This notice is provided in accordance with Article 13 of EU Regulation 2016/679 for the protection of personal data.
The Data Controller is:
Seta Hotel S.a.s. di Mauro Botta & C.
Via Teresio Olivelli, 23 22021 Bellagio (CO)
Vat ID: 03888270133
Nature of data provision
The provision of data is optional. Refusal to provide the data will result in the impossibility of being contacted for the purposes stated below. Providing data for marketing purposes is optional and will not prevent being contacted for other purposes.
Providing us with your personal data is optional but if you don’t give us your details and your consent to use them, we will not be able to contact you or to send you any promotional offers.
Purpose of processing and legal basis
Personal data is processed for the following purposes:
The personal data provided by users may be used for us to contact you following a request made in the contact form;
compliance with obligations provided for by law, regulations, or EU legislation;
Regarding purposes sub a) and b), please note that the processing and communication of your personal data by the Data Controller do not require your consent as it is necessary for the execution of obligations arising from the contract itself and/or for the performance of services requested by you prior to the conclusion of the contract, as well as to comply with legal obligations.
As for purpose c) mentioned above, each Data Subject has the right to withdraw their consent to the Data Controller at any time, without prejudice to the contractual relationship and/or the execution of services requested by you prior to the conclusion of the contract.
Data processing methods
The collected data will be processed using computer tools.
Appropriate security measures are observed to prevent data loss, illicit or inappropriate use and unauthorized access.
Who processes your data
Personal data processing takes place at the aforementioned location and is carried out by authorized personnel.
Data will only be transferred within the EU.
Some applications like Google Analytics and reCaptcha may undergo extra-EU transfers.
Data conservation period
The retention time of the user’s choices relating to cookies is six months as required by the measures.
The time for retaining cookies changes depending on the type of belonging. For third-party profiling cookies, the specifics can be consulted directly on their relative sites.
Personal data processed for contact or economic purposes will be processed for the times mandatory under the laws of competence.
Data subject rights pursuant to art. 15 eu 2016/679
Data subjects have the right, in the cases provided for, to obtain from the Controller access to their personal data and the rectification or erasure of such data or the restriction of processing concerning them or to object to the processing (Arts. 15 and following of the Regulation). Requests should be addressed to the Data Controller at the contact details provided at the beginning of this information.
Right to complain
Data subjects who believe that the processing of personal data referred to them carried out through this site occurs in violation of what is provided by the Regulation have the right to lodge a complaint with the Guarantor, as provided for by Article 77 of the same Regulation, or to take action in the appropriate judicial venues (Article 79 of the Regulation).
Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google Ireland Limited is owned by Google LLC USA. Google uses the Personal Data collected to track and examine the use of this website, compile reports on its activities, and share them with other services developed by Google.
For greater compliance with GDPR regarding the transfer of data outside the EU, it is advisable to transfer data only in an anonymous form. Sole anonymization is not optimal as it provides lesser protection for the exported personal data outside the EU. For this reason, data transferred to GA, which may also be visible outside the EU, will be anonymized through a proxy system called "My Agile Pixel." This system will replace your personal data, such as your IP address, with anonymous data that cannot be traced back to you. In this case, if data were to be transferred outside the EU or to the USA, it would not be your personal data but rather data rendered anonymous and not attributable to you.