Privacy Statement and Cookie Regulation
The DolceVita Hotels Consortium with registered office at 39025 Naturno, Italy, St. Zenostr. 13, (hereinafter: DolceVita) undertakes to protect the personal data of the users of its online presence. The present statement has been drafted pursuant to Article 13 Regulation (EU) 2016/679 (hereinafter: GDPR), in order to clarify our data protection guidelines and to explain to you how we manage your personal data, when you use our Internet sites (www.dolcevitahotels.com, jointly hereinafter: Website). Where applicable, the present statement also serves as your informed consent to the processing and issuing of your personal data. (Consent is only valid for persons over 16 years of age.) The information and data delivered or otherwise transferred by you concerning the use of services from DolceVita (e.g. booking enquires, negotiation of holiday packages, issue of vouchers, newsletter registration), hereinafter Services, are processed pursuant to the provisions of the GDPR and under a commensurate duty of confidentiality.
In accordance with the provisions of the GDPR DolceVita processes data in good faith and pursuant to the principles of legality, transparency, restriction of processing and storage period, data restriction, accuracy, completeness and confidentiality.
DolceVita is the controller, responsible for processing your personal data by means of the website. In order to receive specific information on the processing of your personal data by DolceVita, such as the list of processors, who process data on behalf of the controller, please contact us at the following e-mail address: firstname.lastname@example.org.
2. The personal data processed
We should like to advise you that DolceVita processes personal data when you surf on the Internet. Personal data are identifiers, such as a name, an identification number, an online identifier or one or more factors specific to the physical, physiological, economic, cultural or social identity of the data subject, by which the data subject is identified or can be identifiable (hereinafter: personal data).
By means of the website the following personal data are processed:
a. Surfing data
In normal operation the computing systems and software processes, which ensure the correct functioning of the website collect some personal data, the transfer of which is required by the application of Internet communication protocols. This concerns data, which are not collected for the purpose of categorising data subjects, but which by virtue of their characteristics can identify a user by processing the data and comparing them to the data of third parties. These data include IP addresses or domain names of the computer used by the user to access the website, the URI (Uniform Resource Identifier) addresses of the resources accessed, the time of access, the method, by which the server was accessed, the identification number of the response given by the server (correct, error, etc.) and other parameters concerning the user's operating system and computer environment. These data are used to collect anonymous statistical information for the use of the website, to check that it is functioning correctly, to identify malfunctions and/or abuse and are erased immediately after being processed. The data may be used to check liability in the event of cyber criminal offences, which harm the website or third parties. However, with the exception of this special case, the surfing data are stored for no longer than a few days.
b. Particular categories of personal data
When you use our services, it may happen that you transfer data, which belong to the "special categories of personal data". Under Article 9 of the GDPR the processing of personal data "revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation" is prohibited. We would ask you not to transfer this kind of data, unless it is absolutely necessary. We should like to advise you that in the event that special categories of personal data are transferred without the specific consent of the data subject to the processing of those data, DolceVita accepts no liability and no charges may be brought against them, since the data in this case were published by the data subject pursuant to Article 9 (2) (e) GDPR. If you wish to transfer the aforesaid data, it is notwithstanding necessary to issue an express consent to the processing of the special categories of personal data.
c. Personal data provided voluntarily by the data subject
When you use some of the services on the website (for example, ordering vouchers or brochures or making booking enquiries) personal data, which you transferred to DolceVita, may be processed. In this case you yourself become the controller and accept all the legal duties and responsibilities of processing. Within this meaning you undertake to indemnify and hold DolceVita harmless in this respect in the event that third parties lodge complaints or assert claims, including claims for compensation etc., because your personal data have been processed in breach of the applicable legal provisions. If you transfer personal data when you are using the website or process personal data in any other way you must ensure that the processing relies on an adequate legal basis pursuant to Article 6 GDPR and that the processing of the data at issue is lawful.
Definitions, features and application of the provisions
There are cookies with a variety of properties and functions and these can remain on the user's computer for longer periods, which vary. Session cookies are automatically erased when you close your browser; permanent cookies remain on the user's device until their determined duration has expired.
In accordance with the requirements of the Italian Data Protection Supervisory Authority (c.f. Individuazione delle modalità semplificate per l'informativa e l'acquisizione del consenso per l'uso dei cookie of 8 May 2014 and the following commentaries, hereinafter only Decree) technical cookies, which do not require express consent, also include the following:
- Analytical cookies, provided that these are used directly by the operator of the website to collect information in a summarised form about the number of users of the website and their surfing behaviour;
- Navigation or session cookies (for authentication);
- Function cookies, which allow users to surf using criteria, which they have determined (for example language, the purchase of selected products, in order to improve the service provided.
Conversely, for profiling cookies, i.e. those which generate and use a profile of the user, in order to send advertising messages matching the preferences demonstrated by the surfing on the net, the previous consent of the user is necessary.
Cookies used by the website and selection/rejection
The website uses the following cookies, which can be selected or rejected (apart from cookies from third party providers, for which the procedure for accepting or rejecting cookies must be observed via the relevant links):
- Technical navigation or session cookies, which are absolutely necessary for the correct functioning of the website or for the use of the contents or services offered;
- Function cookies, which are necessary to activate specific functions of the website and a range of selected criteria (e.g. language) for the improvement of the service offered.
PLEASE NOTE: If the technical and/or function cookies are rejected, it may not be possible to access the website and/or some services or specific functions of the website may not be available or functional and it may be necessary to enter some information or preferences on each occasion you visit our website.
- Cookies from third party providers, i.e. cookies from Intent sites or servers, which are separate from DolceVita and which are used by the third party providers for their own purposes. It is stressed that these third parties, who are listed below together with their respective links to the respective data privacy statements, are normally independent for the purposes of data collection by cookies deposited by them. Therefore, note should be taken of the availability cited of their guidelines on the processing of personal data, their legal notices and consent forms (selection and rejection or the relevant cookies). For the sake of completeness, we should also make you aware that DolceVita does all that is possible to trace the cookies on their website. These are regularly updated in the table below, in which the cookies deposited by DolceVita and their purposes are also listed. With respect to third parties, who deposit cookies via our website, we list the links to the relevant data privacy statement. As already stated, these third parties are liable for providing an adequate legal notice and for obtaining your consent. This liability does not apply to cookies directly deposited by third parties, but for any other cookies, which are deposited via our website when services, from which these third parties also profit, are used. DolceVita is unable to exercise any control over these third party provider cookies and is unaware both of their features and their purposes.
Notices on cookies from third party service providers:
- Google: https://www.google.com/policies/privacy/
- Youtube: https://policies.google.com/privacy?hl=en
- Google Analytics: https://support.google.com/analytics/answer/6004245?hl=en
Details of the cookies deposited via the website by DolceVita are as follows:
Cookies on the website
|Type of cookie and owner||Technical designation of the cookie||Modes of operation and purpose||Duration of stay|
|Technical cookie||long||Storage of the selected language for future visits||1 year|
|Technical cookie||dolcevitahotelscom||Stores the session ID||Browser session|
|Technical cookie||cookiehint||Stores the Consent to Cookies Notice||Browser session|
Technical and functional cookies may be blocked or erased in whole or in part via specific browser functions. However, we should like to make you aware that if you do not consent to technical cookies it may not be possible to use the website, to access its contents and to use its services. If function cookies are blocked, some services or specific functions of the website may not be available or may not function correctly and it may be necessary manually to input some data or preferences every time you visit the website.
The settings activated with respect to cookies on the website are stored in your own cookie. This cookie might not function correctly under certain circumstances. In these cases you should erase the unwanted cookies and also block their application through your browser settings.
In order to visit the website using a different browser you must refresh your cookie settings.
Display and modification of cookies via the browser
You can opt-out of the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this Hotjar opt-out.
3. Purpose of the data processing
We process your personal data (where necessary with your specific consent) for the following purposes:
- Performance of the services requested by you i.e.: i) booking enquiries; ii) ordering holiday packages/vouchers; iii) registration for the newsletter;
- Response to requests and assistance;
- Compliance with legal, accounting or tax obligations;
- Marketing purposes: On your express and specific consent to the hotels in the DolceVita Group the data provided may be used for the transfer of advertising and marketing material, including the periodical despatch of the newsletter and marketing surveys by automated systems (SMS, MMS, e-mail, push-mails, fax) and other means (letter post, telephone calls).
4. Legal bases, voluntary nature or necessity of the processing
The legal base for the processing of personal data for the purposes stated in Sections 3.a and 3.b is Article 6 (1) (b) GDPR, since in this case the processing is necessary to perform the services or to respond to the request from the data subject. The provision of personal data for these purposes is voluntary; however the failure to provide data makes it impossible to activate services provided by the website or to respond to requests.
The purposes for the processing referred to in Section 3.c represent legitimate processing of personal data pursuant to Article 6 (1) (c) GDPR. Once personal data have been provided in these cases processing is necessary in order to comply with legal obligations, to which DolceVita is subject.
Pursuant to Article 6 (1) (a) GDPR the legal base for the processing for the purposes in Section 3.e is the consent of the data subject. The lack of consent to this processing purpose does not affect in the least the provision of the services.
For processing, undertaken for the purposes of direct marketing, direct sales or to perform our own market research or to send business communications on the same products or services already purchased or booked by you the controller may use e-mail addresses and postal addresses without your consent. This is admissible pursuant to Article 130 (4) Legislative Decree 196/2003 and the order of the Data Protection Authority of 19 June 2008 and within the constraints provided therein. The legal base for the processing of your data for these purposes is the legitimate interests of DolceVita pursuant to Article 6 (1) (f) GDPR.
5. Recipients of the personal data
For the purposes referred to in Section 3 your personal data may be transferred to:
- third parties, who are typically responsible for processing the data, namely: i) persons, service providers or companies, who provide assistance and advice to DolceVita on business, management, legal, tax, financial and debt-collection issues with respect to the exercise of the services; ii) third parties, with whom there is a reciprocal relationship for the provision of the service (e.g providers of host services); iii) third parties, who are commissioned with the performance of technical maintenance work (system administrators), including maintenance of the network devices and the electronic communications networks; (in the following jointly referred to as Recipients);
- facilities or authorities, to which your personal data must be reported by virtue of legal provisions or orders;
- third parties, who are commissioned by DolceVita to process the personal data as part of the provision of services and who have been placed under a duty of non-disclosure or who are subject to a legal duty of confidentiality (e.g. DolceVita employees).
- Hotels in the DolceVita Group (Resort Lindenhof, Feldhof DolceVita Resort, Alpiana Resort, Preidlhof Resort and Jagdhof), which are included in the DolceVita Consortium and in accordance with the internal agreement appear as joint controllers in order to be able to process requests and provide the services requested.
6. Transfer of personal data
Some of your personal data are exchanged with recipients, who may be located outside the European Economic Area. DolceVita guarantees that these recipients process your personal data in accordance with the GDPR. In fact the transfer of data may rely on a decision on fitness, on a standard contractual clause approved by the Council of the European Union or another appropriate legal base. Further information is available from DolceVita on: email@example.com.
7. Storage of data
The personal data processed for the purposes referred to in Sections 3.a and 3.b is stored only for the period absolutely necessary for achieving these purposes. Since the data are processed for the provision of services, in this case DolceVita stores the personal data for the period stipulated in the statute for the protection of it own interests (Article 2946 Italian Civil Code, as amended).
The personal data processed for the purpose specified in Section 3.c are stored for as long as is provided by the specific obligation or in the applicable statutory provision.
Conversely, the personal data stored for the purposes referred to in Section 3.d are stored until the data subject withdraws his or her consent, or for a maximum period regarded as reasonable, unless consent is withdrawn.
Further information on data storage periods on the criteria for the determination of this period is available from DolceVita at firstname.lastname@example.org.
8. Rights of the data subjects
Pursuant to Article 15 et seq. GDPR you have the right at any time to request information on personal data concerning you processed by DolceVita and the right to demand that the data be rectified or erased. In addition you may object at any time to the processing and in the cases provided for in Article 18 GDPR to demand restriction of the data. In the cases provided for in Article 20 GDPR you have the right to receive the data concerning you in a structured, current and machine-readable format. These request may be made in writing to: email@example.com.
In any case you have the right pursuant to Article 77 GDPR to lodge a complaint with a responsible supervisory authority (for Italy: the Data Protection Supervisor) if you believe that the processing of the personal data concerning you breaches the currently applicable legal provisions.
This data protection guideline comes into force with effect from 12.07.2018. DolceVita reserves the right to amend or to update in whole or in part the contents by virtue of the applicable provisions. DolceVita shall publish amendments on the website as soon as these are introduced and the amendments shall apply with effect from the date of publication. DolceVita recommends that you access this section on a regular basis, in order to check the latest version of data protection guidelines and to remain informed at all times on the data collected and the use of the same.