Privacy & Cookie Policy

Information and consent regarding the processing of personal data.

Interested Parties: Users and visitors of the website.

HOTEL MARIOTTI DI MARIOTTI CLAUDIO & C. S.A.S., headquartered at Viale Colombo no. 147, Lido di Camaiore (LU), VAT number 00986550465, in its capacity as the Data Controller of your personal data, pursuant to Legislative Decree of June 30, 2003, no. 196 (‘Code on the protection of personal data’) and Regulation (EU) 2016/679 (also GDPR), hereby informs you that the aforementioned legislation provides for the protection of individuals and other subjects regarding the processing of personal data and that such processing will be based on principles of fairness, legality, transparency, and the protection of your privacy and your rights.

Website Security Measures: Specific security measures have been implemented to manage the website, aimed at ensuring the secure access of the user and protecting the information contained on the website from risks of loss or accidental destruction.
For access to the reserved area of the website, an identification code and a password are assigned to businesses upon request; these passwords are generated in such a way that they do not contain easily traceable references to the associate, in order to prevent possible abuse. The user is required to keep their password confidential.

Changes to this Privacy Policy: The controller reserves the right to make changes to this Privacy Policy at any time by providing notice to users on this page and ensuring, in any case, a similar level of protection for personal data. Therefore, it is recommended to frequently consult this page, referring to the date of the last modification indicated at the bottom of the document.

Legal References: This privacy policy has been drafted in compliance with the obligations set forth by Regulation (EU) 2016/679, Legislative Decree 196/2003 as updated by Legislative Decree 101/2018, Article 10 of Directive 95/46/EC, and as provided for by Directive 2002/58/EC, as updated by Directive 2009/136/EC on Cookies.

Subject and Purpose of Processing: Your data will be processed for purposes described in the following paragraphs; if they relate to legal or contractual obligations, it will be sufficient to review this policy. If they relate to other purposes, the provision of data will be optional, and your potential refusal to process will not compromise the continuation of the relationship or the adequacy of the processing itself, if based on a legal basis other than consent.

In general, User data is collected to allow the Data Controller to provide its services, as well as for the following purposes: contacting the user, sending emails, interacting with social networks, statistical purposes, and displaying content from external platforms.
It is also used for the following purposes:

Responding to incoming requests
Commercial purposes, sending DEM (service proposal campaigns)
Informative purposes (newsletter)
Profiling purposes by interests through tags, anonymously
The personal data collected through this website refers to:

Navigation and usage data, cookies
Data voluntarily provided by the user through the dedicated form
The Personal Data collected may relate both to the User and to third parties whose data the User provides.
The User assumes responsibility for the personal data of third parties published or shared through the website and guarantees the right to communicate or disseminate them, releasing the Data Controller from any liability towards third parties.

For the following processing purposes, the Data Controller may become aware of the following categories of data when necessary for the purposes specified below, in particular:

First and last name and/or Company name;
Email address;
Phone number;
IP address (which is anonymized with respect to Google Analytics)
Navigation data;
Personal data eventually provided in the free field "Needs"
Some data may belong to the category of so-called sensitive data, such as judicial or health-related data. Your sensitive data subject to processing are only those strictly relevant to the obligations, tasks, or purposes described above and will be processed in compliance with the indications contained in the relevant General Authorizations of the Data Protection Authority.

1. Browsing Data.

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user's operating system and computer environment.
These data are used solely for the purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain liability in case of hypothetical computer crimes against the site.

All companies using browsing data are considered independent Data Controllers, and therefore, for processing by such entities, please refer to the specific privacy policies listed below.

COOKIE POLICY
Cookie Policy of www.hotelmariotti.it

This document contains information regarding the technologies that allow this Website to achieve the purposes described in the privacy policy. Such technologies enable the Data Controller to collect and store information (for example, through the use of cookies) or to use resources (for example, by running a script) on the User's device when they interact with this Website.
For simplicity, these technologies are referred to as "Tracking Tools" throughout this document, unless there is a reason to differentiate them.
For example, although cookies can be used in both web and mobile browsers, it would be inappropriate to refer to cookies in the context of mobile applications, as they are Tracking Tools that require a browser. Therefore, the term cookie is used within this document to specifically indicate that particular type of Tracking Tool. We use cookies to personalize content and ads, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics, advertising, and social media partners, who may combine it with other information you have provided to them or that they have collected from your use of their services.
Some of the purposes for which Tracking Tools are employed may require User consent. If consent is given, it can be revoked freely at any time by following the instructions contained in this document.
This Website only uses Tracking Tools managed directly by the Data Controller (commonly referred to as "first-party" Tracking Tools).
The duration and expiration of first-party cookies and similar Tracking Tools may vary depending on the settings chosen by the Data Controller. Some of them expire at the end of the User's browsing session.

Activities strictly necessary to ensure the functioning of this Website and the provision of the Service.
This Website uses cookies commonly referred to as "technical" or similar Tracking Tools to perform activities strictly necessary to ensure its functioning or the provision of the Service.

How to manage preferences and give or withdraw consent
There are various ways to manage preferences related to Tracking Tools and to give or withdraw consent, where necessary:
Users can manage Tracking Tool preferences directly through their device settings – for example, they can prevent the use or storage of Tracking Tools.
In addition, whenever the use of Tracking Tools depends on consent, the User can give or withdraw such consent by setting their preferences within the cookie information or by updating such preferences through the tracking settings widget, if available.
Through specific browser or device features, it is also possible to remove previously saved Tracking Tools. Other Tracking Tools stored in the browser's local memory can be removed by clearing the browsing history.

Finding settings related to Tracking Tools
Users can, for example, find information on how to manage cookies in some of the most popular browsers at the following addresses:

Google Chrome;
Mozilla Firefox;
Apple Safari;
Microsoft Internet Explorer;
Microsoft Edge;
Brave;
Opera.
Users can also manage some Tracking Tools for mobile applications by disabling them through the specific settings of the device, such as the advertising settings for mobile devices or the settings related to tracking in general (Users can consult the device settings to find the relevant one).

Data Controller
HOTEL MARIOTTI DI MARIOTTI CLAUDIO & C. S.A.S.
Data Controller’s email address: info@hotelmariotti.com
Given the objective complexity of identifying tracking technologies, Users are invited to contact the Data Controller should they wish to receive any further information regarding the use of such technologies on this Website.

Cookies
Like almost all websites, ours also uses some cookies. Cookies are small text files that websites visited by the user (but also other websites or web servers) send and store on their computer (or mobile device), to then be retransmitted back to those same websites (or web servers) upon the user's next visit, thus sending information.

Cookies have become essential tools as they allow modern websites to work efficiently, offering maximum personalization, interaction, and smooth navigation. However, they can also be used to track the user's browsing activity and subsequently send them targeted advertising messages.

Cookies can be:

Session cookies (they expire when the browser is closed) or persistent cookies (they remain until they expire, even for years);
First-party or third-party cookies (in the latter case, they are set by a website or web server different from the one the user is currently visiting);
Technical cookies (necessary, sometimes indispensable, for complete – or better – use of the website) or profiling cookies (aimed at creating a user profile to then send them advertising messages in line with the preferences expressed during previous browsing).
The Privacy Guarantor considers technical cookies to be session cookies, functional cookies, and – under certain conditions – Analytics cookies; in particular, the Guarantor, in its provision of May 8, 2014, clarified that the latter can be assimilated to technical cookies only if used for the purpose of optimizing the site directly by the site owner, who can collect aggregate information on the number of users and how they visit the site.

For more information on types of cookies, their features, and how they work, you can visit the following websites: http://www.allaboutcookies.org, www.youronlinechoices.com, http://cookiepedia.co.uk, and the specific provision of the Guarantor mentioned above.

Technical functionality cookies
These are essential for navigating the website using all its functionalities, such as accessing reserved areas and selecting the language. Without these cookies, it would not be possible to provide the requested services. These cookies collect information anonymously and are not used for commercial purposes.

Technical Analytics cookies
These cookies are used to allow the analysis of website access data by users anonymously and in aggregate form. They are cookies related to the Google Analytics web analytics platform. These cookies do not collect information that can in any way identify the user. For details on the functionalities of these cookies and how to block them, refer to the privacy section of the service: https://analytics.google.com/analytics/web/provision/#/provision

The user can choose whether to delete or block some (or all) cookies by configuring their browser. Usually, these programs also allow, through a specific option, to block third-party cookies. Each browser has different procedures for managing cookies; below, we provide the link to the specific instructions of the most popular ones:

Internet Explorer:
http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookies#ie=ie-11
Google Chrome:
https://support.google.com/accounts/answer/61416?hl=it
Apple Safari:
http://support.apple.com/kb/HT1677?viewlocale=it_IT
Mozilla Firefox:
https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie

Statistical Purposes
The services in this section allow the Data Controller to monitor and analyze traffic data and are used to track User behavior.

Google Analytics
This site uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies,” which are text files placed on users’ computers to help analyze how users use the site. The information generated by the cookie about users' use of the site will be transmitted to and stored by Google on servers in the United States. Google will use this information to track and examine users' use of the site, compile reports for site operators, and provide other services related to site activity and Internet usage. Google may also transfer this information to third parties where required by law or where such third parties process the information on Google’s behalf. The IP address associated with the individual user is anonymized before being shared with Google.

Users can refuse to use cookies by selecting the appropriate setting on their browser, but this may prevent the use of all the website's functionalities. Alternatively, if the user does not want Google Analytics to use their access data, they can follow the steps described here. By using the site, the user consents to the processing of their data by Google in the manner and for the purposes indicated above.

To view Google's privacy policy regarding the Google Analytics service, visit https://analytics.google.com/analytics/web/provision/#/provision

Displaying content from external platforms
These services allow the display of content hosted on external platforms directly from the pages of this site and interaction with them. In the event that such a service is installed, it is possible that, even if users do not use the service, it may collect traffic data regarding the pages on which it is installed.

2. Data Provided Voluntarily by the User

Sending Emails to the Addresses Indicated on the Site
The optional, explicit, and voluntary sending of emails to the addresses indicated on this site involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.

Filling out the Data Collection Form (for Information Requests)
The website, through the contact form, allows interested parties to request information by entering some personal data (such as name and surname, company name, email address, phone number). Such data will be processed manually and also using IT tools by the staff of the company specifically appointed, solely to respond to the user’s request. The personal data entered in the form is divided into two categories: mandatory and optional, as indicated in the information request procedure. Providing the mandatory data and the related processing for the above purposes is strictly functional to the execution of what is requested. The other collected data help our company offer an ever-improving service. We inform you that at any time you may exercise your rights by directly contacting the Data Controller, as outlined in the section titled "RIGHTS OF DATA SUBJECTS."

Marketing and Profiling Purposes
Through navigation on the site and filling out the contact forms, the user provides personal data that will be used for direct marketing, indirect marketing, and profiling purposes. In particular, the email addresses provided will be used for sending requested commercial offers and for advertising campaigns of the company’s products and services. To stop commercial communications, it is sufficient to communicate your wishes to the Company using the indicated contacts. The search and navigation data will instead be used for remarketing purposes through digital tools such as Google AdWords or Facebook Pixel, in an anonymous form. The use of certain search values involves user profiling through tags stored during navigation.

5. Processing Methods
The processing is carried out by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification, or destruction of Personal Data. In particular, the processing is carried out using:

IT tools, with organizational methods strictly related to the purposes indicated previously;
Outsourcing processing operations to third parties.
All processing occurs in compliance with the methods outlined in Chapter II of Regulation (EU) 2016/679 and Articles 11, 31, and following of Legislative Decree 196/03.

6. Duration of Processing and Data Retention
The processing related to the web services of this site takes place at the Company's headquarters indicated at the beginning of this document and is managed by technical personnel assigned to the processing. Your personal data will be retained in accordance with the methods previously indicated, for the minimum time required by legislative and contractual nature or until the data subject requests deletion. At the time of collection, the data will be stored in the relevant folders on the company management systems and/or in paper archives. At the time of deletion, it is possible that the data will still be retained but anonymized.

7. Data Access
Your data will be stored at our headquarters and will be made accessible only to the individuals competent for the execution of the services necessary for the proper management of the relationship, with guarantees to protect the rights of the data subject.

Your data will be processed solely by personnel expressly authorized by the Data Controller, and in particular, by the following categories of appointed individuals, who are part of the group of companies:

Administrative Managers and Staff (reading, writing, communication);
IT Managers and Staff (reading, writing, modifying, deleting), who have entered into a specific agreement with our Company;
In addition to the owner and internal staff of the group of companies, in some cases, external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may also have access to the data. Your data may be communicated to third parties, in particular to:

Constitutional or constitutionally relevant bodies;
Consultants and freelance professionals, even in associated form;
Anyone who is the legitimate recipient of communications required by law or regulatory norms.
8. Communication and Dissemination of Data: Without the need for explicit consent, the Data Controller may communicate your data to supervisory bodies, judicial authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom communication is mandatory by law for the execution of the aforementioned purposes. These subjects will process the data in their capacity as autonomous data controllers.

9. Data Transfer: The personal data we process as Data Controller are stored on servers located within the European Union. Some of the aforementioned parties may not be located in Italy due to the multinational nature of these companies, so your personal data may be transferred abroad, even outside the European Union, to countries that do not guarantee an adequate level of protection of personal data according to the standards established by Italian and European data protection legislation. The Data Controller is not responsible for the processing carried out by other parties acting as autonomous data controllers.

10. Rights of the Data Subject: As a data subject, you may exercise the rights provided for in Article 15 of the Regulation, specifically the rights to:

Request the Data Controller whether your personal data have been processed, and if so, you have the right to access your personal data and the following information: a) the purpose and methods of processing; b) the types of personal data processed; c) the subjects or categories of subjects to whom the personal data may be communicated or who may come to know them as designated representatives in the territory of the State, responsible parties, or appointees; d) if possible, the determined retention period of the personal data or, if not possible, the criteria based on which the storage time is determined; e) the right to request the Data Controller to correct or delete your personal data or to limit the processing of your personal data, and the right to withdraw consent to the processing of your personal data; f) the right to lodge a complaint with the supervisory authorities (e.g., the "Garante", the Italian authority for data protection); g) if your personal data were not collected directly from you, you have the right to receive information about the origin of the collected data; h) if automated decision-making takes place, including profiling as per Article 22, paragraphs 1 and 4 of the EU Regulation, you have the right to receive meaningful information about the logic applied to the processing of your personal data, as well as the significance and consequences of such processing.

If your personal data are transferred abroad or to an international organization, you have the right to know whether adequate safeguards are applied to the transfer in accordance with Article 46 of the EU Regulation.

Upon request, the Data Controller will send you a copy of your personal data processed. If you wish to receive additional copies, the Data Controller may charge reasonable management costs. If the request is made electronically, any information will be sent to you in a commonly used electronic format, unless otherwise specified.

The right to receive a copy of your processed personal data according to the previous paragraph 3 shall not violate the rights or freedoms of third parties. Additionally, if possible, you have the following rights provided by Articles 16 to 22 of the EU Regulation:

the right to update, rectify, supplement your personal data;
the right to delete your personal data;
the right to limit the processing of your personal data;
the right to data portability;
the right to object;
the right to lodge a complaint with the Data Protection Authority.
Finally, you have the right to withdraw your consent without prejudice to the lawfulness of the processing of your data carried out prior to the withdrawal.

11. Methods for Exercising Rights: You can exercise the above rights at any time by sending:

a registered letter to HOTEL MARIOTTI DI MARIOTTI CLAUDIO & C. S.A.S., located at Viale Colombo n. 147, Lido di Camaiore (LU), C.F. and P.IVA 00986550465;
an email to info@hotelmariotti.com.
12. Minors: The provision of any product and service by the Data Controller within any contract/relationship between the user and the Data Controller does not include the intentional collection of Personal Data of minors. In the event that Personal Data of minors are stored unintentionally, the Data Controller will delete them immediately upon request.

13. Additional Information on Processing: Below, we provide you with some information, not only to fulfill legislative obligations but also because transparency and fairness with our clients are an important part of our business.

Data Controller: The Data Controller of your personal data is HOTEL MARIOTTI DI MARIOTTI CLAUDIO & C. S.A.S., located at Viale Colombo n. 147, Lido di Camaiore (LU), C.F. and P.IVA 00986550465, who is responsible to you for the lawful and compliant use of your personal data and whom you can contact for any information or request via email at info@hotelmariotti.com.

Data Controllers and Processors: The updated list of all individuals responsible for data processing or appointed for processing is available at the registered office of the Data Controller.

Defense in Legal Proceedings: The User's Personal Data may be used by the Data Controller for defense in court or in preparatory stages for potential litigation, against misuse of the website or related services by the User.

Specific Information: Specific information may be presented on the Site regarding particular services or processing of Data provided by the User or by the Data Subject that have purposes different from those of this privacy policy.

Maintenance: The User's Personal Data may be processed for additional purposes related to the maintenance of the site.

System Logs: For operational and maintenance needs, this site and any third-party services it uses may collect system logs, which are files that record interactions—including navigation—and may also contain Personal Data such as IP addresses.

Links to Third-Party Sites: Hotel Mariotti di Mariotti Claudio & C. s.a.s. is not responsible for the processing of personal data that may occur through third-party sites to which this site links.

For any further information, please do not hesitate to contact us.