Privacy Policy (Information on the Processing of Personal Data)
Pursuant to Regulation (EU) 2016/679 (GDPR), this page describes the methods of processing the personal data of users who visit and interact with this website.
1. Data Controller
The Data Controller is: F.lli Arosio snc
Headquarters: via Colletta, 53, Gargnano, 25084 BS (Italy)
VAT number: 02102530983
Contact email: info@hotel-gardenia.it
2. What data we collect and why (Purposes and Legal Basis)
We collect users’ personal data only for the following purposes, based on the relevant legal bases:
A. Contact Forms (Communication with the user)
- What we collect: Name, email address, and any other data voluntarily entered in the text of the message.
- Why: To be able to respond specifically to user requests for information or quotes.
- Legal Basis: Execution of pre-contractual measures (Art. 6, let. b, GDPR).
- Tools used: Fluent Forms and SMTP service for sending emails.
B. Internal browsing statistics (Anonymized)
- What we collect: General usage data (e.g., pages visited, browser type).
- Why: To analyze site traffic and improve its performance.
- Legal Basis: Legitimate interest of the Controller (Art. 6, let. f, GDPR) in optimizing the website.
- Privacy Note: We use Independent Analytics. This system resides entirely on our servers, does not use third-party tracking cookies, and does not share any browsing data with external companies (such as Google or Meta).
C. Website Security and System Logs
- What we collect: Temporary IP address and access-related log data.
- Why: To protect the website from spam, cyber attacks, and to ensure proper technical operation.
- Legal Basis: Legitimate interest of the Controller to protect their web infrastructure (Art. 6, let. f, GDPR).
- Tools used: Server logs, caching systems (LiteSpeed), and firewalls/security (WP 2FA, WPS Hide Login).
D. Newsletter Subscription (ADDITIVE+ NEWSLETTER)
- On our website you have the possibility to subscribe to our newsletter. For the subscription we need your email address and your consent to receive our newsletter through ADDITIVE, our provider for hotel e mail marketing. To provide you with relevant information we also gather and process voluntary information concerning interests, name, date of birth and country/region of origin in our hotel newsletter tool.
- After signing up for our newsletter you will receive an email containing a link to confirm the subscription.
- Your subscription can be cancelled any time by clicking on the cancellation link in the respective newsletter.
- To process your subscription, to send our newsletter and to determine openings and clicks we use software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”). ADDITIVE uses the mailing service provider “Sinch Mailjet”, Paris, France to handle the secure delivery of the newsletter. Through the use of these services and systems your data will be processed and stored, at least in part, also outside of the EU or the EEC. The adequate level of data protection is based on data processing agreements.
E. Gift Voucher Purchase (ADDITIVE+ VOUCHERS)
- On our website you have the possibility to buy vouchers by using the integrated voucher software. To process your purchase and to save and store your data we use software provided by ADDITIVE Srl, 39011 Lana (BZ), Italy (“ADDITIVE”) in the context of voucher marketing. Through the use of these services and systems your data will be processed and stored in the EU.
- The data you provide is required to fulfil the contract or to carry out pre-contractual measures. Without this data we cannot conclude a contract with you. The data will not be transferred to an outside third party, except for your credit card data which will be transferred to the payment provider and to our tax accountant to fulfil our tax obligations.
- The data processing takes place in accordance with the requirements of art. 6 para. 1 lit b (processing necessary for the performance of a contract) of the GDPR.
3. Who are the data shared with?
Your personal data will in no way be sold or transferred to third parties. Access to the data (limited to the purposes indicated above) may be granted to:
- Authorized personnel of the Data Controller.
- The web hosting company that hosts this website (Data Processor).
- ADDITIVE Srl for the management of Newsletters and Vouchers.
- Payment service providers (for charging vouchers) and our tax consultant for tax obligations.
4. Data transfer outside the EU
The data managed internally by the site (contact forms and anonymized statistics) reside on servers within the European Union. Exclusively regarding the Newsletter service managed via ADDITIVE and its technical partners (e.g., Sinch Mailjet), user data are, at least in part, processed and stored also outside the EU or the EEA. The adequacy of the level of data protection results from data processing agreements stipulated by our suppliers.
5. Data retention period
- Data sent via form: The time necessary to fulfill the request (archived only if legal obligations exist).
- Statistical data and security logs: Aggregated, anonymized, or automatically deleted within a few months.
- Newsletter data: Until the user revokes consent (unsubscribes).
6. User Rights
Pursuant to articles 15-22 of the GDPR, you have the right at any time to:
- Request access to your personal data;
- Request their correction or deletion (right to be forgotten);
- Object to their processing or request its limitation;
- Request data portability.
To exercise these rights, you can contact the Data Controller at any time at the email address: info@hotel-gardenia.it.
7. Cookie Policy
For detailed information on how we use cookies and how to manage your preferences, please read our Cookie Policy: https://slow-holiday.site/cookie-policy/
