PRIVACY POLICY

This page describes how the site manages the personal data of users who visit it. The processing of data is always based on principles of legality and fairness in compliance with current regulations, and appropriate security measures are taken to protect the data.

This privacy policy is also provided as a brief notice pursuant to Article 13 of Legislative Decree 196/2003 and Article 13 of the EU Regulation 679/2016 on privacy, as well as in compliance with the Cookie Provision No. 229 of May 8, 2014, to inform website visitors about the use of the data entered. Regarding the cookies used by the site itself, please refer to the specific notice. The notice is also provided in accordance with Recommendation No. 2/2001, adopted by the Working Party established under Article 29 of Directive 95/46/EC, to those who interact with the web services of this site, in order to protect personal data, accessible via telematics from the address: www.hotelhiberia.it.

By using any of our services and/or accepting this Privacy Policy, for example in the context of registering for one of our services, you consent to the collection and use of personal information as described in this Policy.

This Policy describes the practices we have adopted.

Please note that this Policy does not apply to the processing of personal information on behalf of and subject to the instructions of third parties, such as airlines, car rental companies and other service providers, companies that organize or offer travel packages, business partners or corporate clients.

1) PERSONAL INFORMATION WE COLLECT

During any contact or interaction with guests and in all other aspects of our work, we may collect personal information. This personal information may include: your contact details; personal characteristics, nationality, passport number and date and place of issue; travel history; payment information, such as card number and other card information, as well as authentication details and other billing information related to e-billing; guest preferences, with prior written consent; and additional personal information collected during registration/check-in at our hotel, including information required by local laws.

Event Profiles

If you plan to organize an event with us, we will record the event or meeting details, the date, the number of guests, guest room information, and, for corporate events, your organization’s information (name, annual budget, number of sponsored events each year). We also collect information about guests who are part of your group or event. If you visit as part of a group, we may request your personal information from the group and may send promotional information, with your express consent, following your group stay or event participation. If you visit as part of an event, we may share your information.

If you are an event organizer, we may also share your event information with third-party service providers who may send you marketing information about event services.

2) INFORMATION WE COLLECT FROM THIRD PARTIES

We may also collect information about you from third parties, including information from our partners (travel agencies, airlines, payment cards) and other partners; from social media services, in line with your settings on such services; and from third-party sources. We may add such information to the information we already hold and share it with others in accordance with this Policy.

3) PURPOSES OF DATA PROCESSING

The data is processed for the following purposes:

Managing customer relationships (reservations, issuing invoices, quotes), fulfilling any contractual obligations, managing disputes, and complying with legal obligations, particularly accounting and tax-related ones;
Providing and personalizing the services you request from our company, such as hotel bookings, and offering the expected level of hospitality in the room as described in greater detail below.
3a) Service-related purposes:

Sending (with your prior written consent) promotional offers on our services and updates on rates and offers, as well as greetings by regular mail, fax, or email;
Executing (with your prior written consent) hotel services such as external communication of data related to your stay solely to allow reception of objects, messages, and calls addressed to you;
Processing, with your prior written consent, the so-called sensitive data you voluntarily provided to offer a better level of hospitality at our hotel.
3b) Electronic receipt program

We may automatically enroll you in our electronic receipt program and use your email address to send your hotel bill by email. It is your responsibility to ensure that the email address we hold is correct (and preferred). If you make a reservation for another person using your email address, the electronic receipt for that person will be sent to your email. We may use your email address to send you, with your prior written consent, our newsletters and holiday greetings.

3/1 Additional purposes

The computer systems and software procedures used to operate this website collect certain personal data, whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified users, but by its nature, through processing and association with data held by third parties, it could allow users to be identified.

4) DATA CONTROLLER IDENTIFICATION

This website is managed by the Data Controller, identified as the current owner and legal representative of GESTINCOMING srl, with its registered office at Via XXIV Maggio, 8 00187 Rome, VAT No. 08994361007, email: info@hotelhiberia.it.

The Data Controller guarantees the security, confidentiality, and protection of the data in its possession at any stage of the processing.

5) PLACE OF PROCESSING

The data will be processed by the Data Controller at its legal and operational headquarters located at Via XXIV Maggio, 8 00187 Rome.

6) NATURE OF DATA PROVISION

For the purposes outlined in point 3), in the case of booking a hotel stay, the provision of data is mandatory, and failure to provide such data may result in the inability to fulfill the requested service.

For the purposes outlined in points 3a) and 3b), the provision of data is optional and does not impede the provision of the requested service (hotel stay).

7) REFUSAL TO PROVIDE DATA

The data subject may refuse to provide the Data Controller with their browsing data. To do so, they must disable cookies by following the instructions provided by their browser. Disabling cookies may negatively impact the functionality of the website.

8) DATA RECIPIENTS

No data deriving from the web service (such as browsing data and cookies) is communicated or disclosed, except where necessary to judicial or law enforcement authorities.

The data is processed by personnel specifically authorized in writing to handle the data (administrative staff, public relations personnel, including external staff, IT system managers, and marketing personnel, whether internal or external to the company, interns, data processing managers and their collaborators, and staff responsible for specific requests), only when the processing is necessary to carry out their duties, and only the operations necessary for the performance of those duties are carried out.

The data may also be processed by data processors (including external companies that handle shipping, marketing, server management, and storage). These external companies may process the data through designated appointees who are authorized in writing and can carry out the same activities and process the data for the same purposes for which the data processors have been appointed by GESTINCOMING srl.

The data provided by the user may be disclosed to subjects who are required to receive such data by law or for the legitimate interests of the company in the context of legal proceedings.

9) DATA RETENTION PERIOD

The data is processed for the time necessary to provide the service requested by the User, or for the purposes described in this document.

The User can always request that the processing be stopped or that their data be deleted and/or restricted at any time.

10) DATA TRANSFER

The Data Controller does not transfer personal data to third countries or international organizations.

11) CONSENT REVOCATION

Pursuant to Article 23 of Legislative Decree 196/2003 and Article 6 of GDPR 679/16, the data subject may revoke their consent at any time.

12) RIGHTS OF DATA SUBJECTS

Pursuant to Article 7 of Legislative Decree 196/2003 and Articles 15 ("Right of Access"), 16 ("Right of Rectification"), 17 ("Right to Erasure"), 18 ("Right to Restriction of Processing"), 20 ("Right to Data Portability"), and 21 ("Right to Object to Automated Decision-Making") of the GDPR 679/2016, the data subject may exercise their rights by writing to the Data Controller at the following address: GESTINCOMING srl, Via XXIV Maggio, 8 00187 Rome, VAT No. 08994361007, email: info@hotelhiberia.it.

13) FILING A COMPLAINT

The data subject has the right to file a complaint with the supervisory authority in their country of residence.

14) AUTOMATED DECISION-MAKING PROCESSES

The Data Controller does not engage in processing activities that involve automated decision-making.

15) CHANGES TO THIS PRIVACY POLICY

The Data Controller reserves the right to modify this privacy policy at any time by notifying users on this page. Please review this page often, referring to the date of the last modification indicated at the bottom. If you do not accept the changes to this privacy policy, you must stop using this Application and may request that the Data Controller delete your personal data. Unless otherwise specified, the previous privacy policy will continue to apply to the personal data collected up until that time.

16) INFORMATION ABOUT THIS PRIVACY POLICY

The Data Controller is responsible for this privacy policy.

17) MINORS’ PRIVACY

Our website is intended for a general audience and does not offer services directed at children. If we become aware that a minor has provided personal data without the consent of a parent or guardian, we will immediately delete such information.

18) EXTERNAL LINKS

If this website or sections of our applications contain links to other sites, they are not bound by this Privacy Policy. We recommend that you carefully read the privacy policy on those external sites and examine their procedures for collecting, using, and disclosing personal information.

19) LEGAL DEFENSE

The personal data of the user may be used by the Data Controller in court or in the preparatory stages leading to legal action, as a result of improper use of this Application or the related services by the user. The user declares to be aware that the Data Controller may be required to disclose the data upon request of public authorities.

20) LEGAL REFERENCES

This privacy notice is drafted in compliance with the obligations set forth by Legislative Decree 196/2003 and GDPR 679/2016, Article 10 of Directive 95/46/EC, as well as the provisions of Directive 2009/136/EC regarding cookies.

This privacy policy concerns only this website.