Privacy Policy
Information Notice on the Processing of Personal Data
Information document pursuant to Article 13 of EU Regulation 2016/679 - GDPR
Subject: Information on the processing of personal data collected from the data subject via the website
In accordance with the provisions of EU Regulation 2016/679 (General Data Protection Regulation), we provide you with the following information regarding the processing of personal data you have provided. This privacy notice applies solely to the website www.nouvellemaisonrome.it, and not to other websites that may be accessible through links on this site. The Data Controller shall not be held liable for third-party websites.
This information is provided pursuant to Article 13 of the EU Regulation 2016/679 and is also inspired by Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding Cookies, and by the Italian Data Protection Authority’s Provision of 08.05.2014 regarding cookies.
1. DATA CONTROLLER
THE DATA CONTROLLER, pursuant to Articles 4 and 24 of EU Regulation 2016/679, is FC Hospitality Srl, with registered office at Via La Nebbia 21 – 00168 Rome, hereinafter referred to as the "Controller".
2. PURPOSES AND LAWFULNESS OF DATA PROCESSING
The personal data provided will be processed in accordance with the lawfulness conditions set out in Article 6 of EU Regulation 2016/679 for the following purposes:
Processing related to website usage (Art. 6, letter b):
- browsing the website;
- completion of data collection forms for requests for information;
- fulfilment of legal, administrative, accounting, and tax obligations. For administrative-accounting purposes, processing includes activities related to organizational, administrative, financial, and accounting operations, regardless of the nature of the data processed.
Personal data voluntarily provided by users to request information about the hotel’s services (prices, room or conference room availability, etc.), to subscribe to the newsletter, to make online bookings, or to submit job applications (e.g. via CVs), will only be used to provide the requested service. These data will not be disclosed to third parties unless required by law or strictly necessary to fulfill the request.
3. BROWSING DATA
Like all websites, this site uses log files in which information collected automatically during user visits is stored. This information may include:
- IP address;
- Type of browser and parameters of the device used;
- Name of the internet service provider (ISP);
- Date and time of visit; Referring and exit pages;
- Number of clicks (if applicable).
These data are not collected for the purpose of associating them with identified individuals, but could, by their nature and through processing and association with third-party data, allow the identification of users.
4. DATA VOLUNTARILY PROVIDED BY THE USER
The optional, explicit, and voluntary sending of emails to the addresses indicated on this site entails the acquisition of the sender’s email address—necessary to respond to requests—as well as any other personal data included in the message.
5. DATA RECIPIENTS OR CATEGORIES OF RECIPIENTS
Personal data provided through email contact or by voluntarily submitting a CV may be shared with recipients who will process the data as data processors or as individuals acting under the authority of the Controller, for the purpose of fulfilling contractual obligations or related purposes.
Specifically, the data may be shared with:
- Service providers for FC Hospitality Srl’s IT systems and communication networks (including email services);
- Pofessional firms or consultancy companies;
- Public authorities, upon request, for legal obligations;
- In the context of administrative or accounting purposes, data may be shared with credit reference agencies or debt collection agencies;
- In the case of job applications, data will be stored at our premises and shared only with parties involved in recruitment procedures, under strict confidentiality and data protection measures.
These recipients may act as Data Processors or independent Data Controllers depending on their role.
6. DATA PROCESSING LOCATION
Data collected via the website are processed at the Controller's office and at the web hosting provider's data center. The hosting provider acts as data processor on behalf of the Controller and is located within the European Economic Area, operating in compliance with EU regulations.
An updated list of designated Data Processors is available at the Controller’s office.
7. TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
Personal data provided will not be transferred to countries outside the European Union or to international organizations.
8. DATA RETENTION PERIOD AND CRITERIA
Data processing will be carried out using both automated and manual methods, with procedures and tools designed to ensure the highest level of security and confidentiality by authorized personnel.
In accordance with Article 5(1)(e) of EU Regulation 2016/679, personal data will be stored in a way that allows the identification of the data subject for no longer than is necessary for the purposes for which the personal data are processed. To obtain more information on data retention criteria, please contact: info@nouvellemaisonrome.it
9. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL
Apart from what is specified for browsing data, the user is free to provide personal data via dedicated areas of the site.
Providing personal data is necessary to use specific functionalities and services (e.g. receiving responses to information requests). Failure to provide such data may make it impossible to fulfill the requested service.
10. DATA SUBJECT RIGHTS
You may exercise the rights granted to you under Articles 15–22 of the EU Regulation 2016/679 by contacting the Data Controller at info@nouvellemaisonrome.it.
These include: Right of access to your personal data; Right to rectification, erasure ("right to be forgotten"), and restriction of processing; Right to data portability; Right to object to data processing (including automated processing, such as profiling); Right not to be subject to automated decision-making.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), and to withdraw your consent at any time where processing is based on Article 6(1)(a) or Article 9(2)(a) of the Regulation. For more details, see: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524
In case of a data portability request, the Controller will provide your personal data in a structured, commonly used, machine-readable format, subject to the limits of Article 20(3) and (4) of EU Regulation 2016/679
