OBJECT: Information on the protection of personal data (Legislative Decree no. 196/2003 and EU Regulation no. 2016/679 - Revision December 2018)
This Privacy Policy explains how we collect and process your personal information in connection with your visit to villaberryroom. com (“Site").
In particular, it explains how to manage personal data acquired during navigation (navigation logs and cookies) and other related services, which require interaction with the user, such as filling out a contact form or email addresses on the site.
In this regard, in full compliance with the rules on the protection of personal data (Legislative Decree no. 196/2003 and EU Regulation no. 2016/679, called GDPR), Emma srl invites you to read the following information, which has been designed and written in simple and concise language to help you clearly understand how we treat your personal data.
IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER
The Data Controller is Emma Srl with registered office in via Pian dei Carpini 96/7 Firenze | This email address is being protected from spambots. You need JavaScript enabled to view it.
THE SOURCE, PURPOSE AND LEGAL BASIS OF THE PROCESSING
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could - through processing and association with data held by third parties - allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc. . ) and other parameters relating to the operating system and computer environment.
These data are used only to obtain anonymous statistical information on the use of the site and to check its proper functioning. The data could also be used to ascertain responsibility in the event of hypothetical computer crimes against the site (legitimate interests of the owner).
Cookies
Cookies are short fragments of text (letters and/or numbers) that allow the web server to store on the client (the browser) information to be reused during the same visit to the site (session cookies) or later, even after days (persistent cookies). Cookies are stored, according to the user's preferences, by the individual browser on the specific device used (computer, tablet, smartphone).
Similar technologies, such as web beacons, transparent GIFs and all forms of local storage introduced with HTML5, can be used to collect information on user behaviour and service usage.
In the remainder of this document we will refer to cookies and all similar technologies simply by using the term “cookie".
Depending on the characteristics and use of cookies, we may distinguish between different categories:
· Cookies strictly necessary. These cookies are essential for the proper functioning of the website villaberryroom. com and are used to manage the login and access to the reserved functions of the site. The duration of cookies is strictly limited to the working session (closed the browser are deleted).
· Technical cookies. Technical cookies are those used for the sole purpose of "transmitting a communication over an electronic communication network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such a service"; (see art. 122, paragraph 1, of the Code). They are not used for further purposes and are normally installed directly by the owner or operator of the website. They can be divided into navigation or session cookies, which guarantee normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access reserved areas); cookie analytics, similar to technical cookies when used directly by the operator of the site to collect information, in aggregate form, on the number of users and how they visit the site itself; function cookies, which allow the user to navigate according to a series of criteria selected (for example, language, products selected for purchase) in order to improve the service provided to the same.
· Profiling cookies. Profile cookies are designed to create user profiles and are used to send advertising messages in line with the preferences expressed by the user when surfing the web. Because of the particular invasiveness that such devices may have in the private sphere of users, the European and Italian legislation requires that the user must be adequately informed about the use of the same and thus express their valid consent.
When you visit a website you may receive cookies either from the website you visit ("owners";) or from websites operated by other organisations ("third parties";). A notable example is the presence of "social plugins"; for Facebook, Twitter, Google+ and LinkedIn. These are parts of the page visited generated directly from these sites and integrated into the page of the host site. The most common use of social plugins is to share content on social networks. The presence of these plugins leads to the transmission of cookies from and to all sites operated by third parties. The management of information collected by "third parties"; is governed by the relevant information which please refer to. Third-party cookies also include components from Google Analytics, a web traffic analysis service provided by Google.
Google Analytics may collect and analyze anonymously information about usage patterns. This information is collected by Google Analytics, which processes it for the purpose of compiling reports on the websites themselves. This site does not use (and does not allow third parties to use) Google's analytics tool to track or collect personal identifying information. Google does not associate your IP address with any other data held by Google, nor does it attempt to link an IP address with a user's identity. Google may also disclose this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Most Internet browsers are set to accept cookies automatically. You can find our cookies in your browser settings.
This Site uses different types of cookies. Some cookies are placed by third-party services that appear on our pages.
At any time you can change or revoke your consent from the "Cookies Statement"; on our site for cookies that require consent.
During navigation, in some parts of the Site, the data we collect includes:
· Your first and last name, e-mail address, telephone number and home address;
· Information about your stay, including arrival and departure dates, special requests and service preferences (room, service or other preferences);
You can also choose which personal information you would like to provide us with. If you choose not to provide certain details, however, this may affect some of your transactions
DATA COLLECTION
The personal information we collect includes:
· Your first and last name, e-mail address, telephone number and home address;
· Credit card information (card type and number, card name, expiration date, and CVC code);
· Information about your stay, including arrival and departure dates, special requests and service preferences (room, service or other preferences);
· Information you provide about your marketing preferences or when participating in surveys, contests or promotional offers;
You can also choose which personal information you would like to provide us with. If you choose not to provide certain details, however, this may affect some of your transactions.
INFORMATION THAT WE AUTOMATICALLY COLLECT
When you use our site, we automatically collect information, some of which may be personal data. For example: language settings, IP address, location, device settings, device operating system, log-in information, usage time, requested URL, status report, user agents (such as browser version information), browsing history, result (visit or reservation), user reservation code, type of information viewed. We may also collect data automatically via cookies. For more information on how we use cookies, click here.
PURPOSES OF COLLECTION
We use your personal data for the following purposes:
A. Reservations: we use your personal information to complete and manage your online booking.
B. Customer support: we use your personal information to provide you with customer support
C. Reviews: we may use your contact information to invite you by e-mail to leave a review after your stay. This can help other travellers to choose their ideal accommodation. If you submit a review, it may be published on our website.
D. Marketing activities: We also use your data for marketing activities, in the manner permitted by law. When we use your personal information for direct marketing purposes, such as commercial newsletters and marketing communications about new products and services, or about offers that we think may interest you, we will include a unsubscribe link, which you can use if you no longer wish to receive such messages in the future.
E. Other Communications: There may be other occasions when we will contact you by e-mail, mail, telephone or text message, depending on the contact details you have provided. We may contact you for the following reasons:
1) We may have to respond to or handle a request you have sent.
2) When you use our services, we may send you a questionnaire or invite you to provide a review of your experience with our site. We believe that this additional service is as useful to you as it is to us, as it allows us to improve our site based on your feedback.
F. Statistics, Improvements and Research: We use personal data to conduct research and analysis and may involve a third party to do so. We may share the results of such searches, including with third parties, on an anonymous and aggregate basis. We use your personal information for statistical purposes, to improve our services, to improve the user experience and to increase the functionality and quality of our online travel services.
G. Security, Fraud Detection and Prevention: We use information, including personal data, to prevent fraud and other illegal activities. We also use this information to investigate and detect fraud. We may use personal data for risk assessment and security purposes, for example through user authentication. For these purposes, personal information may be shared with third parties, such as police or external consultants, in accordance with applicable law.
H. Legal and Compliance Purposes: In some cases, we may use the information you provide (including personal information) to handle and resolve legal disputes or controversies, for government investigations and compliance checks, or to honor contracts or to comply with law enforcement requests, in accordance with the law.
If we use automated means to process personal data that produce legal effects or have a significant effect on you, we will implement the necessary measures to safeguard your rights and freedoms, including the right to obtain human intervention.
LEGAL PRINCIPLES
· With regard to the purposes A and B, we rely on the execution of a contract: the use of your data may be necessary to be able to implement the contract you have with us. For example, if you use our services to make an online reservation, we will use your information to perform our obligation to complete and manage the reservation, under the contract between us.
· As far as C-H purposes are concerned, we rely on legitimate interests: we use your information for our legitimate interests, for example to provide you with the most appropriate content of our website, e-mails and newsletters, in order to improve and promote our products, services and content on the website. We may also use your information for administrative, legal or fraud detection purposes. When we use personal data for our legitimate interests, we will always balance your rights and interests in protecting your personal data with our rights and interests.
· As far as the purpose H is concerned, we also rely, where possible, on our obligation to comply with the applicable legislation.
· Where necessary and in accordance with applicable law, we will obtain your consent before processing your personal information for direct marketing purposes.
If necessary and in accordance with current legislation, we will ask for your consent, which you can remove at any time, by contacting us at the addresses mentioned at the end of this statement.
If you do not want to consent to the processing of data in the manner described in the purposes C-F, but there is no system for canceling consent (for example through the settings of your browser), as far as possible, contact This email address is being protected from spambots. You need JavaScript enabled to view it.
DATA SHARING
· Booking. com: We work with Booking. com B. V. , based in Herengracht 597, 1017 CE Amsterdam, The Netherlands (www. booking. com) (hereinafter Booking. com) to offer you an online booking service. We provide the contents of the site and reservations are made with us, while the management of the reservations themselves is borne by Booking. com. The information you enter on this site will then be shared with Booking. con and its affiliates and may include your name, your contact details, payment details, the names of the guests travelling with you and any preferences expressed during the booking.
To learn more about the group of companies to which Booking. com belongs, visit the About Booking. com section.
Booking. com will send you a booking confirmation, an e-mail before your arrival and information about the area and our structure. Booking. com also provides international customer support from its offices every day, 24 hours a day, in more than 20 languages. Sharing your data with Booking. com's global customer support will allow Booking. com to respond to you in case you need help. Booking. com may use your information for technical, analytical and marketing purposes as described in Booking. com's Privacy Policy. For this reason, your information may also be shared with other companies that are part of Booking Holdings Inc. for analysis purposes, to provide you with offers regarding the world of travel that may be of interest to you and to provide you with personalized service. If required by law, Booking. com will ask for your consent. If required by law, Booking. com will ask for your consent. If your data is transferred to a country outside the European Economic Area, Booking. com will make contractual arrangements to ensure that your personal information is protected under European law. If you have any questions about the processing of your personal data by Booking. com, please contact dataprotectionoffice@booking. com.
· BookingSuite: Your personal data may be shared with BookingSuite B. V. , based in Herengracht 597, 1017 CE Amsterdam, The Netherlands, the company that operates this site and the site suite. booking. com.
· Other Service Providers: We use service companies to manage your data on our behalf. This management serves the purposes described in this policy, for example the management of reservation payments and the sending of marketing material for analytical support purposes. Such service providers are bound by confidentiality agreements and do not have permission to use your personal data for other purposes.
· Competent Authorities: We share personal data with law enforcement and other government authorities when required to do so by law or when absolutely necessary for the detection, prevention or prosecution of fraud or crime.
INTERNATIONAL DATA TRANSFER
The transmission of personal data as described in this policy may result in the international transfer of information to countries whose data protection laws are not as detailed as those within the European Union. Where required by European law, we will only transfer personal data to entities offering an adequate level of data protection. In these situations, we will make contractual arrangements to ensure that your personal data is protected according to European standards. You can request a copy of these agreements using the contact details below.
SAFETY
We rely on security procedures and technical and physical restrictions to prevent access to and use of personal data contained on our servers. Only authorized personnel may access personal data during the course of their work.
DATA RETENTION
We will retain your personal data for the period of time necessary to provide the service, in accordance with applicable laws, for the purpose of handling any disputes with any third party and in any event for the time necessary to carry out our activities, including the detection and protection of fraud or other illegal activities. All personal information stored will be subject to the provisions of this Privacy Policy. If you have any questions about specific data retention periods, please contact us using the contact details below.
YOUR OPTIONS AND YOUR RIGHTS
In relation to the processing of your personal data, in accordance with the following articles of GDPR 679/2016 you have the right, where applicable, to ask Emma srl
· Art. 6 - revocation of consent: you can ask to revoke the consent given at any time;
· Art. 15 - access: you can ask for confirmation that there is or is not a processing of data concerning you, as well as further clarification about the information referred to in this statement;
· Art. 16 - correction: you can ask to rectify or supplement the data you have provided us, if inaccurate;
· Art. 17 - cancellation: you can request that your data be deleted, if they are no longer necessary for our purposes, in case of revocation of consent or your opposition to processing, in case of unlawful processing, or there is a legal obligation to cancel or refer to persons under sixteen years of age.
· Art. 18 - Limitation of processing: you may request that your data be processed only for the purposes of storage, to the exclusion of other processing, for the period necessary to rectify your data, in case of unlawful processing for which you object to deletion, if you have to exercise your rights in court and the data we hold may be useful to you and, finally, in case of opposition to processing and a check is in progress on the prevalence of our legitimate reasons over yours.
· Art. 20 - portability: you can ask to receive your data, or to have them transmitted to another holder indicated by you, in a structured format, commonly used and readable by automatic device.
· Art. 21 - opposition to the treatment: you can oppose at any time the treatment of your data, unless there are our legitimate reasons to proceed to the treatment that prevail over yours, for example for the exercise or our defense in court.
· Art. 22 - Opposition to the automated decision making process: You can oppose the automated decision making process, if the Holder carries out this type of processing.
In addition, we inform you that you have the right to lodge a complaint against the Control Authority, which in Italy is the Guarantor for the Protection of Personal Data (http://www. garanteprivacy. it).
At any time, you can ask to exercise your previous rights to Emma srl by contacting the email address This email address is being protected from spambots. You need JavaScript enabled to view it.
