Privacy
Advisory Notice concerning the processing of guests' personal data
Declaration issued pursuant to art. 13 of EU Regulation 2016/679 enacted by the European Parliament and by the Council on 27 April, 2016 relative to the protection of natural persons as regards the processing of personal data and the free movement of such data, which also supersedes directive 95/46/EC (General Data Protection Regulation).
Pursuant to the EU Regulation for the protection of personal data (Regulation 2016/679 enacted by the European Parliament and by the Council), please be informed as follows:
NAME AND CONTACT DETAILS OF THE DATA CONTROLLER
The controller of the data processing is Mayr Doris, Bad St. Isidor, Kampennerweg 31, 39100 Bozen – Italy, tel. +39 0471 365263, e-mail: info@badstisidor.it, internet: www.badstisidor.it
PERSONAL DATA AND SPECIAL CATEGORIES OF DATA
The following are considered as being your personal data:
- data relative to you as an individual (surname, name, address, e-mail, telephone number, telefax number, date of birth), as well as language and vehicle license plate number.
- the data contained in your passport or identity card
- data relative to the methods of payment or relating to payments (e.g. banking information, details of credit cards).
- date of arrival and duration of visit.
- data relative to access, utilization and communication.
Special categories of data include data relative to health care and to special personal needs.
PURPOSE OF PROCESSING OF THE PERSONAL DATA AND LEGAL GROUND FOR PROCESSING
The data provided will be processed for the following purposes:
- compliance with the requirements of the law;
- fulfilment of pre-contractual and contractual obligations relative to the guest's visit (booking, accommodation, departure etc.);
- sending of communication and telephone contact with the guest;
- storage of data in order to facilitate subsequent bookings and requests;
- transmission of information, offers and news regarding the hotel and its partners, by e-mail, letter and other means of communication relative to the hotels, the local area and any local events, etc.;
- data regarding access, utilization and communication, which are processed for security reasons and to guarantee correct functioning of the Internet page.
Legal grounds for the processing of your data include:
- compliance with the requirements of the law (art. 6, section 1, para. c) of the RGPD);
- fulfilment of pre-contractual and contractual obligations (art. 6, section 1, para. b) of the RGPD);
- your consent (art. 6, section 1, para. a) of the RGPD);
- for legitimate interests (art. 6, section 1, para. f) of the RGPD).
Special categories of personal data are not processed on our internet page.
Your consent is necessary if special categories of personal data are processed during the course of your visit to Bad St. Isidor.
Booking
It is necessary to enter your personal data on the booking form included in our web site in order to make a booking and to make use of the contractual services. The travel data marked with an asterisk must be entered when booking your stay.
We utilize a payment platform which guarantees the security of any payments made using your credit card.
When you elect to pay the deposit by bank transfer, additional personal data such as the name of the account-holder and bank coordinates, too, will be processed.
Indication of the data relative to the invoice is not obligatory, but is necessary for issuing an invoice.
The legal ground for the processing of personal data is compliance with the law and fulfilment of pre-contractual and contractual obligations.
The period for which the data will be stored is in accordance with the obligations for the storage of data and the requirements of the law; your personal data provided for the purposes of booking will be stored only for the period strictly necessary for processing.
Data processed subject to your consent will be stored until you withdraw such consent.
Request
The indication of your personal data on the relative request form included in our internet page is necessary for your request and to allow you to make use of the pre-contractual and contractual services. The travel data marked with an asterisk must be entered when entering a request.
The legal ground for the processing of personal data is compliance with the law and fulfilment of pre-contractual and contractual obligations.
The period for which the data will be stored is in accordance with the obligations for the storage of data and the requirements of the law; your personal data provided for the purposes of your request will be stored only for the period strictly necessary for processing.
Newsletters and promotional messages
Indication of your personal data for the sending by the hotel of information, special offers and newsletters is not obligatory. If you do not submit your personal data, you will not receive special offers and newsletters.
Personal data provided in order to receive information, special offers and newsletters will be processed only with your consent, and will be stored until you withdraw such consent.
Data relative to access, utilization and communication
Cookies
What are cookies?
Cookies are small text files which are stored by the user's browser when the user visits a web site. When a page is visited again using the same device, the cookie is sent to the web site or transmitted to another related site. In this way the web site recognizes that the page has already been visited using this browser, thus improving the user's browsing experience when the same page is accessed again. Cookies store the user's preferences and adapt the offers displayed to the preferences and interests of that specific user. Cookies fall into different categories according to their operation and their purpose:
- Technical cookies
- Profiling cookies
- Third-party cookies
Technical cookies
These cookies are stored on the user's device only during the session itself and are used to ensure that the web site functions correctly. Analytical cookies, which are utilized for processing statistical access data, are classified as technical cookies. These collect general information without any identification of the client.
Profiling cookies
Profiling cookies are used to identify the way in which the user navigates the site, including their preferences, etc., in order to send promotional messages relative to products previously viewed or similar products.
Third-party cookies
Third-party cookies are those featured by other web sites. By closing the information banner or clicking on any section of the site, the user consents to the use of these cookies.
Which cookies are used on this web site?
This site uses technical and third-party cookies.
How to disable cookies
The norms governing the protection of personal data state that the user can disable any cookies that have been installed. The links shown below contain instructions for deactivating the use of cookies on the following browsers:
If browsers other than those listed above are used, the user can disable the use of cookies by following the instructions in the help menu of the browser used (by inserting the word "cookie" in the search box in the menu). The user can then disable and/or delete the cookies using the settings of their browser as well as disable and/or delete any non-technical cookies installed by third parties by accessing the site managed by the European Interactive Digital Advertising Alliance (EDAA) at: www.youronlinechoices.eu.
Here you can adjust your cookie settings.
Server Log Archives
When the web page is accessed, data are automatically identified and stored in the archives of the server log. In this case, these data include: IP address, browser and browser version, operating system, time of access and quantity of data transferred.
Google Analytics
Our web page also utilizes the functions provided by the web analysis service of Google Analytics developed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA in order to optimise our online service. To this end, the data may be transferred to third countries. The Privacy Shield framework, which has certified Google, ensures that the protection of personal data is in compliance with European laws.
Google Maps
We utilize the maps provided by Google's mapping service "Google Maps". The data processed may include the user's IP address and position, though these will not be identified without your consent (check the settings on your mobile device).
SSL protocol and legal ground
SSL protocol (Secure Sockets Layer): In order to guarantee the security of your data during transmission, we use state-of-the-art coding procedures via https.
Data regarding access, utilization and communication are stored and processed for reasons of security and to ensure the correct operation of the internet page. The legal ground is the pursuit of the legitimate interests in accordance with art. 6, section 1, para. f) of the RGPD.
Social Media
We are present on the social networks with the purpose of providing information to and communicating with clients and potential clients. As a result, the user's data may also be processed outside the European Union. However, a European Union adequacy decision is in place as set forth in art. 45 of the RGPD which provides adequate guarantees relative to the transfer of data in accordance with art. 46 of the RGPD.
The legal ground for the processing of the data relative to your visit to our social media platforms is the pursuit of legitimate interests in accordance with art. 6, section 1, para. f) of the RGPD.
To this end, we maintain sites on facebook.
recipients of personal data
In principle, your personal data will not be transferred to other subjects. However, the data may in special cases be:
- transferred to other departments of the hotel, though subject to the limits of legitimate use;
- transferred to the following data processors or to third subjects, in those cases where it is necessary to meet your requests or to provide special services:
- HGV – Association of Hoteliers and Caterers
- IT specialist for the remote maintenance of the hotel programme.
Your personal data may also be collected from booking portals.
rights of the data subject
Right of access: as set forth in art. 15 of the RGPD, you shall have the right to be informed of the personal data processed, the source and nature of the data, the transfer of the data (if any) and the recipient, and the manner in which the data are utilized.
Right of rectification and erasure: as set forth in art. 16 of the RGPD, you may at any time request the rectification or completion of your personal data. Similarly, as set forth in art. 17 of the RGPD, you may request the erasure of your personal data. In the case of published data, you shall also enjoy the "right to be forgotten", in other words request the enactment of the measures necessary to delete all the links, copies, replications etc.
Right to object: you may at any time exercise the right to object as set forth in art. 21 of the RGPD and modify or entirely withdraw your consent to any future processing.
Right to restriction (or cessation) of the processing: as set forth in art. 18 of the RGPD, you may also require that the processing of your personal data be restricted. In this case, the data may be processed only subject to specific consent, therefore the processing of the data will be effectively restricted.
Right to data portability: as set forth in art. 20 of the RGPD, you shall enjoy the right to receive the data provided by you in a structured, commonly-used and machine-readable format, and may also require the transmission of said data to a different Data Processor.
As set forth in art. 77 of the RGPD, you shall enjoy the right to lodge a complaint with a supervisory authority.