iH Hotels: a World of Hospitality

PRIVACY INFORMATION PURSUANT TO ART. 13 OF EUROPEAN
REGULATION 679/16 (GDPR) FOR THE PROCESSING OF PERSONAL DATA

(Privacy Code and European Regulation regarding the protection of personal
data)
In compliance with the European Regulation 679/16 (GDPR) and subsequent
changes, we are to provide you with the necessary information regarding the
processing of the personal data you provide. The information is not to be
considered valid for other websites that may be consulted through links on
the owner's domain websites, which is not to be considered in any way
responsible for third party websites. This is an information provided pursuant
to Art. 13 of the European Regulation on the protection of personal data.

1. "DATA CONTROLLER"
*See Data Processing Holders.

2. The treatment will be carried out both with manual and IT and telematic
tools in compliance with the rules in force and the principles of correctness,
lawfulness, transparency, relevance, completeness and not excess, accuracy
and with logic of organization and processing strictly related to the purposes
pursued and in any case in order to guarantee the security, integrity and
confidentiality of the data processed, in compliance with the organizational,
physical and logical measures provided for by the current provisions.

3. For the purposes expressed in this statement, only non-particular personal
data will be processed.

4. Specific information; Specific information could be presented on the pages
of the Site in relation to particular services or data processing provided by the
User or the Data Subject and the appropriate consents will be collected in the
same locations (where necessary).
For all information relating to the cookie policy click here

5. Purpose of the treatment
a) Allow browsing on this website and technical management of connections
to it. during normal operation, the IT systems and software procedures used
to operate this Site acquire some personal data which are implicitly
transmitted in the use of Internet communication protocols. This is information
that is not collected to be associated with identified interested parties, but
which by its nature could, through processing with data held by third parties,
allow users / visitors to be identified (e.g. IP address, domain names of the
computers used by users who connect to the site, the code indicating the
response status given by the server, type of browser, etc.). These data are
used only for statistical information (therefore they are anonymous) and to
check the correct functioning of the Site;

b) Any request by email for information and / or booking by the interested
party and to respond to them and to follow up on the requests and needs of
customers and users. For this activity, only the data communicated by the
interested party in relation to the services offered by the owner are
processed;

c) make and respond to the stay / bookings of the user / interested party and
all activities strictly connected to this booking, including those of an
administrative and accounting nature.
The data required for this purpose are name, surname, city, state, email,
telephone and the provision is necessary to follow up on the requests of the
interested party. The eventual missed conferment has as sole effect the
missed possibility to make the reservation.
The data required for the purposes indicated are necessary in order to allow
navigation on the site and to allow reservations to be made by the person
concerned. Failure to provide may result in the inability to browse the site
itself or to make your own reservation.
The legal basis and lawfulness of the processing can be found in the
contractual or pre-contractual obligations related to the provision of a service
or to respond to requests from the interested party. (art. 6 lett. b).
For the retention times of the data provided for the purpose a) please refer to
the specific cookie policy of the site.
The data provided for the purpose b) will be kept for a period not exceeding
12 months or, in the case of booking, until the interested party arrives at the
facility or any cancellation.
The data provided for the purpose c) will be processed until the interested
party arrives at the facility or until cancelled.
For the data processed for the administrative and regulatory procedures
related to the stay, suitable information will be provided during check-in.
Please note that the data provided may be processed for the protection of
legitimate interests of the owner, including in particular the defence in court.
Also, in this the principles of necessity, proportionality and not excess will
apply conservation will be in line with what previously indicated.

6. Disclosure, Any recipients or categories of recipients of the data.

No data will be disseminated in any way.

The data provided will be processed exclusively by persons authorized to
process and suitably trained, as well as through data processors linked to the
owner by specific contract (art.28 of EU Regulation 679/16) for example:
companies that provide services for system management IT and
telecommunications networks, advice and services to the owner. The data will
be processed only for the purposes to be pursued therefore the persons in
charge and managers will process the data only where strictly necessary in
other cases the treatment will be preferred in the form anonymous.
The data will be processed in the EU.

The updated list with the identification details of all Data Processors may be
requested by you at any time to the aforementioned Owner.
The data may also be disclosed to third parties (public bodies, police forces,
judicial authorities, etc.), but exclusively for the purpose of fulfilling legal
obligations or EU regulations or regulations, in which case the third parties
will operate as independent holders.

7. Rights of the interested party Articles 15, 16, 17, 18.19 20, 21 and 77 of the GDPR
We inform you of the existence of the right to know the recipients of the
possible communication, access to personal data, rectification, cancellation
and possibly oblivion, limitation of treatment, data portability and opposition at
any time to the processing of personal data concerning you.
We also inform you that you have the right to withdraw consent to the
processing of your data at any time, without prejudice to the lawfulness of the
treatment based on the consent given before the revocation (art.7, paragraph
3, of the GDPR).
Pursuant to art. 77 of the Regulation, you are recognized the right to lodge a
complaint with a supervisory authority, in particular in the Member State in
which you habitually reside, work or in the place where the alleged violation
occurred, which in Italy corresponds to the Guarantor Authority for the
Protection of personal data, whose references are found on
www.garanteprivacy.it
You can exercise these rights simply by contacting info@ih-hotels.com
through the contacts indicated in this Policy.

This information was prepared on 01/07/2019.