Privacy Policy

INFORMATION ON PERSONAL DATA PROTECTION AND USE OF COOKIES PURSUANT TO (EU) REGULATION 2016/679 (“GDPR”)

Dear Customer,
“H. n. h. Hotels & Resorts SpA”, Trinity Palace – Via Saragat, 1 – 30174 Mestre Venice, VAT 03978470270. (hereinafter, the “Company”), is the Controller of the processing of data provided by you at the time of registration on the website, or otherwise acquired during the provision of the services which you can access.
It is possible to sent requests or notices to the Controller at the email address privacy@hnh.it Accessing the website does not require entering one’s personal details.
To use the ‘contacts’ online service and to access other additional services, you will need to enter your personal data in specific website sections.
The data you enter shall be processed with adequate safety measures for current technological standards and complying with the obligations set forth by (EU) Regulation 2016/679 on personal data protection (“GDPR”).
According to the aforementioned regulations, said processing shall be governed by principles of fairness, lawfulness and transparency and protection of your privacy and your rights. The following information only relates to this website and does not concern any other websites used by the user through redirecting links found on the pages of our website. No data arising from using the web service are disclosed or disseminated.
Pursuant to article 13 of the GDPR, therefore, we provide the following information:

 

1. SCOPE OF THE PROCESSING

The Company collects and processes your personal data (e.g. name, surname, email, telephone number etc.) for purposes required or instrumental to the provision of the services requested by you and provided through this website, also by disclosing the data to third party companies referred to in art. 5 of this information (appointed by the Company as responsible for data processing) for the aims of technical and administrative management of the services. Your data may be processed for internal aims of drawing up lists of master data, accounting, credit management for meeting all the obligations set forth by the regulations in force, statistical purposes, for communications, and additional services expressly requested by you.
The legal basis of processing, according to the cases, may be your consent, execution of a contract you are a party in or fulfilment of legal obligations the Company is subject to in its position of Controller of processing.

 

2. AIMS OF THE PROCESSING

Your data may also be processed:

(a) to send information and commercial offers of similar services to the ones purchased by you when you used the website, unless you object to said processing by sending an email to info@hnh.it

3. METHODS

Processing shall be performed manually as well as by using electronic instruments, in compliance with all the necessary precautions to assure the security and confidentiality of the information.

 

4. ACCESS TO THE DATA

Your data may be processed within our company by all persons in charge of processing appointed in writing by the Data controller and trained on the obligations of the Privacy Law.

 

5. DATA AND COMMUNICATION THEREOF

The data may be disclosed to third parties, solely for technical and operative needs strictly connected to the aforementioned aims and specifically for the following categories of entities:

a) Agencies, professionals, companies or other facilities appointed by us for the processing connected to administrative, accounting, marketing and management fulfilments connected to routine performance of our business, also for the aims of credit recovery;

b) To public authorities and administrations for the aims connected to fulfilment of legal obligations;

c) Banks, financial institutions or other entities for which the transfer of the data is required for the aims of performing our Company’s activities, specifically with regards to meeting the contractual obligations towards you on our part.

 

6. DATA STORAGE

Your personal data shall be stored in the servers available to the Company located in the European Union. The Company does not transfer personal data towards countries outside of the European Union.

 

7. DATA STORAGE TIME

The personal data that concern you shall be stored for the entire time of duration of your contractual relation with the Company. After termination of the contractual relation, the Company shall store the personal data concerning execution of the contract for meeting contract and legal obligations, including tax ones. Subsequently, the personal data concerning execution of the contract shall be stored for a period not exceeding the limitation period set forth by law to enforce or defend any right in court.

 

8. OPTIONAL / OBLIGATORY NATURE OF THE PROVISION

The provision of your personal data is optional, notwithstanding the fact that refusal to disclose the data or consent to processing referred to under item 1 of this information notice shall entail inability, on our part, to enter into the contract and provide any services required and fulfil legal obligations. In the event of refusal to process the personal data referred to in art. 2 of this information notice, processing shall be limited to integral execution of the obligations arising from the provision of the services requested by you, as well as fulfilment of the obligations set forth by laws, regulations and EC standards.

 

9. DATA CONTROLLER

The “controller” of data processing is “H. n. h. Hotels & Resorts SpA”, Trinity Palace – Via Saragat, 1 – 30174 Mestre Venice, VAT 03978470270. The list of any people in charge of processing the personal data is available at the Controller’s offices.

 

10. RIGHTS OF THE DATA SUBJECT

At any time you may exercise your rights towards the Data controller, pursuant to articles 15-22 GDPR, which we summarise below for your convenience. Specifically, you are entitled to:
obtain termination of processing in the cases where your personal data are processed for the aims of direct marketing, also in relation to services identical to those already purchased from our Company (so-called right to objection);
obtain information on the aims for which your personal data are processed, the period of processing and the entities the data are disclosed to (so-called right of access);
obtain rectification or integration of the incorrect personal data concerning you (so-called right to rectification);
obtain deletion of the personal data concerning you in the following cases:

(a) the data are no longer necessary for the aims they have been collected for;

(b) you have withdrawn your consent to data processing if they are processed on the basis of your consent;

(c) you have objected to the processing of your personal data where they are processed for our legitimate interest; or

(d) processing of your personal data does not comply with the law.

However, we would like to inform you that storage of personal data by the Company is lawful if it is required to allow a legal obligation to be fulfilled or to ascertain, exercise or defend a right in court (so-called right to erasure);

to obtain that the personal data concerning you are stored only with no other use being made of them in the following cases

(a) you dispute the exactness of the personal data, for the time required to allow us to ascertain the exactness of said personal data;

(b) processing is unlawful but you still object to deletion of the personal data by us;

(c) you require the personal data to ascertain, exercise or defend a right in court;

(d) you have objected to processing and ascertainment is pending on any prevalence of our legitimate reasons for processing over those of the data subject (so-called right to restriction);
to receive the personal data that concern you, processed with automated means, in a structured, commonly used and machine-readable format, if they are processed based on a contract or on the basis of your consent (so called right to portability).

We would also like to remind you that you are entitled to contact the Guarantor for the protection of personal data (Piazza di Monte Citorio, 121 – 00186 Rome RM) to enforce your rights in connection to processing of your personal data.