P. IVA 01747930673
Registered office: Via Paolo Tosti,1 – Pineto (THE)
Operational offices: c/o unit located in Via Garibaldi 242, Silvi (THE) and other tourist accommodation facilities
Policy Privacy
IN ACCORDANCE WITH THE REGULATION (UE) 2016/679 (“GDPR”) ARTICLES 13 E 14
AND SUBSEQUENT NATIONAL ADAPTATION RULES
This document (“Information”) intends to provide you with information regarding the processing of information, as specified below, which will be expressly provided by you or by those who interact with the web services of this site accessible electronically at the address www.turismogestioni.it (afterwards, “Site”) and also the other websites of the operational offices. The Information, in particular, is made pursuant to EU Regulation no. 679/2016 (“GDPR”) and subsequent national adaptation standards (in conjunction with the GDPR below “Applicable Regulations”). Specific information may be presented on the pages of the Site in relation to particular services or processing of data provided by the interested party and specific consent has been obtained. (where necessary).
1. Identity and contact details of the Data Controller
The data controller, pursuant to the articles. 4 e 24 of the Reg. UE 2016/679, And TOURISM GESTIONI SRL with registered office in Via Paolo Tosti, 1, 64025 Pineto (THE) and secondary offices at units located in Via Garibaldi 242, Silvi (THE) and other tourist accommodation facilities, VAT number 01747930673, turismogestione@pec.it, e-mail privacy@turismogestioni.it in the person of the legal representative pro tempore (right away “Holder”).
2. Contact details of the Data Protection Officer (c.d. “RPD-DPO”)
The Data Controller does not carry out activities that require the designation of the figure of the Personal Data Protection Officer.
3. Purpose and legal basis of the processing
The Personal Data collected will be processed for the purposes and under the legal bases set out below:
| Purpose | Legal basis of the processing |
|---|---|
| point 3, lett. a): to acquire and confirm your booking of accommodation services and ancillary services, and to provide you with the requested services or to execute pre-contractual measures (which, for example, the request for information or for a quote). In this case, You are free to provide your Personal Data and those of the members of the chamber, including the Data of minors over whom he exercises parental authority and/or guardianship; However, failure to provide it will not allow you to establish the aforementioned relationship and satisfy your request. | the processing is necessary in relation to the execution of a contract of which you are a party |
| point 3, lett. b): to fulfill the obligation established by “Consolidated text of public safety laws” (item 109 R.D. 18.6.1931 n. 773) which requires us to communicate to the Police Headquarters, for public safety purposes, the personal details of customers accommodated according to the methods established by the Ministry of the Interior (Decree 7 January 2013). The provision of data is mandatory and does not require your consent, and in case of refusal to provide them we will not be able to accommodate you in our structure. The data acquired for this purpose is not stored by us, unless you give us consent to storage as provided in the point 3, lett.d. | Legal obligation |
| point 3, lett. c): to take advantage of the booking of additional services requested by you, could be treated, subject to your express consent, health data. | your consent |
| point 3, lett. d): to store your registration data, including the details of the identification document, within our servers and portals and to speed up future registration activities in the event of your subsequent stays at our facility. | your consent |
| point 3, lett. e): subject to your specific consent, to send them by email (newsletter) or paper mail (i) promotional communications, such as sending advertising material and communications, even with the use of automated systems, having informative and/or promotional content in relation to products or services provided and/or promoted by the Owner, tramite fax, e-mail, SMS and MMS and other messaging systems e (ii) communications relating to events organized by the Owner (right away “marketing purposes”). | your consent |
| point 3, lett. f): for the external communication of data relating to your stay and/or the members of the room, with your prior consent, for the exclusive purpose of allowing the function of receiving messages and/or phone calls addressed to you or them. | your consent |
| point 3, lett. g): to process, subject to your specific consent, a profile of yours that allows you to personalize the offer of products and services and specific services requested by you, providing information closest to your interests, always guaranteeing the security and confidentiality of your information (right away “Profiling”*). | your consent |
* The article 4 of the GDPR defines profiling as “any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning professional performance, the economic situation, health, personal preferences, interests, reliability, the behavior, the location or movements of that natural person”. Therefore, must be considered as the set of data collection and processing activities relating to users of a service, in order to divide them into groups depending on their behavior (operation not to be confused with “segmentation” o “clustering”).
4. Categories of personal data processed (pursuant to art.14)
Within the limits of the purposes and methods described in this Policy, information may be processed that can be considered as “Personal data”, which includes your personal details, your contact details (which, for example, mobile number, e-mail address, IP address, cookie, etc.). They could be treated – subject to your express consent – also data relating to your health (es. physical handicap, for which a particular type of room is requested when booking). In these hypotheses, we guarantee that the processing will take place limited to the data and operations necessary to fulfill the obligations, also pre-contractual, relating to the provision of Hotel Services, within the limits of the performances and services requested by you at the time of booking or during your stay at our hotel.
Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data is collected.. The possible use of Cookies (or other tracking tools) by this website or by the owners of third-party services used by this website, unless otherwise specified, has the purpose of providing the service requested by the User, in addition to the additional purposes described in this document and in the Cookie Policy.
4.1 Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, addresses in URI notation (Uniform Resource Identifier) of the resources required, the date and time of the request, the method used in submitting the request, the size of the response file, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and the User's IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and are deleted immediately after processing. The data could be used, exclusively by the Judicial Authority to ascertain responsibility in the event of hypothetical computer crimes against the site.
4.2 Data Provided Voluntarily by the User
Sending optional, explicit and voluntary email to the addresses indicated on this site, or filling out forms, involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered voluntarily by the User. The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this website and guarantees that you have the right to communicate or disseminate them, freeing the Owner from any liability towards third parties.
4.3 Redirect tramite Social plug-in
It is possible that they are used, while browsing the site, i c.d. social plug-in. Social plug-ins are special tools that allow you to incorporate social network features directly into the Site (per es. the function “I like” of Facebook). All social plug-ins present on the Site are marked with the respective logo owned by the social network platform.
When you visit a page of the Site and interact with the plug-in (per es. by clicking the button “I like”) or you decide to leave a comment, the corresponding information is transmitted from the browser directly to the social network platform (in this case Facebook) and memorized from this. For information on the purposes, the type and methods of collection, processing, use and storage of personal data by the social network platform, as well as the methods through which to exercise your rights, please consult the privacy policy of the relevant social network.
5. Recipients and categories of recipients
Personal data will not be disclosed, or it will not be disclosed to indeterminate subjects. They may instead be communicated to well-defined subjects, in full compliance with legal requirements, for purposes strictly related to those previously indicated. Any access to your personal data is limited to persons authorized by the Data Controller. Communication to the identified recipients, only if involved and functional, is linked to the achievement of the purposes referred to in the previous point 3, therefore the personal data collected and processed may be:
- used anonymously for statistical purposes;
- made available to the Data Controller's collaborators, as managers or persons authorized to process personal data;
- communicated to third parties, physical or legal, Public administrations, professionals, law enforcement agencies, government bodies, regulatory bodies, courts or other public authorities authorized by law;
- communicated to external parties who provide services for the management of the information system and communication networks including e-mail, newsletter and website management;
- if necessary, transferred to another Data Controller in accordance with the provisions of the GDPR, also regarding the right to data portability.
The information will be able to, Furthermore, be communicated whenever communication may be necessary to comply with requests from the Judicial or Public Security Authorities. The data collected will under no circumstances be disclosed.
The list of those responsible for processing personal data is available at the headquarters of the Data Controller.
6. Transfer of data abroad
The data will not be transferred outside the European Union.
7. Data retention period (determination criteria)
Below is a table containing indications of storage times (or the determination criteria) of Personal Data:
| Purpose | Storage times |
|---|---|
| point 3, lett. a): contract management | For the entire duration of the relationship and thereafter 10 years (ordinary prescription). |
| point 3, lett. b): public safety purposes | Per 5 years. |
| point 3, lett. c): purposes of ancillary services | For the entire duration of the relationship, without prejudice to the possibility for the interested party to modify and/or revoke his/her will at any time. |
| point 3, lett. d): purpose of facilitating registration procedures | For the entire duration of the relationship and thereafter 5 years, without prejudice to the possibility for the interested party to modify and/or revoke his/her will at any time. |
| point 3, lett. e): marketing purposes | 2 years from harvest, without prejudice to the possibility for the interested party to modify and/or revoke his/her will at any time. |
| point 3, lett. f): purpose of receiving messages and/or phone calls | For the entire duration of the relationship, without prejudice to the possibility for the interested party to modify and/or revoke his/her will at any time. |
| point 3, lett. g): profiling purposes | 1 year from harvest, without prejudice to the possibility for the interested party to modify and/or revoke his/her will at any time. |
Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
8. Security measures and data processing methods
The processing of Personal Data will take place in a lawful and correct manner, adopting appropriate security measures aimed at guaranteeing the security and confidentiality of your personal data. The processing of Personal Data will be carried out using manual tools, computer or telematic and will be carried out by personnel duly trained in compliance with the Applicable Regulations. There is no automated decision making.
In addition to the Owner, in some cases, other parties involved in the organization of this Website may have access to the Data (administrative staff, commercial, marketing, legal, system administrators) or external subjects (as third-party technical service providers, postal couriers, hosting provider, IT companies, communication agencies) also named, if necessary, Data Controller by the Data Controller.
In addition to cases where it is necessary to contact you for needs related to the management of your position, where you consent to the processing of your data for the purposes referred to in the point 3, lett. e), You can be contacted via email, newsletter, sms, or through any equivalent electronic tool or by paper mail or call via operator to all contact details provided. Where you prefer to be contacted only at one or some of these addresses, you may make an express written request addressed without formalities to the Data Controller.
8.1 Defense in court
The User's Personal Data may be used by the Owner in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this website or related services by the User. The User declares to be aware that the Owner may be obliged to reveal the Data by order of public authorities.
8.2 Specific information
At the request of the User, in addition to the information contained in this privacy policy, this website may provide the User with additional and contextual information regarding specific services, or the collection and processing of Personal Data.
8.3 System logs and maintenance
For needs related to operation and maintenance, this website and any third-party services it uses may collect system logs, i.e. files that record interactions and which may also contain Personal Data, such as the User IP address.
8.4 Information not contained in this policy
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.
8.5 Response to requests “Do Not Track”
This website does not support requests “Do Not Track”. To find out if any third-party services used support them, the User is invited to consult the respective privacy policies.
8.6 Changes to this privacy policy
The Owner reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, by sending a notification to Users through one of the contact details held by the Owner. Please therefore consult this page regularly, referring to the date of last modification indicated at the bottom. If the changes affect processing whose legal basis is consent, the Owner will collect the User's consent again, if necessary.
9. Rights that are recognized to you
We inform you that you can exercise the rights recognized by the Applicable Regulations including, by way of example only, the right:
- to access their Personal Data and know its origin, the purposes and purposes of the processing, the data of the subjects to whom they are communicated, the data retention period or the criteria used to determine it (art.15);
- to ask for its rectification (art.16);
- cancellation (“oblivion”), if no longer necessary, incomplete, incorrect or collected in violation of the law (art.17);
- to request that the processing be limited to part of the information concerning you (art.18);
- to the extent technically possible, to receive information concerning you in a structured format or to transmit it to you or to third parties indicated by you (c.d. “portability”) or those that have been voluntarily provided by you (art.20);
- to oppose their processing based on legitimate interest (art. 21);
- as well as to revoke your consent at any time, in the event that this constitutes the basis of the processing (however, the revocation of consent does not affect the lawfulness of the processing based on the consent carried out before the revocation itself).
The aforementioned rights may be exercised by means of a written request addressed without formalities to the Data Controller at the contacts indicated in the point 1. The Data Controller must proceed in this direction without delay and, Anyway, at the latest within one month of receiving the request. The deadline can be extended by two months, if necessary, taking into account the complexity and number of requests received by the Data Controller. In such cases the Owner will within one month of receiving your request, It will inform you and inform you of the reasons for the extension.
He reminds her that, where the response to your requests has not been satisfactory in your opinion, you may contact and lodge a complaint with the Personal Data Protection Authority (http://www.garanteprivacy.it/) in the ways provided for by the Applicable Regulations.
Review February 2026
