Information on the protection of personal data

For Albergo Lago Rosso the security of your personal data is very important, for this reason we pay the utmost attention to the collection and management of the personal data that you will provide to us or that we will automatically acquire during your consultation of the website www.albergolagorosso.it (hereinafter also the "Site"), adopting specific measures to guarantee security, confidentiality and integrity, in compliance with the provisions of Regulation (EU) 2016/679 (hereinafter also the "Regulation") and any specific local regulations applicable to the protection of personal data.

By processing of personal data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data. Whenever, in the sections dedicated to the services of the Site, it will be necessary to provide your personal data, you will be provided with the necessary supplementary information, with respect to the present, aimed at allowing you to evaluate whether or not you want to proceed with the communication of your personal data for the purposes of treatment indicated from time to time.

Data controller

The data controller of personal data is Albergo Lago Rosso (hereinafter "Lago Rosso"), with headquarters in Località Lago di Tovel 38019 Tuenno fraz. of Ville D'Anaunia - TRENTO - Italy. And it can be reached from the following address: info@albergolagorosso.it.

Categories and nature of the data processed

www.albergolagorosso.it will process the personal data of users collected during navigation and use of the Site, as well as at the time of registration and forwarding of purchase orders, through electronic and automated tools (see also the "Cookies" section below).

Purpose

The acquisition and processing of your personal data will take place exclusively in compliance with the principles of lawfulness established by law. The data may be processed for the following purposes:

1. guarantee the correct navigation to the areas of the Site, due to the necessary nature of this treatment to allow navigation on the Site and the fulfillment of legal obligations;
2. process your requests to purchase Lago Rosso products or to use the services offered by the Site, due to the necessary nature of such processing to implement contractual and/or pre-contractual measures adopted upon your request;
3. follow up on your contact requests due to the necessary nature of such processing to implement contractual and/or pre-contractual measures adopted upon your request;
4. execution of statistics and measurement of the level of customer satisfaction, as well as sending promotional communications and newsletters (by mail and telephone, e-mail and text messages, also through automated tools) to the contacts released when completing the online registration form;
5. processing of information relating to the use of the Site (such as frequency of use, methods, habits, interests, statistics, purchase orders, etc.) through the use of cookies (see the following “Cookies Policy” section of www.albergolagorosso. it);

Mandatory or optional nature of the provision of data and consequences of any refusal

The provision of your personal data, indicated in points 1, 2, and 3 is optional, but failure to provide it could make it impossible to perform the requested services. For these hypotheses, consent to the processing of personal data for the purposes described above will not be required as this processing falls within the provision of article 6, par. 1, lit. b) of the Regulation. Any refusal to provide data will be subject to determine the impossibility for www.albergolagorosso.it to proceed with the contractual relationship and to process purchase orders or your requests in general.

We may also process your personal data in order to fulfill a legal obligation to which we are subject or, finally, for the pursuit of a legitimate interest of ours or that of third parties, including any defensive purposes, in compliance with the conditions and constraints provided by current legislation.

1. Type of personal data processed

During consultation of the pages of the Site, your personal data will be automatically acquired or, in relation to certain services, you will be asked to provide additional data.

     1.1 Data automatically acquired from the Site

        1.1.1. Navigation data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and are canceled immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Site; except for this eventuality, the data on web contacts are currently kept for the time strictly necessary.

        1.2 Data voluntarily provided by you

In order to allow you to take advantage of the various services offered by the Site, we will ask you, based on the service in question, to provide us with some of your personal data, such as: personal details, contact details (such as telephone contacts, e-mail accounts, domicile or residence address ), data relating to the payment method, and information on purchases and transactions. The provision of such data is entirely voluntary but, in some cases, failure to provide it will not allow us to be able to provide you with the relative service.

2 Methods of treatment

The processing of your personal data will be based on principles of correctness, transparency and protection of your rights and your privacy. All treatments carried out within the Site will be carried out with electronic or telematic tools, as well as paper and/or manual tools

Specific technical and organizational measures are observed to prevent data loss, illicit or incorrect use and unauthorized access in full compliance with the provisions of art. 32 of the Regulation.

The data will be processed with logic related to the purposes for which they were collected and in compliance with current safety standards, for the purposes indicated above or specified from time to time in any further information presented to the user.

3 Scope of communication of your personal data and categories of recipients

Some of your data may be made known by the Data Controller to specifically authorized subjects or Data Processors: among these subjects, we mean, for example, the technological partners of the Data Controller in the organization and management of the contractual relationship and direct marketing campaigns, including management of address databases and e-mail dispatches, or other suppliers of the Data Controller, whose services are functional to the execution of the requested service.

The list of Data Processors designated by the Data Controller is available from the same Data Controller and can be requested by e-mail at the addresses indicated above.

Furthermore, the data will be processed by the Data Controller through its representatives belonging to the commercial, administration, webmaster and legal areas, according to the need and purpose to be achieved from time to time and compatibly with the consents and requests of the interested party.

4 Exercise of the rights of the interested party

Pursuant to articles 15 and following of the Regulation, you have the right to request at any time, access to your personal data, rectification or cancellation of the same, limitation of treatment in the cases provided for by art. 18 of the Regulation, obtain the data concerning you in a structured format, commonly used and readable by an automatic device, in the cases provided for by art. 20 of the Regulation.

At any time, you may revoke, pursuant to art. 7 of the Regulation, the consent given, as well as proposing a complaint to the competent supervisory authority pursuant to art. 77 of the Regulation (Guarantor for the Protection of Personal Data), if you believe that the processing of your data is contrary to the legislation in force.

Furthermore, you will be able to formulate a request for opposition to the processing of your data pursuant to art. 21 of the Regulations, in which to give evidence of the reasons justifying the opposition: Lago Rosso reserves the right to evaluate the request, which will in any case be rejected, in the event that there are compelling legitimate reasons, prevailing over the interests, rights and freedoms of the interested party, to proceed with the treatment.

Requests must be sent in writing to the Data Controller at the address: info@albergolagorosso.it.

5 Cookie

More information https://www.albergolagorosso.it/eng/cookie.php.

6 Retention of personal data

Lago Rosso will process your personal data for the period strictly necessary to achieve the purposes referred to in article 2 of this information, in line with the principles of necessity and proportionality of the processing.

Without prejudice to the conservation obligations imposed by legal or regulatory provisions, your personal data will be processed in compliance with the conservation rules indicated below.

For the purpose referred to in point (1 PURPOSE), your personal data will be processed for the period strictly necessary and within the limits of the duration of the session, without prejudice to the specific rules dictated on the subject of cookies.

Personal data processed for the purposes referred to in points (2 and 3 PURPOSES), falling within the scope referred to in article 6, par. 1, lit. b) of the Regulations, will be kept for:

1. the period of 10 (ten) years starting from the termination of the contract; or, in the event that the interested party does not conclude a contract with the Data Controller following the establishment of a pre-contractual negotiation, for
2. the period of 24 (twenty-four) months from the start of the negotiation.

For the purposes referred to in point (4), your personal data will be kept until you explicitly request to be canceled from these purposes using the communication channels mentioned above.

For the purposes referred to in point (5), these data will be eliminated when they are no longer necessary for the purposes indicated above, subject to further conservation obligations established by law.

7 Changes to this Policy

From time to time, we may make changes to this information, for example to comply with new requirements imposed by applicable legislation or to meet technical requirements or in the face of new services provided by the Site or by Albergo Lago Rosso.

The updated information will be published on the Website: we therefore invite you to periodically consult this page.

This Privacy Policy was modified on December 20, 2022.