Privacy Policy

Dear Customer
In accordance with applicable privacy laws (EU Regulations n. 679, 2016 - D. Legisl.196/2003, we would like to take this opportunity to inform you that your personal information will be processed in an ethical and transparent manner, only for lawful purposes, and in a manner that safeguards your privacy and your rights. Processing takes place manually and using IT tools, and is done, by us and our persons in charge of data processing, for the following purposes:

1. To obtain and confirm your booking of accommodations and other services, and to provide such services as requested. Since this processing is required to define our contractual relationship and to perform under our contract with you, your consent is generally not required. Should you refuse to submit your personal information, we will not be able to confirm your booking or provide you with the requested services. Processing shall cease once you check out, although some of your personal information may (or in some instances, has to) continue to be processed for the purposes and in the manner described below;
2. To comply with our “Public Safety Law” (Article 109 Royal Decree n. 773, 18/6/1931) which requires that we provide identification data of our guests to the police, for purposes of public safety, in the manner established by the Ministry of the Interior (Decree of 7 January 2013). Data submission is mandatory, and does not require your consent. Should you refuse to provide such information, we will not be able to host you in our hotel. Data acquired for such purposes shall not be retained by us, unless you provide consent to their retention as required under point 4, infra;
3. To comply with applicable administrative, accounting, and tax regulations. For these purposes, your consent is not required. Personal information is processed by us and our persons in charge of data processing, and is disclosed outside the company only when and if required by law. Should you refuse to submit the required data for the above purposes, we will not be able to provide you with the requested services. Data acquired for such purposes is retained by us for the required statutory period (10 years – or longer, in case of tax audits);
4. To speed-up check-in on your next visit to our hotel. For such purposes, upon obtaining your consent (which can be revoked at any moment), your information will be retained for a maximum of 5 years, and will be used the next time you are our guest, for the reasons listed supra;
5. To send you advertising messages and updates on special rates and promotions. For this purpose, upon obtaining your consent, your information shall be retained for a maximum of 10 years, and will not be disclosed to third parties. You may revoke your consent at any moment;
6. For purposes of protecting persons, property, and company assets, using a videosurveillance system for some areas of the hotel, which are duly identified by signage. Your consent is not required for such processing because it is conducted pursuant to our legitimate interest to safeguard persons and property against potential violence, theft, robbery, damage, and vandalism. Surveillance is also conducted for purposes of fire prevention and occupational safety and health. Recorded images are erased after 24 hours, except on holidays or other days the business is closed; images are never retained for more than one week. These images are not subject to third-party disclosure, except as required to comply with a specific investigatory demands from a court or the police. We also would like to inform you that the European Regulation grant you certain rights, including rights of access to, adjustment, erasure, limitation of, or objection to the processing of your data, as well as data portability rights, when and insofar as applicable (Articles 15-22 of the EU Regulations n. 679, 2016). You can also file a complaint with the Data Protection Authority, according to the procedures set forth under applicable regulations.

For any other concern, and to assert your rights under the EU Regulation, please contact:

Giasa srl

Via Cassia 1451, 00123, Roma, Italia
Mail: giasa@pec.it

Mob. +39 333 2461734

The privacy policy of this site
On this page you can find the site management methods with reference to the processing of the personal data of the users who consult it. This information is also provided pursuant to the current legislation on the protection of personal data (Regulation (EU) 2016/679 - Legislative Decree 196/2003), to those who consult the pages of the website www.torredellecornacchie.it (hereinafter: "site") or who use the services made available on it. The information is provided exclusively for the Torre delle Cornacchie site and not for other websites that may be consulted by the user through the links present on the site.

Holder of the treatment: Giasa srl

Via Cassia 1451, 00123, Roma, Italia
Mail: giasa@pec.it

Mob. +39 333 2461734

TYPES OF DATA PROCESSED

Navigation Data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this possibility, the data on web contacts do not currently persist for more than seven days.

Data provided voluntarily by the user
The registration of personal data, even particular ones (so-called "sensitive"), on the specific page of the site, aimed at requesting services, access to the reserved areas of the site, the request to send the newsletter, as well as the optional, explicit and voluntary e-mail to the addresses indicated on this site, involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.

Cookie
No personal user data is acquired by the site in this regard. Cookies are not used to transmit information of a personal nature, nor are so-called c.d. persistent cookies of any kind, or systems for tracking users. The use of so-called session cookies (which are not stored permanently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe browsing and efficient site. The so-called Session cookies used on this site avoid the use of other IT techniques that are potentially prejudicial to the privacy of users' browsing and do not allow the acquisition of the user's personal identification data.

Optional supply of data
Apart from that specified for navigation data, the user is free to provide personal data contained in the service request forms, or indicated in contacts with our offices to request the sending of the newsletter, informative material or other communications. Failure to provide them may make it impossible to obtain what is requested.

Processing methods
Personal data are processed with automated and manual tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Rights of interested parties
The subjects to whom the personal data refer have certain rights (right of access, right of rectification, right of cancellation, right of limitation of treatment, right to data portability, right of opposition, right not to be subjected to a decision based solely on on automated processing, including profiling) if and as applicable (articles 15 to 22 of EU Regulation no.679 of 2016). They also have the right to lodge a complaint with the supervisory authority, according to the procedures provided for by current legislation.

Requests should be sent:
- by e-mail, to the address: giasa@pec.it
- or by mail to Giasa srl, Via Cassia 1451, 00123 Rome, Italy