On this page, GFH HOTELS explains how we handle your personal data when you sign up for our newsletter to receive commercial email marketing communications from GFH HOTELS, which we'll call “Communications” from now on.
If you have any questions, you can reach us at info@gfh-hotels.it
WHY THIS POLICY?
Starting May 25, 2018, new privacy rules apply across all European Union member states, mandated by EU Regulation No. 2016/679 (General Data Protection Regulation, which we'll call GDPR from now on), as well as national laws.
The GDPR provides greater protection for users and places new obligations and responsibilities on those who process personal data, including data collected through websites.
To learn more about the GDPR, you can check out the helpful and in-depth Section by the Italian Data Protection Authority: It will help you better understand the new rules and know your rights.
A fundamental principle is transparency: users need to know in advance, clearly and completely, what personal information will be collected, who will process it, why, and for how long, if it will be used for commercial purposes or profiling, if it will be shared with third parties, etc., and be able to effectively control how their data is managed.
This policy is provided in accordance with Article 13 of the GDPR and also draws inspiration from the Article 29 Working Party Guidelines on Transparency.
This policy is for users who sign up for our Communications by providing us with their email address.
Since signing up for Communications requires us to collect some of your personal data under the GDPR, below you'll find detailed information on how GFH HOTELS will process your personal data.
DATA CONTROLLER AND CONTACTS
The Data Controller for your personal data is GFH HOTELS, Tax Code 02709390419, with registered office at via Palermo 19 – 61037, Mondolfo.
TYPES OF DATA PROCESSED
GFH HOTELS will only ask for your email address, first name, and last name, which are necessary for us to send you Communications.
No other personal data will be requested, except for confirmation that you are over 16 years old.
GFH HOTELS will handle this data with the utmost confidentiality, in compliance with current regulations and solely for the purposes specified below.
PURPOSES AND LEGAL BASIS FOR PROCESSING
Your personal data, as specified above, will be processed by GFH HOTELS solely to add you to our mailing list and send you Communications.
The legal basis for processing this data is your explicit consent as the data subject, obtained in accordance with the GDPR (Art. 6, para. 1 lit. a).
You can decide to withdraw your consent at any time. In that case, GFH HOTELS will stop sending you Communications in the future.
You can withdraw your consent using the same simple methods you used to provide it.
Every email message will include an unsubscribe link.
RECIPIENTS OF PERSONAL DATA
Your personal data collected and processed by GFH HOTELS for managing and sending Communications will be processed exclusively by GFH HOTELS staff and collaborators, as well as any personnel involved in occasional maintenance and repair operations.
Your data may also be disclosed to the competent Authorities where required or provided by law.
Your data won't be shared with anyone.
INTENTION TO TRANSFER DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANIZATION
The personal data we collect and process at GFH HOTELS to manage and send you communications will be handled and stored on our Italian provider's servers.
DATA RETENTION PERIOD
The personal data we collect and process at GFH HOTELS to manage and send you communications will be kept for as long as you're subscribed.
When you decide to unsubscribe from our communications, your email will automatically be added to a blacklist of contacts we won't use anymore. This is an automatic process from our mailing list provider. To ensure your personal data is protected, GFH HOTELS will regularly (every week!) manually delete the data from this blacklist.
YOUR RIGHTS AS A DATA SUBJECT
Just so you know, as a data subject, you have all the rights given to you by the GDPR:
Right to Access (Art. 15),
Right to Rectify (Art. 16),
Right to Erasure (also known as the “Right to be forgotten”) (Art. 17),
Right to Restrict Processing (Art. 18),
Right for the Controller to notify recipients of rectification or erasure (Art. 19),
Right to Data Portability (Art. 20),
Right to Object (Art. 21).
You also have the right to withdraw your consent for data processing at any time. This withdrawal becomes effective as soon as GFH HOTELS is actually aware of it.
Just a reminder that, as per GDPR, withdrawing your consent doesn't affect the legality of any processing done based on your consent before you withdrew it.
In all these situations, when you exercise your rights, we'll let anyone who received your data know, except for cases where the GDPR says we don't have to. You can find more details at this link: http://www.garanteprivacy.it/regolamentoue/diritti-degli-interessati
Just so you know, in some cases (like erasure, restriction, or objection), exercising your rights might mean we can't send you communications anymore.
You can exercise all the rights mentioned above by simply sending an informal request or an email to the privacy address at GFH HOTELS, even through someone acting on your behalf. We'll get back to your requests without delay.
RIGHT TO WITHDRAW CONSENT
You can always withdraw your consent, which you gave earlier, in the same way you expressed it, or by sending an email to info@gfh-hotels.it.
Once we receive your email, it will immediately stop all data processing, and we'll let all responsible parties know to comply with your request.
Just a reminder that withdrawing your consent doesn't affect the legality of any processing done based on your consent before you withdrew it.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you feel your rights or freedoms have been violated, you can always file a complaint with the Guarantor online by filling out the form available on their website: www.garanteprivacy.it.
OBLIGATION AND NECESSITY TO PROVIDE YOUR DATA
Giving us your personal data is totally optional! You're free to share it with GFH HOTELS or not, it's completely up to you.
However, we do need your email address to get you signed up. If you don't provide it, we won't be able to add you to our mailing list and send you our updates.
PROFILING AND AUTOMATED DECISION-MAKING
We won't use the personal data you've voluntarily given us to join our mailing list for profiling or any automated decision-making.
SECURITY MEASURES
We, as the Data Controller, take appropriate technical and organizational security measures, following GDPR guidelines, to keep your personal data safe. This helps us minimize risks like accidental loss or destruction, unauthorized access, or any processing that doesn't align with the purposes we've explained in this Policy.
HOW WE PROCESS YOUR DATA
We'll process your data following Article 32 of the GDPR, using both digital tools (like computers and online systems) and traditional manual, paper-based methods.
We'll regularly check to make sure the data we collect is strictly relevant and not excessive for our processing purposes and obligations, and that it always complies with current laws.
UPDATES TO THIS POLICY
We might update this Policy from time to time, for example, to keep it in line with new laws.
If this Policy changes while we're in touch, we'll be sure to let you know.
