Privacy & Cookies

PRIVACY POLICY –

EXTENDED INFORMATION ON THE PROCESSING OF PERSONAL DATA

PURSUANT TO ART. 13 OF EU REGULATION 2016/679

Dear user, This page describes the management methods of the website https://www.hosteda.online with reference to the processing of personal data of the data subjects (users) who consult it and those who interact with the web services accessible electronically starting from the address https://www.hosteda.online, which corresponds to the homepage of the site.

A. DATA CONTROLLER: Hosteda Hotels Srl - Via Tempio del Cielo, 1 - 00144 Rome (Italy) – VAT No. 03268410929

B. PURPOSES OF THE PROCESSING: Your data will be processed lawfully, fairly, and in a transparent manner, ensuring that they are accurate and adequate, relevant and limited to what is necessary in relation to the purposes pursued which, in this specific case, consist of:

privacy management during website navigation through technical cookies and the provision of the Website Services;

promotion carried out by sending newsletters to communicate commercial information and/or offers.

C. LEGAL BASIS: The legal basis for the processing for the purpose referred to in point 1 will be the performance of pre-contractual measures adopted at the request of the data subject (Art. 6(1)(b) of the Regulation) as the processing is necessary for the provision of the Service. Conversely, for the purpose referred to in point 2, the legal basis is explicit consent.

D. PROVISION OF PERSONAL DATA: We inform you that the provision of personal data is not mandatory; however, failure to provide the data will result in: ● the inability to activate the Services provided by the Website (purpose 1), ● the inability to collect your preferences and receive promotional offers and/or offers based on your choices (purpose 2).

E. PERSONAL DATA COLLECTED: The personal data collected are: 1. Navigation data The computer systems and software procedures used to operate the Website acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the Website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Website and to check its correct functioning (see the paragraph on cookies below), to identify anomalies and/or abuses, and are deleted immediately after processing. The data could be used by the competent authorities to ascertain responsibility in the case of hypothetical computer crimes against the site. 2. Data voluntarily provided by the data subject Apart from what is specified for navigation data, the user is free to provide the personal data requested in any forms present on the website (e.g., to activate newsletters, profiling, requesting quotes, and/or making reservations, etc.). Failure to provide them may make it impossible to provide the service. In these cases, only the information necessary for the requested service will be required (see specific privacy notices for details).

F. SCOPE OF DATA CIRCULATION AND LOCALIZATION – Communication to Third Parties. We inform you that your personal data may be communicated to: ● employees of the Data Controller who are duly authorized and trained in accordance with the provisions of the Regulation; ● suppliers of the Data Controller, duly appointed as Data Processors; ● subjects whose access to data is recognized by provisions of law, regulations, or European Union legislation.

G. DATA TRANSFER Personal Data collected through navigation will not be transferred outside the European Union. If a booking is finalized, the data could be subject to transfer outside the EU (please refer to the relevant information notice).

H. DATA RETENTION Your personal data will be kept for the time necessary to fulfill the purposes set out in the points above and in any case for no longer than 5 years from collection, after which you will be asked to provide new consent; we specify that the consent for the purposes referred to in point 2 can be withdrawn at any time without affecting the lawfulness of the processing carried out before the withdrawal itself.

I. RIGHTS OF THE DATA SUBJECT You have the right to ask the Data Controller at any time to withdraw any consent previously given (Art. 7), and to access your personal data (Art. 15), request their rectification (Art. 16) or erasure (Art. 17), the restriction of processing concerning you (Art. 18), or to object to their processing (Art. 21), in addition to the right to data portability (Art. 20). We also inform you that you may exercise the rights referred to in the preceding paragraph by sending the Data Controller a specific form (downloadable from the website of the Italian Data Protection Authority https://www.garanteprivacy.it/home/modulistica-e-servizi-online), duly completed, using the following methods: ● by e-mail to the following address: privacy@hostedahotels.it ● by postal service to: Hosteda Hotels Srl - Via Tempio del Cielo, 1 - 00144 Rome, Italy; Also pursuant to EU Regulation 2016/679, you have the right both to lodge a formal complaint with the Supervisory Authority (Art. 77) according to the procedures indicated on the Authority's website at: https://www.garanteprivacy.it/home/modulistica-e-servizi-online, and to lodge a judicial appeal (Art. 79).

The Data Controller