1. Data controller
MULTITURISMO MAREBELLO SAS DI DI PASQUANTONIO FILIPPO & C. (hereinafter referred to only as the Data Controller), with registered office in Via Aldo Moro, 76 – 64018 Tortoreto (TE), VAT no. 00670880673, tel. +39 0861 786383 is the controller of the personal data collected through the Site. The Data Controller independently establishes the purpose and means of processing.
Email address: info@hotelmarebelloabruzzo.it
2. Place of data processing
The main processing activities related to the web services of this site take place in ITALY.
3. Security and methods of data processing
As required by art. 32 GDPR, the processing of personal data takes place through IT tools suitable to guarantee a level of security appropriate to the risk. Communications to and from the web server take place via secure communication protocols with TLS/SSL encryption algorithms.
The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data. Processing is carried out using IT and/or automated telematic tools, with organisational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organisation of this Website (administrative, commercial, marketing, legal staff, system administrators) may have access to the Data, or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Data Processors may always be requested from the Data Controller.
4. Why do we collect your data?
We use your information to provide our services, for example to process your requests for information/quotes/booking, to propose holiday packages, to keep you informed about the best offers and/or news from our property. Data collection takes place if one of the following conditions exists:
- the User has given consent for one or more specific purposes;
- processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures;
- processing is necessary to fulfil a legal obligation to which the Data Controller is subject;
- processing is necessary for the pursuit of the legitimate interest of the User;
- the data are necessary for the technical functioning of the site and/or for anonymous statistical functions.
It is always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on law, provided for by a contract or necessary to conclude a contract.
5. Types of data processed
Browsing data
Among the data collected by this Website, autonomously or through third parties, there are: Cookies and usage data. This information is not collected to be associated with identified data subjects, but could, through processing and association with data held by third parties, allow users to be identified. This data is collected to obtain anonymous statistical data on the use of the site, to monitor its correct operation, and in some cases for legal obligations. This category of data includes IP addresses, browser identifier (user agent), URI (Uniform Resource Identifier) addresses of the requested resources, time of the request, method used in submitting the request to the server, numeric code indicating the status of the response given by the server (e.g. successful, error) and other parameters relating to the operating system and the IT environment of the user. Please refer to the specific section of this document for details on the use and collection of Cookies and usage data.
Data provided voluntarily by the user
To provide some services through the website, you may be asked to enter some identifying data such as first name, last name, telephone number, email and various types of Data. The mandatory or optional nature of the provision of data is specified each time — with reference to the data requested — in the data collection forms and mandatory information will be marked with an asterisk (*). If you refuse to provide the data marked as mandatory, it will be impossible to achieve the main purpose of the specific data collection: such refusal could, for example, make it impossible to complete a request, a purchase or execute the sales contract of the chosen product or provide other services available on the Site (such as assistance, contacts with Customer Service, sending emails, use of specific functions of the Site). Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informative texts displayed before the data is collected. In cases where this Website indicates some Data as optional, Users are free to refrain from providing such Data, without this having any consequence on the availability of the Service or its operation. Users who have doubts about which Data are mandatory are encouraged to contact the Data Controller.
Optional nature of providing data
Apart from what is specified for browsing data, the user is free to provide the personal data required to use the services provided through the site. Failure to provide the data relating to fields marked with an asterisk (mandatory) makes it impossible to use the service offered. The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website and guarantees to have the right to communicate or disseminate them, freeing the Data Controller from any liability towards third parties.
6. Data retention period
The Data are processed and stored for the time required by the purposes for which they were collected and for a further period of 24 months. Should the information requested be subject to economic and tax reporting purposes (e.g. online transaction), for a period of 10 years. These indications are generally valid for all data processed by the site, except for processing subject to explicit consent by the user in which a different retention period is indicated.
As regards technical data managed by the site, such as cookies, the retention period is defined by the technical characteristics of the cookies themselves and indicated in the specific section.
7. What information about you we collect online
Communicating your personal data to the Data Controller, in the different ways in which they are collected on our Site, may be essential to achieve the desired result.
The mandatory or optional nature of the provision of data is specified each time — with reference to the data requested — in the data collection forms and mandatory information will be marked with an asterisk (*).
If you refuse to provide the data marked as mandatory, it will be impossible to achieve the main purpose of the specific data collection: such refusal could, for example, make it impossible to complete a request, a purchase or execute the sales contract of the chosen product or provide other services available on the Site (such as assistance, contacts with Customer Service, sending emails, use of specific functions of the Site).
Providing additional data, other than those marked as mandatory, is optional and a refusal of such data will not produce any consequences regarding the main purpose of the collection (on the use of the website and its services, for example).
You will have the right to request from the Data Controller all the details about your personal data held by us.
8. How we use your information
The processing of your personal data is mainly carried out through IT systems and electronic devices by the Data Controller and third parties, selected with care for their reliability and competence, for the performance of essential operations to achieve the purposes strictly connected with the use of the Site, its services and the online sale of products through the Site.
In general, the data are processed for the purposes indicated below:
- information requests and/or bookings;
- subscription to specific services, such as, for example, inclusion in a newsletter;
- sending informative and promotional communications, also of a commercial nature, advertising material and/or offers of goods and services;
- market research, economic and statistical analyses.
The activities referred to in points b), c) and d) are subject to your explicit consent and may be carried out by any means, including, by way of example and not limited to, post, Internet, telephone, Email, MMS, SMS, from Italy or abroad (including from countries not belonging to the European Community), by the Data Controller, by companies controlling, controlled and/or owned by it, as well as by third parties with whom the Data Controller has contractual relations connected to the performance of the aforementioned activity.
9. Processing of data sent through the contact form
As regards requests sent through the form on the site, the user must give explicit consent and the information collected will be processed according to the following methods:
- Personal Data collected: surname, email, name, telephone number and various types of Data necessary for the provision of the service requested.
- The collection methods are those indicated in point 7 of this notice.
- The data will be used for purposes strictly connected to the management of the service. Such data will in no way be disclosed to third parties.
«Pursuant to art. 13 of GDPR 679/2016, the data communicated may be used solely for the purpose of providing the service requested. It is expressly forbidden to use the data for different purposes and/or to share or communicate them to third parties, either in the EU or outside the EU. In relation to the processing, the Customer may exercise the rights provided for from 15 to 22 of GDPR 679/2016 on each communication».
10. Extended information on the use of cookies
Extended information on the use of cookies pursuant to the Privacy Guarantor measure no. 229/2014.
In order to make its services as efficient and easy to use as possible, this Site uses cookies. Therefore, when you visit the Site, a minimum amount of information is placed on the User's device, such as small text files called “cookies”, which are saved in the User's Web browser directory. There are different types of cookies, but essentially the main purpose of a cookie is to make the Site work more effectively and to enable certain functionalities. Cookies are used to enhance the User's overall navigation.
If you wish, cookies can be deleted from the hard drive. Most browsers are set automatically to accept the use of cookies but it is also possible to change the settings to prevent their use.
If you do not wish to receive a cookie from the Site, you must set your browser so as to activate the notification when you receive a cookie, so that you can decide whether to accept it or not. In any case, we invite you to consider that if you disable cookies in your browser, you will not be able to fully enjoy all the functions of the Site such as automatic connection and other personalised functions.
Types of cookies
Based on characteristics and use, cookies can be distinguished into different categories:
- Technical cookies: Cookies of this type are necessary for the correct functioning of certain areas of the site. Cookies in this category include both persistent cookies and session cookies. In the absence of such cookies, the site or portions of it may not function correctly. Therefore, they are always used, regardless of the user's preferences. Cookies in this category are always sent from our domain.
- Performance Cookies: Cookies of this type are used to collect information on the use of the site. The Data Controller uses such information for statistical analysis, to improve the site and simplify its use, as well as to monitor its correct functioning. This type of cookie collects information anonymously on users' activity on the site and how they arrived at the Site and the pages visited. Cookies in this category are sent by the Site itself or by third-party domains.
- Third-party tracking cookies: Cookies of this type are used to collect information on the use of the website by visitors, the keywords used to reach the site, the websites visited and the sources of traffic from which visitors come for marketing campaigns. The data controller may use this information to compile reports and improve the Site. Cookies collect information anonymously. Cookies of this type are sent by the Site itself or by third-party domains.
- Cookies for the integration of third-party functionalities: Cookies of this type are used to integrate third-party functionalities into the Site (for example, comment modules or social network icons that allow visitors to share the site's content). Cookies in this category may be sent by the domains of partner sites or that nevertheless offer the functionalities present on the site. The Data Controller is not required to request the user's consent for technical cookies, as these are strictly necessary for the provision of the service. For other types of cookies, consent may be expressed by the User, in accordance with current regulations, through specific configurations of the browser and of computer programs or devices that are easy and clear to use for the User. The Data Controller reminds the User that it is possible to change cookie preferences at any time. It is also possible to disable cookies from the browser at any time, but this operation may prevent the User from using some parts of the Site.
On the basis of what is established by art. 122 of the Privacy Code, in cases where the use of the cookie is strictly necessary for the use of the service requested, we will necessarily use this technology for the provision of the service. In other cases, if your browser is configured to accept cookies, we will have the right to use this technology with you.
Some specific cases
- Google Analytics: The site may include components transmitted by Google Analytics, a web traffic analysis service provided by Google Inc. («Google»). These are third-party cookies used to collect and analyse anonymously information on the behaviour of visiting users on the site. These cookies are used to store non-personal information. Google Analytics protects the confidentiality of your data. For further information, please refer to the link indicated below: https://support.google.com/analytics/answer/6004245. The user can selectively disable the action of Google Analytics by installing on their browser the opt-out component provided by Google: https://tools.google.com/dlpage/gaoptout.
- Heat mapping and session recording: Heat mapping services are used to identify which areas of a page are subject to the passage of the cursor or mouse clicks in order to detect which of them attract the greatest interest. These services allow monitoring and analysing traffic data and serve to track User behaviour. Some of these services may record sessions and make them available for later viewing.
- Hotjar Heat Maps & Recordings (Hotjar Ltd.): Hotjar is a heat mapping and session recording service provided by Hotjar Ltd. Hotjar respects generic «Do Not Track» headers. This means that the browser can indicate to the script not to collect any User data. This is a setting that is available in all main browsers. Personal Data collected: Cookies, Usage Data and various types of Data as specified by the service's privacy policy. Place of processing: Malta — Privacy Policy — Opt Out.
How to disable cookies through the browser
The majority of internet browsers are initially set to accept cookies automatically. The user can change these settings to block cookies or to be warned that cookies are being sent to the user's device. Each browser has different procedures for managing settings. Click on one of the links below for specific instructions: Microsoft Windows Explorer — Google Chrome — Mozilla Firefox — Apple Safari. If the user does not use any of the browsers listed above, they can refer to the instruction manual or help screen of their browser to find out how to adjust or change the settings. In the case of different devices (for example, computer, smartphone, tablet, etc.), the user must ensure that each browser on each device is adjusted to reflect their cookie preferences.
Enabling and disabling cookies
In addition to being able to use the tools provided by the browser to enable or disable individual cookies, we inform you that the site www.youronlinechoices.com lists the main providers that work with website managers to collect and use information useful for the enjoyment of behavioural advertising. You can disable or enable all companies or alternatively adjust your preferences individually for each company. To do this, you can use the tool found on the page www.youronlinechoices.com/it/le-tue-scelte. Further useful information about cookies is available at this address: www.allaboutcookies.org.
11. Links to other websites
Our Site includes deep links to other websites that may or may not have any relationship with us. The data controller has no control or monitoring of such websites or their content. The data controller cannot be held responsible for the content of such sites and for the rules they apply, also with regard to your privacy and the processing of your personal data while browsing their pages. We therefore invite you to be careful when accessing one of these sites through the links on our site and to read carefully their privacy policy and conditions of use. Our Privacy Policy does not apply to the websites of other companies. Our site provides links to these sites exclusively to facilitate our users in their searches and navigation and to facilitate hyperlinks to other sites on the internet. Such links do not represent any kind of recommendation, approval or promotion of access through navigation from the Site, and no warranty is provided for their content, services and products that they may offer or sell to internet users.
12. Interaction with social networks
These services allow you to perform actions with social networks directly on the pages of our site. It is assumed that each user of social networks has already given authorisation of their personal data when registering with them. Each operation carried out through the social networks is therefore subject to the User's privacy settings relating to each social network.
13. Rights of data subjects
Data subjects (subjects to whom the personal data refer) may at any time exercise the rights provided for by the Regulation using the contacts indicated in point 1 «Data controller» of this notice.
In particular, the subjects may legitimately request the rights from art. 15 to art. 23, and specifically:
- the deletion of all data;
- rectification / modification;
- limitation;
- portability;
- the right to object to automated decision-making (profiling).
If necessary, you can finally submit a complaint to the local Privacy Guarantor. Here you can find the contact details of the Privacy Guarantors operating in the EEA area.