Privacy Policy

For information about your personal data collected, the purposes of collection, and the parties with whom the data is shared, please contact the Data Controller.

Data Controller

The Data Controller is as outlined in the "Data Controllers Table."

Types of Data Collected

The Data Controller does not provide a detailed list of the types of Personal Data collected.
Comprehensive details about each type of Personal Data collected are provided in the relevant sections of this privacy policy or through specific informational notices displayed prior to data collection.
Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected while using this Application.
Unless otherwise specified, all Data requested by this Application is mandatory. Failure to provide this Data may make it impossible for this Application to provide its services. In cases where this Application specifies that certain Data is optional, Users are free to refrain from providing it without affecting the availability or operation of the service.

Users with questions about which Data is mandatory are encouraged to contact the Data Controller.
The use of Cookies—or other tracking tools—by this Application or by third-party service providers used by this Application is intended to provide the Service requested by the User, in addition to other purposes described in this document and in the Cookie Policy.
The User is responsible for any third-party Personal Data obtained, published, or shared through this Application.

Methods and Location of Data Processing

Processing Methods

The Data Controller takes appropriate security measures to prevent unauthorised access, disclosure, modification, or destruction of Personal Data.
Data processing is carried out using computers and/or IT-enabled tools, following organisational procedures and modes strictly related to the stated purposes.
In some cases, Data may be accessible to certain persons in charge involved with the operation of this Application (such as administration, sales, marketing, legal, or system administration staff) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, or communication agencies) appointed as Data Processors by the Data Controller. The updated list of these parties may be requested from the Data Controller at any time.

Location

Data is processed at the operating offices of the Data Controller and in any other places where the parties involved in the processing are located. For more information, please contact the Data Controller.
Personal Data may be transferred to a country other than the one the User resides in. To obtain further details about the location of processing, Users can refer to the section containing details on the processing of Personal Data.

Retention Period

Unless otherwise stated in this document, Personal Data is processed and retained for the duration necessary to fulfil the purposes for which it was collected and may be retained for a longer period due to legal obligations or based on the Users' consent.

Cookie Policy

This Application uses Tracking Tools. For more information, Users can refer to the Cookie Policy.
Additional Information for Users

Legal Basis for Processing

The Data Controller processes Personal Data related to the User if one of the following conditions applies:

• The User has given consent for one or more specific purposes.
• The processing is necessary for the performance of a contract with the User and/or to take pre-contractual steps.
• The processing is necessary to fulfill a legal obligation to which the Data Controller is subject.
• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.
• The processing is necessary for the pursuit of the legitimate interests of the Data Controller or third parties.

It is always possible to request the Data Controller to clarify the specific legal basis for each processing activity and, in particular, to specify whether the processing is based on the law, a contract, or necessary to conclude a contract.

Further information on the retention period

Unless otherwise stated in this document, Personal Data is processed and stored for the time necessary to fulfill the purpose for which it was collected, and may be retained for a longer period due to legal obligations or based on the consent of the Users.

Therefore:

Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the completion of that contract. Personal Data collected for purposes based on the legitimate interest of the Data Controller will be retained until that interest is fulfilled. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When processing is based on the User's consent, the Data Controller may retain the Personal Data longer until such consent is revoked. Additionally, the Data Controller may be required to retain the Personal Data for a longer period to comply with a legal obligation or by order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, once this period expires, the right to access, deletion, rectification, and the right to data portability can no longer be exercised.

User Rights under the General Data Protection Regulation (GDPR)

Users can exercise certain rights regarding the data processed by the Data Controller.

In particular, within the limits set by law, the User has the right to:

• Withdraw consent at any time. The User can withdraw previously given consent for the processing of their Personal Data.
• Object to the processing of their Data. The User can object to the processing of their Data when it occurs on a legal basis other than consent.
• Access their Data. The User has the right to obtain information about the Data processed by the Data Controller, about certain aspects of the processing, and to receive a copy of the Data processed.
• Verify and request rectification. The User can verify the accuracy of their Data and request its update or correction.
• Obtain the restriction of processing. The User can request the restriction of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose other than storage.
• Obtain the deletion or removal of their Personal Data. The User can request the deletion of their Data by the Data Controller.
• Receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller.
• Lodge a complaint. The User can lodge a complaint with the relevant data protection authority or take legal action.

Users have the right to obtain information regarding the legal basis for the transfer of Data abroad, including to any international organization governed by international law or established by two or more countries, such as the UN, as well as information on the security measures taken by the Data Controller to protect their Data.

Details on the Right to Object

When Personal Data is processed in the public interest, in the exercise of public authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.

It is important to note that if the User's Data is being processed for direct marketing purposes, they can object to the processing at any time, free of charge, and without providing any justification. If Users object to processing for direct marketing purposes, their Personal Data will no longer be processed for such purposes. To find out whether the Data Controller processes Data for direct marketing purposes, Users can refer to the respective sections of this document.

How to Exercise Rights

Any requests to exercise the User's rights can be directed to the Data Controller using the contact details provided in this document. The request is free of charge, and the Data Controller will respond as soon as possible, in any case within one month, providing the User with all the information required by law. Any rectifications, deletions, or limitations to the processing will be communicated by the Data Controller to each recipient, if any, to whom the Personal Data was disclosed, unless this proves impossible or involves a disproportionate effort. The Data Controller will inform the User of such recipients if they request it.

Further Information on Processing

Defense in Legal Proceedings

The User's Personal Data may be used by the Data Controller in legal proceedings or during preparatory phases to defend against misuse of this Application or related Services by the User. The User acknowledges that the Data Controller may be required to disclose Data by order of public authorities.

Specific Notices

At the User's request, in addition to the information provided in this privacy policy, this Application may provide the User with additional, contextual notices concerning specific Services or the collection and processing of Personal Data.

System Logs and Maintenance

For operational and maintenance purposes, this Application and any third-party services it uses may collect system logs, which are files that record interactions and may contain Personal Data, such as the User's IP address.

Information Not Contained in This Policy

Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Changes to This Privacy Policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Application, as well as, where technically and legally feasible, sending a notification to Users through one of the contact methods held by the Data Controller. Therefore, Users are encouraged to regularly consult this page, referring to the date of the last modification indicated at the bottom.

If changes affect processing based on consent, the Data Controller will collect the User's consent again, if necessary.

Last modified: 10/12/2024

Animal Welfare Policy

iH Hotels Group recognizes animal welfare as a key principle of its corporate social responsibility, influencing business policies and decisions.

iH Hotels Group aims to ensure that products purchased from suppliers adhere to responsible practices for animal welfare. In line with this, it has set specific goals for various supply chains, starting with the egg supply chain. All eggs and egg products purchased annually come exclusively from cage-free egg production systems. This also excludes shell eggs, liquid eggs, and egg products from combined farming systems, thus ensuring a high standard of animal welfare. This approach underscores IH Hotels Group’s commitment to sustainable and responsible practices.

iH Hotels Group commits to annually reporting progress in the implementation of this animal welfare policy on our website.

Environmental Sustainability Policy

At IH Hotels Group, environmental sustainability is a core value that drives every decision we make. We are committed to reducing the environmental impact of our properties through concrete and innovative actions. Some of the key initiatives we have adopted include:

• "Plastic-Free" Initiative: We have embarked on a journey to eliminate single-use plastic products, replacing them with sustainable alternatives made from recycled materials. In this context, we have replaced traditional single-use bottles in our rooms with practical, eco-friendly dispensers made from recycled and recyclable materials, significantly reducing plastic waste production.
• Electric Mobility Infrastructure: We are installing electric vehicle charging stations (Wallbox) in several properties within the group, as already implemented at iH Hotels Gioia.
• Renewable Energy: Some of our hotels use sustainable energy through the installation of solar panels, contributing to more responsible energy consumption.

Our goal is to provide mindful and environmentally conscious hospitality that respects both the environment and the needs of our guests, demonstrating that sustainable tourism is both possible and necessary.

Our Corporate Philosophy

At IH Hotels Group, our corporate philosophy is guided by the vision of becoming the leading reference in Italy for both national and international clientele in the travel sector. We aim to offer hospitality that not only meets but exceeds the expectations of our guests, creating memorable experiences and long-lasting relationships based on trust.

Our mission is to transform every stay into a moment of quality and authenticity, offering distinctive hospitality and service that makes every guest feel at the center of our attention. We are committed to ensuring that every experience with us reflects the passion we invest in our work, the excellence of our locations, and the dedication of our team.

Our Core Values:

• Passion: We believe that every stay can become an unforgettable memory, and it is with this belief that we dedicate ourselves to making every moment special for our guests.
• Respect: We cultivate an inclusive and welcoming environment, respecting diversity and listening to the needs of both our guests and our collaborators.
• Integrity: We operate with honesty and transparency in every aspect of our business, providing a service that meets the highest standards of quality and reliability.

This combination of vision, mission, and values is what inspires us every day to create unique hospitality experiences, supporting our commitment to excellence and the well-being of our guests.