Privacy Policy

INFORMATION PURSUANT TO ARTICLES 13 AND 14 – EU REGULATION 2016/679

Processing of personal data

This policy has been drawn up to explain the principles of confidentiality that govern the use by Hotel Ardesia of data provided by customers, including data collected through this website. This page describes how the site is managed with regard to the processing of personal data of users who consult it. This information is provided pursuant to Art. 13 of Legislative Decree 196/2003 (hereinafter “Privacy Code”) and Art. 13 of EU Regulation No. 2016/679 (hereinafter “GDPR 2016/679”), to those who interact with the web services accessible electronically from the address: www.hotelardesia.com. The information is provided only for this website and not for other websites that may be consulted by the user via links on this site. By visiting this website, you implicitly declare that you have understood and accepted the processing methods described in this privacy policy.

Data controller

The data controller is Hotel Ardesia, with registered office in Viale delle Rimembranze, 80 47924 Bellariva, Rimini (RN), Italy, which can be contacted by telephone on 0541.389363 or by email at info@hotelardesia.com. Company name: Gems Hotel sas di Guenda Mancini e C., with registered office in Viale delle Rimembranze, 80 47924 Bellariva, Rimini (RN). The same is the Data Protection Officer (DPO).

Place of data processing

The processing operations connected to the web services of this site take place at server farms in Italy and Europe.
SH Web is a web agency that guarantees compliance with the GDPR, located in San Marino, a non-EU country that is in the process of implementing European legislation on the processing of personal data, through the adoption of its own state legislation with the same guarantees provided by the GDPR itself.

Purpose of processing

Personal data provided by users who request information material or subscribe to newsletters are used solely for the purpose of providing the service or performance requested. This data may also be used for the following purposes: a) managing customer relations; b) carrying out the company’s economic activities; c) other purposes related to the company’s activities and connected to them (for example, improving the products and services offered, even if not strictly related to the services requested by the data subject; market research on customer satisfaction, etc.). If it is necessary to collect data that allows the user to be personally identified in order to provide the latter with a specific service, the user is asked to voluntarily provide the necessary data, which will be processed exclusively for the purposes of providing the service.
The processing will be carried out in an automated and/or manual form, in compliance with the provisions of Article 32 of GDPR 2016/679 and Annex B of Legislative Decree 196/2003 (Articles 33-36 of the Code) on security measures, by persons specifically appointed for this purpose and in compliance with the provisions of Article 29 of GDPR 2016/679.

We would like to point out that, in accordance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Article 5 of GDPR 2016/679, your personal data will be stored for the period of time deemed necessary to achieve the purposes for which it is collected and processed.

Pursuant to Articles 26 and 27 of Legislative Decree 196/2003 and Articles 9 and 10 of EU Regulation No. 2016/679, you may provide Hotel Ardesia with data that qualifies as “special categories of personal data,” i.e., data revealing “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning a person’s health or sex life or sexual orientation.” These categories of data may only be processed with your free and explicit consent.
Hotel Ardesia does not use any automated decision-making processes, including profiling, as referred to in Article 22, paragraphs 1 and 4, of EU Regulation No. 679/2016.

Direct Marketing

As specified above, we would like to provide you with information about new products, promotions, special offers, and other information that we think may be of interest to you. If you have expressly authorized us to do so by checking the appropriate box, we may send you such information by mail and telephone, unless you have specified otherwise during registration. If, at any time, you do not want your data to be used for direct marketing purposes, you can let us know by contacting our customer service department by email at the following address info@hotelardesia.com and we will no longer send you any commercial communications. If you have chosen not to consent to the processing of your data, you will never receive any commercial communications and the data you provide will only be used to respond to your request.

Types of data processed

Browsing Data

During normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the date and time of the request, the method used to submit the request, the size of the response file, the numerical code indicating the status of the response given by the server, and other parameters relating to the user’s operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and is deleted immediately after processing. The data could be used, exclusively by the Judicial Authority, to ascertain responsibility in the event of hypothetical computer crimes against the site.

Data provided voluntarily by the user

The optional, explicit, and voluntary sending of emails to the addresses indicated on this website, or the completion of the form, entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the message by the customer.

Provision of Data

The user is free to provide the personal data contained in the request forms or indicated in specific sections of the website to request the sending of informative material or other communications. Failure to provide such data does not make it impossible to obtain what has been requested, even anonymously. Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access to the database.

Data retention period

The data retention period is that necessary for the purposes deriving from the services requested and for an additional period of 36 months. If the information requested is the subject of an online transaction, such data may be retained for economic and tax reporting purposes for a period of 10 years. With regard to technical data managed by the website, such as cookies, the retention period is defined by the technical characteristics of the cookies themselves and specified in the “Website cookies” table.

Methods and security of processing

Your personal data will be processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access.
Personal data is processed using IT tools that guarantee the security and confidentiality of the data and in compliance with the appropriate security measures as required by Article 32 of the GDPR, using secure communication protocols with SSL encryption algorithms.

Rights of the data subject

Data subjects have the following rights pursuant to Articles 7 of Legislative Decree 196/2003 and 15 to 22 of EU Regulation No. 2016/679, and where specifically applicable in relation to the purpose of processing for which your data is collected, you may at any time exercise your right to:
a) request confirmation of the existence or otherwise of your personal data;
b) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, where possible, the storage period;
c) obtain the rectification and erasure of data;
d) obtain restriction of processing;
e) obtain data portability, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance;
f) object to processing at any time, including in the case of processing for direct marketing purposes;
g) object to automated decision-making relating to natural persons, including profiling;
h) ask the data controller for access to personal data and the correction or deletion of the same or the limitation of processing concerning him or her or to oppose their processing, in addition to the right to data portability;
i) withdraw consent at any time without prejudice to the lawfulness of processing based on consent given prior to withdrawal;
j) lodge a complaint with a supervisory authority.
You may exercise your rights by sending a written request to Hotel Ardesia at the postal address of its registered office or to the email address info@hotelardesia.com.

Extended information on the use of cookies

Extended information on the use of cookies pursuant to the provision of the Italian Data Protection Authority no. 229/2014, for those who interact with the web services of Hotel Ardesia, accessible from the addresses www.hotelardesia.com. The Hotel Ardesia website uses cookies and similar technologies to ensure the proper functioning of procedures and improve the user experience of online applications. This document provides detailed information on the use of cookies and similar technologies, how they are used by Hotel Ardesia, and how to manage them.

Cookies

Cookies are data created by a server that are stored in text files on your computer’s hard drive and enable this website to function, allow the use of a specific feature explicitly requested by the user, or improve the functioning of this website, such as cookies that make browsing faster or show content of greater interest to the user based on previous choices. Cookies can be permanent (so-called persistent cookies), but they can also have a limited duration (so-called session cookies). This site uses both persistent and session cookies. Session cookies are not stored permanently on your computer and disappear when you close your browser. Persistent cookies are used to personalize navigation based on the device used by the user (computer, tablet, smartphone), as are third-party cookies, which are used to analyze site access (e.g., Google Analytics) and to allow users to share site content via social networks (FB) or email (Add This). These cookies are stored permanently on your computer and have a variable duration.
The site uses the following cookies in particular:

Site Cookies

Google Analytics Cookies
Our site uses Google Analytics by Google, Inc., a service that provides statistics for measuring and analyzing site performance through the use of cookies. To view the privacy policy of the Google Analytics service, visit http://www.google.com/intl/en/analytics/privacyoverview.html. For Google’s privacy policy, please visit the following address http://www.google.com/intl/it/privacy/privacy-policy.html.)
For further information, please visit http://www.google.it/intl/it/policies/technologies/types/ and https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage

Google Adwords & Google Remarketing Cookies
The website may use the Google Adwords program and Google Remarketing technology. Both are managed by Google Inc. The AdWords conversion tracking feature also uses cookies. To help us track sales and other conversions, a cookie is added to a user’s computer when that user clicks on an ad. This cookie lasts 30 days and does not collect or monitor information that can personally identify a user. Users can disable Google conversion tracking cookies in their Internet browser settings. In some cases, cookies may cause problems when logging in or navigating within your AdWords account. When this happens, the best way to fix the problem is to clear your cache and delete the cookies saved for your Internet browser. To learn more about click here https://www.google.es/intl/it/policies/privacy/. Finally, users can disable Google Analytics cookies by downloading a specific browser plug-in available at the following URL https://tools.google.com/dlpage/gaoptout.

Facebook Cookies
The site may use cookies from Facebook Inc. to monitor the performance of Facebook Ads campaigns and any remarketing actions. Click here for more information about Facebook’s use of cookies: https://www.facebook.com/help/cookies/

Users can prevent persistent cookies from being stored on their hard drive by configuring their browser to disable cookies. Find out how to disable cookies in the main browsers: Chrome, Firefox, Internet Explorer, Safari, Opera. However, after doing this, some features of web pages may not work properly.
This privacy policy may be amended periodically, and the use of the information collected is subject to the privacy policy in effect at the time of use. This document, published at www.hotelardesia.com, constitutes the Privacy Policy of this website and will be subject to updates from time to time, which will be published and bear the date of the update.

Updated on May 1, 2025