The purpose of the privacy policy is to provide maximum transparency regarding the information the site collects and how it uses it.

In compliance with the obligations deriving from national (Legislative Decree no. 196 of 30 June 2003, Personal Data Protection Code) and European (European Data Protection Regulation no. 679/2016, GDPR) legislation, this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe the rights of users.

1. Data controller

The Data Controller is the Company AGS s.a.s. with registered office in Via S.S. 18 – C.da San Filippo – 89015 in the person of its legal representative pro tempore Rocco Angalò (henceforth the ‘Company’), which guarantees compliance with the rules on the protection of personal data by providing the following information on the processing of data communicated or in any case collected during navigation on this website.

You can contact the company at the following telephone number: +39 045 925 1500 or at the following e-mail address: info@hotelcityverona.it

2. Automated data collection

Like all websites, this site also makes use of log files in which information collected automatically during user visits is stored, such as:

• Internet domain and IP protocol;
• type of browser and operating system of the computer used;
• date, time and permanence on the site;
• pages visited and possibly the number of clicks;
• the visitor’s source and exit web pages:
• any search engine from which one entered the site.

This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. The information collected automatically may be used by the Company:

• in case of suspected use in violation of the law;
• for statistical purposes;
• to improve the navigation and content of the site.

The legal basis legitimising the processing is the need to make the site’s functionalities usable following user access. No consent is required for the provision of such data.

3. Voluntarily disclosed personal data

Outside the scope of Art. 2) above, your personal data are processed for the following purposes: promotional communications, including personalised ones, market surveys, economic/statistical analyses, prize programmes, customer satisfaction surveys through the sending of advertising posters and printed promotional literature, e-mails, sms, mms and telemarketing.

4. Legal basis and obligatory or optional nature of providing data

Outside the purposes indicated in Art. 2) above, the legal basis legitimising the processing of your personal data for the purposes of Art. 3) above is the freely given consent.

The provision of personal data is always optional: failure to provide it will make it impossible for the Company to send you newsletters, advertising material or to carry out any other promotional initiative.

5. Processing methods and data retention time

The data collected will be processed by means of electronic or in any case automated, computerised and telematic tools, or by means of manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to guarantee the security of the same.Personal data will be kept for the time strictly necessary for the management of the purposes for which the data are collected in compliance with the regulations in force and legal obligations.

6. Persons authorised to process, responsible for and communication of data

The recipients of the data provided are the Data Controller, as well as the latter’s employees and collaborators, in their capacity as internal data processors and/or system administrators.

The data may also be processed by professionals and/or companies appointed to carry out technical, development, management and administrative-accounting activities.

The data may also be disclosed to the following categories of recipients:

supervisory bodies, judicial and/or public authorities, as well as to those subjects to whom communication is obligatory by law for the fulfilment of the aforementioned purposes;
subjects that provide services for the management of the Company’s computer system and telecommunications networks (including e-mail);
firms or companies in the context of assistance and consultancy relationships;
persons carrying out control, auditing and certification of the activities carried out by the Company also in the interest of customers;

In addition, the data may be transferred to companies in the e-commerce, mail-order, publishing, utilities, tourism, sports, communication, entertainment, financial, insurance, automotive, consumer goods sectors, for the sending of advertising material and other promotional and commercial purposes, by web, mail, e-mail, telephone (sms, mms, telemarketing).

The data collected may be transferred abroad, including outside the European Union, in the form and manner provided for by the legislation in force, in all cases guaranteeing an adequate level of protection.

7. Rights of the data subject

At any time, you may exercise, pursuant to Art. 7 of Legislative Decree. 196/2003 and Articles 15 to 22 of EU Regulation No. 2016/679, the right to:

• request confirmation of the existence or otherwise of their personal data;
• obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, where possible, the storage period;
• obtain rectification and deletion of data;
• obtain restriction of processing;
• obtain portability of data, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;
• object to processing at any time and also in the case of processing for direct marketing purposes;
• oppose automated decision-making relating to fixed persons, including profiling;
• to request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning him or her, or to object to their processing, in addition to the right to data portability;
• revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation;
• file a complaint with a supervisory authority.

8. Methods of exercising rights

You may at any time exercise the rights set out in Art. 7) above, by sending an e-mail to: info@hotelcityverona.it