Privacy Policy

This page describes how the website is managed with regard to the processing of the personal data of users who consult it, as well as their confidentiality. This information notice is also provided pursuant to Art. 13 of European Regulation 679/2016 – Personal Data Protection Regulations, to those who interact with the web services of Hotel Valadier, accessible electronically from the address: https://www.hotelvaladier.com

This information does not apply to other sites, pages, or online services accessible via hyperlinks that may be published on the site but refer to external resources outside the domain of Albergo Valadier S.r.l.

THE DATA CONTROLLER

Following consultation of this site, data relating to identified or identifiable persons may be processed. The "Data Controller" of the personal data processed following consultation of our site and any other data used for the provision of our services is Albergo Valadier S.r.l., Via della Fontanella 15 - 00187 Rome - Fiscal Code 00995220589 VAT No. 00950281006.

THE "DATA PROTECTION OFFICER"

The Data Protection Officer (DPO) can be reached at the following address: amministrazione@groupevaladier.com

PLACE OF DATA PROCESSING

Processing operations connected to the web services of this site [physically hosted by QNT S.r.l. Sole Shareholder ("www.qnt.it")] take place at our headquarters and are carried out exclusively by our authorized and trained staff, or by any persons in charge of occasional maintenance operations.

The personal data provided by users who submit hotel booking requests or requests for information material (information, newsletters, registrations, etc.) are used for the sole purpose of performing the service or performance requested and are not communicated to third parties, except in the following possible cases:

commercial partners of Hotel Valadier to whom the data is communicated exclusively to process online bookings, including SimpleBooking (https://www.simplebooking.travel/it);

persons, companies, or professional firms providing assistance and consulting activities to Albergo Valadier S.r.l. in accounting, administrative, legal, tax, and financial matters;

subjects to whom the right to access the data is recognized by law provisions or orders of the authorities.

Credit card data used for bookings will automatically be made unavailable after a period of six months from the departure date.

TYPES OF DATA PROCESSED – LEGAL BASIS – NATURE OF PROCESSING
NAVIGATION DATA

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters relating to the user's operating system and computer environment. This data, necessary for the use of web services, is also processed for the purpose of:

obtaining statistical information on the use of services (most visited pages, number of visitors per hour or day, geographical areas of origin, etc.);

checking the correct functioning of the services offered.

The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

Legal Basis: the processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, taking into account the reasonable expectations of the data subject and the activities strictly necessary for the operation of the site and navigation itself - (Recital 47 - Art. 6, par. 1, letter f of the GDPR);

Nature of Provision: The provision of data is necessary for browsing the website.

DATA PROCESSED THROUGH SOCIAL MEDIA PLATFORMS

Regarding the processing of personal data carried out by the managers of the Social Media platforms used by the Controller, please refer to the information provided by them through their respective privacy policies. The Controller processes the personal data provided by users through the dedicated Social Media platform pages in order to manage interactions with users (comments, public posts, etc.) and in compliance with current regulations.

DATA VOLUNTARILY PROVIDED BY THE USER

The optional, explicit, and voluntary sending of messages to the Controller's contact addresses, private messages sent by users to institutional profiles/pages on social media (where this possibility is provided), as well as the compilation and submission of the forms present on the controller's website, entail the acquisition of the sender's contact data, necessary to reply, as well as all personal data included in the communications. The data will be stored solely for the requested subscription to receive newsletters or special offers and will not be communicated to anyone. We do not collect or use personal information about website visitors. Visitors remain anonymous. The only exception concerns personally identifiable information required to fulfill contractual booking obligations to the user.

A. Newsletter

Website visitors can register for our newsletter service. By registering, the user's e-mail address will automatically be included in a contact list to which e-mail messages containing periodic updates with information, including commercial and promotional information, relating to initiatives, events, or promotions of the data controller may be sent. To subscribe to the Newsletter, you can use the registration forms on the site by entering your name and e-mail address. The data entered will be used for the sole purpose of sending our newsletter via e-mail and will not be communicated to third parties.

Legal Basis: The processing is based on consent to the processing of personal data (Recitals 42 and 43 and Art. 6 par. 1 letter a of the GDPR).

Nature of Provision: Provision is optional. Failure to provide the necessary data will make it impossible to receive communications.

B. Bookings

In the event of a booking on the Website, the user is required to provide their name, telephone number, billing address, e-mail address, information on payment methods, and their credit card. Albergo Valadier S.r.l. will use this information only for processing the booking and for sending specific relevant information for the confirmation of the same, such as the receipt, the booking code, and the terms and conditions. The information provided will not be used for marketing purposes and will not be sold, transmitted, licensed, or forwarded to third parties in any way, with the exception of the online booking service providers SimpleBooking (https://www.simplebooking.travel), credit card issuers who may be contacted for the sole purpose of verifying validity, and online payment service providers Nexi Payments S.p.A. (https://www.nexi.it/it/ecommerce/xpay), exclusively for purposes related to the management of online bookings. In any case, the site administrator ensures the adoption of scrupulous procedures to protect browsing data and the use of special care to protect credit card data provided during online bookings.

Legal Basis: The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (Recital 44 and Art. 6 par. 1 letter b of the GDPR).

Nature of Provision: Provision is necessary. Failure to provide the necessary data will make it impossible to complete bookings.

C. Management of Personal Data Collected from Personal Curriculum Vitae (CV)

It is possible to use the contact of Albergo Valadier S.r.l. to send candidates' Curriculum Vitae in paper and/or digital format. The spontaneous and voluntary submission of the CV will be implicitly considered as informed consent granted by the data subject to the receipt and processing of the personal data contained therein exclusively for the purpose related to the selection of potential candidates. The data processed for the purpose of candidate selection is of a personal nature useful for finding the specific profile required. In general, the nature of personal data is standard, except in some eventual cases where sensitive data may be indicated, necessary to identify specific requirements provided for by current regulations, such as belonging to protected categories, suitability for certain jobs, and/or mandatory employment placements, in compliance with the limits indicated by the General Provision of the Garante of June 5, 2019, which amended the General Authorization of the Garante no. 1 of December 15, 2016, on the processing of sensitive data in employment relationships.

Legal Basis: The processing is based on consent to the processing of personal data (Recitals 42 and 43 and Art. 6 par. 1 letter a) of the GDPR) and/or the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (Recital 44 - Art. 6 par. 1 letter b) of the GDPR).

Nature of Provision: Provision is necessary. Failure to provide the necessary data will make it impossible to apply.

General Rules for Sending Curricula Vitae: Any Curricula Vitae received spontaneously, in response to an announcement, or to our request will be archived directly by designated personal data processors according to the personal data security guidelines adopted in compliance with the security measures referred to in Chapter IV Sec 2 of GDPR 679/2016. These will be printed only on the occasion of a meeting and interview with the data subject. To send Curricula Vitae, please use the following e-mail addresses: Albergo Valadier S.r.l., Via della Fontanella 15 - 00187 Rome, c.a. Personnel Manager, E-mail: jobs@hotelvaladier.com.

D. Administrative-Accounting Management

For activities of an organizational, administrative, financial, and accounting nature, as well as client/user data management, the data controller may process the relevant personal data.

Legal Basis: The processing is necessary for the performance of a contract to which the data subject is party (Recital 44) or for compliance with a legal obligation (Art. 6 par. 1 letter c) of the GDPR).

Nature of Provision: The provision of personal data is mandatory, as it is indispensable in order to execute legal obligations.

COOKIES AND TRACKING TECHNOLOGIES USED

Cookie technologies are applied on this site for different purposes, including IT authentication or session monitoring, and storing specific technical information regarding users who access the web server provider, in compliance with the Guidelines on cookies and other tracking tools adopted on internet sites (June 10, 2021) by the Privacy Garante and the Guidelines of the European Data Protection Board (EDPB) of May 2020. More information on the cookies adopted is available in the Cookie Policy of this website. However, if the user blocks or deletes a cookie, it may be impossible to restore previously specified customized preferences or settings, and our ability to customize the user experience will be limited.

Legal Basis: For non-technical cookies and comparable technologies, the processing is based on consent to the processing of personal data (Art. 6 par. 1 letter a and Recitals 42 and 43 of the GDPR). Consent is given through the banner and the cookie policy of the site.

Nature of Provision: See the cookies policy in the footer of the site.

DATA RETENTION PERIOD OR CRITERIA TO DETERMINE THE PERIOD

In compliance with the provisions of Art. 5 paragraph 1 letter e) of Reg. UE 2016/679, the personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. The retention times of personal data provided through the website depend on the purpose of the processing carried out, in particular:

purposes related to technical navigation data for the correct functioning of the website: except for any ascertainment of responsibility, navigation data do not persist for more than seven days;

purposes of replying to requests for information/provision of requested services (maximum 12 months for contact requests; 10 years for any administrative/accounting/financial documentation relating to the provision of a service);

collection of data for personnel selection, maximum 6 months. In principle, data collected during the recruitment process will be deleted as soon as it is clear that no job offer will be made or that the offer will not be accepted by the candidate;

newsletter, marketing, or promotional communications in general via e-mail (maximum 24 months – until revocation of consent);

administrative-accounting management purposes: 10 years as per legal terms for the retention of administrative/accounting/financial documentation;

purposes related to the management of cookies: see the cookies policy in the footer of the site;

purposes related to the management of whistleblowing reports: see the information notice on the reporting portal.

TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES

Personal data are not transferred to Third Countries outside the EU, in compliance with the provisions of Chapter V of GDPR 679/2016.

OPTIONAL NATURE OF DATA PROVISION

Apart from what is specified for navigation data, the user is free to provide the personal data contained in the request forms to Albergo Valadier S.r.l. or indicated in contacts with the hotel to send CVs, to make online bookings, or to request the sending of information material or other communications. Failure to provide them may make it impossible to obtain what is requested.

PROCESSING METHODS AND DATA PROTECTION MEASURES

Personal data are also processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected, as indicated in this privacy policy. The Controller and the Data Processors ensure the adoption of appropriate organizational, technical, and physical measures to guarantee a level of security appropriate to the risk and that personal data are processed appropriately and in accordance with the purposes for which they are managed, in compliance with the provisions of Art. 32 of GDPR 2016/679. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access. There is no automated decision-making process for data processing.

RIGHTS OF DATA SUBJECTS

The data controller is Albergo Valadier S.r.l., Via della Fontanella 15 - 00187 Rome. The Data Protection Officer can be reached at the company contacts. You may contact these subjects at any time to exercise your rights as provided for by Chapter III of GDPR 679/2016, in particular, the right to request access to personal data and the rectification or erasure of the same (Right to be Forgotten) or the restriction of processing concerning you or to object to their processing, the right to obtain a copy of the personal data being processed, and the right to data portability, by submitting a specific request, also through the e-mail address: valadierhtl@hotelvaladier.com.

RIGHT TO LODGE A COMPLAINT

Data subjects who believe that the processing of personal data relating to them carried out through this site takes place in violation of the provisions of the Regulation have the right to lodge a complaint with the Garante, as provided for by Art. 77 of the Regulation itself, or to bring judicial proceedings (Art. 79 of the Regulation).