Addressed to all Website Users – Guests

Privacy notice addressed to guests and/or to all individuals who, for various reasons, provide personal data to the staff responsible for correspondence and guest reception at Hotel Zampillo.

We hereby inform you that the processing of your personal data, as well as that of your family members and/or persons belonging to your group, is carried out lawfully, fairly and transparently, for legitimate purposes, and in full compliance with your privacy and rights.

Among the Personal Data collected by this Website, either independently or through third parties, there are: Cookies and Usage Data.

Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information notices displayed prior to data collection.
Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected while using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide it, this Website may be unable to provide the Service.

Methods of processing collected Data

The Data Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases other parties involved in the organization of this Website (administrative, commercial, marketing staff, legal advisors, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data. These parties may be appointed, where necessary, as Data Processors by the Data Controller. The updated list of Data Processors may always be requested from the Data Controller.

Place of processing of collected Data

Data is processed at the operational offices of the Data Controller and at any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User may refer to the section concerning details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed by public international law or established by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.

The User may verify whether one of the transfers described above takes place by examining the relevant section of this document or by requesting information from the Data Controller using the contact details provided above.

Data processing is also carried out using IT tools for the following purposes:

1) to acquire and confirm reservations for accommodation services, catering services and ancillary services, and to provide the requested services. As these processes are necessary for the definition and execution of the contractual agreement, User consent is not required, except in cases involving special categories of data (so-called sensitive data). In the event of refusal to provide Personal Data, we will be unable to confirm the reservation or provide the requested services. Processing will cease upon departure, although some Personal Data may continue to be processed for the purposes and according to the methods indicated below;

2) to comply with obligations imposed by the Italian Public Security Act (Article 109 of Royal Decree 18 June 1931 no. 773), which requires us to communicate guest identification details to the Police Headquarters for public security purposes, according to procedures established by the Ministry of the Interior (Decree of 7 January 2013). Data provision is mandatory and does not require consent; refusal will prevent accommodation at our facility. Data collected for this purpose is not retained, unless consent is provided for retention as described in point 4;

3) to comply with administrative, accounting and tax obligations. For these purposes, processing is carried out without the need for User consent. Data is processed by us and by our authorized personnel and disclosed externally only in compliance with legal obligations. Refusal to provide the required data will prevent the provision of requested services. Data collected for these purposes is retained for the period required by applicable regulations (3 years, and longer in case of tax assessments);

4) to speed up registration procedures for subsequent stays and to assess satisfaction with our services. For this purpose, subject to User consent, which may be withdrawn at any time, data will be retained for a maximum period of 3 years and used when the User returns as a guest or to send communications regarding purchased services or new commercial offers;

5) to manage the receipt of messages and telephone calls addressed to the User during their stay. This purpose requires User consent, which may be withdrawn at any time;

6) to send promotional messages and updates regarding rates and offers. For this purpose, subject to User consent, data will be retained for a maximum period of 3 years and will not be disclosed to third parties except as required by law. Consent may be withdrawn at any time;

7) additionally, for other purposes such as responding directly to references provided through the submission of documents (Curricula Vitae, collaboration proposals, commercial proposals), expressly authorized for retention as described in point 4.

The User is informed that EU Regulation 2016/679 grants, among others, the right of access, rectification, erasure, restriction, objection to processing, as well as the right to data portability, where applicable (Articles 15 to 22 of the GDPR). The User also has the right to lodge a complaint with the competent supervisory authority or to take legal action.

For further information and to exercise rights under the GDPR, the User may contact the Data Controller: Toronto s.n.c. di Zazzetta P&F, Registered Office, Via F. Maratta 23, San Benedetto del Tronto 63074 (AP), Italy (Phone +39 0735 82181 – Email: direzione@hotelzampillo.it).

Personal Data is collected for the following purposes and using the following services:

Contacting the User
Information and quotation request contact form
Personal Data: first and last name, phone number, address, email

Contact management and message sending
Email torontosnc@pec.buffetti.it
Piero Antonio Zazzetta, tel.: +39 0735.82182, via Faustina Maratta n.23 - San Benedetto del Tronto 63074 (AP) - Italia, email: direzione@hotelzampillo.it

Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and track User behavior.
Google Analytics (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. Google uses the collected Personal Data to track and examine the use of this Website, compile reports and share them with other Google services.
Google may use Personal Data to contextualize and personalize ads within its advertising network.
Personal Data: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Participant in the Privacy Shield framework.

Facebook Ads monitoring
Google Ads monitoring
Twitter Ads monitoring
Instagram Ads monitoring

Displaying content from external platforms

These services allow content hosted on external platforms to be displayed directly from this Website and interacted with.
If such services are installed, they may collect traffic data even if Users do not interact with them.
Google Maps widget (Google Inc.)
Google Maps is a map visualization service provided by Google Inc. allowing this Website to integrate such content within its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Participant in the Privacy Shield framework.

Users may exercise certain rights regarding the Data processed by the Controller

In particular, Users have the right to:

- withdraw consent at any time;
- object to processing where it is based on a legal ground other than consent;
- access their Data and obtain information about processing and a copy of the processed Data;
- verify and request correction of their Data;
- obtain restriction of processing where applicable;
- obtain erasure or removal of their Personal Data where applicable;
- receive their Data in a structured, commonly used and machine-readable format and request its transfer to another controller, where technically feasible;
- lodge a complaint with the competent data protection authority or take legal action.

Details on the right to object

Where Personal Data is processed in the public interest, in the exercise of official authority, or for the pursuit of the Controller’s legitimate interests, Users have the right to object for reasons related to their particular situation.
Users are informed that, where Data is processed for direct marketing purposes, they may object without providing any justification.

How to exercise rights

To exercise User rights, requests may be sent to the contact details of the Data Controller provided in this document. Requests are processed free of charge and answered as soon as possible, and in any case within one month.

Cookie Policy

This Website uses Cookies. To learn more and view the detailed information, Users may consult the Cookie Policy.

System logs and maintenance

For operational and maintenance purposes, this Website and any third-party services it uses may collect system logs, which record interactions and may contain Personal Data such as the User’s IP address.

Legal references

This privacy policy is drafted based on multiple legislative frameworks, including Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy policy applies exclusively to this Website.