PRIVACY POLICY FOR THE WEBSITE WWW.DLACES.IT
On this page, Dlaces Sas explains how it processes the data of users who visit its website and how the cookies installed by the site work.
This Privacy Policy is provided in compliance with article 13 of GDPR 2016/679 (General Data Protection Regulation, the European regulation on the protection of personal data), the Guidelines of the Garante Privacy of 10 June 2021, the EDPB Guidelines 05/2020 on consent, the CJEU judgment of 1 October 2019 (C-673/17), the general provision of the Garante Privacy [the Italian Data Protection Authority] on cookies no. 229 of 8 May 2014, the Working Document 02/2013 providing guidance on obtaining consent for cookies, the opinion of WP 29 no. 4/2012 on cookie consent exemption, the Directive 2002/58/EC, and Recommendation no. 2/2001 of the Article 29 Working Party.
The following information applies only to the site www.dlaces.it; the data controller is not responsible for any data entered or cookies installed by other sites that may be consulted using links.
Information on the data controller
The data controller is Hotel Chalet Dlaces Sas, with legal offices at via La Selva 98, 39048 Selva di Val Gardena (BZ). To exercise your rights under the regulations, you can contact the data controller at their office or by calling +39 0471 79 54 46 or sending an email to info@dlaces.it or dlaces@email.bz.it.
Purpose and legal basis for data processing
Hotel Chalet Dlaces Sas processes the data provided by the user through the site for the following purposes:
- Fulfilment of obligations established by law, by regulations or by European Union law
The provision of data for this purpose is mandatory and the legal basis for processing it is the fulfilment of a legal obligation to which the data controller is subject, as established by article 6, paragraph 1c of the GDPR. The processing of personal data for these purposes does not require the user's consent. The data will be kept for the period required by the applicable legislation.
- Statistical analysis on aggregate or anonymous data
This processing does not allow the user to be identified; it is only used to verify the adequacy of adopted web marketing campaigns and/or the correct functioning of the site, by measuring the traffic generated by users. The processing of aggregate or anonymous data, which does not allow for the identification of the user, does not fall within the scope of the application of the law on the protection of personal data and therefore no consent is required for its processing.
- Request for information, contact and support
Providing the requested data is necessary in order to reply to your request. The legal basis for the processing is Article 6(1)(b) of the GDPR, i.e. the performance of a contract to which the data subject is party or steps taken at the request of the data subject prior to entering into a contract, as well as Article 6(1)(f) of the GDPR, i.e. the legitimate interests pursued by the data controller or by a third party. The data processed and relating to your request will be kept by us for one year.
- Availability and quote requests, booking and reservations
Providing the requested data is necessary in order to reply to your enquiry. The legal basis for the processing is Article 6(1)(b) of the GDPR, i.e. the performance of a contract to which the data subject is party or steps taken at the request of the data subject prior to entering into a contract, as well as Article 6(1)(f) of the GDPR, i.e. the legitimate interests pursued by the data controller or by a third party. The data processed and related to your request will be kept by us, in the event of a reservation, for the time required by civil, accounting, and tax laws (10 years) or alternatively, in the case of a simple availability or quote request, for one year.
- Payment
Providing the requested data is necessary to complete the requested payment. The legal basis for the processing is Article 6(1)(b) of the GDPR, i.e. the performance of a contract to which the data subject is party or steps taken at the request of the data subject prior to entering into a contract. The data processed and related to your request will be kept by us for the time required by civil, accounting, and tax law which is 10 years.
Processing methods, automated decision-making processes, and data retention times
The processing of your data takes place electronically, although processing on paper cannot be ruled out. No automated decision-making processes are used to process your personal data.
Data collected through cookies will be kept for the period of time established by the individual cookie. Where the site uses profiling cookies, their purpose is described in the relevant section.
Data communication (Recipients)
To guarantee the functioning of our website and the use of its content, we may rely on third-party suppliers such as IT service providers, hosting companies, and communication companies. In addition, to guarantee the requested service, for example in the case of the purchase of products and the like, we may also use additional third-party suppliers (postal couriers, etc.). The legal basis of the communication is the fulfilment of contractual and regulatory obligations, as well as the execution of pre-contractual measures adopted at your request. It is understood that we will only communicate to the recipients the data necessary to be able to perform the service, preferring, where possible, the anonymization of the data. The information you provide will not be disclosed without your specific prior consent.
As for the use of third-party cookies, please refer to the specific section at the end of this document.
Transfer of data to third countries or international organizations
The data you have provided will not be transferred by us to third countries or international organizations outside the EU. We would like to note that this site uses Google Analytics: the provider may transfer user data to the United States under an adequacy decision (data privacy framework).
The hosting of the site is in the European Union.
Rights of the data subject and complaints to the Data Protection Authority
You have the right to request access to your data at any time, its rectification, completion or erasure, and to request restriction of or object to its processing where there are legitimate grounds, as well as the portability of the aforementioned data to another Data controller. We will reply in writing to any requests within 30 days. You can revoke, at any time, consent given to this site, by contacting one of the addresses listed in this Privacy Policy. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you believe that your data has been illegitimately processed.
Navigation data
This website implicitly acquires, using Internet communications protocols, for and in the course of its normal operations, some personal data on the users who access the site, like IP address, domain names of the computers used for access, MAC addresses assigned by network and wireless card manufacturers, etc.
This information is not collected for the purpose of identifying users, but this could be done by associations and processing, including cross-referencing with third-party data; statistical information is obtained from this data on site usage and operations and further information in cases of establishing responsibility related to computer crimes.
What are cookies?
Cookies are small text strings that the websites visited by a user install on the user’s terminal; these strings are then re-transmitted to the site that installed them upon further visits by the user. When the user also receives cookies sent by other sites or web servers during site navigation, those cookies are called third-party cookies.
Cookies are installed for various purposes, possibly including the performance of computer authentications, navigation session monitoring, and language choice.
First-party cookies and third-party cookies
The cookies that are installed directly by Hotel Chalet Dlaces Sas are called ‘First-party cookies’, and the cookies that are installed and acquired by a site other than the one the user is navigating are called ‘Third-party cookies’.
Third-party cookies may include social media buttons (or social media plug-ins), which allow the site to interact with the most popular social media sites, such as Facebook, Instagram, LinkedIn, Twitter, etc., Google Analytics cookies, the cookies needed to embed YouTube videos, etc. As regards third-party cookies, it is the responsibility of the third parties installing those cookies to provide statements and information on the handling of the data collected.
Types of cookies
Technical cookies
These are normally installed directly by the site administrators and are cookies that allow communications between the site and the user. They can also be called “navigation cookies”, “session cookies”, “essential cookies” or “necessary cookies” and are designed to ensure normal navigation and use of the site and usually last as long as the site is being navigated.
As these cookies are necessary for the functioning of the site, it is not necessary to obtain prior consent for their installation on the user’s terminal.
Functionality Cookies
These cookies provide the user with advanced functionalities and customizations, and they also remember the preferences indicated by the user during previous visits, or the user modifications performed during previous visits in order to customize the site. The cookies that fall under this category, for example, allow the user to choose a language or save the selected products in the cart.
Performance Cookies
These “performance cookies” are also known as “analytical cookies”, and they provide an analysis of how the user uses the site in order to improve the navigation experience and resolve issues related to navigation.
These cookies, for example, allow counting visits and tracking traffic sources or the most viewed pages.
Profiling cookies
They can also be called “advertising cookies” and are used to track a user’s preferences and show them advertising messages based on those preferences.
First access banner
In the event cookies other than technical cookies are used, the Act of 8 May 2014 by the Garante Privacy and the Guidelines of the Garante Privacy of 26 November 2020 require the site to provide a banner when a user first accesses the site (called a short notice) that summarises information on the processing methods the site uses for cookies. The banner must refer to the privacy policy in full and must provide a request for consent to the installation of the cookies, including by granular selection.
Hotel Chalet Dlaces Sas has provided this banner. This means that, once consent has been given, the user will see the banner only once; to change the choice later, the user can use the cookie settings link.
LIST OF COOKIES USED ON THIS WEBSITE