Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to Article 13 of Regulation (EU) 2016/679

This Privacy Policy is provided pursuant to Regulation (EU) 2016/679 (hereinafter the “Regulation” or the “GDPR”) and describes how the personal data of users who browse and use this website, accessible at https://ih-hotels.com/ (hereinafter also the “Website”), or use the services offered through the Website, are processed.

This Privacy Policy applies exclusively to the processing of personal data carried out through the Website and does not apply to processing carried out as part of the booking process or the subsequent management of the stay, for which users are provided with a specific privacy notice by the relevant entity responsible for the selected hotel.

Data Controller

For processing activities related to the management of the Website and the Group’s centralised communication and management activities, the Data Controller is VALE HOSPITALITY MANAGEMENT S.R.L., abbreviated as VHM S.R.L., with registered office at Galleria del Corso 1, 20122 Milan, Italy; VAT No. 09726650964.

Types of Data Collected

Personal Data, or Personal Information, means any information that could allow a person to be identified directly (for example, their name) or indirectly (for example, through their email address or telephone number). Personal Data may include, among other information, a name, address (email), telephone number, credit card information, booking details, preferences, age, gender or occupation.

Guest Data means all information relating to a person as a guest who has stayed or is staying at one of our hotels. Guest Data may include contact details, biographical information (such as gender and date of birth), booking history, personal preferences, complaints and grievances, or marketing communication preferences.

Categories of Data Collected and Purposes of Processing

1. Browsing Data

Personal Data may be collected independently by the Data Controller or through third parties. In this case, the IT systems and software procedures used to operate this Website acquire certain technical and IT-related Personal Data of Users (e.g. IP address, browser type, operating system, domain name and addresses of websites from which the User accessed or exited the Website, etc.), the transmission of which is inherent in the normal operation of the Internet.

During their normal operation, the IT systems and software procedures used to operate this Website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of the computers and devices used by Users, URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the User’s operating system and IT environment.

This data, which is necessary for the use of web services, is processed by the company in order to monitor the proper functioning of such services, as well as for the following purposes: statistics; interaction with social networks and external platforms; content commenting; displaying content from external platforms; contacting the User; advertising; and tag management.

Browsing data is not retained for more than seven days (except where longer retention is required for the investigation of criminal offences by judicial authorities).

2. Contact by the User via Email, Telephone or Form Submission

The optional, explicit and voluntary sending of communications by email to the addresses indicated on this Website entails the subsequent acquisition of the data provided by the User, including their email address, and consent to receive any replies to their requests.

In this case, providing an email address and any other data requested is optional but necessary in order to use the service and receive a response to the request. Without such data, we will not be able to process the request.

Such data is used solely for the purpose of responding to or handling the requests submitted and is disclosed to third parties only where necessary for this purpose.

The data is retained for the period necessary to process the request and in accordance with applicable legislation.

The related processing is carried out for the performance of a contract or pre-contractual measures undertaken by the Data Controller in connection with the service (Art. 6(1)(b) GDPR).

3. Cookies

This Website uses technical, tracking and profiling cookies. For further details, please refer to the dedicated Cookie Policy.

Tracking tools for which consent is required are used in accordance with the preferences expressed by the User.

Methods and Place of Processing of Collected Data

Processing Methods

The Data Controller adopts appropriate security measures designed to prevent unauthorised access, disclosure, modification or destruction of Personal Data.

Processing is carried out using IT and/or electronic tools, with organisational methods and procedures strictly related to the purposes indicated.

In addition to the Data Controller, in certain cases, Data may be accessible to other parties involved in the organisation of this Website (administrative, sales, marketing and legal staff, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies and communication agencies), who may also be appointed, where necessary, as Data Processors by the Data Controller.

An up-to-date list of Data Processors may always be requested from the Data Controller.

Place of Processing

Data is processed at the Data Controller’s operating offices and at any other locations where the parties involved in the processing are located. For further information, please contact the Data Controller.

Where certain services used by the Website involve the processing of personal data outside the European Economic Area, such transfers will be carried out in compliance with Articles 44 et seq. of the GDPR. For further information, please contact the Data Controller.

Legal Basis for Processing

Personal data provided by the User through the Website will be processed by the Data Controller for the following purposes and on the following legal bases:

• to fulfil obligations arising from a contract or to take pre-contractual measures requested by the data subject, pursuant to Art. 6(1)(b) GDPR;
• where processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by third parties, pursuant to Art. 6(1)(f) GDPR, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject;
• on the basis of the User’s consent, pursuant to Art. 6(1)(a) GDPR, where required by applicable law, for example for certain marketing activities or the use of non-essential tracking tools.

The specific legal bases applicable to individual processing activities are determined according to the purpose pursued and the methods by which the data is collected.

Recipients of the Data

Personal data acquired through the Website may be disclosed, strictly to the extent necessary for the purposes set out in this Privacy Policy, to public authorities or public bodies in order to comply with legal obligations, as well as to third parties providing services necessary for the operation of the Website and for the performance of the Data Controller’s activities.

These may include, by way of example, IT and technology service providers, hosting providers, companies providing Website maintenance and management services, communication and marketing companies, newsletter management service providers, as well as other third parties appointed, where necessary, as Data Processors pursuant to Article 28 GDPR.

An up-to-date list of appointed Data Processors may be requested from the Data Controller by sending an email to privacy@ih-hotels.com.

Retention Period

Personal Data is processed and retained for the period required for the purpose for which it was collected and, where necessary, for a longer period due to legal obligations, requirements relating to the protection of the Data Controller’s rights, or on the basis of Users’ consent.

Therefore:

• Personal Data collected through forms or direct communications will be retained for the period necessary to handle the request and any subsequent related requirements;
• Personal Data collected for purposes relating to the legitimate interests of the Data Controller will be retained until such interests have been fulfilled, taking into account the principles of necessity and proportionality;
• where processing is based on the User’s consent, the Data Controller may retain Personal Data until consent is withdrawn, without prejudice to the Data Controller’s right to retain the data for the period necessary to comply with legal obligations or protect its rights.

Retention periods relating to cookies and other tracking tools are specified in the relevant Cookie Policy.

At the end of the applicable retention period, Personal Data will be deleted or anonymised, unless further retention is necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

Transfer of Data Abroad

The Data Controller reviews the services and providers used to manage the Website and adopts the measures required by the GDPR for any transfers of personal data to countries outside the European Economic Area.

Where transfers to third countries are carried out, they will take place in compliance with Articles 44 et seq. of the GDPR and on the basis of the safeguards provided for under applicable legislation.

For specific information regarding any transfers connected with the use of cookies and tracking tools, please refer to the relevant Cookie Policy.

User Rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights with regard to the Data processed by the Data Controller.

In particular, within the limits provided by law, Users have the right to:

• withdraw consent at any time. Users may withdraw consent previously given to the processing of their Personal Data;
• object to the processing of their Data. Users may object to the processing of their Data where the processing is based on a legal basis other than consent;
• access their Data. Users have the right to obtain information about the Data processed by the Data Controller, certain aspects of the processing, and to receive a copy of the Data being processed;
• verify and request rectification. Users may verify the accuracy of their Data and request that it be updated or corrected;
• obtain restriction of processing. Users may request that the processing of their Data be restricted. In such cases, the Data Controller will not process the Data for any purpose other than its storage;
• obtain erasure or deletion of their Personal Data. Users may request that the Data Controller erase their Data;
• receive their Data or have it transferred to another data controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred to another data controller without hindrance;
• lodge a complaint. Users may lodge a complaint with the competent personal data protection supervisory authority or seek judicial remedy.

These rights may be exercised by submitting a specific request with the subject line “Privacy Rights” to:

VALE HOSPITALITY MANAGEMENT S.R.L.
Galleria del Corso 1
20122 Milan (MI), Italy
or by email to: privacy@ih-hotels.com

Data Controller

VALE HOSPITALITY MANAGEMENT S.R.L.

Animal Welfare Policy

iH Hotels Group recognizes animal welfare as a key principle of its corporate social responsibility, influencing business policies and decisions.

iH Hotels Group aims to ensure that products purchased from suppliers adhere to responsible practices for animal welfare. In line with this, it has set specific goals for various supply chains, starting with the egg supply chain. All eggs and egg products purchased annually come exclusively from cage-free egg production systems. This also excludes shell eggs, liquid eggs, and egg products from combined farming systems, thus ensuring a high standard of animal welfare. This approach underscores IH Hotels Group’s commitment to sustainable and responsible practices.

iH Hotels Group commits to annually reporting progress in the implementation of this animal welfare policy on our website.

Environmental Sustainability Policy

At IH Hotels Group, environmental sustainability is a core value that drives every decision we make. We are committed to reducing the environmental impact of our properties through concrete and innovative actions. Some of the key initiatives we have adopted include:

• "Plastic-Free" Initiative: We have embarked on a journey to eliminate single-use plastic products, replacing them with sustainable alternatives made from recycled materials. In this context, we have replaced traditional single-use bottles in our rooms with practical, eco-friendly dispensers made from recycled and recyclable materials, significantly reducing plastic waste production.
• Electric Mobility Infrastructure: We are installing electric vehicle charging stations (Wallbox) in several properties within the group, as already implemented at iH Hotels Gioia.
• Renewable Energy: Some of our hotels use sustainable energy through the installation of solar panels, contributing to more responsible energy consumption.

Our goal is to provide mindful and environmentally conscious hospitality that respects both the environment and the needs of our guests, demonstrating that sustainable tourism is both possible and necessary.

Our Corporate Philosophy

At IH Hotels Group, our corporate philosophy is guided by the vision of becoming the leading reference in Italy for both national and international clientele in the travel sector. We aim to offer hospitality that not only meets but exceeds the expectations of our guests, creating memorable experiences and long-lasting relationships based on trust.

Our mission is to transform every stay into a moment of quality and authenticity, offering distinctive hospitality and service that makes every guest feel at the center of our attention. We are committed to ensuring that every experience with us reflects the passion we invest in our work, the excellence of our locations, and the dedication of our team.

Our Core Values:

• Passion: We believe that every stay can become an unforgettable memory, and it is with this belief that we dedicate ourselves to making every moment special for our guests.
• Respect: We cultivate an inclusive and welcoming environment, respecting diversity and listening to the needs of both our guests and our collaborators.
• Integrity: We operate with honesty and transparency in every aspect of our business, providing a service that meets the highest standards of quality and reliability.

This combination of vision, mission, and values is what inspires us every day to create unique hospitality experiences, supporting our commitment to excellence and the well-being of our guests.