Privacy policy di www.grandhotelvillaitria.com

Privacy Policy for Business Partners

This Privacy Policy applies to www.grandhotelvillaitria.com owned and operated by Grand Hotel Villa Itria, Via Antonio Aniante 3, 95029 Viagrande (CT), Italy. VAT number: 05117150879. Describes how Grand Hotel Villa Itria collects and processes personal data on current, past or potential Travel Providers and other business partners.

Therefore, this Notice applies to the personal data of owners, employees, representatives or other individuals acting on behalf of a Travel Provider or other business partner (the Travel Providers, other business partners and individuals connected to them will be 'now collectively or individually referred to as "Business Partners" or with pronouns such as "you"). A Business Partner, within the meaning attributed to it in this Privacy Policy, could be a Travel Supplier (understood as an accommodation facility but also an attraction, park, museum etc.), a partner that makes it possible to book Travel through its websites, app and / or other channels (including travel agencies), third party suppliers or other partners who have a business relationship with Grand Hotel Villa Itria.

For information on how Grand Hotel Villa Itria uses cookies, click here.

Data collection

The personal data that Grand Hotel Villa Itria collects about commercial Partners depend on the context of the relationship and the commercial interaction that binds the Partners themselves to Grand Hotel Villa Itria, on the choices made by the Commercial Partner and on the products, services and functionalities. which this benefits from. Personal data collected by Grand Hotel Villa Itria on a Business Partner may include the following (depending on the specific situation, not all of the following types of data may be considered personal as they may relate to a company rather than an individual):

Personal data you provide to us

  • Contact details: We collect Business Partner contact details such as name and / or surname, date of birth (if necessary), business e-mail address and postal address, telephone and fax number.
  • Financial data: We collect the data necessary for payment and billing, including bank details: current account number, VAT number and credit notes.
  • Data for verification: As part of the registration process, Grand Hotel Villa Itria may ask the Business Partner or his representative to provide a copy of the identity card or passport, a photo, a video or other relevant information to verify the Partner's authenticity. commercial

Other Information We Collect Automatically

When you use the online services of Grand Hotel Villa Itria such as the online registration form or a user account (e.g. the extranet or a Partner Center), or use a Grand Hotel Villa Itria app, Grand Hotel Villa Itria collects information also automatically and some of these may be personal data, such as the language set, the IP address, the location, the settings and the operating system of the device, the registration information, the time of use, the requested URL, the your status report, user agent (browser version information), browsing history, user's booking ID and type of data displayed.

By sharing the personal data of other individuals (for example members of your staff) in connection with your business, you confirm that these individuals have been informed of the use of their personal data by Grand Hotel Villa Itria in accordance with this Privacy Policy and that they have given their consent where required.

Other information we receive from other sources

  • Information on insolvencies: In the event of insolvencies, Grand Hotel Villa Itria may receive information from insolvency administrators, courts or other public authorities regarding a Business Partner.
  • Data relating to requests from law enforcement and tax authorities: Law enforcement and tax authorities can contact Grand Hotel Villa Itria and provide additional information on Business Partners if they are involved in an investigation
  • Fraud detection: In some cases, and as permitted by current legislation, Grand Hotel Villa Itria may need to collect data through third-party sources in order to prevent and detect fraud.

Purposes of the collection

Grand Hotel Villa Itria uses the information on Business Partners mentioned above, some of which may be personal data, for the following purposes:

A. Registration and administration of the account
Grand Hotel Villa Itria uses account data, financial data and contact data for registration on Grand Hotel Villa Itria, verification or management of the commercial relationship with the Partner

B. Customer Support
uses the information provided, including possibly personal data, to provide support services such as responding to requests, doubts and questions from Business Partners

C. Other activities, including marketing
If a Business Partner is using the online registration feature and has not yet completed the procedure, Grand Hotel Villa Itria may send a reminder to remind them to continue. We believe that this additional service may be useful to our future Business Partners, as it allows them to continue registering without having to re-enter all the required data from scratch. Grand Hotel Villa Itria may invite Business Partners to participate in events that it organizes and which it considers interesting for a Business Partner, or it may use personal data to offer and host online forums that allow Business Partners to find answers to the most frequently asked questions about use of the services of Grand Hotel Villa Itria and on the offer of their products and services. Grand Hotel Villa Itria uses personal data such as contact details to communicate product or system updates, to send the Grand Hotel Villa Itria newsletter, to invite a business partner to participate in referral programs or for other marketing communications. When Grand Hotel Villa Itria uses personal data to send direct online advertising messages, Grand Hotel Villa Itria always includes a link to unsubscribe.

D. Messaging tools
Grand Hotel Villa Itria may offer certain Business Partners various means of communicating with their customers. Business Partners can contact Grand Hotel Villa Itria to send guests information or questions relating to a reservation, or communicate for example via alias email addresses, which always include Grand Hotel Villa Itria as the recipient. Grand Hotel Villa Itria can access communications and uses automatic systems to view, scan and analyze communications for security purposes, fraud prevention, compliance with legal and regulatory requirements, investigations into possible misconduct, product development and improvement, research, customer engagement (including providing customers with information and offers we believe they may be interested in), technical support and customer service. Important: all communications sent or received using the communication tools of Grand Hotel Villa Itria will be received and stored by Grand Hotel Villa Itria.

E. Statistics, improvement and research
Grand Hotel Villa Itria uses the information provided, which may include personal data, for analytical purposes. This is part of our commitment to improve Grand Hotel Villa Itria's services and user experience, but may also be for testing, troubleshooting and improving the functionality and quality of Grand Hotel Villa Itria's online services. . Furthermore, Grand Hotel Villa Itria regularly invites Business Partners to participate in surveys or other market research. Some business partners may receive an invitation to join a dedicated online platform on which to interact with Grand Hotel Villa Itria itself and / or exchange experiences with other business partners. To find out how personal data may be processed differently from as described in this Privacy Policy, consult the information provided in the invitation to respond to the survey, take part in market research or join the online platform.

F. Security, fraud prevention and detection
We process the information you provide, which may include personal data, for the purpose of investigating, preventing and detecting fraud and other illegal or infringing activities. This information could be personal data that the Business Partner has provided to Grand Hotel Villa Itria, for example for verification purposes as part of the registration process, or personal data collected automatically, or personal data obtained from third-party sources (including customers). Grand Hotel Villa Itria may also use personal data to facilitate criminal prosecution, if necessary. For these purposes, personal data could be shared with law enforcement or with external consultants. Grand Hotel Villa Itria has the right to use personal data to assess risks or for security purposes, including user authentication.

G. Legal Purposes and Compliance with Laws
In some cases Grand Hotel Villa Itria must use the information provided, which may include personal data, to manage and resolve legal disputes, for government and compliance investigations, to enforce agreements with Business Partners or to resolve a customer's complaint in reasonable way.

It is important to keep in mind that the information on the accommodation, including name and address, will be used in accordance with the General Terms and as part of the Contract with the Accommodation facilities entered into separately; for example displayed on third-party websites to allow the Booking of the Trip.

If we use automated means to process personal data that produce legal effects or have a significant effect on you, we will take the necessary measures to safeguard your rights and freedoms, including the right to obtain human intervention.

Legal principles: with regard to purposes A and B, Grand Hotel Villa Itria uses as a legal basis the need to process personal data for the execution of the agreement between the Business Partner and Grand Hotel Villa Itria. If the necessary information is not provided, Grand Hotel Villa Itria cannot register a Travel Provider or otherwise work with a Business Partner, nor can it provide customer assistance. Regarding the purposes from C to G, Grand Hotel Villa Itria relies on its legitimate commercial interest to provide its services or obtain services from business partners, in order to prevent fraud and improve its service. When personal data is used for the legitimate interest of Grand Hotel Villa Itria or a third party, Grand Hotel Villa Itria will always reconcile the rights and interests of the Business Partner for the protection of the latter's personal data and the rights and interests of Grand Hotel Villa Itria or the third party.

With regard to purposes F and G, Grand Hotel Villa Itria also relies, where applicable, on compliance with its legal obligations (for example legitimate requests by law enforcement agencies).

If you wish to object to the processing described in points C to E and no direct opt-out mechanisms are made available to you (for example in your account settings), please contact us at the following e-mail address: info@grandhotelvillaitria.com

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Facebook permissions requested by this website

This Website may require some Facebook permissions that allow it to perform actions with the User's Facebook account and to collect information, including Personal Data, from it. This service allows this Website to connect with the User's account on the Facebook social network, provided by Facebook Inc.

For more information on the following permissions, please refer to documentation of Facebook permissions ed alla Facebook privacy policy.

  • Access to accounts on third party services

    This type of service allows this Website to collect data from your accounts on third party services and perform actions with them.
    These services are not activated automatically, but require the express authorization of the User.

    Access to the Facebook account (this Website)

    This service allows this Website to connect with the User's account on the Facebook social network, provided by Facebook, Inc.

    Permissions asked: Access to private data and City.

    Place of processing: United States -Privacy Policy.

    Access to the Stripe account (Stripe Inc)

    This service allows this Website to connect with the User's account on Stripe, provided by Stripe, Inc.

    Personal Data collected: various types of Data as specified in the privacy policy of the service.

    Place of processing: United States -Privacy Policy.

  • Contact the user

    Contact form (this Website)

    By filling in the contact form with their data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form header.

    Personal Data collected: ZIP code, city, Fiscal Code, surname, date of birth, email address, country, name, fax number, telephone number, VAT number, province, company name, gender, state and various types of Data.

    Mailing list o newsletter (questo Sito Web)

    By registering with the mailing list or newsletter, the User's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be transmitted. User's email address may also be added to this list as a result of registering on this Website or after making a purchase.

    Personal Data collected: ZIP code, city, surname, Cookie, date of birth, Usage data, email address, country, name, telephone number, province, company name, gender, website and state.

  • Payment management

    The payment management services allow this Website to process payments by credit card, bank transfer or other tools. The data used for payment are acquired directly by the requested payment service manager without being processed in any way by this Website.
    Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding payment.

    Gestpay Banca Sella (Banca Sella S.p.A.)

    Gestpay is a payment service provided by Banca Sella S.p.A.

    Personal Data collected: various types of Data as specified in the privacy policy of the service.

    Place of processing: Italy -Privacy Policy.

    MyBank UniCredit (UniCredit S.p.A)

    MyBank è un servizio di pagamento fornito da UniCredit S.p.A.

    Personal Data collected: various types of Data as specified in the privacy policy of the service.

    Place of processing: Italy -Privacy Policy.

    PayPal (Paypal)

    PayPal is a payment service provided by PayPal Inc., which allows the User to make online payments.

    Personal Data collected: various types of Data as specified in the privacy policy of the service.

    Stripe (Stripe Inc)

    Stripe is a payment service provided by Stripe Inc.

    Personal Data collected: various types of Data as specified in the privacy policy of the service.

    Place of processing: United States -Privacy Policy.

  • Heat mapping and session recording

    Heat mapping services are used to identify which areas of a page are subject to the passage of the cursor or mouse click in order to detect which of them attract the most interest. These services allow you to monitor and analyze traffic data and are used to keep track of User behavior.
    Some of these services may log sessions and make them available for later viewing.

    Smartlook (Smartsupp.com, s.r.o.)

    Smartlook is a heat mapping and session recording service provided by Smartsupp.com, s.r.o.

    Personal Data collected: Cookies, Usage Data and various types of Data as specified in the privacy policy of the service.

    Place of processing: Czech Republic -Privacy Policy.

  • Hosting ed infrastruttura backend

    This type of service has the function of hosting data and files that allow this website to function, allow its distribution and provide a ready-to-use infrastructure to provide specific features of this website.
    Alcuni di questi servizi funzionano attraverso server dislocati geograficamente in luoghi differenti, rendendo difficile la determinazione del luogo esatto in cui vengono conservati i Dati Personali.

    ArubaCloud (Aruba S.p.A.)

    ArubaCloud is a hosting service provided by Aruba S.p.A.

    Personal Data collected: various types of Data as specified in the privacy policy of the service.

    Place of processing: Italy -Privacy Policy.

  • Interaction with live chat platforms

    This type of service allows you to interact with live chat platforms, managed by third parties, directly from the pages of this Website. This allows the User to contact the support service of this Website or this Website to contact the User while browsing his pages.
    In the event that an interaction service with live chat platforms is installed, it is possible that, even if the Users do not use the service, it collects Usage Data relating to the pages in which it is installed. Additionally, live chat conversations may be recorded.

    Facebook Messenger Customer Chat (Facebook, Inc.)

    The Facebook Messenger Customer Chat is an interaction service with the Facebook Messenger live chat platform, provided by Facebook, Inc.

    Personal Data collected: Cookies, Usage Data and About me.

    Place of processing: United States -Privacy Policy.

    Widget di Tawk.to (tawk.to ltd.)

    The Tawk.to Widget is an interaction service with the Tawk.to live chat platform, provided by tawk.to ltd.

    Personal Data collected: Cookies and Usage Data.

    Place of processing: United Kingdom -Privacy Policy.

  • Infrastructure monitoring

    This type of service allows this Website to monitor the use and behavior of its components, to allow for the improvement of performance and functionality, maintenance or troubleshooting.
    The Personal Data processed depend on the characteristics and methods of implementation of these services, which by their nature filter the activity of this Website.

    Uptime Robot (Buzpark Bilisim Tarim Urunleri Sanayi Tic. Ltd. Sti.)

    Uptime Robot is a monitoring service provided by Buzpark Bilisim Tarim Urunleri Sanayi Tic. Ltd. Sti.

    Personal Data collected: various types of Data as specified in the privacy policy of the service.

    Place of processing: Turkey -Privacy Policy.

  • Remarketing e behavioral targeting

    This type of service allows this Website and its partners to communicate, optimize and serve advertisements based on the past use of this Website by the User.
    This activity is carried out by tracking Usage Data and the use of Cookies, information that is transferred to the partners to whom the remarketing and behavioral targeting activity is connected.
    In addition to the possibility of opt-out offered by the services listed below, the User can opt for the exclusion from receiving cookies relating to a third party service, by visiting the opt-out page of the Network Advertising Initiative.

    AdWords Remarketing (Google Inc.)

    AdWords Remarketing is a remarketing and behavioral targeting service provided by Google Inc. that connects the activity of this Website with the Adwords advertising network and the Doubleclick Cookie.

    Personal Data collected: Cookies and Usage Data.

    Place of processing: United States -Privacy Policy – Opt Out.

    Facebook Remarketing (Facebook, Inc.)

    Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.

    Personal Data collected: Cookies and Usage Data.

    Place of processing: United States -Privacy Policy – Opt Out.

    Remarketing with Google Analytics for display advertising (Google Inc.)

    Google Analytics for display advertising is a remarketing and behavioral targeting service provided by Google Inc. that connects the tracking activity carried out by Google Analytics and its Cookies with the Adwords advertising network and the Doubleclick Cookie.

    Personal Data collected: Cookies and Usage Data.

    Place of processing: United States -Privacy Policy – Opt Out.

    Facebook Custom Audience (Facebook, Inc.)

    Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.

    Personal Data collected: Cookies and emails.

    Place of processing: United States -Privacy Policy – Opt Out.

  • Statistics

    The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.

    Estensione Display Advertisers per Google Analytics (Google Inc.)

    Google Analytics on this Website may use Google's interest-based advertising, third-party audience data and information from the DoubleClick Cookie to extend statistics with demographic data, interests and data on interactions with advertisements.

    Personal Data collected: Cookies and Usage Data.

    Place of processing: United States -Privacy Policy – Opt Out.

    User ID extension for Google Analytics (Google Inc.)

    Google Analytics on this Website uses a function called User ID. This allows a more accurate tracking of Users by assigning each one a unique ID for various sessions and devices, but in such a way as not to allow Google to personally identify an individual or permanently identify a specific device.
    The User ID extension also allows you to connect data from Google Analytics with other user data collected from this website.
    The Opt Out link provided below allows you to disable tracking for the device you are using, but does not exclude further tracking activities carried out by the Owner. To deactivate the latter as well, contact the owner via the contact email address.

    Personal Data collected: Cookies.

    Place of processing: United States -Privacy Policy – Opt Out.

    Facebook Analytics for Apps (Facebook, Inc.)

    Facebook Analytics for Apps is a statistics service provided by Facebook, Inc.

    Personal Data collected: Usage data and various types of Data as specified in the privacy policy of the service.

    Place of processing: United States -Privacy Policy.

    Google Analytics (Google Inc.)

    Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
    Google potrebbe utilizzare i Dati Personali per contestualizzare e personalizzare gli annunci del proprio network pubblicitario.

    Personal Data collected: Cookies and Usage Data.

    Place of processing: United States -Privacy Policy – Opt Out.

    Facebook Ads conversion tracking (Facebook, Inc.)

    Facebook Ads conversion tracking is a statistics service provided by Facebook, Inc. that connects data from the Facebook ad network with actions performed within this Website.

    Personal Data collected: Cookies and Usage Data.

    Place of processing: United States -Privacy Policy.

    Google AdWords conversion tracking (Google Inc.)

    Google AdWords conversion tracking is a statistics service provided by Google Inc. that connects data from the Google AdWords ad network with actions performed on this Website.

    Personal Data collected: Cookies and Usage Data.

    Place of processing: United States -Privacy Policy.

    WordPress Stat (Automattic Inc.)

    WordPress Stats is a statistics service provided by Automattic Inc.

    Personal Data collected: Cookies and Usage Data.

    Place of processing: United States -Privacy Policy.

Sharing of data

  • Condivisione dei dati. To support the use of Grand Hotel Villa Itria's services, information about you (which may contain personal data) may be shared with subsidiaries of the group of companies to which Grand Hotel Villa Itria belongs, which operate as service providers. for Grand Hotel Villa Itria also in relation to the services provided by customer assistance.
  • Sharing with third parties. We share Business Partner information (which may include personal data) with third parties as permitted by law and described below. We do not sell or rent personal data.
    1. Providers of services and products. We share your information with third party Service Providers to provide our products and services, store data or manage business on our behalf. These service providers will process personal data only as indicated by Grand Hotel Villa Itria and to provide services to it.
    2. Payment Providers and other Financial Institutions. To process payments between a Business Partner and Grand Hotel Villa Itria or a user who books, personal data, if considered relevant, will be shared with Payment Providers and other financial institutions.
    3. Compulsory disclosure. If required by law, where strictly necessary for the performance of our services, in legal proceedings or to protect our rights or those of other members of the Grand Hotel Villa Itria srl group of companies or users, we share personal data with law enforcement, with investigative organizations or with other group members.

Sharing and disclosure of aggregated data: we may share information with third parties, for example for sector analysis and demographic profiling, in aggregate form and / or in a form that does not allow the recipient of such data to identify you.

International data transfer

The transmission of personal data as described in this Privacy Policy may include overseas transfers to countries that do not provide for comprehensive and complete data protection laws such as those of the European Union countries. Where required by Community law, we will only transfer personal data to recipients who offer an adequate level of protection for personal data. In such circumstances it may be necessary to establish contractual measures to ensure that data protection is in line with European standards. You can ask to view a copy of these contractual agreements by contacting us in the manner described below.

Safety

In compliance with the European laws on the protection of personal data, Grand Hotel Villa Itria observes suitable procedures to prevent information containing personal data from being consulted without authorization or used in an improper way.

We use industry-specific systems and procedures to safeguard information that contains personal data. We also rely on security procedures and technical and physical restrictions in order to prevent access and use of personal data contained in our servers. Only authorized personnel can access personal data while carrying out their work.

Data retention

We will keep personal data for as long as we deem necessary to manage the business relationship with a Business Partner, provide the services of Grand Hotel Villa Itria to a Business Partner, comply with the laws in force (including those regarding the retention of documents), resolve disputes with any party and if otherwise necessary to allow Grand Hotel Villa Itria to carry out its commercial activity. All personal information retained will be subject to the provisions of this Privacy Policy and our internal guidelines for retention. If you have any questions about specific data retention periods, please contact us using the contact details below.

Place

The Data is processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For more information, please contact the Data Controller.
The User's Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the place of processing, the User can refer to the section relating to the details on the processing of Personal Data.
L’Utente ha diritto a ottenere informazioni in merito alla base giuridica del trasferimento di Dati al di fuori dell’Unione Europea o ad un’organizzazione internazionale di diritto internazionale pubblico o costituita da due o più paesi, come ad esempio l’ONU, nonché in merito alle misure di sicurezza adottate dal Titolare per proteggere i Dati.
Qualora abbia luogo uno dei trasferimenti appena descritti, l’Utente può fare riferimento alle rispettive sezioni di questo documento o chiedere informazioni al Titolare contattandolo agli estremi riportati in apertura.

Your choices and your rights

We want you to have control over how your personal data is processed. You can do this in the following ways:

  • you can ask us for a copy of your personal data in our possession;
  • you can notify us of any changes to your personal data or you can ask us to correct any of your information in our possession;
  • in specific situations, you can ask us to delete, block or limit your personal data in our possession, or object to particular ways in which we are using your personal information;
  • in specific situations, you can also ask us to send your personal information in our possession to a third party

When we use your personal data based on your consent, you have the right to withdraw that consent at any time under applicable law. Furthermore, when we process your personal data on the basis of a legitimate interest or a public interest, you have the right to object at any time to the use of your personal data in accordance with applicable law.

We rely on you to ensure that your personal data is complete, accurate and current. Please notify us immediately if there are any changes or inaccuracies regarding your personal data.

Questions and complaints

If you have any questions or concerns regarding the management of your personal data or if you want to exercise your rights under this Privacy Policy, please contact our Data Protection Officer at info@grandhotelvillaitria.com. All questions and complaints addressed to Grand Hotel Villa Itria and regarding privacy will be examined; Grand Hotel Villa Itria will attempt to resolve complaints and questions in line with internal procedures. You can also contact the local data protection authority for any questions or complaints.

Changes to the information

As our activities are subject to change, this privacy policy may also be changed. If we make any material changes or modifications that impact you (for example if we start processing your personal data for purposes other than those outlined above), we will contact you before getting started.