Privacy Policy

Interested Subjects: Navigators

Pursuant to the (EU) Regulation 2016/679 (hereunder defined as the “Regulation”), this page describes the methods for treatment of the personal data of users who consult the websites accessible at the following addresses: www.hotelarcenciel.it.

This information does not concern other sites, pages or online services that can be reached via hypertext links that may be published on the sites but refer to resources external to the Owner’s domain.
It should be noted that the Privacy policy could be modified from time to time according to the activation of new services or as a result of updates to the Law, therefore it is advisable to periodically check for any news on the subject by consulting the aforementioned site. This page describes how to manage the site with reference to the processing of personal data of users who consult it. This information is also provided pursuant to Article 13 of the (EU) Regulation concerning the protection of natural persons with regard to the processing of personal data of those who interact with the web services of Greco Giovanni & c. S.a.s Hotel Arc en Ciel, accessible electronically from the address www.hotelarcenciel.it, further and possible data treatments are defined in the information and cookie policy corresponding to the first page of the official website www.hotelarcenciel.it.
The information is provided only for the www.hotelarcenciel.it website and not for other websites that may be consulted by the user via links. The information is also inspired by the Recommendation n. 2/2001 that the European authorities for the protection of personal data, gathered in the Group established by art. 29 of directive no. 95/46/EC, adopted on 17 May 2001 to identify some minimum requirements for the collection of personal data online, and, in particular, the methods, timing and nature of the information that the data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection, and to further updates resulting from the application of the GDPR, as well as the delegation decree connecting with the GDPR.

The Data Controller
Following consultation of this site, data relating to identified or identifiable persons may be processed.
The “owner” of their treatment is Greco Giovanni & c. S.a.s Hotel Arc en Ciel, with headquarters in Viale Torino, 39 – 18013 Diano Marina (IM), Italy, VAT number: 00894640085

Data Protection Officer
The Data Protection Officer (DPO) can be reached at the following address: dpo@network-service.it

Legal basis of the treatment
The personal data indicated on this page are treated by Greco Giovanni & c. S.a.s Hotel Arc en Ciel, for the performance of its activities. Consent, execution of a contract, fulfillment of a legal obligation as well as the pursuit of a legitimate interest are the legal bases which, depending on the data processing carried out on the aforementioned website, will be pursued.

Place of data processing
The treatments connected to the web services of this site are based in the European Union, are managed by the service provider Serverplan Srl and are handled by technical personnel of Network Service Srl (responsible for the treatment), and by other persons in charge of Network Service Srl, in occasion of updating and maintenance operations. No data deriving from the web service is disseminated. The personal data provided voluntarily by users who forward contact requests are used for the sole purpose of performing the service or provision requested, possibly also through external service providers.

Types of data processed and purposes of processing
Navigation data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used in submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data, necessary for the use of web services, are also processed for the purpose of:
• Obtain statistical information on the use of the services (most visited pages, number of visitors per hour or day, geographical areas of origin, etc.);
• Check the correct functioning of the services offered.
Data communicated by the user
Optional sending

or, explicit and voluntary messages to the contact addresses of Greco Giovanni & c. S.a.s Hotel Arc en Ciel, as well as the compilation and submission of the forms on the website www.hotelarcenciel.it, involve the acquisition of the sender’s contact details, necessary to reply, as well as all personal data included in the communications.
Specific information will be published on the pages of the website www.hotelarcenciel.it prepared for the provision of certain services.

Cookies and other tracking systems
Cookies are not used for user profiling.
Instead, session cookies (non-persistent) are used strictly limited to what is necessary for safe and efficient navigation of the sites. The storage of session cookies in the terminals or browsers is under the control of the user, whereas on the servers, at the end of the HTTP sessions, information relating to the cookies remains recorded in the service logs, with retention times specific to each individual third-party manager of the service. Any data acquired through cookies, and the methods for managing them, are fully described in the “cookie policy” document.

Navigation data
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are canceled immediately after processing. The information collected automatically can be used by Greco Giovanni & c. S.a.s Hotel Arc en Ciel to ascertain responsibility in the event of hypothetical computer crimes against the site, for statistical purposes, to improve navigation and site content. Any data acquired through cookies are fully described in the “cookie policy” document.

Data provided voluntarily by the user
The optional, explicit and voluntary sending of data included in the data collection modules (form), or the sending of emails to the email addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. It should be noted that the personal and/or corporate data entered in the forms on the website www.hotelarcenciel.it are protected by Greco Giovanni & c. S.a.s Hotel Arc en Ciel and used to answer user queries, to provide the requested information and services.

Optional provision of data
Apart from that specified for navigation data, the user is free to provide the personal data contained in the information request forms to Greco Giovanni & c. S.a.s Hotel Arc en Ciel, if necessary, specific information will be provided whenever such data is requested and, where necessary, consent will be requested.

Methods of treatment
Personal data is processed with automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access. We inform you that, in order to provide a complete service, there are links to other websites managed by other owners. We decline all responsibility in the event of errors, contents, cookies, publications of unlawful immoral content, advertising, banners or files that do not comply with current regulations and compliance with the Privacy legislation by sites not managed by us to which reference is made.

Data Recipients
The recipients of the data collected following consultation of the sites listed above are subjects designated by Greco Giovanni & c. S.a.s Hotel Arc en Ciel, pursuant to article 28 of the Regulation, as data controllers.
Network Service srl as supplier of web platform development and maintenance services;
Simplify srl in relation to the site as a supplier of development, provision and operational management services for the technological platforms used.
The personal data collected is also processed by the personnel of Greco Giovanni & c. S.a.s Hotel Arc en Ciel, which acts on the basis of specific instructions provided in relation to the purposes and methods of the treatment itself.

Data transfer abroad
Third Countries: The data is not communicated in third countries.

Rights of the interested parties
You have the right to obtain from the holder the cancellation (possible right to be forgotten), the limitation, updating, rectification, portability, opposition to the processing of personal data concerning you, and in general you can exercise all the rights provided by the articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR, where applicable with respect to the purposes of data processing.

EU Reg. 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 –
• The interested party has the right to obtain confirmation of the existence or otherwise of personal data c

which concern him, even if not yet registered, and their communication in an intelligible form.

• The interested party has the right to obtain the indication:
to. the origin of the personal data;
b. of the purposes and methods of the treatment;
c. of the logic applied in case of treatment carried out with the aid of electronic instruments;
d. of the identification details of the owner, of the managers and of the designated representative pursuant to article 5, paragraph 2;
And. of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representative in the territory of the State, managers or agents.

• The interested party has the right to obtain:
to. updating, rectification or, when interested, integration of data;
b. the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c. the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible o involves the use of means manifestly disproportionate to the protected right;
d. data portability.

• The interested party has the right to object, in whole or in part:
to. for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
b. to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.

Right of complaint
Interested parties who believe that the processing of personal data referring to them carried out through this site takes place in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the Regulation itself, or to take the appropriate judicial offices (art. 79 of the Regulation).