Privacy policy
We invite you to read the Information carefully, always bearing in mind that, if a subject plans to send the Personal Data of another person (for example by making a reservation on his behalf) he will have to provide the details of this person only with his consent, to be obtained by your own care and after the latter has been informed about the ways in which the Company will use the details, including the purposes indicated in this Information.
DEFINITIONS
- Personal Data: any information relating to an identified or identifiable natural person ("Data Subject"). An identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social.
- Treatment: any operation or set of operations, performed with or without the aid of automated processes and applied to Personal Data or sets of Personal Data, such as the collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
PERSONAL DATA
Without prejudice to the right to provide only the personal information that the interested party wishes to provide (since the choice not to provide some details could affect some of the transactions and services) and regardless of whether a reservation is made online on the Company's website, through an online booking channel, through a travel agent, through our call centre, the Personal Data that the Company collects includes:
- name and surname,
- email address,
- telephone number
- address;
- credit card details (card type and number, name on card, expiry date and CVC code);
- information about your stay, including the date of arrival/departure, special requests and your preferences on services (preference on rooms, services or other);
- information you provide about your marketing preferences or when participating in surveys, contests or promotional offers;
Furthermore, when the Company's website (www.ledonnedicapri.com) is used, information is collected that could be identified as Personal Data. For example: language settings, IP address, location, device settings, device operating system, log-in information, usage time, requested URL, status report, user agent (such as browser version information), browsing history, result (visit or reservation), user reservation code, type of information viewed, including information collected through cookies.
PURPOSES OF THE COLLECTION
The Company uses Personal Data for the following purposes:
- complete and manage reservations;
- provide customer assistance;
- send a request to leave a review after your stay (the aforementioned review, at the discretion of the Company, could be published on the Site);
- marketing activities in the manner permitted by law;
- conduct statistical studies, to improve the services, to improve the user experience and to increase the functionality and quality of the services offered;
- prevent fraud and other illegal activities (for these purposes, personal information could be shared with third parties, such as the police force or external consultants, in accordance with the provisions of current legislation);
- manage and resolve disputes or disputes of a legal nature, for government investigations and compliance checks, or to comply with the provisions of the law or to respond to requests made by law enforcement agencies, in accordance with the provisions of the law.
It is possible that there are other occasions in which the Company will get in touch with the interested party by e-mail, by post, by telephone or by text message, depending on the contact details provided, for the following reasons:
- respond to, or manage, a request sent by the interested party (or on his behalf);
- in case of failure to complete an online reservation, send an e-mail with an invitation to complete the reservation (the Company believes that this is a useful additional service that allows you to go ahead with a reservation without having to start the process again) .
It is understood that in the event that the interested party has made a reservation but, on the communicated arrival date, does not show up at the facility, the Company will process the Personal Data of the interested party in order to cancel the stay and any other reservation and manage, process and settle any outstanding payments that may still be due.
With reference to the above, from the point of view of legal principles underlying the legal treatment, the Company is based, also alternatively or jointly, (i) on the execution of a contract (the use of data may be necessary to be able implement the contract), (ii) on the legitimate interests of the Company (for example to provide the most suitable content of our site, emails and newsletters, in order to improve and promote products, services and content on the site) , or (iii) the need to use the information for administrative, legal (including legal obligations) or fraud detection purposes.
Where necessary and based on current legislation, the Company will ask for consent before processing the Personal Data of the Data Subject for direct marketing purposes; this consent may be withdrawn at any time by contacting the addresses mentioned at the end of this Information. It is understood that, if the interested party does not want to consent to the processing of their Personal Data according to the methods described and should not find any system for canceling consent, they can always contact the Company at the e-mail address [email protected].
DATA RETENTION
The Company will keep the Personal Data for the period of time necessary for the provision of the service, in accordance with the laws in force and for the period communicated or for the time allowed by the applicable law, also for the purpose of managing any disputes and in any case for the time necessary to carry out its activities, including the detection and protection of fraud or other illegal activities. The Personal Data stored will be subject to the provisions of this Information.
It is understood that, depending on the needs, among the recipients of the Personal Data provided by the interested party may be included (directly or indirectly), in addition to the Company itself, also IT service providers involved in the (online) booking procedure, service providers IT and/or email communications service providers.
RIGHTS OF THE INTERESTED PARTY
If the interested party resides in the EU, the applicable legislation grants specific rights, summarized below, which the interested party can exercise free of charge by submitting a request by e-mail to the address [email protected], subject to the exceptions provided for by law ( these rights may be limited, for example in the event that the fulfillment of the request involves the disclosure of Personal Data relating to another subject, or if the interested party requests the deletion of information that the Company is obliged to keep in accordance with law or for valid and legitimate interests):
- Right to withdraw consent (where the Company uses Personal Data with the consent of the Data Subject, this may revoke the aforementioned consent, it being understood that this will not affect the lawfulness of the collection and processing of Personal Data based on the consent provided by you until the moment of revocation);
- Right of access and rectification of Personal Data (request a copy of the Personal Data stored by the Company with the possibility of modifying them);
- Right of cancellation (right to obtain the cancellation of Personal Data in the event that they are no longer necessary for the purposes for which such Personal Data were initially collected or processed, or in the hypothesis in which the consent to the Treatment has been revoked and there are no other legal conditions for the Processing);
- Right to limitation of treatment;
- Right to object to processing;
- Right to data portability (right to receive Personal Data in a commonly used and readable format);
- Right to lodge a complaint with the Personal Data Protection Authority.
MISCELLANEOUS
Please be advised that if you open a hyperlink on a third party website, you may be redirected to a website we do not control and this Policy will no longer apply. Your browsing and interactions on any other website are subject to that website's terms of use and privacy policy, as well as other policies on that website. By inviting you to carefully read the privacy policy of the other websites you visit, the Company declines all responsibility for the information or content of such third-party websites.
CHANGES TO THE POLICY
Since the Company's activities may be subject to change, this privacy policy could also be modified, the Company therefore reserves the right to modify and update this information from time to time. We invite the interested party to periodically visit this page to view any updates.
Personal Data is collected and processed by the Company, relying on it to be complete, accurate and up-to-date. It is understood that the interested party is responsible for the completeness and accuracy of the information provided and must promptly inform the Company of any changes/inaccuracies in the same by contacting [email protected].
In case of specific questions regarding the management of Personal Data, the interested party can send a specific request to the e-mail address [email protected].