In accordance with Regulation (EU) 2016/679 (hereinafter "Regulation"), this page describes the methods of processing personal data of users who consult the websites accessible electronically. This information does not concern other sites, pages, or online services reachable via hypertext links that may be published on the sites but refer to resources external to the Data Controller's domain. Please note that the Privacy Policy may be modified from time to time depending on the activation of new services or following legal updates; therefore, it is advisable to periodically check for any news on the matter by consulting the aforementioned site. This page describes the management methods of the site with reference to the processing of personal data of users who consult it. This is an information notice provided also pursuant to Art. 13 of the (EU) Regulation concerning the protection of individuals with regard to the processing of personal data for those who interact with the web services of “Grand Hotel Des Bains srl” accessible electronically from the address info.reception@grandhoteldesbains.com; any further data processing is defined in the information notice and cookie policy corresponding to the first home page of the official website www.grandhoteldesbains.com. The information is provided only for the site of “Grand Hotel Des Bains srl” and not for other websites that may be consulted by the user via links. The information is also inspired by Recommendation No. 2/2001 that the European authorities for the protection of personal data, gathered in the Group established by Art. 29 of Directive No. 95/46/EC, adopted on May 17, 2001, to identify some minimum requirements for the collection of personal data online, and, in particular, the methods, timing, and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purposes of the connection.

The Data Controller Following consultation of this site, data relating to identified or identifiable persons may be processed. The "controller" of their processing is “Grand Hotel Des Bains srl”, based in Viale Gramsci 56, 47838 Riccione, VAT/Tax Code: 03191120405.

Legal basis for processing The personal data indicated on this page are processed by Grand Hotel Des Bains srl for the performance of its activities. Consent, execution of a contract, fulfillment of a legal obligation, as well as the pursuit of a legitimate interest are the legal bases that, depending on the data processing carried out on the aforementioned website, will be pursued.

Place of data processing The processing related to the web services of this site takes place in ITALY at the Server Farm XT System, Via Macanno, 38/N 47924 Rimini; these subjects are suppliers of Edita Srl with registered office in via Flaminia, 138 47923 Rimini (ITALY). The data processing for the maintenance and management operations of the website is carried out by Edita srl, the data processor (Art. 28 GDPR). Edita srl is a web agency that guarantees compliance with the GDPR.

Types of data processed and purposes of processing Navigation data The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.), and other parameters related to the user's operating system and computer environment. Such data, necessary for the use of web services, are also processed for the purpose of:

 

  • Obtaining statistical information on the use of services (most visited pages, number of visitors per hour or day, geographical areas of origin, etc.);

     

  • Checking the correct functioning of the offered services.

Data communicated by the user The optional, explicit, and voluntary sending of messages to the contact addresses of Grand Hotel Des Bains srl, as well as the completion and submission of the forms on the site www.grandhoteldesbains.com, entail the acquisition of the sender's contact data, necessary to respond, as well as all personal data included in the communications. Specific information notices will be published on the pages of the site www.grandhoteldesbains.com prepared for the provision of certain services.

Cookies and other tracking systems Cookies are not used for user profiling. Instead, session cookies (non-persistent) are used in a manner strictly limited to what is necessary for the safe and efficient navigation of the sites. The storage of session cookies in terminals or browsers is under the user's control, whereas on the servers, at the end of HTTP sessions, information related to cookies remains recorded in the service logs, with retention times specific to each individual third-party service provider. Any data acquired through cookies, and the methods for their management, are fully described in the “cookie policy” document.

Navigation data This data is used solely for the purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing. Information collected automatically may be used by “Grand Hotel Des Bains srl” for the assessment of responsibility in case of hypothetical computer crimes against the site, for statistical purposes, and to improve site navigation and content. Any data acquired through cookies are fully described in the “cookie policy” document.

Data provided voluntarily by the user The optional, explicit, and voluntary sending of data entered in the data collection forms, or the sending of emails to the email addresses indicated on this site, entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. It is specified that personal and/or company data entered in the forms on the site www.grandhoteldesbains.com are protected by “Grand Hotel Des Bains srl” and used to answer user queries and to provide requested information and services.

Optional nature of data provision Apart from what is specified for navigation data, the user is free to provide the personal data reported in the information request forms to “Grand Hotel Des Bains srl”; if necessary, whenever such data is requested, specific information will be provided and, where necessary, consent will be requested.

Processing methods Personal data are processed using automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access. We inform you that, to provide a complete service, there are links to other websites managed by other owners. We decline any responsibility in case of errors, content, cookies, publications of illicit immoral content, advertising, banners, or files not compliant with current regulations and the respect of Privacy legislation by sites not managed by us to which reference is made.

Recipients of the data The recipients of the data collected following the consultation of the sites listed above are the following subjects designated by Grand Hotel Des Bains srl, pursuant to Article 28 of the Regulation, as data processors:

  • EDITA as a provider of development and maintenance services for the web platform;

  • EDITA regarding the site as a provider of development, delivery, and operational management services for the technological platforms used. The personal data collected are also processed by the staff of Grand Hotel Des Bains srl, who act on the basis of specific instructions provided regarding the purposes and methods of the processing itself.

Data transfer abroad Third Countries: Data are not communicated to third countries.

 

Rights of the interested parties You have the right to obtain from the controller the cancellation (possible right to be forgotten), limitation, updating, rectification, portability, opposition to the processing of personal data concerning you, and in general, you can exercise all the rights provided by articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR, where applicable with respect to the purposes of data processing. EU Reg. 2016/679: Arts. 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Interested Party

 

  1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning them, even if not yet recorded, and their communication in an intelligible form.

  2. The interested party has the right to obtain the indication of: a. the origin of the personal data; b. the purposes and methods of processing; c. the logic applied in case of processing carried out with the aid of electronic instruments; d. the identification details of the controller, processors, and the representative designated pursuant to article 5, paragraph 2; e. the subjects or categories of subjects to whom the personal data may be communicated or who may come to know them as designated representative in the territory of the State, processors, or persons in charge.

     

  3. The interested party has the right to obtain: a. the update, rectification or, when interested, the integration of data; b. the cancellation, transformation into anonymous form, or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c. the certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right; d. data portability.

     

  4. The interested party has the right to oppose, in whole or in part: a. for legitimate reasons, the processing of personal data concerning them, even if pertinent to the purpose of the collection; b. the processing of personal data concerning them for the purpose of sending advertising material or direct selling or for carrying out market research or commercial communication.

     

Right to lodge a complaint Interested parties who believe that the processing of personal data relating to them carried out through this site occurs in violation of the provisions of the Regulation have the right to lodge a complaint with the Garante (Privacy Authority), as provided by Art. 77 of the Regulation itself, or to appeal to the appropriate judicial offices (Art. 79 of the Regulation).