INFORMATION ON THE PROCESSING OF PERSONAL DATA
of users who consult the website of Corso 12 Rooms & Suites pursuant to Article 13 of Regulation (EU) 2016/679
This page describes how the site is managed with regard to the processing of the personal data of users who consult it and to their confidentiality. This notice is also given pursuant to Art. 13 of European Regulation 679/2016 – legislation on the Protection of Personal Data – to those who interact with the web services of Corso 12 Rooms & Suites, accessible electronically from the address:
https://www.corso12-roma.com
This information does not concern other sites, pages or online services reachable through hypertext links possibly published on the site but referring to resources outside the domain of Albergo Valadier S.r.l.
THE DATA “CONTROLLER”
Following consultation of this site, data relating to identified or identifiable persons may be processed. The "Controller" of the personal data processed as a result of consulting our site and of any other data used to provide our services is Albergo Valadier S.r.l., Via della Fontanella 15 – 00187 Rome – Tax Code 00995220589, VAT No. 00950281006.
THE “DATA PROTECTION OFFICER”
The Data Protection Officer (DPO) can be reached at the following address: amministrazione@groupevaladier.com
PLACE OF DATA PROCESSING
The processing connected with the web services of this site [physically "hosted" at QNT S.r.l. a Socio Unico ("www.qnt.it")] takes place at our premises and is handled only by our appointed and instructed staff, or by persons occasionally entrusted with maintenance operations.
The personal data provided by users who submit hotel booking requests or requests for informational material (information, newsletters, registrations, etc.) are used solely to perform the service or provision requested and are not disclosed to third parties, except in the following possible cases:
commercial partners of Corso 12 Rooms & Suites to whom the data are communicated exclusively in order to process online bookings, including SimpleBooking (https://www.simplebooking.travel/it);
persons, companies or professional firms providing assistance and advice to Albergo Valadier S.r.l. in accounting, administrative, legal, tax and financial matters;
parties to whom the right to access the data is granted by law or by orders of the authorities.
Credit card data used for bookings will automatically be made unavailable six months after the end of the stay.
TYPES OF DATA PROCESSED – LEGAL BASIS – NATURE OF THE PROCESSING
BROWSING DATA
The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected in order to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, make it possible to identify users.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. These data, necessary for the use of web services, are also processed in order to:
obtain statistical information on the use of the services (most visited pages, number of visitors by time slot or day, geographical areas of origin, etc.);
check the correct functioning of the services offered.
The data could be used to establish liability in the event of hypothetical computer crimes against the site.
Legal Basis: the processing is necessary for the purposes of the legitimate interests pursued by the controller or by third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not override them, taking into account the reasonable expectations of the data subject and the activities strictly necessary for the operation of the site and for browsing itself – (Recital 47 – Art. 6(1)(f) GDPR);
Nature of Provision: Providing the data is necessary in order to browse the website.
DATA PROCESSED THROUGH SOCIAL MEDIA PLATFORMS
With regard to the processing of personal data carried out by the operators of the Social Media platforms used by the Controller, please refer to the information they provide through their respective privacy policies. The Controller processes the personal data provided by users through the dedicated Social Media platform pages in order to manage interactions with users (comments, public posts, etc.) and in compliance with current legislation.
DATA VOLUNTARILY PROVIDED BY THE USER
The optional, explicit and voluntary sending of messages to the Controller’s contact addresses, private messages sent by users to institutional social media profiles/pages (where this option is available), as well as the completion and submission of the forms present on the Controller’s site, entail the acquisition of the sender’s contact data, necessary in order to reply, as well as of all personal data included in the communications.
The data will be kept only for the requested subscription to newsletters or special offers and will not be disclosed to anyone.
Personal information relating to those who visit the website is neither collected nor used. Visitors remain anonymous. The only exception concerns the personally identifying information necessary to comply with contractual booking obligations towards the user.
A. Newsletter
Site visitors may register for our newsletter service. Upon registration, the user’s e-mail address will automatically be added to a contact list to which e-mail messages may be sent containing periodic updates with information, including of a commercial and promotional nature, relating to initiatives, events or promotions of the data controller.
To subscribe to the Newsletter you can use the subscription forms on the site, entering your name and e-mail address. The data entered will be used solely for the purpose of sending our newsletter by e-mail and will not be disclosed to third parties.
Legal Basis: The processing is based on consent to the processing of personal data (Recitals 42 and 43 and Art. 6(1)(a) GDPR).
Nature of Provision: Provision is optional. Failure to provide the necessary data will make it impossible to receive communications.
B. Bookings
When booking on the Website, the user is required to provide their name, telephone contact, billing address, e-mail address, information on payment methods and on their credit card. Albergo Valadier S.r.l. will use this information only to process the booking and to send specific information relevant to its confirmation, such as the receipt, the booking code and the conditions.
The information provided will not be used for marketing purposes and will not be sold, transmitted, licensed or forwarded to third parties in any way, with the exception of the online booking service providers SimpleBooking (https://www.simplebooking.travel), the credit card issuing companies, which may be contacted solely in order to verify their validity, and the online payment service providers Nexi Payments S.p.A. (https://www.nexi.it/it/ecommerce/xpay), exclusively for purposes connected with the management of online bookings.
In any case, the site administrator ensures the adoption of scrupulous procedures to protect browsing data and the use of particular care to protect the credit card data provided when making online bookings.
Legal Basis: The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (Recital 44 and Art. 6(1)(b) GDPR).
Nature of Provision: Provision is necessary. Failure to provide the necessary data will make it impossible to complete bookings.
C. Management of Personal Data Collected from Curricula Vitae
It is possible to use the contact details of Albergo Valadier S.r.l. to send candidates’ Curricula Vitae in paper and/or digital format. The spontaneous and voluntary sending of a Curriculum will be implicitly considered as informed consent given by the data subject to the receipt and processing of the personal data contained therein, exclusively for the purpose connected with the selection of potential candidates.
The data processed for the purpose of selecting candidates are personal data useful for the search for the particular profile required. In general, the nature of the personal data is ordinary, except in some cases where sensitive data may be indicated which are necessary to identify particular requirements provided for by the legislation in force, such as the indication of particular protected categories, suitability for certain jobs and/or compulsory placements, in compliance with the limits set out in the General Measure of the Italian Data Protection Authority of 5 June 2019, which amended General Authorisation No. 1 of 15 December 2016 on the processing of sensitive data in employment relationships.
Legal Basis: The processing is based on consent to the processing of personal data (Recitals 42 and 43 and Art. 6(1)(a) GDPR) and/or the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (Recital 44 – Art. 6(1)(b) GDPR).
Nature of Provision: Provision is necessary. Failure to provide the necessary data will make it impossible to apply.
General Rules for sending a Curriculum Vitae:
Any Curricula Vitae received spontaneously, in response to an advertisement or to a request from us, will be filed directly by specially appointed personal data processing staff in accordance with the personal data security directives adopted in compliance with the security measures set out in Chapter IV, Section 2 of GDPR 679/2016. These will be printed only on the occasion of a meeting and interview with the data subject. To send Curricula Vitae, please use the following addresses: Albergo Valadier S.r.l., Via della Fontanella 15 – 00187 Rome, for the attention of the Human Resources Manager, E-mail: jobs@hotelvaladier.com.
D. Administrative and Accounting Management
For activities of an organisational, administrative and financial nature and for accounting and the management of customer/user data, the data controller may process the relevant personal data.
Legal Basis: The processing is necessary for the performance of a contract to which the data subject is party (Recital 44) or for compliance with legal obligations (Art. 6(1)(c) GDPR).
Nature of Provision: Providing the personal data is mandatory, as it is essential in order to comply with legal obligations.
COOKIES AND TRACKING TECHNOLOGIES USED
Cookie technologies are used on this site for different purposes, including IT authentication or session monitoring, and the storage of specific technical information concerning users who access the web server provider, in compliance with the Guidelines on cookies and other tracking tools adopted on websites (10 June 2021) of the Italian Data Protection Authority and with the Guidelines of the European Data Protection Board (EDPB) of May 2020. Further information on the cookies used is available in the Cookie Policy of this website.
However, if the user blocks or deletes a cookie, it may be impossible to restore the preferences or customised settings previously specified, and our ability to personalise the user’s experience will be limited.
Legal Basis: For non-technical cookies and comparable technologies, the processing is based on consent to the processing of personal data (Art. 6(1)(a) and Recitals 42 and 43 GDPR). Consent is given through the site’s banner and cookie policy.
Nature of Provision: See the cookie policy in the footer of the site.
DATA RETENTION PERIOD OR CRITERIA FOR DETERMINING THE PERIOD
In compliance with the provisions of Art. 5(1)(e) of EU Reg. 2016/679, the personal data collected will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
The retention periods of the personal data provided through the website depend on the purpose of the processing carried out, in particular:
purposes relating to technical browsing data for the correct functioning of the website: save for any establishment of liability, browsing data do not persist for more than seven days;
purposes of responding to requests for information/provision of the services requested (maximum 12 months for a contact request; 10 years for any administrative/accounting/financial documentation relating to the provision of a service);
data collection for personnel selection, maximum 6 months. In principle, the data collected during the recruitment process will be deleted as soon as it becomes clear that no offer of employment will be made or that the offer will not be accepted by the candidate;
newsletters, marketing or promotional communications in general by e-mail (maximum 24 months – until consent is withdrawn);
administrative and accounting management purposes: 10 years, in accordance with the legal terms for the retention of administrative/accounting/financial documentation;
purposes relating to the management of cookies: see the cookie policy in the footer of the site;
purposes relating to the management of whistleblowing reports: see the notice on the reporting portal.
TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES
Personal data are not transferred to Third Countries outside the EU, in compliance with the provisions of Chapter V of GDPR 679/2016.
OPTIONAL NATURE OF PROVIDING THE DATA
Apart from what is specified for browsing data, the user is free to provide the personal data indicated in the request forms to Albergo Valadier S.r.l. or otherwise indicated in contacts with the hotel in order to send CVs, to make online bookings, or to request the sending of informational material or other communications. Failure to provide them may make it impossible to obtain what is requested.
PROCESSING METHODS AND DATA PROTECTION MEASURES
Personal data are processed, also by automated means, for the time strictly necessary to achieve the purposes for which they were collected, as indicated in this notice. The Controller and the Data Processors ensure the adoption of appropriate organisational, technical and physical measures to guarantee a level of security appropriate to the risk and to ensure that personal data are processed appropriately and in accordance with the purposes for which they are handled, in compliance with the provisions of Art. 32 of GDPR 2016/679. Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access. There is no automated decision-making process for the processing of the data.
RIGHTS OF DATA SUBJECTS
The data controller is Albergo Valadier S.r.l., Via della Fontanella 15 – 00187 Rome. The Personal Data Protection Officer can be reached at the company contact details.
You may contact these parties at any time in order to exercise your rights as provided for by Chapter III of GDPR 679/2016, in particular the right to request access to your personal data and their rectification or erasure (right to be forgotten), or the restriction of the processing concerning you, or to object to their processing, the right to obtain a copy of the personal data undergoing processing, and the right to data portability, by submitting a specific request, including through the e-mail address: valadierhtl@hotelvaladier.com.
RIGHT TO LODGE A COMPLAINT
Data subjects who believe that the processing of the personal data relating to them carried out through this site infringes the provisions of the Regulation have the right to lodge a complaint with the Italian Data Protection Authority, as provided for by Art. 77 of the Regulation itself, or to take the appropriate legal action (Art. 79 of the Regulation).