PRIVACY POLICY CHEF EXPRESS – HOTEL HARRY’S BAR TREVI
INFORMATION ON THE PROCESSING OF PERSONAL DATA
Information pursuant to and for the purposes of art. 13 et seq. of EU Regulation no. 679/2016 of 27th April 2016 (GDPR).
Pursuant to and for the purposes of art. 13 of the GDPR, in line with the principle of transparency, information relating to the processing of personal data of visitors/registered users of the website https://hotelharrysbartrevi.com is provided.
1. Data Controller, Data Protection Officer and Data Processors.
The data controller is Chef Express S.p.A., of which Hotel Harry’s Bar Trevi constitutes a brand, and can be contacted by writing to the company address, Via Modena 53, post code 41014, Castelvetro di Modena (MO) or via e-mail to info@chefexpress.it
The Data Protection Officer, appointed by the Data Controller, can be contacted via e-mail at the following address: dpo@chefexpress.it
The updated list of managers appointed by the Data Controller pursuant to art. 28 of the aforementioned EU Regulation and persons authorised to process data can be consulted at Chef Express S.p.A.’s headquarters
2.Types of processed data.
a) Browsing data
The computer systems and software procedures used to operate this website/app acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This category of data includes the IP addresses and domain names of the computers and terminals utilised by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the request time, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
b) Data disclosed by the user
The optional, explicit and voluntary sending of messages to the Hotel Guerro email address, private messages sent by users to institutional profiles/pages on social media (where this possibility is provided), as well as the compilation and forwarding of forms present on the Hotel Harry’s Bar Trevi website (e.g. “Contacts” form), involve the acquisition of the sender’s contact data, necessary to reply, as well as all personal data included in the communications and necessary for the supply by part of Chef Express S.p.A. of all the services offered.
The provision of this data is optional. However, failure to provide the data considered mandatory (marked with the * sign) may make it impossible to be contacted and know what was requested, as well as inhibiting the booking of the room and the possibility of using the services/advantages reserved for registered users.
3. Purposes and methods of processing
a) Browsing data
They are automatically acquired as they are necessary for the use of web services and are also processed for the purpose of:
- Obtaining statistical information on the use of services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.)
- Checking the correct functioning of the services offered.
b) Data disclosed by the user
The personal data disclosed by the user through specific forms (e.g. the “Contacts” form) as well as those collected in the account registration procedure, or in the room booking procedure (e.g. card details credit card: type and number of card, name on the card) are processed to follow up on specific requests sent by users (e.g. booking request) and in order to allow access to the services provided by the site and/or reserved to registered users.
In the event that the user has expressed consent at the time of activation of the service, or expresses it subsequently and until its revocation, his personal data may be processed by Chef Express S.p.A. for:
- allowing access to the services provided by the site and/or reserved for registered users, such as, by way of example: reserved offers, crediting of discounts, booking of rooms;
- sending commercial communications on its own products and services, or those of third-party companies, even with automated methods, for direct sales purposes, as well as for sending market research and verifying the level of user satisfaction;
- the communication and transfer of user data to third parties for the sending of commercial communications on its own products and services, even with automated methods, for direct promotion purposes, as well as for sending market research;
- carrying out analysis activities of specific behaviours and consumption habits, in order to improve the services provided and direct the commercial proposals of interest to the user, also offering to third parties the aggregate summary data of the openings and clicks obtained through a system of tracking using “cookies”
- administrative and accounting purposes, for the execution of contractual obligations towards users who are part of its customer base, as well as for the fulfilment of other legal obligations.
The personal data sent through the registration procedures for the website services may be processed by Chef Express S.p.A. with automated tools exclusively by expressly designated personnel who act on the basis of specific instructions received regarding the purposes and methods of the processing itself. The possibility remains for Chef Express S.p.A. to process the aforementioned data in aggregate form, in compliance with the measures prescribed by the Guarantor Authority and by virtue of the specific exemption from consent provided by the same, for electronic analysis and processing (e.g.: classification of the entire clientele into homogeneous categories for levels of services, consumption, spending, etc.) aimed at periodically monitoring the development and economic performance of Chef Express S.p.A.’s activities, orienting the related industrial and commercial processes, improving services, as well as designing and implementing commercial communication campaigns.
4. Bookings
Personal data on bookings will be processed electronically and on paper for the sole purpose of guaranteeing the booking of rooms under the agreed conditions.
The booking platform is made available by Zucchetti Hospitality S.r.l., appointed by Chef Express S.p.A. as data controller pursuant to art. 28 GDPR; the platform will communicate the data of the interested party to the accommodation facilities of the Hotel Guerro and/or Hotel Harry’s Bar Trevi for normal activities related to hospitality management.
The data will be recorded in our electronic databases accessible to duly appointed and trained personnel regarding the security and confidentiality of personal data.
To confirm the booking, a credit card will be required as a guarantee, it being understood that the customer can decide to pay in cash at the end of the stay.
5. Security measures
Specific security measures are observed by Chef Express S.p.A. to prevent data loss, illicit or incorrect use and unauthorised access.
Personal data is recorded and stored on electronic databases located in Italy.
The processing of personal data provided by users may also be carried out by companies, bodies or consortia, appointed as data controllers pursuant to art. 28 of the aforementioned EU Regulation, which, on behalf of Chef Express S.p.A., provide specific processing services, or related, instrumental or support activities, and whose complete list can be requested by you from Chef Express by email at info@chefexpress .it
Among these data controllers is the provider of the hosting service of the “Hotel Harry’s Bar Trevi” website.
The personal data provided by users may also be communicated:
- to investee or associated companies;
- to subjects who’s right to access personal data is recognised by legal provisions, regulations or community legislation;
- to subjects towards whom communication is required by law or regulation, or by public subjects for the performance of their institutional functions.
6.Storage period
a) Browsing data
This data, necessary for the use of web services, do not persist for more than seven days, except for any need to ascertain crimes by the judicial authority.
b) Data disclosed by the user
- for the time necessary to carry out the services for the purposes referred to in § 3 point 1);
- 24 months for the purposes referred to in § 3 points 2) and 3);
- 12 months for the purposes referred to in § 3 point 4);
- 10 years from termination date of the contractual relationship for the purposes referred to in § 3 point 5).
Once said periods have expired, Chef Express S.p.A. will make the data anonymous (i.e., not attributable in any way to a specific person) or delete them permanently.
7.Legal basis for processing
The processing of navigation data is necessary for the use of web services; those of the data voluntarily communicated by the user are processed by the Data Controller in the execution of the contract for the provision of related services, including those relating to room booking and/or registration and reserved for registered users, as well as in compliance with regulatory obligations, regulations, imposed by the Authority to which the Data Controller is subject.
8.Rights of the data subject
The data subject has the right to ask Chef Express S.p.A. access to personal data concerning them, as well as rectification, cancellation, limitation, opposition to their processing and portability of the same, where processed automatically on the basis of consent or for the execution of the contract.
The data subject has the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.
These rights can be exercised through the settings provided by your device and/or by writing to info@chefexpress.it
The data subject also has the right to lodge a complaint with the Guarantor Authority for the processing of personal data, whose references can be found on the website. www.garanteprivacy.it
Information updated as of 13/07/2023