Hotel Palazzo Vecchietti
Sede legale:
Via degli Strozzi, 4
50123 Firenze
T: +39.055.2302802
F: +39.055.215142
P.I. 05831870489
PRIVACY POLICY
Updated as of 25 May 2018
In compliance with the obligations deriving from the Community legislation (European Regulation for the protection of personal data No. 679/2016, GDPR) and subsequent amendments, this website www.palazzovecchietti.com respects and protects the privacy of visitors and users, placing appropriate measures in place to protect the rights of users.
This document also takes into account the Recommendation n. 2/2001 that the European Data Protection Authorities have adopted to identify the minimum requirements for the collection of personal data online.
This privacy policy applies only to the online activities of this site and is valid for visitors / users of the site. The information is provided only for the site www.palazzovecchietti.com and not for other websites that may be consulted by the user through links.
The purpose of the privacy statement is to provide maximum transparency regarding the information that the site collects and how it is used.
LEGAL BASIS OF TREATMENT
Data processed according to consent
With the use or consultation of this site visitors and users explicitly approve this privacy statement and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service.
The provision of data and therefore the consent to the collection and processing of data is optional.
The User can deny consent and can revoke at any time a consent already provided by sending the request to the email info@palazzovecchietti.com. However, denying consent may make it impossible to provide certain services and the browsing experience on the site may be compromised.
TYPES OF DATA PROCESSED
Browsing the Site for consultation does not require any personal data; however, technologies are used that involve the storage of some data related to the tools used, somehow attributable to the user.
The personal data we receive from our customers helps us to personalize and continually improve our services and bookings on the site. We use this data in particular to manage orders, provide services, process payments, and communicate with you about reservations. We also use these data to improve our service, to prevent or expose fraud or abuse to the detriment of our website and to allow third parties to perform technical activities and other actions on our behalf.
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation and only for the duration of the connection, some data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. To this category of data belong:
- Internet protocol (IP) address associated with the device used to connect;
- type of browser and device parameters used to connect to the site;
- name of the Internet service provider (ISP);
- date and time of visit;
- web page of origin of the visitor (referral) and exit;
- any number of clicks made within the site and any expressed preference
- other parameters relating to the operating system and the user's IT environment.
This data can be used to obtain anonymous statistical information on the use of the site and to check its correct functioning as well as:
- to comply with the provisions of national and community regulations;
- to ascertain responsibility in case of hypothetical IT crimes to the detriment of the site and for investigations in the event of any disputes.
Only the data collected for surveillance purposes persist on servers for more than 12 months.
Data provided voluntarily by the User
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this Website entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.
PURPOSE OF THE TREATMENT
a) provide the requested services and manage customer relations. The provision of personal data necessary for these purposes is not mandatory, but the refusal to provide them implies the impossibility of carrying out what has been requested;
b) comply with the provisions of national and community regulations;
c) for security purposes (spam filters, firewalls, virus detection), the automatically recorded data may possibly also include personal data such as the IP address, which could be used, in compliance with applicable laws, in order to block attempts at damage to the site itself or to damage other users, or in any case harmful activities or constituting a crime.
This information is treated according to the legitimate interests of the holder.
THIRD PARTY SUPPLIERS
PALAZZO VECCHIETTI uses other companies and individuals to perform certain activities on our behalf.
In addition to the owner, in some cases, access to data may be gained by other categories of employees involved in the organization of the site (administrative, commercial, marketing, legal, technical managers) or external subjects (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies).
These providers only have access to the personal data that are necessary to perform their duties. We guarantee that they can not use the same data for other purposes and are also required to process personal data in accordance with this Privacy Policy, and in accordance with applicable regulations regarding the protection of personal data.
The Data Controller is not involved in these treatments nor can he be held responsible.
The interested party may, however, consult the privacy information made available on the following sites:
Apple Store :
https://www.apple.com/legal/internet-services/itunes/it/terms.html
Google Play :
https://play.google.com/intl/it_it/about/play-terms.html
Windows Phone Store :
https://privacy.microsoft.com/it-it/privacystatement
SAFETY MEASURES AND TREATMENT MODALITIES
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
It is important that you take appropriate protection against unauthorized access to your password and your computer. Always make sure you are disconnected when using a computer shared with other users.
COMMUNICATION AND DISSEMINATION
Personal data collected will not be disseminated, sold, exchanged or communicated with third parties other than the Data Controller, without the express consent of the data subject. Communication to third parties, other than the Data Controller, managers, internal, but also external to the company structure, and by the those in charge of processing identified and appointed pursuant to art. 13 c.1 letter e) of the EU Regulation is provided for the exclusive pursuit of the purposes referred to in points 1 and 2 of this information and in any case within the limits thereof, possibly to: third parties involved in technical assistance and delivery, and IT (and company management, etc.), affiliated companies or third parties that provide Palazzo Vecchietti with information processing or complementary activities compared to those proposed by Palazzo Vecchietti, to allow the execution of the contract, shippers, all committed in the correct and regular pursuit of the purposes described.
In any case, processing by third parties must be carried out according to accuracy and in compliance with the provisions of the law in force.
PLACE OF TREATMENT
The data collected by the site are processed by the Data Controller in accordance with the applicable laws, company DUEMILAOTTO SRL with registered office in Via degli Strozzi 4, 50123 Florence - Italy, located in the European Economic Area and acting in accordance with European standards.
COOKIES
This site, like all websites, makes use of cookies, small text files that allow you to store information on visitor preferences, to improve the functionality of the site, to simplify navigation by automating the procedures (eg Login, language site) and for the analysis of site use.
In particular, session cookies are essential in order to indetify connected users and are useful to avoid that a required feature can be provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain personal data and last only for the current session, ie until the browser is closed. No consent is required for them .
THE functionality cookies used by the site are strictly necessary for the use of the site, in particular they are linked to an express request for functionality by the user (such as Login), for which no consent is needed .
By using the site, the visitor expressly consents to the use of cookies.
COOKIE DIACTIVATION
Cookies are connected to the browser used and can be disabled directly from the browser, thus refusing / revoking consent to the use of cookies.
It should be noted that disabling cookies may prevent the correct use of some features of the site; it will therefore not be possible to access certain features, pages and sections of our website, therefore we decline any responsibility othis regard.
Instructions for disabling cookies are better described in the "guide" menu of the browser in use, from where you can change your preferences to cookies by following the links found on the web pages:
For Internet Explorer ™: http://windows.microsoft.com/en-US/windows-vista/Block-or-allow-cookies ;
For Safari ™: http://www.apple.com/legal/privacy/en-ww/cookies ;
PerChrome ™: http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647
For Firefox ™: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences ;
THIRD-PARTY COOKIES
This site also works as an intermediary for third-party cookies , used to provide additional services and functionality to visitors and to improve the use of the site, such as buttons for social media, or video. This site has no control over the cookies of third parties, entirely managed by third parties. As a consequence, the information on the use of these cookies and their purposes, as well as on how to disable them, are provided directly by the third parties on the pages indicated below.
In particular, this site uses cookies of the following third parties:
- Google Analytics : a Google analysis tool which, through the use of cookies (performance cookies), collects anonymous browsing data (IP truncated at the last octet) and exclusively collected for the purpose of examining the use of the site by users, compile reports on activities on the site and provide other information, including the number of visitors and pages visited. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. Google will not associate the IP address with any other data held by Google. Data transmitted to Google are stored on Google's servers in the United States.
On the basis of a specific agreement with Google, which is designated as the data controller, the latter undertakes the processing of data according to the requests of the Data Controller (see at the end of the information), given through the software’s settings. Based on these settings, the advertising and data sharing options are disabled.
Further information on Google Analytics cookies can be found on the page Google Analytics Cookie Usage on Websites .
The user can selectively disable the collection of data by Google Analytics by installing this plugin on their browser: http: //tools.google.com/dlpage/gaoptout? Hl = en.
- Youtube : a platform owned by Google, for sharing videos, which uses cookies to collect information from users and navigation devices. The videos on the site do not deliver cookies when the page is accessed, since the " advanced privacy (no cookie) " option has been set, according to which YouTube does not store visitor information unless they voluntarily reproduce the video.
cookie: test_cookie .doubleclick.net is not a permanent cookie, but is used to check if the user's browser supports cookies.
For more information on the use of data and their processing by Google, it is recommended to read the information on the appropriate page prepared by Google , and page on How Google uses data when you use partner sites or apps .
PLUGIN SOCIAL NETWORK
This site also incorporates plugins and / or buttons for social networks, in order to allow easy sharing of content on your favorite social networks. These plugins are programmed so as not to set any cookies when accessing the page, in order to safeguard the privacy of users. Cookies may be set, if so provided by social networks, only when the user makes effective and voluntary use of the plugin. Please note that if the user browses is being logged into the social network, then he has already consented to the use of cookies conveyed through this site at the time of registration to the social network.
The collection and use of the information obtained by means of the plugin are governed by the respective privacy policies of the social networks, to which reference is made.
- Facebook - ( cookie information link )
-Istagram - (cookie information link)
DATA TRANSFER IN EXTRA EU COUNTRIES
This site may share some of the data collected with services located outside the European Union area. In particular with Facebook and Istagram through social plugins and the Google Analytics service. The transfer is authorized based on specific decisions of the European Union and the Guarantor for the protection of personal data , in particular Decision 1250/2016 ( Privacy Shield ), for which no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield.
Further information on the transfer of personal data to "third-party" countries can be found on the following dedicated pages:
http://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-internazionale/trasferimento-dei-dati-verso-paesi-terzi
http://eur-lex.europa.eu/legal-content/IT/TXT/?uri=CELEX%3A32016D1250
http://www.garanteprivacy.it/web/guest/home/docweb/-/docwebdisplay/docweb/5306161
USER RIGHTS
Incompliant with European Regulation 679/2016 (GDPR) and national regulations, the User can, in accordance with the procedures and within the limits established by current legislation, exercise the following rights:
- request confirmation of the existence of personal data concerning him / her/ their (right of access);
- have information about the logic, methods and purposes of the processing;
- request the updating, correction, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected;
- in cases of treatment based on consent, receive only the cost of any support, its data provided to the holder and held by it, in a structured and readable form by a data processor and in a format commonly used by an electronic device;
- the right to lodge a complaint with the Supervisory Authority (Garante Privacy - link to the page of the Guarantor );
- as well as, more generally, exercise all the rights that are recognized by the current provisions of the law.
Requests should be addressed to the Data Controller.
In the event that the data are processed on the basis of legitimate interests the rights of data subjects are never the less guaranteed (with the exception of the right to portability that is not provided for by the regulations), in particular the right to object to the treatment that can be exercised by sending a request to the Data Controller. It is possible to oppose the processing of personal data:
a) for legitimate reasons;
b) (without having to motivate the opposition) when the data are processed for commercial or marketing purposes.
For your convenience, articles 15 to 23 of the Rules can be consulted at this link: http://eur-lex.europa.eu/legal-content/IT/TXT/HTML/?uri=CELEX:32016R0679&from=IT
All information regarding the right of access can be requested at the email address: info@palazzovecchietti.it
HOLDER OF THE TREATMENT
The data controller is the company DUEMILAOTTO SRL Via degli Strozzi 4, 50123 Florence - Italy, under the current laws the company can be contacted through the section CONTACTS .
RESPONSIBLE FOR TREATMENT
To find out the external Managers appointed by the Data Controller, please refer to the corporate privacy policy link.
Google is thw appointed data controller, processing data on behalf of the owner (Google Analytics).
Updates
This privacy policy is updated on 22 May 2018
