DATA CONTROLLER AND PLACE OF DATA PROCESSING
Data controller: HOTEL CARLTON INTERNATIONAL s.r.l.
Address: Via Correale 15
ZIP code: 80067 – City: Sorrento (NA)
Country: Italy – Europe
VAT number: IT 01294031214
This information is provided to inform regarding the principles regulating the use, concerning confidentiality, of personal data provided by users / visitors who use our web services.
This page describes how the website works as concerns the processing of personal data of users / visitors who navigate it. This information is provided in the framework of the EU Regulation 2016/679 as well as in accordance with the current legislation on the security of personal data, for those who wish to interact with the services of this site, starting from the u.r.l. hotelcarltonsorrento.com
This notice exclusively applies to hotelcarltonsorrento.com and does not apply to any other website which may be reached through any other link.
Data controller and place of processing
The website hotelcarltonsorrento.com:
- belongs to Hotel Carlton International s.r.l., Via Correale 15 – 80067 Sorrento, Italy, where the processing related to the management of any services and requests made through said website are carried out by a dedicated internal staff in charge. As a data controller, Hotel Carlton International s.r.l. is committed to ensuring compliance with the current personal data security laws;
- is entrusted in maintenance, for content management to Blastness SRL, VAT number 01195440118, address P.E. Taviani 164, 19126, La Spezia (SP)
- is hosted by server farm of Register.it, VAT numbernb 04628270482,where processing related only to technical services takes place.
Other external parties that may need to have access to the personal data on the site will be appointed as data processors by the controller. The updated list of data processors can be requested from the data controller.
Users / visitors are required to read this information carefully before submitting any personal information and / or filling in any electronic form on the site. By visiting this website you implicitly accept the practices described in this privacy statement.
3 Purpose and legal basis of the processing
The personal data given by users/visitors following any requests and/or the use of services managed by the website are used for the sole purpose of responding to the request and/or managing the service, and are communicated to third parties only if this is necessary. The legal basis of such processing, in this case, is the need to respond to a request from the interested party or manage a service specifically requested by the interested party.
If the users/visitors also give their consent, the data could also be used for commercial communication activities relating to offers of additional services. In this case, the legal basis for processing is the consent freely expressed by the applicant.
In all other cases, the navigation data is kept for the time strictly necessary to manage the processing activities within the limits set by the law.
4. Type of data processed and purpose of processing
Data deriving from navigation
The computer systems and software procedures used to operate the site may acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but, due to its nature, could, through processing and association with third-party data, allow users to be indirectly identified (IP addresses, domain names of the computers used for the connection, operating system and browser used, time data, etc. ..). This data can be used only for statistical information (therefore anonymous) and to check the correct functioning of the site. They are kept for a limited period and cannot be communicated or disseminated.
Data provided voluntarily by users/visitors
If users/visitors, connecting to the site, optionally, explicitly and voluntarily enter their personal data to make requests, access services, or subscribe to mailing lists, this will involve the acquisition of any personal data, which will be treated exclusively to satisfy any request or supply of the service. Personal data provided by users/visitors may be disclosed to third parties only if this is implicitly required to satisfy the requests.
Data relating to cookies
Cookies are small text strings that the sites you visit deposit on users'/visitors' computers to improve browsing and possibly monitor their use. Some may be re-transmitted to the same sites at the next visit by the same user, to allow recognition and to improve the functioning of the site, such as cookies that make browsing faster or that show the most interesting content for the user in light of the previous choices. During the navigation on a site, the user can also receive on his terminal cookies that are sent from different websites or web servers (c.d. "third parties").
The site uses two different types of cookies: it uses session cookies, to allow safe and efficient site navigation, to recognize from which country the user / visitor is connecting, to keep the user / visitor connected during the session, to allow the user / visitor to register and access their account and to allow them to complete their requests. These cookies are not stored on the computer permanently and disappear when the session is closed.
The website may also use persistent cookies, to personalize the navigation of the user / visitor according to the device used (computer, tablet or smartphone), cookies to analyse access and cookies to allow content to be shared through social networks or emails. These cookies are stored permanently on users '/ visitors' computers and have a variable duration.
5 Links to third-party sites
The owner reserves the right to use and / or present third-party services on his website. Regarding the management of personal data, the sites of these subjects could adopt different and independent criteria. Therefore, here, the owner declines any responsibility as regards the activities and contents of said linked sites.
6 Optional supply of data
Apart from that specified for navigation data, users / visitors are free to provide their personal data or decline. Denial to provide them may only make it impossible to obtain the required service.
7 Processing methods
Each treatment is carried out through automated tools (e.g. using electronic procedures and supports) and / or manually (for example on paper) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the regulations in force on the subject.
Specific security measures are implemented to prevent the loss, illicit or incorrect use of data, as well as any unauthorized access.
8 Rights of interested parties
The person to whom the personal data refer has the right at any time, within the limits and under the conditions established by law, to obtain confirmation that a processing of personal data concerning his person is being carried out and, in such case, to obtain the access to his/her data and the following information:
- purpose of processing;
- categories of personal data processed;
- recipients or categories of recipients to whom personal data are or may be communicated, in particular if located in third countries or in the case of international organizations;
- scheduled retention period of personal data or, if not available, criteria used to determine this period;
- all information available on their origin, in the case of data not collected from the interested party;
- existence of a possible automated decision-making process, including profiling.
The interested party also has the right to obtain, without undue delay, from the data controller:
- the correction of personal data that is inaccurate;
- the integration of incomplete personal data, also providing a supplementary declaration;
- the cancellation of personal data (within the limits and in the cases established by current legislation).
- limitation of processing
- the possibility to lodge a complaint with a supervisory authority.
In the aforementioned cases, the controller also communicates to each of the recipients to whom the personal data of the interested party have been transmitted, any adjustments, additions, cancellations or limitations of the processing, within the limits and in the forms established by the current legislation.
The interested party also has the right to receive the personal data concerning him/her in a structured format from the holder, commonly used and readable by an automatic device, and has the right to transmit such data, without any impediment, to another holder.
Such kind of requests must be sent directly to the data controller e-mail address firstname.lastname@example.org