PRIVACY NOTICE AND COOKIE POLICY HOTEL dell'Orto Chiavari

1. Data controller
The Data Controller is: HOTEL DELL'ORTO
CIN: IT
Address: Piazza Nostra Signora dell'Orto 3, Chiavari, 16043, Italy
Email: dellortohotel@gmail.com
Telephone: +39 0185390448


2. Introduction This privacy notice describes how we collect and process the personal data of users who visit the website (hereinafter the “Website”) or who make enquiries or bookings. The processing of personal data is carried out in accordance with: The General Data Protection Regulation The Personal Data Protection Code

3. Types of data collected The Data Controller may collect and process the following categories of data: a) Identification and contact details First name and surname Email address Telephone number Country of origin
b) Booking details Booking details Information about your stay Payment details (handled by third-party providers — we do not store credit card details)
c) Technical and navigation data IP address Device and browser information Site usage data
d) Preferences Language Marketing preferences Cookie preferences

4. Purposes and legal basis of the processing a) Management of bookings and services Data is processed to manage bookings, communicate with the user and provide the requested services. Legal basis: performance of a contract
b) Customer support To respond to enquiries or communications. Legal basis: legitimate interest
c) Website improvement and analysis To analyse website usage and improve its performance. Legal basis: legitimate interest / consent (where required)
d) Marketing communications The Data Controller may send promotional communications, offers or updates relating to Nora’s Suites only with the user’s explicit consent. Consent may be withdrawn at any time. Legal basis: consent

5. Disclosure of data Personal data will not be sold or disclosed to third parties for marketing purposes without the user’s consent. However, in order to provide the services, data may be processed by third parties such as: Payment service providers Booking platforms (e.g. Booking.com, Airbnb) IT and hosting service providers These parties process data exclusively for the purposes necessary to provide the service and in compliance with the GDPR. Some parties (such as booking platforms) may act as independent data controllers. Data may also be disclosed to the relevant authorities in the cases provided for by law.

6. Data retention Personal data is retained for as long as is necessary for the purposes for which it is collected: Booking and tax data: up to 10 years (legal obligations) Data for marketing purposes: until consent is withdrawn or for an indicative maximum period of 24 months Technical/analytical data: anonymised where possible

7. Rights of the data subject You have the right to: Access your personal data Request the rectification of inaccurate data Request the erasure of data Restrict processing Receive your data in a portable format Object to processing Withdraw your consent at any time To exercise your rights: info@hoteladriavenice.it You may also lodge a complaint with: The Italian Data Protection Authority

8. Data security The Data Controller takes appropriate technical and organisational measures to protect personal data from unauthorised access, loss or unlawful use.

9. Cookie Policy What are cookies? Cookies are small text files that are stored on the user’s device whilst they are browsing.

Types of cookies used a) Technical (necessary) cookies These are essential for the website to function and do not require consent.
b) Analytical cookies Used to collect information on how the website is used. They may require the user’s consent.
c) Marketing cookies (if any) Used for advertising or profiling purposes. They require explicit consent.

Cookie management You can manage your cookie preferences via your browser or via the banner on the website. Disabling cookies may affect certain features of the website.

10. Updates This policy may be updated from time to time. The most recent version will always be available on the Website