Privacy Policy
- INTRODUCTION
Your privacy is important to Lungarno Alberghi S.r.l. therefore we have adopted a privacy policy regarding the way in which we collect, use, transfer and store your data. Please read this document to learn about our privacy policy, if you have any questions, please write to us using the contact details provided below.
With this document Lungarno Alberghi S.r.l. provides you, pursuant to Articles 13 and 14 of European Regulation No. 2016/679 on the protection of individuals with regard to the processing of personal data (hereinafter “GDPR”), with certain information regarding the use of the website www.lungarnocollection.com (“Site”) and any processing of personal data related to it.
- DATA PROCESSED AND THE NATURE OF THE PROVISION
2.1 Data collected when using the website
Personal data may be used to identify or contact the user, as well as to provide better services to all our guests.
Data collected automatically
In normal operation, the computer systems and software procedures involved in the operation of the website and all the applications acquire some personal data which are implicitly transmitted when using Internet communication protocols. This information, which is not collected to be associated with identified data subjects, but by its very nature could, by means of processing and associations with data held by third parties, allow users to be identified. This category of data includes the IP address or domain name of the device used, the operating system, the make and model of the device, the telephone operator, addresses in URI (Uniform Resource Identifier) of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (completed, error, etc.) and other parameters related to your device’s operating system and computer environment. These data are used to compile anonymous statistics on the use of the website and to monitor its correct operation.
Data provided by the user voluntarily
If you decide to interact with any forms on the site or to contact us by email, you may have to send and/or provide some personal information. Information that may be requested from you, but is not limited to include: first and last name, contact details (address, telephone number, email), details of your stay, your tastes and preferences.
By sending this information, you are responsible for the accuracy of the personal data provided to Lungarno Alberghi S.r.l.
2.2 Provision of data
Except that specified for browsing data, the user is free to provide their personal data. Not providing such data may, however, make it impossible to obtain that requested.
3. PURPOSES OF PROCESSING AND LEGAL BASES
3.1 Your data will be processed:
a. to enable you to use the functions provided by the site, including booking management, purchase of gift vouchers and ancillary services (tour/experience, spa services, catering);
b. to respond to any requests you may have made by email;
c. for the technical management of the site’s services;
d. send promotional and informative communications on services and offers concerning the activity of Lungarno Collection, by email;
e. to exercise the Data Controller’s rights;
Other purposes may be indicated in the notices related to the use of specific services.
3.2 The legal basis for processing operations
With regard to purposes 3.1.a, 3.1.b, the legal basis for the processing is the performance of a contract to which the data subject is a party and/or the performance of pre-contractual measures taken at the request of the data subject.
For purposes 3.1.c and 3.1.e, the legal basis for the processing is the Data Controller’s legitimate interest in the correct administration of the systems and in exercising and defending its rights.
For purposes 3.1.d, the legal basis for the processing is your consent. We would like to remind you that you can withdraw your consent at any time and as easily as you previously granted it by writing to: privacy@lungarnocollection.com or by using the “unsubscribe” function in each of our newsletters.
- RETENTION PERIOD
Your data will be processed for as long as is necessary to process your requests and, where necessary, for as long as is required by law.
In relation to the sending of our newsletter, your data will be kept, unless revoked earlier, for a maximum of 4 years from your last interaction with our newsletter.
After the retention periods indicated above, your personal data will be destroyed, deleted or anonymised, in line with the technical erasure and back-up procedures.
- PROCESSING METHODS AND THEIR USE
Data will be processed, subject to the necessary security and confidentiality, collected and recorded for specific, explicit and legitimate purposes.
All data processing shall be based on the principles of fairness, lawfulness and transparency and may be carried out either manually or by automated means and shall be carried out by appropriate technical and organisational measures, avoiding the risk of loss, destruction, unauthorised access or disclosure or, in any case, unlawful use, and through reasonable measures to erase or rectify any inaccurate data in a timely manner.
- RECIPIENTS OF THE DATA
The personal data provided will be processed by staff appointed, suitably trained and operating under the authority and responsibility of the Data Controller. Personal data may also be processed by third parties that provide instrumental services, including communication, email, hosting and site maintenance services and other service providers related to the afore-mentioned purposes.
Only the data strictly necessary for the performance of their respective functions will be communicated to the parties mentioned above.
The updated list of all recipients is available at the Data Controller’s registered office and will be provided at the request of the data subject by writing to the following email address: privacy@lungarnocollection.com
- YOUR RIGHTS
You may exercise your rights under Chapter III of GDPR with respect to the data at any time.
In particular, you have the right to ask the Data Controller for access to your data, their rectification or erasure, the integration of incomplete data, restricted processing; to receive data in a format that is structured, in common use and readable by an automatic device; to withdraw any consent given and to object in whole or in part to the use of the data and to exercise other rights recognised by the applicable rules.
You may exercise your rights by writing to the following email address: privacy@lungarnocollection.com.
Furthermore, pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with the Autorità Garante per la Protezione dei Dati [Italian Data Protection Authority] if you consider that the processing breaches the afore-mentioned Regulation.
- USE OF COOKIES AND COOKIE POLICIES
You can find all the information on cookies installed through this site at the following link (https://www.lungarnocollection.com/cookie-policy/), as well as the necessary information on how to manage your preferences in this regard.
- CHANGES TO THIS PRIVACY POLICY
Lungarno Alberghi S.r.l., as Data Controller, reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Please refer to this page using the last modified date at the bottom as a reference.
- CONTACT DETAILS OF THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER
The Data Controller is: Lungarno Hotels S.r.l., whose registered office is in VIA TORNABUONI 2 – 50123 – (FI)
Email: privacy@lungarnocollection.com
The Data Protection Officer (DPO) can be contacted by email at: dpo@lungarnocollection.com
Last update: May 2024
VIDEO SURVEILLANCE NOTICE
(Arts. 13 EU Regulation 27 April 2016 No .679
“General Data Protection Regulation”
To Dear Sir/Madam,
Lungarno Alberghi S.r.l., in its capacity as Data Controller (hereinafter also referred to as “Data Controller ”), pursuant to Articles 13 to 2016/679 of the EU Regulation on Data Protection (hereinafter referred to as the “Regulation”), and point 3.1 of the Measure of the Italian Data Protection Authority on Video Surveillance – 8 April 2010 (doc. Web No. 1712680), informs you that a video surveillance system is in place – with image recording – for the safety of people and the protection of the company’s assets.
TYPE OF DATA PROCESSED
The personal data being processed are images. In compliance with current legislation, appropriate signs inform those who are about to enter or are in the video surveillance area. The exact location of the cameras is indicated on the plans available from the Human Resources Department and can be consulted upon request by the data subject.
PURPOSE OF DATA PROCESSING AND LEGAL BASIS
Personal data will be processed for the safety of individuals and to protect the company’s assets. The legal basis for such processing is the legitimate interest of the Data Controller.
PROVISION
The instrument in question must be regarded as indispensable as a deterrent and as a means of protecting the company’s property and the safety of individuals. Processing is necessary for these purposes.
RETENTION TIME
Recordings are kept for 48 hours and then deleted.
RECIPIENTS OF THE DATA
The recorded images may only be viewed by persons specifically appointed by the Data Controller for this purpose.
If the property has outsourced the security service to third parties, the live images may be viewed, through dedicated monitors, by the staff of the company to which the service has been entrusted, for the mentioned purposes only, as well as by the company’s appointed data processors.
In the event of damage or criminal events, the recorded images will be transferred to computer media for the purpose of exercising the Data Controller’s rights and to be handed over to the competent authorities. Personal data relating to this processing may also be communicated to legal or consulting firms to which the Data Controller has given a specific mandate. A detailed list of these entities is available from the Human Resources Department and will be provided upon request from the data subject by writing to the following email address: dpo@lungarnocollection.com
YOUR RIGHTS
You may exercise your rights under Chapter III of the Regulation with respect to the personal data processed at any time. In particular, you have the right to ask the Data Controller for access to your data, their erasure and restricted processing; you can ask to receive data in a format that is structured, in common use and readable by an automatic device; to object in whole or in part to the use of the data and to exercise other rights you have under the applicable rules. You may exercise your rights by writing to the following email address: dpo@lungarnocollection.com
Furthermore, pursuant to Article 77 of EU Regulation 2016/679, you also have the right to lodge a complaint with the Autorità Garante per la Protezione dei Dati [Italian Data Protection Authority] if you consider that the processing breaches the afore-mentioned Regulation.
CONTACT DETAILS OF THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER
The Data Controller is: Lungarno Alberghi S.r.l. whose registered office is in Via Tornabuoni no. 2 (50123) – FI – Email: privacy@lungarnocollection.com
The Data Protection Officer (DPO) can be contacted by email at: dpo@lungarnocollection.com