Privacy Policy

HOTEL IN SYLVIS

In compliance with EU Regulation 2016/679, known as the GDPR (General Data Protection Regulation), we hereby inform you that we will process the personal data concerning you that has been or will be provided to us by you. The processing of personal data will be carried out in compliance with the regulations in force and under the following conditions.

1. Data Controller

Hotel In Sylvis di Vit Renzo
Via Friuli, 2 or Piazza Aquileia, 15
33079 Sesto al Reghena, Pordenone, Italy
insylvis@hotelinsylvis.com
VAT number: 01289590935

Guarantees compliance with regulations on the protection of personal data by providing the following information regarding the processing of data communicated or otherwise collected during navigation on this website.

2. Data processed, purposes, and legal bases for processing

Data generated by accessing the website
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This data (such as domain names, IP addresses, operating system used, type of device and browser used for the connection) is not accompanied by any additional personal information and is used to: i) obtain anonymous statistical information on the use of the site; ii) manage control requirements for how the site is used; iii) ascertain responsibility in the event of hypothetical cybercrimes.

The legal basis legitimizing the processing of such data is the necessity to make the website’s features available following user access.

Data voluntarily provided by the user 
Personal data provided by the user via forms is collected and processed for the following purposes:

1. to carry out customer relationship management activities based on contractual agreements;
2. for administrative purposes and to comply with legal obligations, such as accounting or tax requirements, or to respond to requests from judicial authorities;
3. subject to specific consent, for the periodic sending, via email, of newsletters, advertising, promotional, and marketing material;
4. subject to specific consent, to receive updates on our activities and for the use of data for personalized advertising purposes;

The legal basis for processing is the performance of a contract to which the data subject is party or the performance of pre-contractual measures taken at the data subject’s request. In the cases expressly indicated, the legal basis is the freely given consent of the data subject.

3. Nature of data provision

Apart from what is specified for navigation data and collected data, the provision of data:

• with respect to the purposes referred to in points a) and b) is optional, but any refusal will make it impossible to carry out the contractual commitments undertaken.
• with respect to the purposes referred to in points c) and d) is also optional, and its use is subject to the granting of explicit consent. Any refusal will make it impossible to send newsletters, advertising material, commercial promotions, and invitations to events and initiatives.

4. Processing methods and data retention period

The collected data will be processed using electronic or automated, IT, and telecommunication tools, or manual processing, with logics strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to guarantee their security at all times.

The data are retained for the time strictly necessary to manage the purposes for which they were collected, in compliance with applicable regulations and legal obligations. They will be retained in our archives for a maximum of 10 years; the collected data will not be disclosed to third parties or transferred to foreign countries.

In any case, the data controller applies rules that prevent the retention of data for an indefinite period and therefore limits the retention time in compliance with the principle of data minimization.

5. Rights of the data subject

At any time and without any formality, the Data Subject may exercise the rights granted to them under current regulations regarding the protection of personal data:

• right of access, by requesting confirmation from the Data Controller as to whether or not data concerning them is being processed, as well as further clarification regarding the information referred to in this privacy policy, and to receive the data itself (within reasonable limits);
• right of rectification, to obtain the rectification or integration of data held by the Data Controller, if inaccurate;
• right of erasure, to request that their data processed by the Data Controller be erased, if no longer necessary for the purposes for which it was collected, or where there are no ongoing disputes or controversies, or in case of withdrawal of consent or objection to processing, or in case of unlawful processing, or finally where there is a legal obligation to erase;
• restriction of processing, to obtain a temporary restriction on the processing of their personal data when one of the conditions set out in Art. 18 of the GDPR applies;
• the right to object: ensuring that the Data Controller must refrain from continuing to process their data on the basis of its legitimate interest, unless there are compelling legitimate grounds to proceed with the processing that override those of the user, for example for the establishment, exercise or defense of legal claims;
• the portability: to receive their data, or have it transmitted to another controller, in a structured, commonly used and machine-readable format.

The data subject may exercise their rights by contacting the Data Controller at the email address provided above.

In accordance with current legislation, in addition to the rights above, you also have the right to lodge a complaint with the competent supervisory authority by accessing the website www.garanteprivacy.it.

6. Data Protection Officer

The Data Controller has appointed a Data Protection Officer (DPO), who can be contacted by sending an email to the address indicated above.