32 of the GDPR 2016/679. Specific security measures are implemented to prevent the data from being lost, used unlawfully and/or inappropriately, and accessed without authorisation. There is no provision for an automated decision-making process for the processing of personal data.
DATA SUBJECTS' RIGHTS
The data Controller is Hotel Ristorante Aurora Srl. You may contact the controller at any time to exercise your rights as provided for in Chapter III GDPR 679/2016, in particular, the right to request access to and rectification or erasure of personal data or restriction of processing concerning you or to object to processing, the right to obtain a copy of the personal data being processed as well as the right to data portability, also by sending a written request to the following e-mail address: info@hotelauroralezzeno.com.
RIGHT TO LODGE A COMPLAINT
If a data subject considers that the processing of personal data relating to him or her as performed via this website infringes the Regulation, he or she has the right to lodge a complaint with the Data Protection Authority pursuant to Article 77 of the Regulation, or to an effective judicial remedy pursuant to Article 79 of the Regulation.
PRIVACY POLICY WEBSITE BOOKING AREA BEDZZLE- General Terms & Conditions
Informativa Privacy:
Your personal data will be processed by us, both manually and using data processing systems, for the purpose of a) satisfying your requests (consent is not necessary) and b) carrying out activities in the fields of marketing and promotions, as well as sending information material on services and products offered by our organization (consent is required). The transmission of data is not mandatory, but is necessary to be able to satisfy your requests. Your data may be forwarded to other affiliated or associated companies. The data will not be disclosed publicly. Finally, we would like to remind you that, in order to exercise the rights provided for by the GDPR (access, modification, deletion, objection to the management of your data, etc.), you can contact data controller by writing to our address Hotel Ristorante Aurora Srl, Frazione Sossana, 2 - 22025 Lezzeno (CO). Tel: +39 031 914645 or via e-mail at: info@hotelauroralezzeno.com
Last update: 02/04/2021
