In compliance with the Regulation (EU) 2016/679 (hereinafter “GDPR”), the following describes how the personal data of users who consult the website https://www.hnh.it/ (hereinafter “the Website”) are processed.
The Controller of the processing is HNH HOSPITALITY SPA, with registered office in Mestre, Via Saragat n°1.
In order to exercise the rights set forth by the REGULATION (EU) 2016/679 (hereinafter “GDPR” or “Regulation”) or to request any clarification regarding the processing of personal data, please contact the Controller at the following phone number (0415321630) or e-mail address privacy@hnh.it.
Navigation data
The IT systems and software procedures that make the site work acquire, while they are normally running, some personal data whose transmission is implicit to the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers and terminals used by the user, URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to make the request to the server, the size of the file given in response, the numeric code indicating the state of the response given by the server (successful, error, etc.) of other parameters related to the operating system and the user’s IT environment.
| Purposes and legal basis of the processing (GDPR Art.13, paragraph 1, letter c) |
These data are used to check the website works correctly and to get statistical information (pages most visited, number of visitors per time slot or day, geographical areas of origin, etc.). The data could also be used to ascertain responsibility in case of hypothetical crimes that damage the site (Controller’s legitimate interest). |
| Communication scope (GDPR Art.13, paragraph 1, letters e, f) |
Personal data can only be accessed by persons authorized to process them and by subjects, who, processing data on behalf of the Controller, have been identified as Co-controllers. Said subjects are bound to secrecy and confidentiality, also based on specific internal regulations. With the exception of the indications in relation to cookies, the data shall not be transferred to third countries. |
| Data retention period (GDPR Art.13, paragraph 2, letter a) |
Barring the need to investigate in case of unlawful acts, the data are generally retained for the time strictly needed to guarantee the site runs regularly. |
| Transfer (GDPR Art.13, paragraph 2, letter e) |
The data are not transferred from the Subject, rather they are automatically acquired from the website technological systems. |
Form of contact and signing up for the newsletter
The optional, explicit and voluntary sending of messages to contact addresses, as well as filling out and forwarding forms on the site lead to the acquisition and processing of the sender’s contact data, needed to respond, as well as all the personal data included in the communications and forms and site navigation statistics.
| Purposes and legal basis of the processing (GDPR Art. 13, paragraph 1, letter c) |
Contact data are requested and are processed for: – providing a response and/or contacting the subject; – sending periodic newsletters to keep the subject updated on the Controller’s news, initiatives and services, only with the specific, free and informed consent of the subject (GDPR Art. 6, paragraph, letter a) |
| Communication scope (GDPR Art. 13, paragraph 1, letters e, f) |
Personal data can only be accessed by persons authorized to process them and by subjects, who, processing data on behalf of the Controller, have been identified as Co-controllers. Said subjects are bound to secrecy and confidentiality, also based on specific internal regulations. With the exception of the indications in relation to cookies, the data shall not be transferred to third countries. |
| Data retention period (GDPR Art. 13, paragraph 2, letter a) |
The data are retained for the time needed to respond to the message and, regarding the newsletter, the data shall be kept for the entire period the subject is signed up for said service. |
| Transfer (GDPR Art. 13, paragraph 2, letter e) |
Not transferring the mandatory data will result in not being able to send the message. Not consenting to sending the newsletter will result in the Controller not being able to send said communications. |
Cookies
For specific information please consult the cookies policy: https://www.hnh.it/en/cookie/
The Controller informs that the Subject has the right to request:
Finally, the Subject may:
In relation to processing based on consent (pursuant to article 6, paragraph 1, letter a), and to article 9, paragraph 2, letter a) of the GDPR), we inform you that the Subject has the right to revoke said consent in any moment (without compromising the lawfulness of the processing based on consent given prior to revocation).
Finally, if the Subject feels that the processing violates the Law, they have the right to lodge a complaint with a supervisory authority (Guarantor for the protection of personal data or another competent authority) according to articles 77 and the following of the GDPR.
