Privacy

Notice of use according to EU Regulation 2016/679 of 27 April 2016, known as GDPR (General Data Protection Regulation) and d.lg.n 196/2003 art. 13.

This page describes the procedures and methods of management of the site with reference to the processing of personal data of users who consult it (data subjects). This information notice may be updated following new instructions from the Privacy Guarantor or changes to the text of the law or new interpretations of the same, please visit it again from time to time.

Latest updates

01 June 2022: Added consent registration and detailed list of cookies

07 November 2018: Newsletter operation

29 June 2018: Sending form external structures (link to other sites)

15 June 2018: telephone number (privacy policy)

14 June 2018: payment gateway (external links)

20 May 2018: information creation

The information is provided exclusively for the domain www.oasidoriente.eu

Our information is provided on the basis of EU Regulation 2016/679 issued on 4 May 2016 and entered into force on 25 May 2016 and also pursuant to art. 13 of Legislative Decree no. 196/2003 on the protection of personal data, which the European authorities have adopted in order to identify the requirements for the collection of personal data, and, in particular, the methods, timing, procedures and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection. With our information notice, we intend to define the way in which users' personal data are processed. Details and explanations are provided below. We continue to check that the options offered correspond to the requirements of the law. Checks and updates will be made periodically to make it easier to understand and manage privacy.

The data controller

G.H.D. GVN HOTEL DIVISION SRL P.I. 16414671004 is the data controller

Privacy Policy - Purposes and methods of data processing

We recommend that you read this chapter carefully in order to understand how we collect and use your personal data and for what purposes. This Policy also applies if you access the Site and use its services, but do not purchase any products or interact with the Site.

• The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the e-mail address and any other data provided by the sender, necessary to respond to requests.and to which explicit consent (art. 9) must be given each time for processing, otherwise it will not be sent. Or voluntary subscription to newsletter lists, in order to receive commercial information. These are also voluntary and clearly indicated and explicit (Art. 9). Possible telephone numbers may be used in the event of registrations to events or events for communications relating to the course of the same. Under no circumstances shall they be used for communications other than the authorisation for which they were granted. In particular, they may also be used for communications via text message. The retention times for these data are: With regard to mailings made from the forms of 1 year and have the purpose of verifying that the emails sent from the site form have actually arrived in the email box. With regard to newsletters, the data are retained until revoked by the customer, who may at any time unsubscribe or ask to be deleted (right to be forgotten) from the lists to which he/she had voluntarily registered.

• Data provided by browsing alone, and/or by accessing the home page alone: this is all the data used, some of which is implicit and unavoidable in the use of Internet protocols, such as the acquisition of the browsing IP address, which is also necessary to protect the site from hacker attacks, or Brute Force. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties or with data provided voluntarily, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation, and may be stored in the system logs necessary for the operation of the site itself until it is deleted. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site: subject to this possibility. The retention times of these data are variable depending on the needs, for example, the IPs could end up on a black list for the defence of the site, or the logs could be needed for judicial investigations, it is therefore not possible to provide on a logical basis a time for the retention of these data

Data processing non-EU countries

None of the data provided voluntarily is transferred to non-EU countries Unintentional data may instead be processed by non-EU companies that are GDPR-compliant, such as Google, Facebook, Instagram, Linkedin.

Children under 16 years of age

Although there is no content forbidden to minors, the legislator specifies 16 as the minimum age for accepting this notice. Minors of this age must therefore be authorised by their parents or guardians, who must have them read and authorise this notice. If this is not the case, they are requested not to continue navigating the site or to provide false authorisation.

Newsletter Subscription

By subscribing to the newsletter you agree to receive communications also for commercial purposes and direct marketing campaigns. The communications may concern, offers, price changes, various communications. To subscribe you must read the privacy policy and accept it. The system will send a further confirmation to the email indicated. Only after confirmation of registration will the user be duly registered and be able to start receiving communications, also of a commercial nature. No periodicity for the sending of communications is established a priori. At any time, the user can decide to unsubscribe from the mailing and completely delete their data from the newsletter mailing register.

Links to other sites (links, booking systems, form requests, payment gateways, etc.)

The Site contains hypertext links (the "links") to other websites that have no connection with the Site itself. This Data Controller cannot be held responsible for the contents of these sites and the rules adopted by them with regard to your privacy and the processing of your personal data during your navigation operations. Therefore, we advise you to be careful when connecting to these websites through the links on the Site and to read their terms of use and privacy regulations carefully.

Payment gateways (paypal, stripe, unicredit and others) may be used on the Site. Under no circumstances is the data entered saved by our systems. The data are transmitted in secure https mode to the payment system. For further information please check the useful links below.

This User Policy does not apply to websites operated by other parties. The Site provides links to other websites solely to facilitate its users in their search and navigation and to facilitate hypertext links on the Internet to other websites. Activation of the links does not imply any recommendation or recommendation for accessing and navigating these websites, nor any guarantee of their contents, services or goods provided or sold by them to Internet users.

In the case of sending from a facility search form, the data entered and sent will be transmitted to the indicated facility in order to fulfil your request. In this case you must refer to the information of the facility(ies) concerned. Under no circumstances could we be held responsible for the data processing carried out by the facility(ies) to which the request is addressed.

Rights of data subjects (website visitors)

In the event of a request for information on the data held, data subjects are entitled to receive a response within 1 month (in more complex cases 3 months). A response will in any case be given within 1 month of the request, even in the event of a refusal. In the case of particularly demanding requests, it will also be possible to ask the data subject for a contribution in the case of manifestly unfounded or excessive and repetitive requests, (Art. 12.5)

The data subjects to whom the personal data refer have the right at any time to check their accuracy or request that they be supplemented or updated (Art. 7), or rectified and limited (pending update Art. 18) or cancelled so-called right to be forgotten (Art. 17). Wherever it is possible to access, manage and delete one's own data, data subjects will be able to do so without the need for further authorisation Data subjects also have the right to data portability (Art. 20) if the data subject has provided data corresponding to this possibility.

Warning:

You can set your browser to allow cookies or not via your browser settings. You can read more about how to do this and find more information about cookies at: www.allaboutcookies.org.

Instructions on how to disable cookies on the main browsers

Microsoft Internet Explorer

Click on the 'Tools' icon in the top right-hand corner and select 'Internet Options'. In the pop-up window select 'Privacy'. Here you can adjust your cookie settings.

Google Chrome

Click the spanner in the top right-hand corner and select 'Settings'. Then select 'Show advanced settings' ('Under the hood') and change the 'Privacy' settings.

Mozilla Firefox

From the drop-down menu in the top left-hand corner select 'Options'. In the pop-up window select 'Privacy'. Here you can adjust your cookie settings.

Safari

From the drop-down menu in the top right-hand corner select 'Preferences'. Select 'Security' and here you can adjust your cookie settings.

Other browsers

If you use other browsers for browsing, please refer to the respective setting guides of these browsers.

Partner data use, useful links:

Disabling Analytics: https://tools.google.com/dlpage/gaoptout

Data use by Google: https://policies.google.com/technologies/partner-sites

Facebook privacy policy: https://www.facebook.com/about/privacy/update

PayPal Privacy Policy: https://www.paypal.com/it/webapps/mpp/ua/privacy-full

Stripe Privacy Policy: https://stripe.com/guides/general-data-protection-regulation

Consent Register

User data stored on the register

Data can only be collected after appropriate action by the end user on the site, including closing the banner which is equivalent to refusal of consent, and are as follows:

An anomalous and random "key"

End User's choice (accepted/rejected)

Date and time of end user's acceptance/rejection

Page from which consent was given/rejected

End User Browser Agent