Privacy Policy & Cookie Law for users visiting this website in accordance with Article 13 of Regulation (EU) 2016/679
WHY THIS INFORMATION
The following information regarding the use of cookies and the processing of personal data on this website is provided to the user/browser in compliance with the provision of the Guarantor for the protection of personal data and in accordance with Article 13 of EU Regulation 2016/679 for the protection of personal data.
In accordance with Regulation (EU) 2016/679 (hereinafter "Regulation"), this page describes the processing of user/browser personal data while using the services of the site, and the options for contacting and acquiring user personal data, in full compliance with Article 13 of EU Regulation 2016/679 for the protection of personal data, regarding users who access the following websites via electronic means:
https://www.villadellerose.it
This information does not concern other websites, pages, or online services accessible through hyperlinks that may be published on the sites but refer to resources external to the domains.
Following the consultation of the aforementioned sites, data relating to identified or identifiable individuals may be processed.
DATA CONTROLLER
The Data Controller is:
Hotel Villa delle rose
Via Vicenza, 5, 00185 Roma
info@villadellerose.it
VAT ID: 00929741007
CATEGORIES OF PERSONAL DATA AND PURPOSES OF THE PROCESSING
Data communicated by users
Sending messages, on the basis of the user’s free, voluntary, explicit choice, to the Controller’s contact addresses, or sending private messages to the Controller’s social media pages and profiles (where this option is available), and filling in and sending the forms made available on the Controller’s websites entail the acquisition of the sender’s contact information – which is necessary to provide a reply – as well as of any and all the personal data communicated in that manner.
Specific information notices will be displayed on the pages of the Controller’s websites that are used for providing certain services.
Navigation Data
The computer systems and software procedures used to operate this website acquire certain personal data during their normal operation, the transmission of which is inherent in the use of Internet communication protocols.
This category of data includes, by way of example but not exhaustively, IP addresses or domain names of computers and terminals used by users, the URI/URL addresses (Uniform Resource Identifier/Locator) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the operating system and the user's IT environment.
These data, necessary for the use of web services, are also processed for the purpose of:
- obtaining statistical information on the use of services (most visited pages, number of visitors per time or day, geographical areas of origin, etc.);
- checking the proper functioning of the services offered.
Navigation data does not persist for more than the time strictly necessary and is deleted immediately after its aggregation (except when necessary for the detection of crimes by the judicial authorities).
Data Provided by the User
The optional, explicit, and voluntary sending of messages to the contact addresses of the Data Controller, as well as the completion and submission of forms on the website, entail the acquisition of the sender's contact data, necessary to respond, as well as all personal data included in the communications.
Specific information notices will be published on the Data Controller's websites pages dedicated to the provision of specific services.
Cookies and other tracking devices
This website uses cookies to ensure the correct use of the site's contents.
The site uses technical and session cookies (non-persistent) strictly limited to what is necessary for safe and efficient navigation of the site. The storage of session cookies on terminals or browsers is under the user's control. On the servers, at the end of HTTP sessions, information relating to cookies remains recorded in the service logs, with retention times strictly necessary for proper functioning.
Banner operation
The privacy management banner activated on this site does not allow any profiling cookies to be activated until the user has given their consent. If the user clicks the "I agree" button, all profiling cookies will be activated. If the user decides to click the "Personalize" button, they can customize their choices and decide which profiling cookies to activate. If the user clicks on the "Reject" button or the "X" in the top right of the banner, no profiling cookies will be activated.
The user's choices will be stored for six months through a technical cookie that will be installed on the device used by the user to access the site. It is essential to explain that if the user changes their device, for example, from a computer to a mobile phone, the choices cannot be transferred to the new device for technical reasons, and they will need to be selected again on the new device.
The user's choices can be changed at any time by accessing the control panel from the privacy control icon. The new configuration will last for six months.
The site uses cookies for third-party profiling as specified below.
Which cookies are installed on this site?
Google Tag Manager
Google Tag Manager è un servizio di gestione dei tag fornito da Google Ireland Limited.I dati inviati vengono collezionati per gli scopi di personalizzazione dell'esperienza e il tracciamento statistico. Trovi maggiori informazioni alla pagina "Ulteriori informazioni sulla modalità di trattamento delle informazioni personali da parte di Google".
Luogo del trattamento: Irlanda - Privacy Policy
Gravatar
Gravatar è un servizio di visualizzazione di immagini gestito da Automattic Inc. che permette a Automattic Inc. di integrare tali contenuti all’interno delle proprie pagine.
Luogo del trattamento: Stati Uniti - Privacy Policy
How many types of cookies are there?
There are two fundamental macro-categories, with different characteristics:
technical cookies and profiling cookies.
Technical cookies are generally necessary for the website to function properly and to allow navigation;
without them the browser may not be able to view the pages correctly or to use some services. For example, a technical cookie is essential to keep the user connected throughout the visit to a website, or to memorize the settings of the language, display, and so on.
Technical cookies can be further divided into navigation cookies, which guarantee normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas); analytics cookies, similar to technical cookies only when used to collect information, in aggregate form, regarding the number of users and their site-visiting behavior; functionality cookies, which allow the user to browse according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service provided.
Profiling cookies are designed to create profiles relating to the user and are usually used in order to send advertising messages in line with the preferences expressed by the user while surfing the net.
Cookies can also be classified as:
session cookies, which are deleted immediately when the browser is closed (for example, Internet Explorer, Safari, Google Chrome, etc.) persistent cookies, which - unlike session cookies - remain within the browser for a certain period of time. They are used, for example, to recognize the device that connects to the site, facilitating user authentication operations
first-party cookies, i.e. cookies generated and managed directly by the manager of the website on which the user is browsing
third-party cookies, which are generated and managed by parties other than the manager of the website on which the user is browsing (as a rule, by virtue of a contract between the website owner and the third party)
Information related to the management of personal data through social media platforms used by the Data Controller.
Regarding the processing of personal data carried out by the operators of the social media platforms used by the Data Controller, reference is made to the provisions found in their respective privacy policies. The Data Controller manages the personal data provided by users through dedicated pages on social media platforms, in order to manage interactions with users/customers (such as comments, public posts, etc.), always in accordance with current legislation.
LEGAL BASIS FOR THE PROCESSING
The personal data mentioned on this page are processed by the Data Controller in the execution of the services provided by the site and subsequently, if provided for by the site itself, by contractual or legal obligations and defense in court.
In cases where there are specific sections for newsletter subscriptions or marketing services, they will be managed by specific notices and the legal basis will be consent.
OPTIONALITY OF DATA SUPPLY
As provided by the decree of June 10, 2021, "Guidelines on cookies and other tracking tools," the website user is free to authorize or not authorize profiling cookies according to their free choice and will. In some cases, such as the Google reCaptcha cookie, blocking such profiling cookies prevents the submission of requests through data acquisition forms equipped with this tool.
If a problem arises with a non-functioning form due to cookie blocking, it can be resolved by reactivating cookies from the privacy settings. Alternatively, if one prefers to maintain the cookie block, the request can be sent via email.
In addition to information related to navigation data, users can freely decide whether to provide their personal data through request forms available on the sites or as indicated during contacts with the organization to request newsletters, informational material, or other communications.
Without such data, it will be impossible to fulfill the request.
LEGITIMATE INTEREST
The Controller does not make use of legitimate interest for the processing of personal data except for the protection of their own rights, namely, to establish, exercise, or defend a right before the courts.
PROCESSING METHODS
Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
DATA RECIPIENTS
The processing of personal data is carried out by authorized personnel or duly appointed data processors. The updated list of data processors or any autonomous data controllers can be requested from the Data Controller or the DPO.
DATA TRANSFER
The data will be transferred only within the EU. Some applications, such as, but not limited to, Google Analytics, ReCaptcha, and Facebook Pixel, may be transferred to the USA to companies that have obtained certification under the Data Privacy Framework.
DATA CONSERVATION PERIOD
The retention time of the user's choices relating to cookies is six months as required by the measures.
The time for retaining cookies changes depending on the type of belonging. For third-party profiling cookies, the specifics can be consulted directly on their relative sites.
DATA SUBJECT RIGHTS PURSUANT TO ART. 15 EU 2016/679
Data subjects have the right, in the cases provided for, to obtain from the Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them or to object to the processing (Arts. 15 and following of the Regulation). Opposition for marketing purposes is always possible and free of charge. Requests should be addressed to the Data Controller at the contact details provided at the beginning of this information.
RIGHT TO COMPLAIN
Data subjects who believe that the processing of personal data referred to them carried out through this site occurs in violation of what is provided by the Regulation have the right to lodge a complaint with the Guarantor, as provided for by Article 77 of the same Regulation, or to take action in the appropriate judicial venues (Article 79 of the Regulation).
Policy Privacy & Cookie Law for users who consult this website pursuant to article 13 of Regulation (EU) 2016/679
WHY THIS INFORMATION
The information below relates to the use of personal data andcookie on this website.
As regards cookies, it is provided to the user/navigator in implementation of the provision of the Guarantor for the protection of personal data of 10 June 2021 “Guidelines for cookies and other tracking tools” and in compliance with art. 13 of EU Regulation 2016/679 for the protection of personal data.
Pursuant to Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes the methods of processing the personal data of the user/navigator during the use of the site’s services and the possibilities of contact and data acquisition personal data of the user, in full compliance with the art. 13 of EU Regulation 2016/679 for the protection of personal data, relating to users who consult these websites accessible electronically at the following addresses: https://www.villadellerose.it
This information does not concern other sites, pages or online services that can be reached via hypertext links that may be published on the sites but refer to resources external to these domains.
DATA CONTROLLER
Following consultation of the sites listed above, data relating to identified or identifiable natural persons may be processed.
The Data Controller is:
Hotel Villa delle Rose
Via Vicenza, 5, 00185 Rome
info@villadellerose.it
Vat ID: 00929741007
TYPES OF DATA PROCESSED AND PURPOSE OF THE PROCESSING
Technical navigation features
Browsing data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes, by way of explanation but not exhaustive, the IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and to the user’s computing environment.
These data, necessary for the use of web services, are also processed for the purpose of:
- obtain statistical information on the use of services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);
- check the correct functioning of the services offered.
The navigation data do not persist longer than strictly necessary and are deleted immediately after their aggregation (except for any need to ascertain crimes by the judicial authority).
Data communicated by the user
The optional, explicit and voluntary sending of messages to the contact addresses of the Owner, as well as the compilation and forwarding of the forms on the site, involve the acquisition of the sender’s contact data, necessary to respond, as well as all the data personal information included in communications.
Specific information will be published on the pages of the Owner’s sites set up for the provision of certain services.
Cookies and other tracking systems
They are used on this websitecookie, aimed at guaranteeing the correct use of the contents of the site.
The site uses technical and session cookies (non-persistent) in a manner strictly limited to what is necessary for safe and efficient navigation of the site. The storage of session cookies in terminals or browsers is under the control of the user, whereas on the servers, at the end of HTTP sessions, information relating to cookies remains recorded in the service logs, with retention times strictly necessary for correct functioning.
How the banner works
The privacy management banner activated on this site does not allow any profiling cookies to be activated before the user has given his consent. If the user clicks the I agree button, all profiling cookies will be activated. If, however, the user decides to click the customize button, he will be the one to customize his choices and decide which profiling cookies to activate. If you click on the reject button or on the X at the top right of the banner, no profiling cookies will be activated.
The user’s choices will be stored for six months via a technical cookie that will be installed on the device used by the user to access the site. It is important to explain that if the user changes device, therefore perhaps switching from the computer to the mobile phone, the choices will not be able to be found on the new device, for technical reasons, and therefore will have to be selected on the new device.
The user’s choices can be changed at any time by accessing the control panel from the privacy control icon. The new configuration will last six months.
The site uses cookies for third-party profiling as better specified below.
What cookies are installed on this site?
The following cookies are installed:
Google Tag Manager (Google Inc.)
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal Data that is processed: Usage data; Tracking Tool.
Place of processing: Ireland –Privacy Policy.
Google Maps widget (Google Inc.)
Google Maps is a map viewing service operated by Google Ireland Limited. This service serves to integrate such contents within its pages.
What personal data is collected: Usage data; Tracking Tool.
Place of processing: Ireland –Privacy Policy.
Gravatar
Gravatar is an image viewing service managed by Automattic Inc. that allows Automattic Inc. to integrate such content within its pages.
Place of processing: United States –Privacy Policy.
Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the personal data collected to track and examine the use of this website, compile reports on its activities and share them with other services developed by Google. Google may use your personal data to contextualize and personalize the ads of its advertising network. This Google Analytics integration anonymizes your IP address.
Place of processing: Ireland –Privacy Policy – Opt Out.
LEGAL BASIS OF THE PROCESSING
The personal data indicated on this page are processed by the Data Controller in the execution of the services provided by the site and subsequently, if required by the site itself, by contractual or legal obligations.
If there are specific sections for subscriptions to newsletters or marketing services, they will be managed by specific information.
OPTIONAL PROVISION OF DATA
As required by the provision of 10 June 2021 “Guidelines for cookies and other tracking tools”, the user of the site is free to authorize or not authorize profiling cookies according to his free choice and will. In some cases, such as the Google reCaptcha cookie, blocking this profiling cookie prevents you from being able to send the request via the data acquisition forms. If necessary, it will be possible to either re-enable the cookie from the privacy preferences or, if necessary, if you decide to maintain the blocking of cookies, send this request via email.
Apart from what is specified for navigation data, the user is free to provide personal data contained in the request forms present on the sites or indicated in contacts with the structures to request the sending of the newsletter, information material or other communications.
Failure to provide them may make it impossible to obtain what is requested.
LEGITIMATE INTEREST
The owner does not rely on legitimate interest for the processing of personal data other than for the protection of his rights.
PROCESSING METHODS
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
RECIPIENTS OF THE DATA
The recipients of the data collected following consultation of the sites listed above are the following subjects designated by the Data Controller, pursuant to Article 28 of the Regulation, as data controllers. The complete list of Managers is available at the Data Controller’s headquarters and can be requested via email.
The personal data collected are also processed by the personnel in charge of processing, who act on the basis of specific instructions provided regarding the purposes and methods of the processing itself.
DATA TRANSFER
The data will only be transferred within the EU.
Some applications such as Google Analytics and reCaptcha may be subject to transfers outside the EU.
DATA RETENTION PERIOD
The retention time of the user’s choices relating to cookies is six months as required by the provision.
The storage time of cookies changes depending on the type of membership. For third-party profiling cookies, the specifications can be consulted directly on the relevant sites.
Personal data processed for contact or economic purposes will be processed for the mandatory times established by the relevant laws.
RIGHTS OF INTERESTED PARTIES PURSUANT TO ART 15 EU 2016/679
Interested parties have the right to obtain from the Data Controller, in the cases provided for, access to their personal data and the rectification or cancellation of the same or the limitation of the processing that concerns them or to oppose the processing (articles 15 et seq. of the Regulation). Requests must be forwarded to the Data Controller at the references given at the beginning of this information.
RIGHT TO COMPLAIN
Interested parties who believe that the processing of personal data relating to them carried out through this site is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by the art. 77 of the Regulation itself, or to take action in the appropriate judicial offices (art. 79 of the Regulation).
